Pull Request Explorer

Summary

Add upgrade impact for v0.162.3

Adds missing entry to upgrade impact data, ensuring upgrade tool correctly handles version v0.162.3.

Health Assessment

• • Fast cycle time, single commit, minimal changes, straightforward approval.

Summary

Add upgrade impact data for v0.161.14

Adds self‑hosted upgrade impact data for version v0.161.14, enabling accurate upgrade planning.

Health Assessment

• • The PR had a long cycle time with minimal changes, indicating a slow review process but low complexity.

Summary

Add FIPS-compatible passkey support

Ensures hardware security keys work on FIPS-enabled instances, improving security and user experience for enterprise customers.

Health Assessment

• • Quick, single-issue fix with minimal code churn; resolved a critical compatibility problem for FIPS deployments.

Summary

Disable public signups after admin setup

Self‑hosted instances now automatically disable public signups after super admin creation, preventing unauthorized registrations.

Health Assessment

• • Quick review and minimal rework, indicating a straightforward change with low risk.

Summary

Add upgrade impact data for v0.161.11

Adds self-hosted upgrade impact data for version 0.161.11, enabling accurate upgrade planning for customers.

Health Assessment

• • The PR was merged automatically by GitHub Actions with no human review, indicating a low-risk, straightforward configuration update.

Summary

Improve event filter to be generic

Enhances audit log filtering by removing secret‑specific constraints, enabling broader event visibility for PAM features.

Health Assessment

• • Quick review and minimal rework indicate a straightforward enhancement with low risk.

Summary

Add dynamic secret support for proxied services

Enables per‑agent short‑lived credentials, improving security and compliance for proxied services.

Health Assessment

• • Rapid review and single commit indicate focused change, but large code churn suggests significant impact.

Summary

Add HMAC key support in KMS

Adds HMAC key support to the KMS service, enabling secure MAC generation and verification for client applications, enhancing security and compliance.

Health Assessment

• • The PR was reviewed quickly and merged within 21 hours, indicating efficient collaboration and minimal friction.

Summary

Add Gateway network architecture diagram

Provides a unified network architecture diagram and port reference for Gateway, improving clarity for solutions engineers.

Health Assessment

• • Rapid review and minimal changes indicate a straightforward documentation update with low risk.

Summary

Send email on account change when email exists

Adds notification to account owners when attempting to change to an email already in use, improving clarity and reducing confusion.

Health Assessment

• • Quick turnaround with minimal rework, indicating straightforward change.

Summary

Add SSH log display and CA cert script

Enhances SSH terminal log visibility and provides a setup script for SSH CA certificates, improving user experience and security.

Health Assessment

• • The PR received a fast initial review but required several subsequent commits to resolve merge conflicts and refine the feature, indicating moderate complexity and a need for careful testing before release.

Summary

docs: move HSM integration from KMS product to self-host section

Repositions the HSM integration guide to the self-hosting section, improving navigation for enterprise users and ensuring accurate documentation of on-premise root encryption settings. This change aligns documentation structure with product reality, reducing confusion for self-hosted deployments.

Health Assessment

• • Rapid review and merge indicate a straightforward documentation update with minimal risk.

Summary

Add org and actor info to logs

Enhances error logs with organization and actor identifiers, improving traceability and rate‑limit debugging.

Health Assessment

• • Quick, single‑commit PR with minimal changes and no rework, indicating a low‑risk enhancement.

Summary

Fix email notifications for signing request approvers

Ensures approvers receive timely email alerts when a signing request requires their review, improving visibility and reducing missed approvals.

Health Assessment

• • The PR had a quick review but required several iterations and documentation updates, leading to a 3‑day cycle time.

Summary

Add personal override action for secrets

Enables users with describe permission to create personal overrides without accessing the secret, improving granular access control.

Health Assessment

• • Multiple iterations and AI‑assisted review indicate complex logic changes; high review friction but eventual merge after addressing concerns.

Summary

Add missing index to improve project deletion

Adds a database index to reduce timeouts during project deletion, improving reliability.

Health Assessment

• • Quick fix with minimal changes, resolved within an hour, indicating efficient review and low complexity.

Summary

Prevent signers from approving their own signing requests

Adds a security rule that blocks users from approving their own code‑signing requests, preventing accidental or malicious self‑approval and ensuring proper audit trails.

Health Assessment

• • The PR had a slow cycle time due to a large gap between review and final merge, but the review was quick and the changes were small, indicating a straightforward implementation with minimal friction.

Summary

Add Unix discovery to PAM

Enables Unix-based discovery of gateways within a VPC, improving onboarding and network visibility for users.

Health Assessment

• • The PR underwent rapid iteration with multiple commits following an AI-assisted review, indicating active refinement but also high complexity.

Summary

Replace InfisicalStaticSecret doc with examples

Provides comprehensive examples for Infisical static secrets, improving developer onboarding and reducing configuration errors.

Health Assessment

• • The PR had a slow overall cycle time but a rapid first review, followed by several commits to refine documentation, indicating iterative improvement and moderate review friction.

Summary

Drop redundant secret_versions_v2.envId column

Removes a duplicate column to prevent orphaned secret versions and improve data integrity during environment hard deletes, enhancing reliability and performance.

Health Assessment

• • Fast review and minimal rework indicate a smooth process; moderate scope and line changes reflect a focused data cleanup that strengthens system integrity.

Summary

Remove default agent roles from agent-proxy

Eliminates generic default roles that could conflict with custom roles, improving role clarity and preventing unintended permission shadowing.

Health Assessment

• • Fast review and merge with minimal rework; AI review provided concise feedback, leading to a smooth, low-risk change.

Summary

Add multi-project selection for project grants

Enables users to select multiple projects and environments in a single operation, improving UX by avoiding duplicate grant errors.

Health Assessment

• • The PR was reviewed quickly but required several iterations to refine both UI and backend logic, indicating moderate complexity and a need for careful testing of the new multi-select feature.

Summary

Add region setting for global GCP sync

Enables users to specify a region for global GCP secrets, giving them more control and improving deletion protection UX.

Health Assessment

• • Fast review and merge cycle (18h) with minimal back‑and‑forth, indicating a straightforward, low‑risk feature addition.

Summary

Add descriptions to all page headers

Adds descriptive text to page headers in the PAM section, improving user clarity and navigation.

Health Assessment

• • Quick review and merge within 14 hours, minimal changes, low risk.

Summary

Move Helm Chart Docs to Self‑Hosting Section

Centralizes helm documentation under the self‑hosting section, improving navigation and consistency for users deploying Infisical.

Health Assessment

• • The PR moved a large set of documentation files with minimal review friction, aided by an AI review tool.
• • Quick approval and a single review round suggest the changes were straightforward and low risk.

Summary

Add Windows and Linux servers PKI sync

Enables Infisical to automatically deliver and manage certificates on on‑premises Windows and Linux servers via WinRM and SSH, ensuring secure, automated sync and cleanup.

Health Assessment

• • The PR involved extensive rework after an AI‑assisted review, with nine commits over several days, indicating complex integration and a high risk of defects.

Summary

Revamp Kubernetes Operator guide

Rewrite of the Kubernetes Operator guide to correct CRD field names, close the authentication loop, and provide a self‑contained, accurate tutorial for users.

Health Assessment

• • The PR had a long cycle time (~8 days) but only a single review and no rework, indicating a thorough but slow documentation effort.

Summary

Add optional basic auth password and docs link for proxied services

Enables username‑only authentication for proxied services, reducing errors and improving compatibility, and adds documentation links for better user guidance.

Health Assessment

• • Rapid cycle time and single review round suggest a focused, low‑risk change.

Summary

Add org-admin auto-join to PAM and access requests

Enables seamless onboarding for org admins and streamlines access requests, reducing friction and preventing 403 errors for non-members.

Health Assessment

• • The PR had a long cycle time due to a large feature change, but the review was quick and required minimal rework.

Summary

Remove SECRETS_ACTIVATION_ENABLED env gate

The secret activation feature is now always enabled, simplifying deployment and ensuring consistent user experience across environments.

Health Assessment

• • Quick change with minimal code modifications and fast review, indicating low risk and high confidence in stability.

Summary

Revamp MFA settings and account-wide recovery codes

Enhances security by adding account-level recovery codes, session-bound MFA, and step‑up authentication, improving user experience and reducing lockout risk.

Health Assessment

• • PR required extensive iteration with many commits after the initial review, indicating complex changes. Despite a rapid first review, the overall cycle time was long due to the large scope and multiple revisions.

Summary

Add secrets brokering with agent proxy CA

Introduces a new secrets brokering system that lets untrusted code consume secrets via an agent proxy, adding new database tables, CRUD APIs, CA generation, audit logging, license gating, and UI integration.

Health Assessment

• • Large PR with extensive backend and frontend changes; AI review helped catch issues early, but the scope and license gating add complexity and potential risk.

Summary

Fix random_page_cost in revocation cleanup

Improves database performance by ensuring efficient index usage during token revocation cleanup, preventing CPU spikes.

Health Assessment

• • Quick, single-file change that resolved a critical performance issue with minimal risk and fast review turnaround.

Summary

Add init to license service migration

Ensures license service initialization during migration, preventing errors and improving reliability.

Health Assessment

• • Quick fix with minimal changes, reviewed by AI, merged within 3 hours.

Summary

Revert duplicate sync detection using key schema

Removes keySchema from duplicate sync detection to prevent false positives, ensuring accurate sync operations.

Health Assessment

• • Quick fix with minimal changes, merged within an hour, indicating low complexity and high confidence.

Summary

Add metrics for secret management

Enables monitoring of secret rotation failures and read latency, improving reliability and observability.

Health Assessment

• • The PR required multiple iterations after the initial review, indicating moderate complexity in integrating metrics across several backend services.

Summary

Fix LDAP group CN case sensitivity

Ensures LDAP group mapping respects case-insensitive semantics, preventing login failures and maintaining accurate group membership for users.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a straightforward bug fix with low risk to the codebase.

Summary

Health Assessment

Summary

Re-vamp and expand framework and infrastructure integrations

Enhances integration pages with new UI components and expanded integration list, improving user experience and visibility of supported services.

Health Assessment

• • Quick review and minimal rework indicate a well-scoped change with clear intent.

Summary

Revert expired expirations cron

Reverts the revocation expired cleanup cron to a daily schedule, ensuring correct cleanup timing.

Health Assessment

• • Quick revert with minimal changes, AI-assisted review, fast approval.

Summary

Remove ORDER BY from audit log prune job

Reduces query time for audit log pruning, improving performance.

Health Assessment

• • Quick fix with minimal changes, fast review and merge.

Summary

Add upgrade impact for v0.162.3

Adds self‑hosted upgrade impact data for version v0.162.3, enabling accurate upgrade guidance for users.

Health Assessment

• • Rapid merge with minimal changes and no review friction.

Summary

Add activation modal for secrets

Enables users to see a modal prompting them to add more users when creating secrets in new organizations, improving onboarding and engagement.

Health Assessment

• • The PR underwent a lengthy review cycle with a changes_requested review and multiple commits, indicating significant rework.
• • The large codebase changes and extended cycle time suggest higher risk for integration issues.

Summary

Improve token revocation caching and marker expiry

This change improves performance of machine identity token revocation by caching checks, reducing database load. It also tightens revocation marker expiry, freeing storage and ensuring timely revocation.

Health Assessment

• • Fast cycle time and minimal review friction indicate an efficient process, but the large number of lines changed suggests a significant impact on the codebase.

Summary

Split daily resource cleanup into staggered cron jobs

Reduces database load spikes by scheduling cleanup tasks at staggered times, improving reliability and preventing request failures during peak periods.

Health Assessment

• • Fast cycle time and minimal review comments indicate smooth integration; the change is small and low risk.

Summary

Fix duplicate sync detection by connection ID

Ensures sync operations are correctly identified as duplicates by including connection ID, preventing unintended duplicate syncs and improving data consistency.

Health Assessment

• • PR was reviewed quickly with AI assistance, required several commits to refine logic, but overall process had minimal friction and a fast cycle time.

Summary

Add email check for telemetry in SAML router

Adds validation to ensure telemetry data includes user email, improving data accuracy for analytics.

Health Assessment

• • Quick review and merge within 20 minutes, minimal changes, low risk.

Summary

Add Greptile review config

Configures Greptile for code reviews, focusing on real issues and preventing DNS rebinding attacks.

Health Assessment

• • Fast review and merge, indicating a straightforward and well-received change.

Summary

Add certificate upload to secret manager

Users can now upload certificate files as secrets, enhancing security and flexibility.

Health Assessment

• • Quick review and approval after minimal changes, indicating a straightforward enhancement.

Summary

Add Azure CLI access for PAM

Enables users to authenticate via Azure CLI within PAM, expanding platform integration and simplifying access management.

Health Assessment

• • Quick review and single iteration indicate smooth integration and minimal risk to production.