All pull requests

Pull requests

• refactor(baseline): remove unsupported sigstore v1 and v2 branches

  #724·Daniel-park10 opened Nov 6, 2026Contributor·5 of 15 tasks·

  ·

• fix(baseline): audit GitHub permission defaults

  #722·Mohamed-Ayaan358 opened Nov 6, 2026Contributor·8 of 15 tasks·

  ·
  1

• test(baseline): add unit tests for attestation signing and git helpers

  #719·Daniel-park10 opened Nov 5, 2026Contributor·6 of 15 tasks·

  ·
  1

• Fix reproducibility evidence discovery in subdirectories

  #706·catfish-1234 opened Nov 2, 2026Contributor·15 tasks·

  ·

• Fix attestation project type lookup

  #705·catfish-1234 opened Nov 2, 2026Contributor·15 tasks·

  ·

• feat(remediation): configure QA-03.01 as platform_setting requirement (fixes #663)

  #697·Daniel-park10 opened Oct 30, 2026Contributor·10 of 15 tasks·

  ·
  1

  2

• feat(comply): judge and confirm after remediation

  #693·mlieberman85 opened Oct 28, 2026Contributor·8 tasks done·

  ·
  2

• fix: clarify no-workflows audit warnings (#584)

  #685·JohnsonLyu opened Oct 26, 2026Contributor·8 of 15 tasks·

  ·
  1

  4

• feat(amber): darnit-amber run writes a signed run bundle

  #678·Marc-cn opened Oct 23, 2026Collaborator·

  ·
  11

• Publish Python packages with PyPI Trusted Publishing

  #674·Marc-cn opened Oct 23, 2026Collaborator·1 of 2 tasks·

  ·
  1

• fix(data): every project-data question through the question tool; skills name the repository

  #672·mlieberman85 opened Oct 23, 2026Contributor·7 of 8 tasks·

  ·
  1

  

• feat(mcp): return the data and judgment procedures from the tools

  #671·mlieberman85 opened Oct 23, 2026Contributor·7 of 8 tasks·

  ·
  1

  

• fix(audit): Next Steps read answers confirmed for the named repository

  #668·mlieberman85 opened Oct 23, 2026Contributor·7 of 12 tasks·

  ·
  1

  3

  

• fix(baseline): a missing document fails again, so remediation plans it

  #667·mlieberman85 opened Oct 23, 2026Contributor·11 of 17 tasks·

  ·
  1

  1

  

• fix(sieve): resolve case-exact file probes and deduplicate contents (fixes #645)

  #658·i-am-paradox opened Oct 22, 2026Contributor·10 of 15 tasks·

  ·
  1

  15

• fix(baseline): run zizmor without repository configuration or suppressions

  #637·mlieberman85 opened Oct 19, 2026Contributor·

  ·

• fix(harness): accept only registered framework names from clients

  #634·mlieberman85 opened Oct 19, 2026Contributor·

  ·
  1

• fix(security): route read-side git calls through safe runner (#617)

  #633·i-am-paradox opened Oct 18, 2026Contributor·

  ·
  1

  7

• feat(container): distroless image built from source, with the harness as the default

  #628·mlieberman85 opened Oct 18, 2026Contributor·

  ·
  1

  1

• fix(mcp): remove ignored tool parameters (#528)

  #620·JohnsonLyu opened Oct 16, 2026Contributor·6 of 15 tasks·

  ·
  1

  3

• fix(core)!: remove unenforced plugin verification; apply [plugins] allowed before loading

  #616·mlieberman85 opened Oct 16, 2026Contributor·

  ·
  1

• ci: gate on whole-repository mypy against a baseline

  #614·mlieberman85 opened Oct 16, 2026Contributor·

  ·
  1

• fix(sieve)!: remove shared handlers

  #610·mlieberman85 opened Oct 16, 2026Contributor·

  ·
  1

• governance: constitution, enforcement table and ADRs 0001-0002

  #578·mlieberman85 opened Oct 10, 2026Contributor·2 of 7 tasks·

  ·
  1

• feat: add scripts/quickstart.sh for one-command setup

  #572·Marc-cn opened Oct 9, 2026Collaborator·5 of 10 tasks·

  ·
  1