mirror of
https://github.com/pgsty/minio.git
synced 2026-11-10 17:45:32 +03:00
docs(contributors): credit upstream advisory researchers and fix a commit link
Regenerated from the reviewed contributor data on silo.pgsty.com. The roll
grows from 76 to 81 people: it now names the researchers credited on the
upstream advisories for inherited CVEs. The link to the Helm chart 7.0.4
commit carried a full hash that matches no commit; it now points at
47275042f.
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Signed-off-by: Feng Ruohang <rh@vonng.com>
This commit is contained in:
Feng Ruohang
+16
-6
@@ -2,7 +2,7 @@
|
||||
|
||||
<!-- Generated by silo.pgsty.com/bin/contributors.py. -->
|
||||
|
||||
As of **2026-11-10**, **76 community contributors** are credited in SILO and related projects. The roll includes maintainers and every human issue / PR author, along with security reporters who have agreed to be acknowledged.
|
||||
As of **2026-11-10**, **81 community contributors** are credited in SILO and related projects. The roll includes maintainers and every human issue / PR author, along with acknowledged security reporters.
|
||||
|
||||
Opening an issue or PR counts, whether open, closed, draft, or unmerged. Each account appears once. Merged PR authors come first, followed by other PR authors and reporters. Within each group, significant fixes, adopted proposals, and reports that led to fixes take priority, followed by first participation. Gold rings highlight significant contributions.
|
||||
|
||||
@@ -25,7 +25,7 @@ When a proposal was incorporated through a later repair, its adoption is credite
|
||||
<a href="https://github.com/AleksaMCode"><img src="https://silo.pgsty.com/images/contributors/AleksaMCode.svg" width="60" height="60" alt="@AleksaMCode" title="@AleksaMCode — Fixed the Lambda target-set emptiness check and added a regression test"></a>
|
||||
<a href="https://github.com/yupoet"><img src="https://silo.pgsty.com/images/contributors/yupoet.svg" width="60" height="60" alt="@yupoet" title="@yupoet — Improved checksum mismatch messages, verified erasure-coding documentation, and contributed a single-node migration case"></a>
|
||||
<a href="https://github.com/clown15"><img src="https://silo.pgsty.com/images/contributors/clown15.svg" width="60" height="60" alt="@clown15" title="@clown15 — Fixed native multipart-upload timestamp parsing during stale-upload cleanup"></a>
|
||||
<a href="https://github.com/botdeniska"><img src="https://silo.pgsty.com/images/contributors/botdeniska.svg" width="60" height="60" alt="@botdeniska" title="@botdeniska — Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, and faster policy evaluation"></a>
|
||||
<a href="https://github.com/botdeniska"><img src="https://silo.pgsty.com/images/contributors/botdeniska.svg" width="60" height="60" alt="@botdeniska" title="@botdeniska — Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, faster policy evaluation, and private security disclosures"></a>
|
||||
<a href="https://github.com/910patin"><img src="https://silo.pgsty.com/images/contributors/910patin.svg" width="60" height="60" alt="@910patin" title="@910patin — Fixed long-DN LDAP login while preserving IAM revocation-record errors"></a>
|
||||
<a href="https://github.com/cyberbret"><img src="https://silo.pgsty.com/images/contributors/cyberbret.svg" width="60" height="60" alt="@cyberbret" title="@cyberbret — Contributed on-demand folder and bucket usage scans and the optional persistent usage worker"></a>
|
||||
<a href="https://github.com/EduardoAndradeMachado"><img src="https://silo.pgsty.com/images/contributors/EduardoAndradeMachado.svg" width="60" height="60" alt="@EduardoAndradeMachado" title="@EduardoAndradeMachado — Contributed Brazilian Portuguese translations to Console and privately reported a security issue"></a>
|
||||
@@ -51,6 +51,11 @@ When a proposal was incorporated through a later repair, its adoption is credite
|
||||
<a href="https://github.com/GhaziTriki"><img src="https://silo.pgsty.com/images/contributors/GhaziTriki.svg" width="60" height="60" alt="@GhaziTriki" title="@GhaziTriki — Investigated policy-query and Console slowdown and identified overlapping client mirror jobs"></a>
|
||||
<a href="https://github.com/haf"><img src="https://silo.pgsty.com/images/contributors/haf.svg" width="60" height="60" alt="@haf" title="@haf — Reported audit and logger webhook delivery stopping on peer nodes after configuration reload"></a>
|
||||
<a href="https://github.com/sun1024"><img src="https://silo.pgsty.com/images/contributors/sun1024.svg" width="60" height="60" alt="@sun1024" title="@sun1024 — Privately reported a security issue in SILO"></a>
|
||||
<a href="https://github.com/SimeonPoot"><img src="https://silo.pgsty.com/images/contributors/SimeonPoot.svg" width="60" height="60" alt="@SimeonPoot" title="@SimeonPoot — Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506)"></a>
|
||||
<a href="https://github.com/KoreaSecurity"><img src="https://silo.pgsty.com/images/contributors/KoreaSecurity.svg" width="60" height="60" alt="@KoreaSecurity" title="@KoreaSecurity — Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322)"></a>
|
||||
<a href="https://github.com/XlabAITeam"><img src="https://silo.pgsty.com/images/contributors/XlabAITeam.svg" width="60" height="60" alt="@XlabAITeam" title="@XlabAITeam — Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414)"></a>
|
||||
<a href="https://github.com/ddd"><img src="https://silo.pgsty.com/images/contributors/ddd.svg" width="60" height="60" alt="@ddd" title="@ddd — Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145)"></a>
|
||||
<a href="https://github.com/adrian-doyensec"><img src="https://silo.pgsty.com/images/contributors/adrian-doyensec.svg" width="60" height="60" alt="@adrian-doyensec" title="@adrian-doyensec — Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600)"></a>
|
||||
<a href="https://github.com/mosesdd"><img src="https://silo.pgsty.com/images/contributors/mosesdd.svg" width="48" height="48" alt="@mosesdd" title="@mosesdd — Requested a maintained Helm chart"></a>
|
||||
<a href="https://github.com/Xavier-777"><img src="https://silo.pgsty.com/images/contributors/Xavier-777.svg" width="48" height="48" alt="@Xavier-777" title="@Xavier-777 — Reported Console lifecycle management and file preview gaps"></a>
|
||||
<a href="https://github.com/jiadzh"><img src="https://silo.pgsty.com/images/contributors/jiadzh.svg" width="48" height="48" alt="@jiadzh" title="@jiadzh — Requested Windows build guidance"></a>
|
||||
@@ -107,7 +112,7 @@ When a proposal was incorporated through a later repair, its adoption is credite
|
||||
| [@AleksaMCode](https://github.com/AleksaMCode) | Fixed the Lambda target-set emptiness check and added a regression test | Merged PRs: [pgsty/silo#220](https://github.com/pgsty/silo/pull/220) |
|
||||
| [@yupoet](https://github.com/yupoet) | Improved checksum mismatch messages, verified erasure-coding documentation, and contributed a single-node migration case | Merged PRs: [pgsty/silo#228](https://github.com/pgsty/silo/pull/228), [pgsty/silo#229](https://github.com/pgsty/silo/pull/229)<br>PRs closed without merging: [pgsty/silo#230](https://github.com/pgsty/silo/pull/230)<br>Also [cross-checked the two-drive EC:1 documentation](https://github.com/pgsty/silo/issues/197#issuecomment-5846341939). The single-node migration report in #228 was merged on 2026-10-23; the registry-mirror proposal in #230 was closed without merging. |
|
||||
| [@clown15](https://github.com/clown15) | Fixed native multipart-upload timestamp parsing during stale-upload cleanup | Merged PRs: [pgsty/silo#236](https://github.com/pgsty/silo/pull/236) |
|
||||
| [@botdeniska](https://github.com/botdeniska) | Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, and faster policy evaluation | [pgsty/silo: Merged PRs (13)](https://github.com/pgsty/silo/issues?q=author%3Abotdeniska+is%3Apr+is%3Amerged)<br>Open PRs: [pgsty/silo#294](https://github.com/pgsty/silo/pull/294)<br>PRs closed without merging: [pgsty/silo#245](https://github.com/pgsty/silo/pull/245), [pgsty/silo#248](https://github.com/pgsty/silo/pull/248), [pgsty/silo#262](https://github.com/pgsty/silo/pull/262), [pgsty/silo#290](https://github.com/pgsty/silo/pull/290)<br>[pgsty/silo: Closed issues (15)](https://github.com/pgsty/silo/issues?q=author%3Abotdeniska+is%3Aissue+is%3Aclosed)<br>Open issues: [pgsty/silo#293](https://github.com/pgsty/silo/issues/293)<br>Merged PRs: [pgsty/silo-pkg#11](https://github.com/pgsty/silo-pkg/pull/11)<br>The migration repair from [#248](https://github.com/pgsty/silo/pull/248) was incorporated in [60c7179dd](https://github.com/pgsty/silo/commit/60c7179ddbfcbd41a1fe67707230f5b360a43020), retaining the original authorship and DCO. The mixed-EC listing proposal in [#262](https://github.com/pgsty/silo/pull/262) was superseded by [#267](https://github.com/pgsty/silo/pull/267). The author closed [#290](https://github.com/pgsty/silo/pull/290) after verifying the native-restore rework covered the reported defects. |
|
||||
| [@botdeniska](https://github.com/botdeniska) | Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, faster policy evaluation, and private security disclosures | [pgsty/silo: Merged PRs (13)](https://github.com/pgsty/silo/issues?q=author%3Abotdeniska+is%3Apr+is%3Amerged)<br>Open PRs: [pgsty/silo#294](https://github.com/pgsty/silo/pull/294)<br>PRs closed without merging: [pgsty/silo#245](https://github.com/pgsty/silo/pull/245), [pgsty/silo#248](https://github.com/pgsty/silo/pull/248), [pgsty/silo#262](https://github.com/pgsty/silo/pull/262), [pgsty/silo#290](https://github.com/pgsty/silo/pull/290)<br>[pgsty/silo: Closed issues (15)](https://github.com/pgsty/silo/issues?q=author%3Abotdeniska+is%3Aissue+is%3Aclosed)<br>Open issues: [pgsty/silo#293](https://github.com/pgsty/silo/issues/293)<br>Merged PRs: [pgsty/silo-pkg#11](https://github.com/pgsty/silo-pkg/pull/11)<br>The migration repair from [#248](https://github.com/pgsty/silo/pull/248) was incorporated in [60c7179dd](https://github.com/pgsty/silo/commit/60c7179ddbfcbd41a1fe67707230f5b360a43020), retaining the original authorship and DCO. The mixed-EC listing proposal in [#262](https://github.com/pgsty/silo/pull/262) was superseded by [#267](https://github.com/pgsty/silo/pull/267). The author closed [#290](https://github.com/pgsty/silo/pull/290) after verifying the native-restore rework covered the reported defects. Also privately reported security issues in inherited Object Lock, signature verification, replication, and authorization paths (including the bulk-delete Object Lock report behind [#330](https://github.com/pgsty/silo/pull/330) and [SN-2026-020](https://silo.pgsty.com/about/security-advisories/#sn-2026-020)). |
|
||||
| [@910patin](https://github.com/910patin) | Fixed long-DN LDAP login while preserving IAM revocation-record errors | Merged PRs: [pgsty/silo#250](https://github.com/pgsty/silo/pull/250) |
|
||||
| [@cyberbret](https://github.com/cyberbret) | Contributed on-demand folder and bucket usage scans and the optional persistent usage worker | Merged PRs: [pgsty/silo-console#70](https://github.com/pgsty/silo-console/pull/70)<br>PR [#70](https://github.com/pgsty/silo-console/pull/70) was integrated through [#79](https://github.com/pgsty/silo-console/pull/79), retaining the original commits and authorship. Usage scans and the optional worker shipped in [Console v2.6.0](https://github.com/pgsty/silo-console/releases/tag/v2.6.0). |
|
||||
| [@EduardoAndradeMachado](https://github.com/EduardoAndradeMachado) | Contributed Brazilian Portuguese translations to Console and privately reported a security issue | Merged PRs: [pgsty/silo-console#83](https://github.com/pgsty/silo-console/pull/83)<br>PR [#83](https://github.com/pgsty/silo-console/pull/83) was merged with its original authored commits; the later ten-language implementation uses shared static dictionaries. Private security reporting is acknowledged with the reporter's agreement. |
|
||||
@@ -143,6 +148,11 @@ When a proposal was incorporated through a later repair, its adoption is credite
|
||||
| [@GhaziTriki](https://github.com/GhaziTriki) | Investigated policy-query and Console slowdown and identified overlapping client mirror jobs | Closed issues: [pgsty/silo#251](https://github.com/pgsty/silo/issues/251)<br>Closed after the [reporter follow-up](https://github.com/pgsty/silo/issues/251#issuecomment-6417722845) traced the immediate cause to overlapping client mirror jobs; this incident did not establish a SILO version regression. |
|
||||
| [@haf](https://github.com/haf) | Reported audit and logger webhook delivery stopping on peer nodes after configuration reload | Closed issues: [pgsty/silo#259](https://github.com/pgsty/silo/issues/259)<br>The report led to webhook target lifetime and queue recovery repairs in [0fa4a8c50](https://github.com/pgsty/silo/commit/0fa4a8c503941d94c60045dc7a4dbff4d93fca34) and [f3e84d54a](https://github.com/pgsty/silo/commit/f3e84d54a9c869d8baf53bab02b8bc2c81bd1dfb). |
|
||||
| [@sun1024](https://github.com/sun1024) | Privately reported a security issue in SILO | Acknowledged with the reporter's agreement; private report details are not included here. |
|
||||
| [@SimeonPoot](https://github.com/SimeonPoot) | Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506) | Publicly credited on upstream [GHSA-jjjj-jwhf-8rgr](https://github.com/advisories/GHSA-jjjj-jwhf-8rgr); inherited in SILO from [c1a49490](https://silo.pgsty.com/about/security-advisories/#cve-2025-62506). |
|
||||
| [@KoreaSecurity](https://github.com/KoreaSecurity) | Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322) | Publicly credited on upstream [GHSA-5cx5-wh4m-82fh](https://github.com/advisories/GHSA-5cx5-wh4m-82fh); remediated in SILO in [d24f449e0](https://silo.pgsty.com/about/security-advisories/#cve-2026-33322). |
|
||||
| [@XlabAITeam](https://github.com/XlabAITeam) | Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414) | Publicly credited on upstream [GHSA-h749-fxx7-pwpg](https://github.com/advisories/GHSA-h749-fxx7-pwpg); remediated in SILO in [3252d5b7f and 5dc705936](https://silo.pgsty.com/about/security-advisories/#cve-2026-39414). |
|
||||
| [@ddd](https://github.com/ddd) | Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145) | Publicly credited on upstream [GHSA-9c4q-hq6p-c237](https://github.com/advisories/GHSA-9c4q-hq6p-c237) and [GHSA-hv4r-mvr4-25vw](https://github.com/advisories/GHSA-hv4r-mvr4-25vw); remediated in SILO in [efb6e5b00](https://silo.pgsty.com/about/security-advisories/#cve-2026-40344) and [f444b6f37](https://silo.pgsty.com/about/security-advisories/#cve-2026-41145). |
|
||||
| [@adrian-doyensec](https://github.com/adrian-doyensec) | Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600) | Publicly credited on upstream [GHSA-xh8f-g2qw-gcm7](https://github.com/advisories/GHSA-xh8f-g2qw-gcm7); remediated in SILO in [73ac52472](https://silo.pgsty.com/about/security-advisories/#cve-2026-42600) and followed by the [SN-2026-002](https://silo.pgsty.com/about/security-advisories/#sn-2026-002) internode containment audit. |
|
||||
| [@mosesdd](https://github.com/mosesdd) | Requested a maintained Helm chart | Closed issues: [pgsty/silo#1](https://github.com/pgsty/silo/issues/1) |
|
||||
| [@Xavier-777](https://github.com/Xavier-777) | Reported Console lifecycle management and file preview gaps | Closed issues: [pgsty/silo#2](https://github.com/pgsty/silo/issues/2), [pgsty/silo#17](https://github.com/pgsty/silo/issues/17) |
|
||||
| [@jiadzh](https://github.com/jiadzh) | Requested Windows build guidance | Closed issues: [pgsty/silo#3](https://github.com/pgsty/silo/issues/3) |
|
||||
@@ -176,11 +186,11 @@ When a proposal was incorporated through a later repair, its adoption is credite
|
||||
| [@devTeam-AiReg](https://github.com/devTeam-AiReg) | Asked about availability of the release containing IAM security fixes | Closed issues: [pgsty/silo#247](https://github.com/pgsty/silo/issues/247) |
|
||||
| [@azataiot](https://github.com/azataiot) | Reported and analyzed high-latency Console health-report truncation during WebSocket close | Closed issues: [pgsty/silo-console#63](https://github.com/pgsty/silo-console/issues/63) |
|
||||
| [@siyahkut](https://github.com/siyahkut) | Requested Turkish language support | Open issues: [pgsty/silo#277](https://github.com/pgsty/silo/issues/277) |
|
||||
| [@seumasdunlop](https://github.com/seumasdunlop) | Reported the outdated default server image tag in the Helm chart | Closed issues: [pgsty/silo#296](https://github.com/pgsty/silo/issues/296)<br>Resolved in Helm chart 7.0.4 ([47275042f](https://github.com/pgsty/silo/commit/47275042fda34066a97914bf97e2f80ef44c77ae)). |
|
||||
| [@seumasdunlop](https://github.com/seumasdunlop) | Reported the outdated default server image tag in the Helm chart | Closed issues: [pgsty/silo#296](https://github.com/pgsty/silo/issues/296)<br>Resolved in Helm chart 7.0.4 ([47275042f](https://github.com/pgsty/silo/commit/47275042f62b7382e30e280550cae451bfa50aa1)). |
|
||||
|
||||
## Audit scope
|
||||
|
||||
Counts below come from every page of the GitHub issue / PR records, across all states, including automated accounts. Review dates are listed per repository; records not rechecked retain their earlier dates and states. There are 72 distinct human public issue / PR authors, plus 4 credited security reporters. Excluded automated accounts: `Copilot`, `dependabot[bot]`.
|
||||
Counts below come from every page of the GitHub issue / PR records, across all states, including automated accounts. Review dates are listed per repository; records not rechecked retain their earlier dates and states. There are 72 distinct human public issue / PR authors, plus 9 credited security reporters. Excluded automated accounts: `Copilot`, `dependabot[bot]`.
|
||||
|
||||
| Repository | Issues | Pull requests | Reviewed |
|
||||
| :-- | --: | --: | :-- |
|
||||
@@ -244,7 +254,7 @@ Open issues: [pgsty/silo#293](https://github.com/pgsty/silo/issues/293)
|
||||
|
||||
Merged PRs: [pgsty/silo-pkg#11](https://github.com/pgsty/silo-pkg/pull/11)
|
||||
|
||||
The migration repair from [#248](https://github.com/pgsty/silo/pull/248) was incorporated in [60c7179dd](https://github.com/pgsty/silo/commit/60c7179ddbfcbd41a1fe67707230f5b360a43020), retaining the original authorship and DCO. The mixed-EC listing proposal in [#262](https://github.com/pgsty/silo/pull/262) was superseded by [#267](https://github.com/pgsty/silo/pull/267). The author closed [#290](https://github.com/pgsty/silo/pull/290) after verifying the native-restore rework covered the reported defects.
|
||||
The migration repair from [#248](https://github.com/pgsty/silo/pull/248) was incorporated in [60c7179dd](https://github.com/pgsty/silo/commit/60c7179ddbfcbd41a1fe67707230f5b360a43020), retaining the original authorship and DCO. The mixed-EC listing proposal in [#262](https://github.com/pgsty/silo/pull/262) was superseded by [#267](https://github.com/pgsty/silo/pull/267). The author closed [#290](https://github.com/pgsty/silo/pull/290) after verifying the native-restore rework covered the reported defects. Also privately reported security issues in inherited Object Lock, signature verification, replication, and authorization paths (including the bulk-delete Object Lock report behind [#330](https://github.com/pgsty/silo/pull/330) and [SN-2026-020](https://silo.pgsty.com/about/security-advisories/#sn-2026-020)).
|
||||
|
||||
</details>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user