-
Notifications
You must be signed in to change notification settings - Fork 3
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
ci(security): Security Scanning is red on master for three untracked reasons — gofmt, gosec SARIF, deprecated CodeQL v2
area:infraDocker, K8s, CIDocker, K8s, CIarea:qualityQuality, reliability and release readinessQuality, reliability and release readinessarea:securityCybersecurity and threat intelligenceCybersecurity and threat intelligencepriority:P1HighHighpriority:P1-highBlocks a milestoneBlocks a milestonestatus:readyMeets the ready definitionMeets the ready definitiontier:0-trustTrust: security, isolation, evidence integrityTrust: security, isolation, evidence integritytype:bugSomething is brokenSomething is brokenStatus: Open.[EPIC] Launch board — v1.0, January 2027: execution order
area:docsREADME, ROADMAP, docsREADME, ROADMAP, docsarea:qualityQuality, reliability and release readinessQuality, reliability and release readinessepicTracking issue spanning several child issuesTracking issue spanning several child issuespriority:P1HighHighpriority:P1-highBlocks a milestoneBlocks a milestonestatus:in-progressAn agent is working itAn agent is working ittype:choreMaintenance, no user impactMaintenance, no user impactStatus: Open.#815 In opendefender/OpenRisk;ci(api): the committed openapi.generated.ts has drifted ~1,000 lines from docs/openapi.yaml, and nothing checks it
area:frontendReact, /srcReact, /srcarea:infraDocker, K8s, CIDocker, K8s, CIarea:qualityQuality, reliability and release readinessQuality, reliability and release readinesspriority:P2NormalNormalpriority:P2-mediumNormal milestone workNormal milestone workstatus:readyMeets the ready definitionMeets the ready definitiontier:3-ecosystemEcosystem: integrations, OSCAL, the marketplaceEcosystem: integrations, OSCAL, the marketplacetype:choreMaintenance, no user impactMaintenance, no user impactStatus: Open.chore(evidence): retire the legacy control_evidences table now that the evidence library is the only register
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:dbSchema, migrationsSchema, migrationsarea:grcGovernance, risk and complianceGovernance, risk and complianceevidenceEvidence collection and lifecycleEvidence collection and lifecyclepriority:P2NormalNormalpriority:P2-mediumNormal milestone workNormal milestone workstatus:blockedWaiting on a decision or another issueWaiting on a decision or another issuetier:1-product-engineProduct engine: the canonical model and the data planeProduct engine: the canonical model and the data planetype:debtTechnical debtTechnical debtStatus: Open.feat(risk): Key Risk Indicators with thresholds tied to risk appetite — a breach drafts a risk signal
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:riskRisk intelligence and quantificationRisk intelligence and quantificationpriority:P2NormalNormalpriority:P2-mediumNormal milestone workNormal milestone workriskRisk managementRisk managementstatus:needs-refinementNot workable yetNot workable yettier:2-killer-workflowKiller workflow: the loops that win dealsKiller workflow: the loops that win dealstype:featureNew user-facing capabilityNew user-facing capabilityStatus: Open.feat(risk): residual-risk acceptance expires — mandatory end date, reminder, automatic re-assessment
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:riskRisk intelligence and quantificationRisk intelligence and quantificationgovernanceGovernanceGovernancepriority:P1HighHighpriority:P1-highBlocks a milestoneBlocks a milestoneriskRisk managementRisk managementstatus:readyMeets the ready definitionMeets the ready definitiontier:2-killer-workflowKiller workflow: the loops that win dealsKiller workflow: the loops that win dealstype:featureNew user-facing capabilityNew user-facing capabilityStatus: Open.feat(content): regulatory catalogues for the declared target markets — Canada, Morocco, Belgium, France
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:grcGovernance, risk and complianceGovernance, risk and compliancecomplianceComplianceCompliancecontentRegulatory framework libraries and mappingsRegulatory framework libraries and mappingspriority:P2NormalNormalpriority:P2-mediumNormal milestone workNormal milestone workstatus:needs-refinementNot workable yetNot workable yettier:1-product-engineProduct engine: the canonical model and the data planeProduct engine: the canonical model and the data planetype:featureNew user-facing capabilityNew user-facing capabilityStatus: Open.feat(content): control-level depth for NIST 800-53 r5, NIS2 and DORA — and lock every catalogue count in a test
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:grcGovernance, risk and complianceGovernance, risk and compliancecomplianceComplianceCompliancecontentRegulatory framework libraries and mappingsRegulatory framework libraries and mappingspriority:P1HighHighpriority:P1-highBlocks a milestoneBlocks a milestonestatus:readyMeets the ready definitionMeets the ready definitiontier:1-product-engineProduct engine: the canonical model and the data planeProduct engine: the canonical model and the data planetype:featureNew user-facing capabilityNew user-facing capabilityStatus: Open.debt(arch): handlers query database.DB directly — ratchet it to zero and add a structural tenant-filter guard
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:qualityQuality, reliability and release readinessQuality, reliability and release readinesspriority:P2NormalNormalpriority:P2-mediumNormal milestone workNormal milestone workstatus:readyMeets the ready definitionMeets the ready definitiontier:0-trustTrust: security, isolation, evidence integrityTrust: security, isolation, evidence integritytype:debtTechnical debtTechnical debtStatus: Open.security(users): /users/:id status, role and delete act on the global account, not on the caller's membership
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:securityCybersecurity and threat intelligenceCybersecurity and threat intelligencepriority:P0Blocking: nothing else ships until this closesBlocking: nothing else ships until this closespriority:P0-criticalProduction broken or exposed — work nowProduction broken or exposed — work nowstatus:readyMeets the ready definitionMeets the ready definitiontier:0-trustTrust: security, isolation, evidence integrityTrust: security, isolation, evidence integritytrustEvidence a buyer's CISO tests before features matterEvidence a buyer's CISO tests before features mattertype:securitySecurity defect or hardeningSecurity defect or hardeningStatus: Open.SSO sign-in success returns tokens as JSON instead of session cookies and a redirect
area:backendGo, /internal, /pkgGo, /internal, /pkgarea:enterpriseEnterprise platform capabilitiesEnterprise platform capabilitiespriority:P1HighHighpriority:P1-highBlocks a milestoneBlocks a milestonestatus:readyMeets the ready definitionMeets the ready definitiontier:0-trustTrust: security, isolation, evidence integrityTrust: security, isolation, evidence integritytrustEvidence a buyer's CISO tests before features matterEvidence a buyer's CISO tests before features mattertype:bugSomething is brokenSomething is brokenStatus: Open.chore(deps): remove the docker/docker exceptions from the Dependency gate
area:backendGo, /internal, /pkgGo, /internal, /pkgpriority:P2-mediumNormal milestone workNormal milestone workstatus:readyMeets the ready definitionMeets the ready definitiontier:0-trustTrust: security, isolation, evidence integrityTrust: security, isolation, evidence integritytype:securitySecurity defect or hardeningSecurity defect or hardeningStatus: Open.