Search results

[Security audit] Enrich finding records with triage, evidence, and supply-chain metadata

enhancementNew feature or requestNew feature or request

opsOperations, release, deployment, and CI hardeningOperations, release, deployment, and CI hardening

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#595 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Represent observability endpoints and data exposure in audit posture

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

observabilityGOWDK Trace: built-in tracing and observability workGOWDK Trace: built-in tracing and observability work

runtimeGOWDK Runtime packages and server behaviorGOWDK Runtime packages and server behavior

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#594 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Expand generated runtime audit tests beyond the current happy-path matrix

bugSomething isn't workingSomething isn't working

generated GoGenerated Go source and adapter outputGenerated Go source and adapter output

runtimeGOWDK Runtime packages and server behaviorGOWDK Runtime packages and server behavior

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#593 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Add source attribution to contract posture entries

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

contractsContract runtime, command/query references, events, jobs, and adaptersContract runtime, command/query references, events, jobs, and adapters

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#592 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Record guard binding, owner, phase, and test evidence in posture

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

generated GoGenerated Go source and adapter outputGenerated Go source and adapter output

runtimeGOWDK Runtime packages and server behaviorGOWDK Runtime packages and server behavior

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#591 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Expand body-limit posture into effective request-limit records

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

runtimeGOWDK Runtime packages and server behaviorGOWDK Runtime packages and server behavior

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#590 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Restrict explicit audit diagnostic-code overrides to compatible rules

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

diagnosticsDiagnostic codes, spans, and messagesDiagnostic codes, spans, and messages

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#589 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Require exact fingerprints and justification for raw-HTML exceptions

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#588 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Preserve security header values and audit semantic strength

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#587 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Align documented baseline gates with implemented audit policy

bugSomething isn't workingSomething isn't working

compilerCompiler internals, pipeline, and generated metadataCompiler internals, pipeline, and generated metadata

docsDocumentation workDocumentation work

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#586 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Refuse to overwrite user-owned files when emitting standalone audit tests

bugSomething isn't workingSomething isn't working

generated GoGenerated Go source and adapter outputGenerated Go source and adapter output

opsOperations, release, deployment, and CI hardeningOperations, release, deployment, and CI hardening

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#585 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026

[Security audit] Constrain audit --run execution with timeouts, bounded output, and sanitized environment

bugSomething isn't workingSomething isn't working

opsOperations, release, deployment, and CI hardeningOperations, release, deployment, and CI hardening

securitySecurity hardening and security-sensitive behaviorSecurity hardening and security-sensitive behavior

Status: Open.

#584 In cssbruno/GoWDK;

· cssbruno opened on Jun 20, 2026