-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Clients: pin the server's self-signed cert (TOFU) instead of trusting any cert
enhancementNew feature or requestNew feature or requestStatus: Open.#28 In lightware-dev/blurt;HOMEBREW_TAP_TOKEN is a long-lived PAT with contents:write on the tap
enhancementNew feature or requestNew feature or requestStatus: Open.#26 In lightware-dev/blurt;Release artifacts carry no build provenance attestation
enhancementNew feature or requestNew feature or requestStatus: Open.#24 In lightware-dev/blurt;Restrict allowed_actions from 'all' to an explicit allowlist
enhancementNew feature or requestNew feature or requestStatus: Open.#23 In lightware-dev/blurt;Website ships no security response headers (CSP, HSTS, nosniff)
enhancementNew feature or requestNew feature or requestStatus: Open.#22 In lightware-dev/blurt;main ruleset requires a PR but not passing status checks
enhancementNew feature or requestNew feature or requestStatus: Open.#21 In lightware-dev/blurt;Signing secrets are repo-scoped — a workflow_dispatch from any branch can reach them
enhancementNew feature or requestNew feature or requestStatus: Open.#20 In lightware-dev/blurt;- Status: Open.#19 In lightware-dev/blurt;
- Status: Open.#17 In lightware-dev/blurt;
www.yml has no pull_request trigger — the site build is only validated by deploying it
enhancementNew feature or requestNew feature or requestStatus: Open.#16 In lightware-dev/blurt;Workflows do not declare least-privilege GITHUB_TOKEN permissions
good first issueGood for newcomersGood for newcomersStatus: Open.#15 In lightware-dev/blurt;OpenAI-compatible API leaks exception text to the caller
bugSomething isn't workingSomething isn't workingStatus: Open.#14 In lightware-dev/blurt;