Search results

Add CI workflow for action version consistency scanning

securitySecurity-related changes or concernsSecurity-related changes or concerns

workflowsGitHub Actions workflowsGitHub Actions workflows

Status: Open.

Task

#1034 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 14, 2026

npm run plugin:generate creates phantom git changes via stat cache invalidation

bugSomething isn't workingSomething isn't working

Status: Open.

#1029 In microsoft/hve-core;

· mattdot opened on Mar 13, 2026

fix: CLI docs imply that you should install both core and all, resulting in duplicate plugins

bugSomething isn't workingSomething isn't working

needs-triageRequires triage and prioritizationRequires triage and prioritization

Status: Open.

#1026 In microsoft/hve-core;

· andrejpk opened on Mar 13, 2026

feat(ci): add pip-audit dependency CVE scanning

ci/cd

securitySecurity-related changes or concernsSecurity-related changes or concerns

Status: Open.

Feature

#1020 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

feat(powerpoint): add thin Atheris wrapper for Scorecard Fuzzing compliance

skillsCopilot skill packages (SKILL.md)Copilot skill packages (SKILL.md)

testingTest infrastructure and test filesTest infrastructure and test files

Status: Open.

Feature

#1021 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

feat(scorecard): contribute Hypothesis detection to ossf/scorecard

enhancementNew feature or requestNew feature or request

Status: Open.

Feature

#1022 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

security(powerpoint): lxml XXE vector in extract_content.py theme color resolution

bugSomething isn't workingSomething isn't working

securitySecurity-related changes or concernsSecurity-related changes or concerns

skillsCopilot skill packages (SKILL.md)Copilot skill packages (SKILL.md)

Status: Open.

Bug

#1014 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

security(powerpoint): untrusted blob writes in extract_content.py image extraction

bugSomething isn't workingSomething isn't working

securitySecurity-related changes or concernsSecurity-related changes or concerns

skillsCopilot skill packages (SKILL.md)Copilot skill packages (SKILL.md)

Status: Open.

Bug

#1016 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

security(powerpoint): PyMuPDF C extension attack surface in PDF processing

bugSomething isn't workingSomething isn't working

securitySecurity-related changes or concernsSecurity-related changes or concerns

skillsCopilot skill packages (SKILL.md)Copilot skill packages (SKILL.md)

Status: Open.

Bug

#1018 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

feat(powerpoint): add Hypothesis property tests for priority modules

skillsCopilot skill packages (SKILL.md)Copilot skill packages (SKILL.md)

testingTest infrastructure and test filesTest infrastructure and test files

Status: Open.

Feature

#1013 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

epic: Python Security Testing & Fuzzing Initiative for PowerPoint Skill

enhancementNew feature or requestNew feature or request

securitySecurity-related changes or concernsSecurity-related changes or concerns

skillsCopilot skill packages (SKILL.md)Copilot skill packages (SKILL.md)

testingTest infrastructure and test filesTest infrastructure and test files

Status: Open.

Feature

#1012 In microsoft/hve-core;

· WilliamBerryiii opened on Mar 13, 2026

feat(skills): Enhance pr-reference skill with flexible filtering and base branch detection

enhancementNew feature or requestNew feature or request

good first issueGood for newcomersGood for newcomers

needs-triageRequires triage and prioritizationRequires triage and prioritization

Status: Open.

Feature

#1011 In microsoft/hve-core;

· katriendg opened on Mar 13, 2026