Not Critical but missing certificate verification

[KristiforMilchev]

superfluid-sentinel/scripts/printTOGAstatus.js

Line 23 in 06fae45

const res = await axios.post(graphAPI, { query });

superfluid-sentinel/src/config/configuration.js

Line 147 in 06fae45

const response = await axios.get(manifestUrl);

superfluid-sentinel/src/utils/utils.js

Line 19 in 06fae45

const response = await axios({

Usually shouldn't cause any issues and looking at the code it's just fetching data from GraphQL, but still a good idea to verify that the certificate on the other end matches with what's expected to prevent any MiTM attacks on that vector.

Considering there are calls that open streams and download files it's a good idea to validate the certificates on the other hand either with a public key or the PEM, to prevent malicious actors.