Issues

• Flaky test quarantine report

  SorobanCrashLab/soroban-crashlab#2182 · Filter by author github-actions opened on Oct 21, 2026
  3

• nightly health: storage-driver-minio

  nightly-health
  SorobanCrashLab/soroban-crashlab#2181 · Filter by author github-actions opened on Oct 21, 2026

• Restore the lean PR gate: web lint, typecheck, and unit suite on every PR

  area:ciarea:webcomplexity:highpriority:p0severity:criticalstack:github-actionstype:task
  SorobanCrashLab/soroban-crashlab#1819 · Filter by author trinnode opened on Oct 12, 2026
  2

• Record fee and budget simulation for every seed outcome

  area:fuzzerarea:sorobancomplexity:highpriority:p1severity:hardstack:rusttype:feature
  SorobanCrashLab/soroban-crashlab#1792 · Filter by author trinnode opened on Oct 12, 2026
  5

• Nightly fuzz campaign: regression suite failed (2026-10-01)

  bug
  SorobanCrashLab/soroban-crashlab#1773 · Filter by author github-actions opened on Oct 1, 2026

• CI runs only 1 of 11 Playwright e2e specs — the rest are dead weight

  area:ciarea:e2eseverity:criticaltype:bug
  SorobanCrashLab/soroban-crashlab#1640 · Filter by author trinnode opened on Sep 12, 2026
  2

• No rust-toolchain.toml — CI uses mutable @stable and Docker floats rust:1-bookworm

  area:ciseverity:hardstack:rusttype:task
  SorobanCrashLab/soroban-crashlab#1590 · Filter by author trinnode opened on Sep 12, 2026

• Rust CI never runs cargo fmt or clippy; warnings rot and style drifts across crates

  area:ciseverity:hardstack:rusttype:task
  SorobanCrashLab/soroban-crashlab#1589 · Filter by author trinnode opened on Sep 12, 2026
  1

• "timeout" category is missing from FailureClass::from_category_label, breaking replay round-trips

  area:runtimeseverity:hardstack:rusttype:bug
  SorobanCrashLab/soroban-crashlab#1582 · Filter by author trinnode opened on Sep 12, 2026

• Host runner never executes a contract — it fabricates success/panic categories from payload bytes

  area:fuzzerseverity:criticalstack:rusttype:bug
  SorobanCrashLab/soroban-crashlab#1573 · Filter by author trinnode opened on Sep 12, 2026
  3

• Request body size limits are not uniformly enforced across API routes

  area:backendseverity:hardtype:task
  SorobanCrashLab/soroban-crashlab#1572 · Filter by author trinnode opened on Sep 12, 2026
  3

• API tokens are stored verbatim — add hashing at rest, expiry, and rotation

  area:backendsecurityseverity:criticalStellar Wavetype:security
  SorobanCrashLab/soroban-crashlab#1571 · Filter by author trinnode opened on Sep 12, 2026
  6

• scripts/gh is a fake GitHub CLI stub that shadows the real gh binary if scripts/ is ever on PATH

  area:scriptsseverity:hardtype:bug
  SorobanCrashLab/soroban-crashlab#1567 · Filter by author trinnode opened on Sep 12, 2026

• Gitleaks allowlist is overbroad, excluding lockfiles and scratch files from secret detection

  area:cisecurityseverity:hardtype:task
  SorobanCrashLab/soroban-crashlab#1566 · Filter by author trinnode opened on Sep 12, 2026
  1

• Gitleaks binary is downloaded via curl without checksum verification in the secrets-scan job

  area:cisecurityseverity:hardtype:task
  SorobanCrashLab/soroban-crashlab#1565 · Filter by author trinnode opened on Sep 12, 2026