-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#133 In jakewan/overstory;
Nothing tests what the server emits on the wire, so an SDK upgrade can change what clients receive with every test green
enhancementNew feature or requestNew feature or requestStatus: Open.#132 In jakewan/overstory;CI's path filters don't cover every input its jobs consume, so a change to the command CI executes can trigger no jobs at all
buildBuild, CI, and release tooling (e.g. goreleaser, release workflows).Build, CI, and release tooling (e.g. goreleaser, release workflows).Status: Open.#131 In jakewan/overstory;Nothing reports on or pins the mise version itself, so the tool that verifies every other pin drifts while everything it verifies stays current
buildBuild, CI, and release tooling (e.g. goreleaser, release workflows).Build, CI, and release tooling (e.g. goreleaser, release workflows).securityCross-cutting security / supply-chain concernCross-cutting security / supply-chain concernStatus: Open.#129 In jakewan/overstory;Nothing asserts that CI's Go matches the pinned toolchain, so the vulnerability scan can report against a standard library the binary is not built with
buildBuild, CI, and release tooling (e.g. goreleaser, release workflows).Build, CI, and release tooling (e.g. goreleaser, release workflows).securityCross-cutting security / supply-chain concernCross-cutting security / supply-chain concernStatus: Open.#128 In jakewan/overstory;- Status: Open.#125 In jakewan/overstory;
A pinned-value bump can leave an adjacent comment naming the old value, with no check on the bump path to catch it
enhancementNew feature or requestNew feature or requestStatus: Open.#120 In jakewan/overstory;GitHub Actions run from mutable tags, so CI's executed code can change without a repository change
buildBuild, CI, and release tooling (e.g. goreleaser, release workflows).Build, CI, and release tooling (e.g. goreleaser, release workflows).securityCross-cutting security / supply-chain concernCross-cutting security / supply-chain concernStatus: Open.#115 In jakewan/overstory;Label-tail truncation can silently misclassify issues in most label-driven reductions
enhancementNew feature or requestNew feature or requestreductionsReduction logic and which signals overstory surfacesReduction logic and which signals overstory surfacesStatus: Open.#100 In jakewan/overstory;No versioned release or distribution mechanism — users can't install or pin a known overstory version
buildBuild, CI, and release tooling (e.g. goreleaser, release workflows).Build, CI, and release tooling (e.g. goreleaser, release workflows).enhancementNew feature or requestNew feature or requestStatus: Open.#93 In jakewan/overstory;Tool responses are serialized twice on the wire, inflating token cost for structured-content clients
enhancementNew feature or requestNew feature or requestStatus: Open.#85 In jakewan/overstory;Hygiene's area-only classification can't express cross-cutting concerns, so a deliberately area-less issue is indistinguishable from an unclassified one
enhancementNew feature or requestNew feature or requestreductionsReduction logic and which signals overstory surfacesReduction logic and which signals overstory surfacesStatus: Open.#73 In jakewan/overstory;