issues Search Results · language:Dune language:JavaScript language:Python language:JavaScript language:JavaScript

Filter by

• • Code... (...)results
  • Repositories
    results
  • Issues
    results
  • Pull requests
    results
  • Discussions
    results
  • Users
    results
  • More

• State

  • Open
  • Closed

• Advanced

  • Owner
  • State
  • Close reason
  • Has linked pull request
  • Author
  • Assignee
  • Mentioned user
  • Mentioned team
  • Commenter
  • Involved user
  • Label
  • Milestone
  • Number of comments
  • Number of interactions
• Advanced search

Filter:Issues41M (41M)

41M results  (741 ms)

41M results

Sort by: Best match

Filter

openid/eKYC-IDA

IDA schema issue "purpose"

Originally submitted by Edmund Jay (Edmund Jay) on 2025-04-23 There is no “purpose” claim defined in the specs ‌ line 43, 66, 100, 394 of schema/verified_claims_request.json Bitbucket status: resolved ...

component: Schema

migrated-from-bitbucket

priority: major

type: bug

• bitbucket-import-issues[bot]
·
• 3
·
• Opened 
  10 minutes ago
·
• #348

hellodk/kri

[Audit] Indirect prompt injection via unsanitized tool-result observations (AI-1)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal AI/LLM Expert Severity: High Finding ID: AI-1 Location fleet_platform/agent/planner.py:42-56, ...

audit

p1-high

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #770

hellodk/kri

[Audit] Operator can self-approve their own agent-proposed actions (single-target) (AI-2)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal AI/LLM Expert Severity: High Finding ID: AI-2 Location fleet_platform/services/agent_apply_svc.py:107-116 ...

audit

p1-high

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #772

hellodk/kri

[Audit] set_pillar tool silently ignores its value argument (AI-3)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal AI/LLM Expert Severity: High Finding ID: AI-3 Location fleet_platform/agent/tools.py:382-392 ...

audit

bug

p1-high

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #771

hellodk/kri

[Audit] Ingest rate limiter fails open when Redis is unavailable (SRE-11)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal SRE Severity: Medium Finding ID: SRE-11 Location fleet_platform/api/routes/ingest.py:57-59 ...

audit

bug

p2-normal

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #768

hellodk/kri

[Audit] auth/refresh endpoint has no rate limit (SRE-8)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal SRE Severity: Medium Finding ID: SRE-8 Location fleet_platform/api/routes/auth.py:73-116 ...

audit

p2-normal

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #766

hellodk/kri

[Audit] pg_backup installs age + rclone at runtime (supply-chain + cold-start risk) (SRE-13)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal SRE Severity: Low Finding ID: SRE-13 Location deploy/docker-compose.yml:62-66 Evidence ...

audit

infra

p3-low

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #767

hellodk/kri

[Audit] FERNET_SECRET_KEY missing from .env.docker.example; CI uses a different name (SRE-9)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal SRE Severity: Medium Finding ID: SRE-9 Location deploy/.env.docker.example (absent); fleet_platform/services/platform_settings_svc.py:210-214 ...

audit

bug

docs

infra

p2-normal

• hellodk
·
• Opened 
  11 minutes ago
·
• #765

hellodk/kri

[Audit] No K8s NetworkPolicy, PodDisruptionBudget, or HPA; all deployments replicas: 1 (SRE-12)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal SRE Severity: Medium Finding ID: SRE-12 Location deploy/k8s/ (absent files) Evidence ...

audit

infra

p2-normal

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #769

hellodk/kri

[Audit] No Content-Security-Policy header; deprecated X-XSS-Protection still set (SRE-10)

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed. Auditor persona: Principal SRE Severity: Medium Finding ID: SRE-10 Location deploy/nginx.conf.template:19-24; deploy/nginx-tls.conf.template:21-26 ...

audit

p2-normal

security

• hellodk
·
• Opened 
  11 minutes ago
·
• #764

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.