Go to issue

Labels Milestones New Issue

0 Open 3 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

ai-ready

bug

feature

P1

P2

P3

security

tech-debt

Milestone

All milestones No milestones

Project

All projects No project

Open Projects

Flow Meter

Author

All users

Assignee

Assigned to nobody Assigned to anybody

justin (Justin Paul)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 3 Closed

Label

Clear labels

ai-ready

bug

feature

P1

P2

P3

security

tech-debt

Milestone

No milestone

Projects

Clear projects

Open Projects

Flow Meter

Assignee

Clear assignees

No assignee

justin

CI supply-chain: pin action SHAs + container digest, lock deps, verify get-pip P2 security tech-debt

#12 by claude was closed 2026-07-01 19:42:52 -04:00

1

Actions: untrusted profile can bypass the confirmation + response mis-parse bug P1 security

#7 by claude was closed 2026-07-01 19:29:44 -04:00

Formula sandbox: unbounded ** / << allows DoS from an untrusted profile bug P1 security

#6 by claude was closed 2026-07-01 19:26:07 -04:00