Skip to content
Brand Logo

Rig Community
  • RigR

    [Aikido][GH#26] Imported handoff metadata can redirect Rig's local HTTPS proxy to arbitrary upstreams

    Locked Bugs resolved github-26 severity-medium type-ai-pentest security
    2
    0 Votes
    2 Posts
    39 Views
    RigR
    Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/26 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#7] Express is not emitting security headers

    Locked Bugs resolved github-7 severity-high type-sast security
    2
    0 Votes
    2 Posts
    36 Views
    RigR
    Resolved in Mac 1.0.0-beta.54. GitHub: https://github.com/richharrington20/rig/issues/7 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#14] AIKIDO-2026-236835 in fast-uri (2 lockfiles)

    Locked Bugs resolved github-14 severity-high type-open-sourc security
    2
    0 Votes
    2 Posts
    40 Views
    RigR
    Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/14 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#20] GitHub org IP allow list not enabled

    Locked Bugs resolved github-20 severity-medium type-scm-securi security
    2
    0 Votes
    2 Posts
    39 Views
    RigR
    Accepted — GitHub org IP allow lists are an org admin setting, not applicable for this public product repo. Tracked for awareness only.
  • RigR

    [Aikido][GH#12] Potential file inclusion attack via reading file (96 sites)

    Locked Bugs resolved github-12 severity-high type-sast security
    2
    0 Votes
    2 Posts
    48 Views
    RigR
    Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/12 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#24] Email HTML injection via untrusted fields (2 findings)

    Locked Bugs resolved github-24 severity-medium type-ai-pentest security
    2
    0 Votes
    2 Posts
    32 Views
    RigR
    Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/24 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#11] Using document write methods can lead to XSS attacks (4 sites)

    Locked Bugs resolved github-11 severity-high type-sast security
    2
    0 Votes
    2 Posts
    34 Views
    RigR
    Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/11 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#18] DOM XSS in the Electron log viewer from unescaped watched Laravel log content

    Locked Bugs resolved github-18 severity-medium type-ai-pentest security
    2
    0 Votes
    2 Posts
    35 Views
    RigR
    Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/18 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#27] Imported handoff can set an attacker-controlled customLocalUrl that Rig opens externally

    Locked Bugs resolved github-27 severity-low type-ai-pentest security
    2
    0 Votes
    2 Posts
    41 Views
    RigR
    Resolved in Mac 1.0.0-beta.55. GitHub: https://github.com/richharrington20/rig/issues/27 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#10] Detected a Generic API Key (sparkleUpdater.js)

    Locked Bugs resolved github-10 severity-high type-leaked-sec security
    2
    0 Votes
    2 Posts
    27 Views
    RigR
    Resolved in Mac 1.0.0-beta.54. GitHub: https://github.com/richharrington20/rig/issues/10 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#23] Missing Anti-clickjacking header

    Locked Bugs resolved github-23 severity-medium type-surface-mo security
    2
    0 Votes
    2 Posts
    57 Views
    RigR
    Resolved in Cloud 0.17.0. GitHub: https://github.com/richharrington20/rig/issues/23 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    [Aikido][GH#25] AIKIDO-2026-906996 in better-auth (2 lockfiles)

    Locked Bugs resolved github-25 severity-medium type-open-sourc security
    2
    0 Votes
    2 Posts
    31 Views
    RigR
    Resolved in Cloud 0.18.0. GitHub: https://github.com/richharrington20/rig/issues/25 Changelog: https://userig.app/changelog Bugs hub: https://userig.app/changelog?hub=bugs
  • RigR

    Teams & agencies — how to use this room

    Pinned Teams & agencies
    1
    0 Votes
    1 Posts
    14 Views
    RigR
    Teams & agencies For shops and pairs sharing a Rig cloud workspace: Invites, seats, and who can do what Shared project / env habits (no secrets in posts) Agency morning stacks and on-call Mac norms Account / billing → Support. Product gaps → Feature ideas. — Rig
  • RigR

    Beta testers — how to use this room

    Pinned Beta testers
    1
    0 Votes
    1 Posts
    9 Views
    RigR
    Beta testers Opt-in room for people willing to break things early: Latest Sparkle betas before you would recommend them to a client Later: iOS / iPad TestFlight soak notes Works for me / does not — with version + macOS Still use the Bugs template for clear defects. Roadmap opinions → Feature ideas / What's up next. Install: userig.app/download · Changelog: userig.app/changelog — Rig
  • RigR

    Service status · All systems operational · 5 Aug 2026, 15:12 UK

    Service status status systems
    1
    0 Votes
    1 Posts
    5 Views
    RigR
    All systems operational Snapshot for 5 Aug 2026, 15:12 UK (UK). Live board: status.userig.app Identity & API 🟢 API — Operational · 24h 100.00% · 17ms · cert 85d 🟢 Identity — Operational · 24h 100.00% · 27ms · cert 85d 🟢 Database — Operational · 24h 100.00% · 19ms · cert 85d Product surfaces 🟢 Web — Operational · 24h 100.00% · 18ms · cert 85d 🟢 Community — Operational · 24h 99.1% · 48ms · cert 87d 🟢 Support — Operational · 24h 83.4% · 242ms · cert 87d 🟢 Cloud account — Operational · 24h 100.00% · 17ms · cert 85d 🟢 Notifications — Operational · 24h 100.00% · 15ms · cert 85d Mac app & updates 🟢 DMG catalog — Operational · 24h 100.00% · 20ms · cert 85d 🟢 Sparkle (Apple Silicon) — Operational · 24h 100.00% · 15ms · cert 85d 🟢 Sparkle (Intel) — Operational · 24h 100.00% · 17ms · cert 85d Security & edge 🟢 TLS · userig.app — Operational · 24h 100.00% · 18ms · cert 85d 🟢 TLS · api.userig.app — Operational · 24h 100.00% · 16ms · cert 85d 🟢 TLS · community — Operational · 24h 99.0% · 127ms · cert 87d Posted by Rig from Rig Status — UK checkpoints 07:00 · 12:00 · 19:00, plus alerts on status change. Private help: Support.
  • RigR

    Service status · All systems operational · 7 Aug 2026, 19:01 UK

    Service status status systems
    1
    0 Votes
    1 Posts
    6 Views
    RigR
    All systems operational Snapshot for 7 Aug 2026, 19:01 UK (UK). Live board: status.userig.app Identity & API 🟢 API — Operational · 24h 100.00% · 14ms · cert 82d 🟢 Identity — Operational · 24h 100.00% · 15ms · cert 82d 🟢 Database — Operational · 24h 100.00% · 22ms · cert 82d Product surfaces 🟢 Web — Operational · 24h 100.00% · 94ms · cert 83d 🟢 Community — Operational · 24h 100.00% · 48ms · cert 85d 🟢 Support — Operational · 24h 100.00% · 119ms · cert 85d 🟢 Cloud account — Operational · 24h 100.00% · 85ms · cert 82d 🟢 Notifications — Operational · 24h 100.00% · 20ms · cert 82d Mac app & updates 🟢 DMG catalog — Operational · 24h 100.00% · 19ms · cert 83d 🟢 Sparkle (Apple Silicon) — Operational · 24h 100.00% · 17ms · cert 83d 🟢 Sparkle (Intel) — Operational · 24h 100.00% · 15ms · cert 83d Security & edge 🟢 TLS · userig.app — Operational · 24h 100.00% · 16ms · cert 83d 🟢 TLS · api.userig.app — Operational · 24h 100.00% · 20ms · cert 82d 🟢 TLS · community — Operational · 24h 99.9% · 64ms · cert 85d Posted by Rig from Rig Status — UK checkpoints 07:00 · 12:00 · 19:00, plus alerts on status change. Private help: Support.
  • RigR

    Service status · All systems operational · 6 Aug 2026, 20:25 UK

    Service status status systems
    1
    0 Votes
    1 Posts
    5 Views
    RigR
    All systems operational Snapshot for 6 Aug 2026, 20:25 UK (UK). Live board: status.userig.app Identity & API 🟢 API — Operational · 24h 100.00% · 16ms · cert 83d 🟢 Identity — Operational · 24h 100.00% · 22ms · cert 83d 🟢 Database — Operational · 24h 100.00% · 16ms · cert 83d Product surfaces 🟢 Web — Operational · 24h 100.00% · 16ms · cert 83d 🟢 Community — Operational · 24h 100.00% · 25ms · cert 86d 🟢 Support — Operational · 24h 100.00% · 94ms · cert 86d 🟢 Cloud account — Operational · 24h 100.00% · 19ms · cert 83d 🟢 Notifications — Operational · 24h 100.00% · 17ms · cert 83d Mac app & updates 🟢 DMG catalog — Operational · 24h 100.00% · 20ms · cert 83d 🟢 Sparkle (Apple Silicon) — Operational · 24h 100.00% · 14ms · cert 83d 🟢 Sparkle (Intel) — Operational · 24h 100.00% · 16ms · cert 83d Security & edge 🟢 TLS · userig.app — Operational · 24h 100.00% · 17ms · cert 83d 🟢 TLS · api.userig.app — Operational · 24h 100.00% · 17ms · cert 83d 🟢 TLS · community — Operational · 24h 100.00% · 104ms · cert 86d Posted by Rig from Rig Status — UK checkpoints 07:00 · 12:00 · 19:00, plus alerts on status change. Private help: Support.
  • RigR

    Service status · All systems operational · 5 Aug 2026, 19:03 UK

    Service status status systems
    1
    0 Votes
    1 Posts
    5 Views
    RigR
    All systems operational Snapshot for 5 Aug 2026, 19:03 UK (UK). Live board: status.userig.app Identity & API 🟢 API — Operational · 24h 100.00% · 32ms · cert 84d 🟢 Identity — Operational · 24h 100.00% · 18ms · cert 84d 🟢 Database — Operational · 24h 100.00% · 17ms · cert 84d Product surfaces 🟢 Web — Operational · 24h 100.00% · 17ms · cert 84d 🟢 Community — Operational · 24h 99.9% · 18ms · cert 87d 🟢 Support — Operational · 24h 83.1% · 88ms · cert 87d 🟢 Cloud account — Operational · 24h 100.00% · 17ms · cert 84d 🟢 Notifications — Operational · 24h 100.00% · 17ms · cert 84d Mac app & updates 🟢 DMG catalog — Operational · 24h 100.00% · 18ms · cert 84d 🟢 Sparkle (Apple Silicon) — Operational · 24h 100.00% · 16ms · cert 84d 🟢 Sparkle (Intel) — Operational · 24h 100.00% · 16ms · cert 84d Security & edge 🟢 TLS · userig.app — Operational · 24h 100.00% · 16ms · cert 84d 🟢 TLS · api.userig.app — Operational · 24h 100.00% · 25ms · cert 84d 🟢 TLS · community — Operational · 24h 99.8% · 77ms · cert 87d Posted by Rig from Rig Status — UK checkpoints 07:00 · 12:00 · 19:00, plus alerts on status change. Private help: Support.
  • RigR

    Service status · All systems operational · 7 Aug 2026, 07:04 UK

    Service status status systems
    1
    0 Votes
    1 Posts
    6 Views
    RigR
    All systems operational Snapshot for 7 Aug 2026, 07:04 UK (UK). Live board: status.userig.app Identity & API 🟢 API — Operational · 24h 100.00% · 16ms · cert 83d 🟢 Identity — Operational · 24h 100.00% · 658ms · cert 83d 🟢 Database — Operational · 24h 100.00% · 15ms · cert 83d Product surfaces 🟢 Web — Operational · 24h 100.00% · 14ms · cert 83d 🟢 Community — Operational · 24h 100.00% · 16ms · cert 86d 🟢 Support — Operational · 24h 100.00% · 763ms · cert 86d 🟢 Cloud account — Operational · 24h 100.00% · 20ms · cert 83d 🟢 Notifications — Operational · 24h 100.00% · 64ms · cert 83d Mac app & updates 🟢 DMG catalog — Operational · 24h 100.00% · 21ms · cert 83d 🟢 Sparkle (Apple Silicon) — Operational · 24h 100.00% · 18ms · cert 83d 🟢 Sparkle (Intel) — Operational · 24h 100.00% · 16ms · cert 83d Security & edge 🟢 TLS · userig.app — Operational · 24h 100.00% · 620ms · cert 83d 🟢 TLS · api.userig.app — Operational · 24h 100.00% · 655ms · cert 83d 🟢 TLS · community — Operational · 24h 100.00% · 55ms · cert 86d Posted by Rig from Rig Status — UK checkpoints 07:00 · 12:00 · 19:00, plus alerts on status change. Private help: Support.
  • RigR

    A new Rig cloud release is available: v0.12.1

    What's shipping release changelog shipping
    1
    0 Votes
    1 Posts
    7 Views
    RigR
    Cloud v0.12.1 Dark grouped Cloud dashboard restored, with Network and Members under Activity and a clearer Profile social strip — without losing Continuity / Workspace. Shipped 8 Aug 2026 · Full changelog Added Network tab (followers / following, follow back & unfollow) Members directory search in the Cloud dashboard (/v1/members/search) Profile social strip (published state, follower counts, quick links to Members / Inbox / Network) Social & messaging card on Profile (hourly rate opt-in, follows visibility, message gating) Status health probes for Social planes (/health/social/{graph,messages,feed,members,media}) Fixed Accidental thin light sidebar overwrite — restored ink grouped Workspace / Activity / Account / Support chrome Social APIs remounted on deploy so Home, Inbox, and graph endpoints stay live with the dashboard Posted by Rig when this cloud release hit userig.app/changelog. Feedback welcome in Bugs / Feature ideas — private tickets still go to Support.