-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#374 In Partnermedia/abcd;
[iss-286] Release derivation diagnoses a null impact as malformed while record-lint calls it missing
Status: Open.#373 In Partnermedia/abcd;- Status: Open.#372 In Partnermedia/abcd;
Percent-encoded delimiters defeat the leading
\bon every secret token pattern, so a live PAT/JWT/AWS-key embedded in a URL-encoded URL (%3Dghp_…) surviveshistory.Captureredaction and is written raw into the committed transcriptbugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:criticalsilent security/data-loss at a trust boundarysilent security/data-loss at a trust boundaryStatus: Open.#370 In Partnermedia/abcd;- Status: Open.#368 In Partnermedia/abcd;
abcd memory lintreads.abcd/memory/config.json(quotation budget) with rawos.ReadFile— noO_NOFOLLOW, no regular-file check, no size cap — so a committed symlinkedconfig.jsonis followed: a FIFO//dev/zerotarget hangs or OOMs the CLI (unswept metadata sibling of #336/#363)bugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:majorwrong result on reachable inputwrong result on reachable inputStatus: Open.#365 In Partnermedia/abcd;abcd memory(bare status) andabcd memory lintcrawl store pages with rawos.ReadFile— no regular-file check, noO_NOFOLLOW, no size cap — so a committed.abcd/memory/*.mdsymlink is followed: a FIFO//dev/zerotarget hangs or OOMs the CLI and an out-of-store target is read into the quotation-coverage arithmetic (unswept sibling of #336)bugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:majorwrong result on reachable inputwrong result on reachable inputStatus: Open.#363 In Partnermedia/abcd;validateSourceBlock's single-source branch requires onlyclass, so anexternal_*page written withoutsource_hash(reachable viaabcd memory ask --file-backwith an explicit source block) passes validation, andabcd memory lintreports only an MQ003infowhose "no external source" reason is false — the MQ001/MQ002 quotation-budget blockers never run and the page never back-links into the registrybugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:majorwrong result on reachable inputwrong result on reachable inputStatus: Open.#362 In Partnermedia/abcd;record-lint /
abcd docs lintnever validate a rule'sseverityat load, and the exit-code test is an exact== "blocker"compare while the display up-cases it — so a configseverityof"Blocker"/"error"/""prints[BLOCKER …]yet exits 0, silently disarming the gatebugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:majorwrong result on reachable inputwrong result on reachable inputStatus: Open.#361 In Partnermedia/abcd;A
rootsentry pointing at a directory that does not exist makesabcd docs lint/ record-lint pass with zero findings — every per-file blocker rule for that tree is silently disarmed, and the shipped scaffold'sroots: ["docs", …]default triggers it in any adopter repo whose docs live elsewherebugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:majorwrong result on reachable inputwrong result on reachable inputStatus: Open.#360 In Partnermedia/abcd;aws_access_keysecret pattern matches onlyAKIA, so anASIA-prefixed temporary STS access key ID ships/writes to history un-redacted while its shape-identicalAKIAsibling is a hard_fail blockbugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:majorwrong result on reachable inputwrong result on reachable inputStatus: Open.#358 In Partnermedia/abcd;record-lint reads record frontmatter with the lenient canonical scanner while capture's strict parser refuses the same bytes — a duplicated key or block-sequence field ships lint-green but is skipped by every capture verb, a duplicate
impact:key silences the armedissue_impact_validblocker, andid :(one space before the colon) bypassesrecord_schema's filename↔id blocker on every record storebugSomething isn't workingSomething isn't workingneeds-fixvalidated bug awaiting a fixvalidated bug awaiting a fixseverity:majorwrong result on reachable inputwrong result on reachable inputStatus: Open.#357 In Partnermedia/abcd;