Tough Crowd
CautionNot safe to merge — correctness found 1 blocker.
correctness · Not safe to merge
Reviewed 9e8d7c6 2026-10-13 16:06 UTC · View session
Blocking (1)
-
Members can invite organization admins
src/api/invitations.ts:48· open since run 1 (9e8d7c6) The invite endpoint checks membership but does not require the inviter to be an org admin. A member can issue an admin invitation. To unblock: Require org admin permission before creating any invitation.Full finding
The invite endpoint checks membership but does not require the inviter to be an org admin. A member can issue an admin invitation.
Run history (1 run)
| Severity | Raised | Resolved | Open |
|---|---|---|---|
| Blocking | 1 | 0 | 1 |
| Warning | 0 | 0 | 0 |
| Notice | 0 | 0 | 0 |
Converging. 0 of 1 findings are resolved. The remaining blocker has been open since run 1.
| Run | Head | Reviewed (UTC) | Blocking | Warning | New | Resolved |
|---|---|---|---|---|---|---|
| 1 | 9e8d7c6 | 2026-10-13 16:06 | 1 | 0 | 1 | 0 |
One coding session fixes the open review findings and pushes once.
Updated 2026-10-13 16:06 UTC
