Matthew T

Setup CodeQL

3

Sets up CodeQL to run on pull requests targeting `master`, merges to `master`, and weekly.

Hi! Thank you for the writing this book! I'm thoroughly enjoying working through the chapters. I'm dropping by to ask where you prefer to be notified of errors in the...

api: add auth test endpoint

2

@JoshFerge discovered that we were seeing measurable amounts of TruffleHog requests hitting our project index endpoint. It's suspected this would cause a non-trivial amount of load on the backend datastores....

fix(middleware): use constant-time compare on hmac signature

2

A small fix to use a constant-time comparison on the HMAC signatures for the webhook payloads. Using the constant-time compare will help defend against timing attacks.

fix: require verified email to invite

1

Frontend support for: https://github.com/getsentry/sentry/pull/66861 

Use a more secure approach to the invite flow

1

Our invite flow does not behave in a way that users generally expect. Accepting invites with an already logged in Sentry user account is not expected by most of our...

Terraform code block with heredoc-style string seems to break code formatting

1

This seems to cut off around the `

Support for co-authoring

1

It'd be pretty rad if we could co-author posts so credit is shared amongst a few key people that worked on an initiative or co-wrote the post. :)

I suspect a lot of people use this repo as a reference and may copy directly from it. We have a lot of outdated dependencies in here that could introduce...

Improved API Tokens

4

Improved API tokens to provide customers an easier means of detecting accidentally leaked secrets by integrating with Github's Secret Scanning Service and other static analysis tools. [Rendered RFC](https://github.com/getsentry/rfcs/blob/mdtro/api-tokens/text/0032-improved-api-tokens.md)