janiussyafiq opened a new pull request, #13622: URL: https://github.com/apache/apisix/pull/13622
Streaming `action=alert` discarded the response scan's deny result, so a Lakera error/timeout with `fail_open=false` leaked the streamed response instead of failing closed. Alert mode now buffers when `fail_open=false` so errors/timeouts fail closed, while flagged verdicts are still released (shadow mode unchanged). Added streaming alert tests for the error, buffered-release, and `fail_open=true` live paths; docs updated. Fixes #13619 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
