.svg)
05-01-2026: What steps do we need to take after the Instructure Security Incident?
On May 1, 2026, there was a security incident at Instructure that caused all Cidi Labs tools to stop functioning. Some actions may need to be taken.
On May 1, 2026, there was a Security Incident at Instructure. Cidi Labs data was not impacted by this security incident. However, the Cidi Labs inherited Developer API keys were removed from Canvas. We immediately opened a ticket with Instructure, and they have since resolved the issue. The fix for this required Instructure to create entirely new inherited Developer API keys for all Cidi Labs tools.
Do We Need to Create New Developer Keys?
Cidi Labs uses inherited Developer API keys for most of our tools, so no new Developer keys need to be created.
However, if the tools were installed prior to the inherited developer key, we will most likely need to reinstall the tool. This is only necessary if you are still unable to access the tool. If that's the case, our team can help reinstall or troubleshoot, as needed.
Likewise, if you have legacy ReadyGO installed, a call will need to be scheduled with our team to re-enable the developer key.
If you have legacy ReadyGO or find specific tools are not working, please reach out to our support team by filling out the Cidi Labs Support Form or emailing support@cidilabs.com.
Reauthorize the Task Runner
Because a new Inherited Developer key was created, all users will need to reauthorize when accessing the Cidi Labs LTI Tools.
Reauthorizing the Cidiscape or ReadyGO Task Runner
If you have ReadyGO or Cidiscape installed, this requires the Task Runner to be reauthorized in Cidiscape or ReadyGO for all tools in order for scans to initiate and complete. This will need to be done by a Canvas root admin who can masquerade as this Task Runner user.
For instructions on how to reauthorize the Cidiscape or ReadyGO Task Runner, see
- Video Directions for Reauthorizing Task Runners in ReadyGO/Cidiscape (4.5 min)
- The Cidiscape User Guide: Task Runners > Re-Authorize a Task Runner
- ReadyGO User Guide: Manage Task Runners > Instructions
Reauthorizing the ObservEd Task Runner
If you have ObservEd installed, the ObservEd Task Runner will also need to be reauthorized by a root account admin who can masquerade as the ObservEd Task Runner user. Here are the steps to reauthorize the ObservEd Task Runner:
- Masquerade as the ObservEd Task Runner user
- Open ObservEd
- Select the kebab menu
- Select Admin
- Select Task Runner
- Select the Trash icon to Revoke Authorization
- Select Authorize Task Runner
- Authorize the Task Runner
- Stop masquerading as the ObservEd Task Runner
After reauthorizing the ObservEd Task Runner, you may need to clear cache and cookies in your browser.
Please contact our Support team if you would like assistance with reauthorizing the Task Runner by filling out the Cidi Labs Support Form or emailing support@cidilabs.com.
Is our CSS and JavaScript safe if we have DesignPLUS installed?
The Canvas theme CSS and JavaScript code provided by Cidi Labs during the DesignPLUS Sidebar installation imports CSS/JS files from our secure server so it is safe to use.