-
Notifications
You must be signed in to change notification settings - Fork 6
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Adversarial review of all high-stakes merged PRs — findings tracker
effort/xlMulti-week / refactorMulti-week / refactorimpact/manyAffects most usersAffects most userspriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1448 In LeanerCloud/CUDly;sec: enforce view-only+write group-combination contradiction in the backend (guardGroupChange)
priority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleStatus: Open.#1429 In LeanerCloud/CUDly;sec: hash approval/revocation tokens at rest (store sha256, compare hashes)
priority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleStatus: Open.#1420 In LeanerCloud/CUDly;ladder: buy-now ramp steps escape netting + follow-up hardening for L5 convergence
effort/mDaysDaysimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1398 In LeanerCloud/CUDly;test: consolidate hand-rolled ConfigStore mocks (3 copies, taxes every new store method)
effort/mDaysDaysimpact/internalTeam-internal onlyTeam-internal onlypriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1395 In LeanerCloud/CUDly;ci: pre-commit gosec hook and CI enforce DIFFERENT gosec rule sets
effort/sHoursHoursimpact/internalTeam-internal onlyTeam-internal onlypriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1394 In LeanerCloud/CUDly;refactor(aws/recommendations): generic CE pagination helper (7 copies)
effort/sHoursHoursimpact/internalTeam-internal onlyTeam-internal onlypriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1393 In LeanerCloud/CUDly;refactor(aws): consolidate 5 near-identical RI term parsers (drift already started)
effort/sHoursHoursimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1392 In LeanerCloud/CUDly;scheduledauth: optional negative-kid cache to eliminate residual JWKS proxying under bad-token spam
effort/sHoursHoursimpact/internalTeam-internal onlyTeam-internal onlypriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1387 In LeanerCloud/CUDly;ci: govulncheck step should retry transient vuln-DB fetch failures
effort/xsTrivial / one-linerTrivial / one-linerimpact/internalTeam-internal onlyTeam-internal onlypriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1385 In LeanerCloud/CUDly;providers/aws/ec2: getDurationValue silently defaults unknown RI terms to 1yr
effort/sHoursHoursimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1383 In LeanerCloud/CUDly;Scheduled executions pass IsCancelable but CancelExecutionAtomic never cancels them (misleading 409)
effort/sHoursHoursimpact/fewLimited audienceLimited audiencepriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1380 In LeanerCloud/CUDly;