-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
pr: launch env values leak into debug logs, errors, and query strings
area:forgectlComponent: forgectl binaryComponent: forgectl binaryarea:securitySubject: security. Severity lives on impact:*Subject: security. Severity lives on impact:*kind:bugExisting behavior violates an expectationExisting behavior violates an expectationStatus: Open.#529 In cameronsjo/forgectl;internal/sops: a signal during the plaintext window leaves a secret in the work tree
area:forgectlComponent: forgectl binaryComponent: forgectl binaryarea:securitySubject: security. Severity lives on impact:*Subject: security. Severity lives on impact:*impact:lowCosmetic or local inconvenience; obvious workaround; nobody blockedCosmetic or local inconvenience; obvious workaround; nobody blockedkind:choreUpkeep with no intended behavior change: deps, CI, cleanupUpkeep with no intended behavior change: deps, CI, cleanuplikelihood:lowNeeds unusual preconditions; not expected within the horizon (30 days)Needs unusual preconditions; not expected within the horizon (30 days)Status: Open.#520 In cameronsjo/forgectl;CI: add govulncheck ./...
area:forgectlComponent: forgectl binaryComponent: forgectl binaryarea:securitySubject: security. Severity lives on impact:*Subject: security. Severity lives on impact:*impact:mediumMeaningful degradation in one workflow; a practical workaround existsMeaningful degradation in one workflow; a practical workaround existskind:choreUpkeep with no intended behavior change: deps, CI, cleanupUpkeep with no intended behavior change: deps, CI, cleanuplikelihood:lowNeeds unusual preconditions; not expected within the horizon (30 days)Needs unusual preconditions; not expected within the horizon (30 days)Status: Open.#514 In cameronsjo/forgectl;internal/env residual hardening: temp file on SIGKILL, lone CR in encodeValue, unpinned child binary
area:forgectlComponent: forgectl binaryComponent: forgectl binaryarea:securitySubject: security. Severity lives on impact:*Subject: security. Severity lives on impact:*impact:lowCosmetic or local inconvenience; obvious workaround; nobody blockedCosmetic or local inconvenience; obvious workaround; nobody blockedkind:choreUpkeep with no intended behavior change: deps, CI, cleanupUpkeep with no intended behavior change: deps, CI, cleanuplikelihood:lowNeeds unusual preconditions; not expected within the horizon (30 days)Needs unusual preconditions; not expected within the horizon (30 days)Status: Open.#513 In cameronsjo/forgectl;exec.Runner: child stderr persists to the log file, and both streams are uncapped
area:forgectlComponent: forgectl binaryComponent: forgectl binaryarea:securitySubject: security. Severity lives on impact:*Subject: security. Severity lives on impact:*impact:lowCosmetic or local inconvenience; obvious workaround; nobody blockedCosmetic or local inconvenience; obvious workaround; nobody blockedkind:choreUpkeep with no intended behavior change: deps, CI, cleanupUpkeep with no intended behavior change: deps, CI, cleanuplikelihood:lowNeeds unusual preconditions; not expected within the horizon (30 days)Needs unusual preconditions; not expected within the horizon (30 days)Status: Open.#512 In cameronsjo/forgectl;- Status: Open.#508 In cameronsjo/forgectl;
- Status: Open.#507 In cameronsjo/forgectl;
- Status: Open.#505 In cameronsjo/forgectl;
fix(cli): ADR-0008 promises --json on state verbs; 15 of them refuse it with exit 1
area:forgectlComponent: forgectl binaryComponent: forgectl binarykind:bugExisting behavior violates an expectationExisting behavior violates an expectationStatus: Open.#482 In cameronsjo/forgectl;Epic: review autonomy — stop needing a human in the loop for routine forge work
area:forgectlComponent: forgectl binaryComponent: forgectl binarykind:epicParent of independently deliverable children; carries no grades and no exec:*Parent of independently deliverable children; carries no grades and no exec:*kind:featureNew or improved capabilityNew or improved capabilityStatus: Open.#474 In cameronsjo/forgectl;docs: index docs/plans/ — two competing roadmaps went unnoticed without one
area:forgectlComponent: forgectl binaryComponent: forgectl binarykind:featureNew or improved capabilityNew or improved capabilityStatus: Open.#471 In cameronsjo/forgectl;- Status: Open.#467 In cameronsjo/forgectl;