Issues

• Hook Undici global dispatcher and node:net/tls module level to prevent proxy bypass

  bugsecurity
  EnvTrap/envtrap-package#70 · Filter by author Vishal-770 opened on Sep 9, 2026

• No programmatic Node.js API (import { monitor } from 'envtrap')

  architectureenhancement
  EnvTrap/envtrap-package#68 · Filter by author Vishal-770 opened on Sep 9, 2026
  

• Hardcoded 5000ms timeout in SystemCaTrust execFileSync calls blocks process exit

  bugsecurity
  EnvTrap/envtrap-package#67 · Filter by author Vishal-770 opened on Sep 9, 2026
  

• Process signal forwarding does not support SIGHUP, SIGUSR1, or SIGQUIT

  enhancement
  EnvTrap/envtrap-package#66 · Filter by author Vishal-770 opened on Sep 9, 2026

• No support for environment variable expansion or template substitution in envtrap.json

  enhancement
  EnvTrap/envtrap-package#65 · Filter by author Vishal-770 opened on Sep 9, 2026

• Missing webhook alert reporter for Slack, Discord, and PagerDuty notifications

  enhancement
  EnvTrap/envtrap-package#64 · Filter by author Vishal-770 opened on Sep 9, 2026

• Missing custom deterministic regex token patterns in configuration

  enhancement
  EnvTrap/envtrap-package#63 · Filter by author Vishal-770 opened on Sep 9, 2026

• Plain HTTP requests over HTTPS port or non-standard ports fail in UpstreamConnector

  bug
  EnvTrap/envtrap-package#62 · Filter by author Vishal-770 opened on Sep 9, 2026
  

• HttpHandler strips or modifies HTTP headers and does not support streaming request bodies

  bugperformance
  EnvTrap/envtrap-package#61 · Filter by author Vishal-770 opened on Sep 9, 2026

• Stderr parsing protocol is vulnerable to log collision with application output

  architecturebug
  EnvTrap/envtrap-package#60 · Filter by author Vishal-770 opened on Sep 9, 2026

• Missing non-zero exit code customization when leaks are detected in warn mode

  enhancement
  EnvTrap/envtrap-package#59 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded loopback IP bypass defaults in ChildEnvBuilder cannot be disabled or customized

  enhancement
  EnvTrap/envtrap-package#58 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded static list of cloud DNS allowlist domains in shared.mjs cannot be customized

  enhancement
  EnvTrap/envtrap-package#57 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded system environment variable blocklist in EnvSecretSource cannot be extended or overridden

  enhancement
  EnvTrap/envtrap-package#56 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded 4-character minimum secret length for file secrets drops short high-entropy API tokens

  enhancement
  EnvTrap/envtrap-package#55 · Filter by author Vishal-770 opened on Sep 9, 2026

• Lack of glob wildcard and CIDR support in exclusions.domains

  architectureenhancement
  EnvTrap/envtrap-package#54 · Filter by author Vishal-770 opened on Sep 9, 2026

• Missing SARIF and JUnit XML export formats for CI/CD security pipelines

  enhancement
  EnvTrap/envtrap-package#53 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded X.509 certificate subject attributes ('envtrap Local CA', 'US', 'envtrap v2.1') trigger corporate proxy alerts

  bugenhancement
  EnvTrap/envtrap-package#52 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded 10-year root CA validity and 1-year domain certificate validity prevent compliance with security policies

  enhancementsecurity
  EnvTrap/envtrap-package#51 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded non-configurable 40-character context window in extractContext and HttpParser

  enhancement
  EnvTrap/envtrap-package#49 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded report filename .envtrap-report.json and missing directory customization

  enhancement
  EnvTrap/envtrap-package#48 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded static .env filename prevents loading multi-stage environment files (.env.production, .env.local)

  enhancement
  EnvTrap/envtrap-package#47 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded localhost and 127.0.0.1 bindings in MitmServer prevent monitoring in Docker container networks

  architectureenhancement
  EnvTrap/envtrap-package#46 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded 1.5s TTL window in DedupCache causes duplicate alert noise or missed alerts

  enhancementperformance
  EnvTrap/envtrap-package#45 · Filter by author Vishal-770 opened on Sep 9, 2026

• Hardcoded 1MB buffer limit in ContentClamp and TlsInterceptor drops inspection on large payloads

  enhancementperformance
  EnvTrap/envtrap-package#44 · Filter by author Vishal-770 opened on Sep 9, 2026