✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Greptile Overview

Greptile Summary

This PR enhances secret reference tracking by introducing a dependency tree visualization and revamping the UI. The backend now builds a recursive tree structure showing which secrets depend on a given secret, while the frontend uses the react-complex-tree library for better visualization.

Key Changes:

• Backend: Renamed endpoint from /:secretName/secret-references to /:secretName/reference-dependency-tree with completely restructured response (tree instead of flat array)
• Backend: New recursive buildDependencyTree function that traverses dependencies up to MAX_DEPTH of 10
• Frontend: Replaced custom tree UI with react-complex-tree library
• Frontend: Added new "Dependency Tree" section showing reverse dependencies (secrets that reference this secret)
• Frontend: Updated all components to work with tree structure instead of flat reference arrays

Critical Issues:

• Breaking API changes without versioning - both URL and response schema changed, affecting Terraform/API users
• Performance concern - decrypting all secrets in a folder to find local references could cause DoS with large folders
• API documentation needs updating to reflect the endpoint changes

Confidence Score: 2/5

• This PR contains breaking API changes without versioning and potential performance/DoS vulnerabilities
• Score of 2 reflects critical concerns: (1) Breaking changes to public API without versioning will break existing integrations, (2) Performance vulnerability where decrypting all secrets in a folder could enable DoS attacks, (3) Missing API documentation updates. The feature implementation itself is sound, but the breaking changes and security concerns need to be addressed before merge.
• Pay close attention to backend/src/server/routes/v4/secret-router.ts for breaking API changes and backend/src/services/secret-v2-bridge/secret-v2-bridge-service.ts for performance optimization

Important Files Changed