Skip to content

feat: vector buckets #774

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

feat: vector buckets #774

wants to merge 1 commit into from

Conversation

fenos
Copy link
Contributor

@fenos fenos commented Oct 3, 2025

What kind of change does this PR introduce?

Feature

What is the new behaviour?

Implement Vector Bucket data source

Supported Operations:

  • CreateIndex
  • DeleteIndex
  • GetIndex
  • ListIndexes
  • PutVectors
  • ListVectors
  • ListVectorBuckets
  • QueryVectors
  • DeleteVectors
  • GetVectorBucket
  • GetVectors

Authentication mechanisms:

  • SignV4
  • JWT service_role

@snyk-io Snyk.io
Copy link

snyk-io bot commented Oct 3, 2025 •
edited
Loading

⛔ Snyk checks have failed. 7 issues have been found so far.

Icon Severity Issues
Critical 0
High 7
Medium 0
Low 0

⛔ code/snyk check is complete. 7 issues have been found. (View Details)

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

snyk-io[bot]
snyk-io bot reviewed Oct 3, 2025
View reviewed changes
src/http/routes/vector/get-bucket.ts

const bucketResult = await request.s3Vector.getBucket(request.body)

return response.send(bucketResult)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  Cross-site Scripting (XSS)

Unsanitized input from the HTTP request body flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 42 | CWE-79 | Priority score 799 | Learn more about this vulnerability
Data flow: 9 steps

Step 1 - 7

storage/src/http/routes/vector/get-bucket.ts

Line 40 in 757522d

const bucketResult = await request.s3Vector.getBucket(request.body)

Step 8 - 9

storage/src/http/routes/vector/get-bucket.ts

Line 42 in 757522d

return response.send(bucketResult)

src/http/routes/vector/get-vectors.ts

const indexResult = await request.s3Vector.getVectors(request.body)

return response.send(indexResult)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  Cross-site Scripting (XSS)

Unsanitized input from the HTTP request body flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 46 | CWE-79 | Priority score 799 | Learn more about this vulnerability
Data flow: 9 steps

Step 1 - 7

storage/src/http/routes/vector/get-vectors.ts

Line 44 in 757522d

const indexResult = await request.s3Vector.getVectors(request.body)

Step 8 - 9

storage/src/http/routes/vector/get-vectors.ts

Line 46 in 757522d

return response.send(indexResult)

src/http/routes/vector/list-buckets.ts

const listBucketsResult = await request.s3Vector.listBuckets(request.body)

return response.send(listBucketsResult)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  Cross-site Scripting (XSS)

Unsanitized input from the HTTP request body flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 43 | CWE-79 | Priority score 799 | Learn more about this vulnerability
Data flow: 9 steps

Step 1 - 7

storage/src/http/routes/vector/list-buckets.ts

Line 41 in 757522d

const listBucketsResult = await request.s3Vector.listBuckets(request.body)

Step 8 - 9

storage/src/http/routes/vector/list-buckets.ts

Line 43 in 757522d

return response.send(listBucketsResult)

src/http/routes/vector/list-indexes.ts
vectorBucketName: request.body.vectorBucketName,
})

return response.send(indexResult)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  Cross-site Scripting (XSS)

Unsanitized input from the HTTP request body flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 48 | CWE-79 | Priority score 799 | Learn more about this vulnerability
Data flow: 13 steps

Step 1 - 6

storage/src/http/routes/vector/list-indexes.ts

Line 45 in 757522d

vectorBucketName: request.body.vectorBucketName,

Step 7 - 11 src/http/routes/vector/list-indexes.ts#L43

Step 12 - 13

storage/src/http/routes/vector/list-indexes.ts

Line 48 in 757522d

return response.send(indexResult)

src/http/routes/vector/list-vectors.ts

const indexResult = await request.s3Vector.listVectors(request.body)

return response.send(indexResult)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  Cross-site Scripting (XSS)

Unsanitized input from the HTTP request body flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 57 | CWE-79 | Priority score 799 | Learn more about this vulnerability
Data flow: 9 steps

Step 1 - 7

storage/src/http/routes/vector/list-vectors.ts

Line 55 in 757522d

const indexResult = await request.s3Vector.listVectors(request.body)

Step 8 - 9

storage/src/http/routes/vector/list-vectors.ts

Line 57 in 757522d

return response.send(indexResult)

src/http/routes/vector/put-vectors.ts
}),
})

return response.send(indexResult)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  Cross-site Scripting (XSS)

Unsanitized input from the HTTP request body flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 81 | CWE-79 | Priority score 849 | Learn more about this vulnerability
Data flow: 13 steps

Step 1 - 6

storage/src/http/routes/vector/put-vectors.ts

Line 71 in 757522d

vectorBucketName: request.body.vectorBucketName,

Step 7 - 11 src/http/routes/vector/put-vectors.ts#L70

Step 12 - 13

storage/src/http/routes/vector/put-vectors.ts

Line 81 in 757522d

return response.send(indexResult)

src/http/routes/vector/query-vectors.ts
returnMetadata: request.body.returnMetadata,
})

return response.send(indexResult)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  Cross-site Scripting (XSS)

Unsanitized input from the HTTP request body flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 156 | CWE-79 | Priority score 849 | Learn more about this vulnerability
Data flow: 13 steps

Step 1 - 6

storage/src/http/routes/vector/query-vectors.ts

Line 146 in 757522d

vectorBucketName: request.body.vectorBucketName,

Step 7 - 11 src/http/routes/vector/query-vectors.ts#L145

Step 12 - 13

storage/src/http/routes/vector/query-vectors.ts

Line 156 in 757522d

return response.send(indexResult)

@fenos fenos force-pushed the feat/vector-buckets branch from 757522d to 533ecf8 Compare October 3, 2025 11:48
@fenos fenos force-pushed the feat/vector-buckets branch from 533ecf8 to c94b7f9 Compare October 4, 2025 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@snyk-io snyk-io[bot] snyk-io[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@fenos