-
Notifications
You must be signed in to change notification settings - Fork 23
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[sec-check] renovate.json automerges GitHub Actions SHA bumps into privileged workflows — no human supply-chain gate
4-reviewA pull request is awaiting review.A pull request is awaiting review.Status: Open.#305 In projectbluefin/finpilot;[quality] No CI workflow runs unit tests — tests/unit/ (PR #303) would never execute
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#304 In projectbluefin/finpilot;[architect] iso/rclone/ is an orphaned subsystem: 6 files documenting build-disk.yml, a workflow deleted in the same commit that created them
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#301 In projectbluefin/finpilot;[quality] just clean is broken in two places — it never removes previous.manifest.json, changelog.md, output.env or output/
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#300 In projectbluefin/finpilot;[quality] just build writes the registry tag list to a hardcoded /tmp/repotags.json
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#298 In projectbluefin/finpilot;[quality] just build stamps IMAGE_NAME=finpilot even when building a different target_image
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#297 In projectbluefin/finpilot;[quality] install-jetbrains-toolbox extracts and runs an unverified tarball when sha256sum -c fails
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#294 In projectbluefin/finpilot;[architect] image identity is a 7-site manual rename contract with no enforcement — clean.yml, iso/iso.toml, custom/ujust/README.md already drifted
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#291 In projectbluefin/finpilot;[sec-check] label-enforcement.yml: secrets: inherit on issues/pull_request trigger grants all repo secrets to reusable workflow
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#289 In projectbluefin/finpilot;[sec-check] validate-brewfiles.yml: brew bundle check evaluates PR-controlled Brewfile as Ruby — code exec on PR trigger
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#288 In projectbluefin/finpilot;[quality] build/00-image-info.sh and build/10-build.sh are untestable — no filesystem root override
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#287 In projectbluefin/finpilot;[quality] No CI workflow runs the new BATS unit tests (tests/unit/)
2-discussingWork requiring discussion or a clarified design.Work requiring discussion or a clarified design.Status: Open.#286 In projectbluefin/finpilot;