Search results

dependency-review in the default scan-tools hard-fails on a private repo — warn (or fail fast) like attest-and-verify does

Status: Open.

#791 In TomHennen/wrangle;

· TomHennen opened on Jul 13, 2026

claude: the image-publish trigger is too broad — dev scripts under tools/ force a needless rebuild + catalog cycle

Status: Open.

#777 In TomHennen/wrangle;

· TomHennen opened on Jul 12, 2026

claude: lint the pipefail SIGPIPE pattern (cmd | head -1, printf | grep -q)

Status: Open.

#771 In TomHennen/wrangle;

· TomHennen opened on Jul 12, 2026

claude: add test/image/test_osv_image.bats — osv is the only image-based tool with no image test

Status: Open.

#764 In TomHennen/wrangle;

· TomHennen opened on Jul 12, 2026

claude: automate the release cut — bump_version_refs.sh + cut_release.sh

Status: Open.

#758 In TomHennen/wrangle;

· TomHennen opened on Jul 12, 2026

claude: private-repo follow-ups — Code Scanning SARIF noise (no-GHAS) + policy notes (#597 part 2)

Status: Open.

#746 In TomHennen/wrangle;

· TomHennen opened on Jul 5, 2026

claude: check_pin_freshness scope — non-runtime files force full pin re-convergence

Status: Open.

#739 In TomHennen/wrangle;

· TomHennen opened on Jul 5, 2026

claude: doc-pointer lint — fail CI when SPEC.md's 'enforced by' references stop existing

Status: Open.

#735 In TomHennen/wrangle;

· TomHennen opened on Jul 5, 2026

Finish removing the deprecated gh_token secret from build_and_publish_container.yml

enhancementNew feature or requestNew feature or request

Status: Open.

#730 In TomHennen/wrangle;

· TomHennen opened on Jul 5, 2026

claude: verified cache reuse for publish builds (VSA-gated --cache-from)

Status: Open.

#728 In TomHennen/wrangle;

· TomHennen opened on Jul 5, 2026

claude: generalize build_shell image-cache for adopters (parameterize key paths)

Status: Open.

#727 In TomHennen/wrangle;

· TomHennen opened on Jul 5, 2026

Collapse the per-tool SARIF upload steps into one dir upload (drop the per-tool gates)

enhancementNew feature or requestNew feature or request

Status: Open.

#726 In TomHennen/wrangle;

· TomHennen opened on Jul 5, 2026