-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Audit roll-up: lower-priority auth, controller, and chart RBAC hardening
auditFound during codebase auditFound during codebase auditP3Low: code quality, test gap, or minor inconsistencyLow: code quality, test gap, or minor inconsistencyStatus: Open.#444 In mortise-org/mortise;CI hygiene: run/pin linters, unify helm --wait budgets, k3d checksum + install drift
auditFound during codebase auditFound during codebase auditP2Medium: architecture debt or limited-blast-radius bugMedium: architecture debt or limited-blast-radius bugrefactorCode quality, deduplication, structural improvementsCode quality, deduplication, structural improvementsStatus: Open.#443 In mortise-org/mortise;E2E reliability: 86 non-exact selectors + retries mask real failures
auditFound during codebase auditFound during codebase auditbugSomething isn't workingSomething isn't workingP2Medium: architecture debt or limited-blast-radius bugMedium: architecture debt or limited-blast-radius bugStatus: Open.#442 In mortise-org/mortise;Operator holds cluster-wide secrets read; scope the informer cache to drop it
auditFound during codebase auditFound during codebase auditP2Medium: architecture debt or limited-blast-radius bugMedium: architecture debt or limited-blast-radius bugsecuritySecurity-related issueSecurity-related issueStatus: Open.#441 In mortise-org/mortise;Harden bundled build infra: unauthenticated privileged BuildKit + writable registry, no NetworkPolicies
auditFound during codebase auditFound during codebase auditP1High: security issue or authorization gapHigh: security issue or authorization gapsecuritySecurity-related issueSecurity-related issueStatus: Open.#440 In mortise-org/mortise;Device flow: unauthenticated GitProvider creation + SSRF via unvalidated host
auditFound during codebase auditFound during codebase auditP1High: security issue or authorization gapHigh: security issue or authorization gapsecuritySecurity-related issueSecurity-related issueStatus: Open.#439 In mortise-org/mortise;App wedges in Failed after a domain collision with no retrigger path
auditFound during codebase auditFound during codebase auditbugSomething isn't workingSomething isn't workingP2Medium: architecture debt or limited-blast-radius bugMedium: architecture debt or limited-blast-radius bugStatus: Open.#438 In mortise-org/mortise;Workload update/delete and GC paths skip Mortise ownership checks
auditFound during codebase auditFound during codebase auditbugSomething isn't workingSomething isn't workingP2Medium: architecture debt or limited-blast-radius bugMedium: architecture debt or limited-blast-radius bugStatus: Open.#437 In mortise-org/mortise;Manual rebuild only rebuilds the first environment of a multi-env app
auditFound during codebase auditFound during codebase auditbugSomething isn't workingSomething isn't workingP2Medium: architecture debt or limited-blast-radius bugMedium: architecture debt or limited-blast-radius bugStatus: Open.#436 In mortise-org/mortise;Multi-repo preview environments collide on shared pr-{N} env and namespace
auditFound during codebase auditFound during codebase auditbugSomething isn't workingSomething isn't workingP1High: security issue or authorization gapHigh: security issue or authorization gapStatus: Open.#435 In mortise-org/mortise;BuildRun tracker deleted before terminal status persists; restarts or wrongly fails completed builds
auditFound during codebase auditFound during codebase auditbugSomething isn't workingSomething isn't workingP1High: security issue or authorization gapHigh: security issue or authorization gapStatus: Open.#434 In mortise-org/mortise;- Status: Open.#427 In mortise-org/mortise;