P1: Add a security policy and a private disclosure channel vole · keenan · commented on issue · 1h ago
P2: runner jobs fail under the system service because podman has no systemd user manager for cgroups vole · keenan · commented on issue · 5h ago
P2: runner image builds fail on Debian and Ubuntu with no unqualified-search-registries vole · keenan · commented on issue · 5h ago
P1: the packaged runner unit cannot run rootless podman (NoNewPrivileges defeats setuid newuidmap) vole · keenan · commented on issue · 5h ago
P1: Decide public visibility of the vole repository and scan its history vole · keenan · closed issue · 21h ago
P2: Add supply-chain, fuzzing, load, and observability hardening vole · keenan · closed issue · 21h ago
P2: Emit security events in one shape and document the alerts to wire up vole · keenan · closed issue · 21h ago
P2: Soak a staging instance and record bounded memory, file descriptors, and processes vole · keenan · closed issue · 21h ago
P2: Load the paths that cost the server work: sign-in and uploads vole · keenan · closed issue · 21h ago
P2: the runner should probe its container runtime at startup instead of failing the first job vole · keenan · opened issue · 21h ago
P1: a job that never ran a step is recorded as a failed attempt, so a broken runner reds a passing commit vole · keenan · opened issue · 21h ago
P1: the runner renews its lease only inside a long step, so an attempt dies between steps vole · keenan · opened issue · 21h ago
P1: ci/cache Trim evicts the wrong namespace, so verify's test step fails on a runner vole · keenan · commented on issue · 22h ago
P2: runner jobs fail under the system service because podman has no systemd user manager for cgroups vole · keenan · opened issue · 22h ago
P1: acl protect stores a pattern that can never match, silently unprotecting the branch vole · keenan · opened issue · 22h ago
P2: runner image builds fail on Debian and Ubuntu with no unqualified-search-registries vole · keenan · opened issue · 22h ago
P2: instance_name does not reach the page chrome; the tab title and brand label stay Vole vole · keenan · opened issue · 22h ago
P1: the packaged runner unit cannot run rootless podman (NoNewPrivileges defeats setuid newuidmap) vole · keenan · opened issue · 22h ago
P1: ci/cache Trim evicts the wrong namespace, so verify's test step fails on a runner vole · keenan · opened issue · 22h ago
P2: Commission an external review of runner isolation and the browser sign-in flow vole · keenan · closed issue · 3d ago
P2: Commission an external review of runner isolation and the browser sign-in flow vole · keenan · commented on issue · 3d ago
P1: Keep private repository downloads and pages out of shared caches vole · keenan · opened issue · 3d ago
P1: Decide public visibility of the vole repository and scan its history vole · keenan · opened issue · 3d ago