All pull requests

Pull requests

• fix: clarify no-workflows audit warnings (#584)

  #685·JohnsonLyu opened Oct 26, 2026Contributor·8 of 15 tasks·

  ·
  1

• fix: require sigstore 4.0 for attestation signing

  #684·JohnsonLyu opened Oct 26, 2026Contributor·5 of 15 tasks·

  ·
  1

• feat(amber): darnit-amber run writes a signed run bundle

  #678·Marc-cn opened Oct 23, 2026Collaborator·

  ·
  3

• fix(threat-model): previewable remediation; outcomes list kept files

  #676·mlieberman85 opened Oct 23, 2026Contributor·10 of 15 tasks·

  ·
  1

  

• Publish Python packages with PyPI Trusted Publishing

  #674·Marc-cn opened Oct 23, 2026Collaborator·1 of 2 tasks·

  ·
  1

• fix(data): every project-data question through the question tool; skills name the repository

  #672·mlieberman85 opened Oct 23, 2026Contributor·7 of 8 tasks·

  ·
  

• feat(mcp): return the data and judgment procedures from the tools

  #671·mlieberman85 opened Oct 23, 2026Contributor·7 of 8 tasks·

  ·
  

• feat(mcp): get_judgment_requests; pending on summary rows

  #670·mlieberman85 opened Oct 23, 2026Contributor·7 of 8 tasks·

  ·
  

• fix(judgments): audit only the judged controls when re-gathering evidence

  #669·mlieberman85 opened Oct 23, 2026Contributor·9 of 10 tasks·

  ·
  1

  

• fix(audit): Next Steps read answers confirmed for the named repository

  #668·mlieberman85 opened Oct 23, 2026Contributor·7 of 12 tasks·

  ·
  1

  

• fix(baseline): a missing document fails again, so remediation plans it

  #667·mlieberman85 opened Oct 23, 2026Contributor·11 of 17 tasks·

  ·
  1

  

• test: replay the comply flow on a reference repository with no model

  #666·mlieberman85 opened Oct 23, 2026Contributor·5 of 10 tasks·

  ·
  1

  

• fix(sieve): resolve case-exact file probes and deduplicate contents (fixes #645)

  #658·i-am-paradox opened Oct 22, 2026Contributor·

  ·
  1

  2

• fix(sieve): support declared inconclusive exit codes in exec handler (fixes #647)

  #656·i-am-paradox opened Oct 21, 2026Contributor·10 of 15 tasks·

  ·
  1

  2

• feat: add initial gittuf setup

  #643·kevinpchen opened Oct 20, 2026·8 of 15 tasks·

  ·

• fix(dot-project): drop internal spec version from cncf_slack_channel deprecation warning (#506)

  #641·catfish-1234 opened Oct 20, 2026Contributor·

  ·
  1

  1

• docs(changelog): drop the stale duplicate of the #542 entry

  #640·Marc-cn opened Oct 20, 2026Collaborator·

  ·

• ci: bump sigstore/cosign-installer from 3.10.1 to 4.1.2

  cidependencies
  #638·dependabot[bot] opened Oct 19, 2026Bot·

  ·
  1

• fix(baseline): run zizmor without repository configuration or suppressions

  #637·mlieberman85 opened Oct 19, 2026Contributor·

  ·

• fix(harness): accept only registered framework names from clients

  #634·mlieberman85 opened Oct 19, 2026Contributor·

  ·

• fix(security): route read-side git calls through safe runner (#617)

  #633·i-am-paradox opened Oct 18, 2026Contributor·

  ·
  1

  3

• refactor(core)!: remove dead read_maintainers from ProjectStateStore (fixes #608)

  #632·i-am-paradox opened Oct 18, 2026Contributor·8 tasks done·

  ·
  1

  3

• feat(container): distroless image built from source, with the harness as the default

  #628·mlieberman85 opened Oct 18, 2026Contributor·

  ·
  1

• fix(packaging): darnit-mcp provides the darnit command

  #623·mlieberman85 opened Oct 16, 2026Contributor·

  ·
  1

  1

• refactor!: remove dead code from darnit-core

  #622·mlieberman85 opened Oct 16, 2026Contributor·

  ·