A synchronous plugin making an outbound call during save
What it is
Synchronous plugin step calls an outbound endpoint in the save transaction.
Why it matters
A synchronous step routes to a webhook inside the user's save, so a slow or unreachable endpoint delays or fails every affected save. The same integration run asynchronously carries none of this risk.
Find it yourself
List synchronous steps and check which route to a service endpoint or webhook. The symptom users report is intermittently slow saves that nobody can reproduce, because it depends on the remote endpoint's health.
How to fix it
Re-register the step asynchronously unless the caller truly needs the response before the save commits.
Not a security finding
This one is environment health, so it carries a plain label and no control mapping. Presenting an operational gap as a security finding would make the real security findings harder to trust, so we keep the two apart.
Pathix checks this across every environment you scan, along with 39 other conditions. Self-hosted in your own Azure, read-only, metadata-only.