ruvnet / ruvnet/ruflo

Security Concern: WASM files

Open
#261 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
72.6k
Forks
8.6k
Avg merge
3d 3h
Merged PRs (30d)
85

Description

While wasm files are lighweight and nice way to distribute code. They are also a red flag when not easily inspectable/reviewing what is running.

https://github.com/ruvnet/ruv-FANN/pull/160

So when distributing wasm files as part of cloud-flow and running with npx, while we as consumers can put everything in containers what exactly is being run and if these wasm files are callign out.

Good practice is to have firewalls in the dev containers blocking communication to the internet - we should properly have something documented on best practice of setting up these codespaces/containers to ensure trust that these wasm files are not doing funny businesses like stealing auth keys from .env.local files and what not.

This is just to bring attention to the topic - would love this being discussed on one of the weekly meetings and broadcasted.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.