P1: Add a security policy and a private disclosure channel vole · keenan · commented on issue · 1h ago
Do not build a job the combined result already passed for the branch vole · keenan · opened change · 4h ago
Record a job that never started as could-not-run, not as a failure vole · keenan · opened change · 4h ago
Probe the container runtime at startup instead of on the first job vole · keenan · opened change · 4h ago
Make the packaged runner able to create a container on Debian and Ubuntu vole · keenan · opened change · 4h ago
P2: runner jobs fail under the system service because podman has no systemd user manager for cgroups vole · keenan · commented on issue · 4h ago
P2: runner image builds fail on Debian and Ubuntu with no unqualified-search-registries vole · keenan · commented on issue · 4h ago
P1: the packaged runner unit cannot run rootless podman (NoNewPrivileges defeats setuid newuidmap) vole · keenan · commented on issue · 4h ago
Publish repositories as Go modules and move the module path to rodent.software vole · keenan · commented on change · 5h ago
Publish repositories as Go modules and move the module path to rodent.software vole · keenan · commented on change · 18h ago
Publish repositories as Go modules and move the module path to rodent.software vole · keenan · opened change · 18h ago
P1: Decide public visibility of the vole repository and scan its history vole · keenan · closed issue · 21h ago
P2: Add supply-chain, fuzzing, load, and observability hardening vole · keenan · closed issue · 21h ago
P2: Emit security events in one shape and document the alerts to wire up vole · keenan · closed issue · 21h ago
P2: Soak a staging instance and record bounded memory, file descriptors, and processes vole · keenan · closed issue · 21h ago
P2: Load the paths that cost the server work: sign-in and uploads vole · keenan · closed issue · 21h ago
P2: the runner should probe its container runtime at startup instead of failing the first job vole · keenan · opened issue · 21h ago
P1: a job that never ran a step is recorded as a failed attempt, so a broken runner reds a passing commit vole · keenan · opened issue · 21h ago
P1: the runner renews its lease only inside a long step, so an attempt dies between steps vole · keenan · opened issue · 21h ago
Order cache eviction by written files so Trim cannot evict the wrong namespace vole · keenan · opened change · 22h ago
P1: ci/cache Trim evicts the wrong namespace, so verify's test step fails on a runner vole · keenan · commented on issue · 22h ago
P2: runner jobs fail under the system service because podman has no systemd user manager for cgroups vole · keenan · opened issue · 22h ago
P1: acl protect stores a pattern that can never match, silently unprotecting the branch vole · keenan · opened issue · 22h ago
P2: runner image builds fail on Debian and Ubuntu with no unqualified-search-registries vole · keenan · opened issue · 22h ago
P2: instance_name does not reach the page chrome; the tab title and brand label stay Vole vole · keenan · opened issue · 22h ago
P1: the packaged runner unit cannot run rootless podman (NoNewPrivileges defeats setuid newuidmap) vole · keenan · opened issue · 22h ago
P1: ci/cache Trim evicts the wrong namespace, so verify's test step fails on a runner vole · keenan · opened issue · 22h ago
Polish the change request details: no repeated merge target, tighter target pickers vole · keenan · opened change · 1d ago