Issues

• [packit] Propose downstream failed for release v1.1.0

  complytime/complyctl#901 · Filter by author packit-as-a-service opened on Oct 2, 2026

• Document offline policy-cache workflows

  complytime/complyctl#899 · Filter by author jpower432 opened on Sep 30, 2026

• feat: provider binary integrity verification before launch (CTRL07)

  enhancementsecurity

  LowFilter by Priority: Low

  MediumFilter by Effort: Medium
  complytime/complyctl#897 · Filter by author marcusburghardt opened on Sep 30, 2026 · ComplyTime improvements

• chore: pursue OpenSSF Best Practices badge

  documentationenhancement

  MediumFilter by Priority: Medium

  MediumFilter by Effort: Medium
  complytime/complyctl#896 · Filter by author marcusburghardt opened on Sep 30, 2026 · ComplyTime improvements

• feat: integrate Go native fuzzing for security-sensitive parsing functions

  enhancementsecurityTest

  MediumFilter by Priority: Medium

  LowFilter by Effort: Low
  complytime/complyctl#895 · Filter by author marcusburghardt opened on Sep 30, 2026 · ComplyTime improvements

• test: fix behavioral test provider discovery for CTRL04/CTRL06 assessments

  bugTest

  LowFilter by Priority: Low

  LowFilter by Effort: Low
  complytime/complyctl#894 · Filter by author marcusburghardt opened on Sep 30, 2026 · ComplyTime improvements

• feat: support air-gapped cache population without a live OCI registry

  enhancement
  complytime/complyctl#892 · Filter by author marcusburghardt opened on Sep 30, 2026
  1

• feat: support control-scoped scans for targeted remediation verification

  enhancement

  HighFilter by Priority: High

  MediumFilter by Effort: Medium
  complytime/complyctl#889 · Filter by author marcusburghardt opened on Sep 28, 2026 · ComplyTime improvements
  1

• test: build grcli-published bundle test fixtures for compatibility matrix

  Test

  LowFilter by Priority: Low

  LowFilter by Effort: Low
  complytime/complyctl#886 · Filter by author marcusburghardt opened on Sep 25, 2026

• refactor: isolate trust root resolution in verify.go behind an interface

  enhancement

  MediumFilter by Priority: Medium

  MediumFilter by Effort: Medium
  complytime/complyctl#885 · Filter by author marcusburghardt opened on Sep 25, 2026 · ComplyTime improvements

• [Feature] Add breaking change CI guardrails for public API surface (buf breaking + apidiff)

  enhancementgithub_actionsTest

  HighFilter by Priority: High

  MediumFilter by Effort: Medium
  complytime/complyctl#880 · Filter by author marcusburghardt opened on Sep 23, 2026 · ComplyTime improvements

• refactor: migrate OSCAL formatter to gemaraconv for evidence and relevant_evidence support

  HighFilter by Priority: High

  MediumFilter by Effort: Medium
  Task

  complytime/complyctl#851 · Filter by author marcusburghardt opened on Sep 10, 2026 · ComplyTime improvements
  1

• Adopt org-infra reusable Homebrew workflow for formula publishing

  enhancement

  LowFilter by Priority: Low

  LowFilter by Effort: Low
  Story

  complytime/complyctl#805 · Filter by author sonupreetam opened on Aug 4, 2026

• verify: Support custom TUF mirror for private Sigstore trust root distribution

  enhancement
  Story

  complytime/complyctl#799 · Filter by author sonupreetam opened on Jul 31, 2026

• verify: Add digest pinning for custom trusted_root files

  enhancementquestion
  Story

  complytime/complyctl#798 · Filter by author sonupreetam opened on Jul 31, 2026
  1

• chore: address Homebrew formula hardening follow-ups from PR #742 review

  enhancementllm_assisted

  MediumFilter by Priority: Medium
  Task

  complytime/complyctl#787 · Filter by author yvonnedevlinrh opened on Jul 29, 2026 · ComplyTime improvements

• Digest values are not validated in sync path and test fixtures use structurally invalid digests

  llm_assistedsecurity

  MediumFilter by Priority: Medium

  LowFilter by Effort: Low
  Task

  complytime/complyctl#770 · Filter by author trevor-vaughan opened on Jul 24, 2026 · ComplyTime improvements

• chore: address remaining CS-007 mutable package-level variable violations

  enhancementgood first issue

  LowFilter by Priority: Low
  Task

  complytime/complyctl#763 · Filter by author sonupreetam opened on Jul 22, 2026 · ComplyTime improvements

• bug: complyctl does not read Podman credentials for GHCR authentication

  bugllm_assisted

  LowFilter by Priority: Low
  Bug

  complytime/complyctl#758 · Filter by author yvonnedevlinrh opened on Jul 21, 2026 · ComplyTime improvements

• bug: post-create.sh bundle registration inserts policy entries outside policies block

  bugllm_assisted

  MediumFilter by Priority: Medium
  Bug

  complytime/complyctl#749 · Filter by author sonupreetam opened on Jul 17, 2026 · ComplyTime improvements

• chore: consolidate test workflows into ci_local.yml for release preflight auto-discovery

  github_actionsgood first issueTest

  LowFilter by Priority: Low
  Task

  complytime/complyctl#723 · Filter by author yvonnedevlinrh opened on Jul 14, 2026 · ComplyTime improvements

• Tech debt: unify policy metadata extraction with graph resolution

  Clean upllm_assisted

  MediumFilter by Priority: Medium
  Task

  complytime/complyctl#716 · Filter by author trevor-vaughan opened on Jul 10, 2026

• Bug: split-layer catalog load errors are silently swallowed (false "0 controls")

  bugllm_assisted

  LowFilter by Priority: Low
  Bug

  complytime/complyctl#715 · Filter by author trevor-vaughan opened on Jul 10, 2026 · ComplyTime improvements

• Bug: policy loading fails for policies with no adherence.assessment-plans

  bugllm_assisted

  MediumFilter by Priority: Medium
  Bug

  complytime/complyctl#714 · Filter by author trevor-vaughan opened on Jul 10, 2026 · ComplyTime improvements
  1