-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
docs: block-dangerous-bash.sh header still documents the removed conditional gate
automationClaude Code / dev-workflow automationClaude Code / dev-workflow automationdocumentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#304 In DocGerd/pantry-tracker;chore(governance): pre-existing bypass vectors in block-dangerous-bash.sh (found while reviewing #298)
automationClaude Code / dev-workflow automationClaude Code / dev-workflow automationciCI/CD and build pipelineCI/CD and build pipelinesecurityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#299 In DocGerd/pantry-tracker;- Status: Open.#296 In DocGerd/pantry-tracker;
security: re-examine Scorecard Branch-Protection — the "solo maintainer = structural zero" premise may be wrong
securityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#295 In DocGerd/pantry-tracker;docs(security): security-posture.md wrongly claims buildscript-classpath transitives are not user-forceable
documentationImprovements or additions to documentationImprovements or additions to documentationsecurityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#294 In DocGerd/pantry-tracker;ci: scorecard.yml uses cancel-in-progress on a SARIF-uploading workflow (repeats the #160/#161 failure mode)
ciCI/CD and build pipelineCI/CD and build pipelinesecurityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#293 In DocGerd/pantry-tracker;security(accept-risk): kotlin-gradle-plugin GHSA-r937-wjx7-w2jp has no compatible stable fix (alert #45)
securityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#292 In DocGerd/pantry-tracker;security(deps): force BouncyCastle 1.85 on :app configs AND the root buildscript classpath (2 critical alerts)
securityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#291 In DocGerd/pantry-tracker;security(deps): bump UTP Netty resolution pin 4.1.135.Final → 4.1.137.Final (10 open alerts)
securityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#290 In DocGerd/pantry-tracker;automation: add accessibility coverage to review tooling (a11y lint-to-error and/or a Compose a11y reviewer subagent)
accessibilitya11y / TalkBack / contrasta11y / TalkBack / contrastautomationClaude Code / dev-workflow automationClaude Code / dev-workflow automationStatus: Open.#285 In DocGerd/pantry-tracker;automation: add a regen-screenshot-goldens skill to orchestrate the CI golden round-trip
automationClaude Code / dev-workflow automationClaude Code / dev-workflow automationtestingTest coverage / test qualityTest coverage / test qualityStatus: Open.#284 In DocGerd/pantry-tracker;security: generate a releaseRuntimeClasspath CycloneDX SBOM and attach it as a one-shot release asset
securityIssues addressing concrete security findings (see docs/security/)Issues addressing concrete security findings (see docs/security/)Status: Open.#283 In DocGerd/pantry-tracker;