Search results

Bundled follow-up: templates/deps.yml matches no caller, template pins are unresolved by CI, and the canonical script does not say it is fleet-managed

Status: Open.

#10 In bounded-systems/ci-workflows;

· bdelanghe opened on Jul 30, 2026

Remediation queue: clear findings and remove report-only grace (it has no expiry and no owner)

Status: Open.

#8 In bounded-systems/ci-workflows;

· bdelanghe opened on Jul 30, 2026

flake.lock is missing — nix flake check needs one run on a machine with Nix

Status: Open.

#7 In bounded-systems/ci-workflows;

· bdelanghe opened on Jul 30, 2026

Decide: conformance-kit's vuln-gate vs the shared osv-scan lane — they now overlap

Status: Open.

#6 In bounded-systems/ci-workflows;

· bdelanghe opened on Jul 30, 2026

Fleet rollout: standardized deps.yml across all 81 remaining bounded-systems repos

Status: Open.

#2 In bounded-systems/ci-workflows;

· bdelanghe opened on Jul 30, 2026

deno.lock coverage: convert the npm subset to a CycloneDX SBOM in-lane (plan + DAG)

Status: Open.

#1 In bounded-systems/ci-workflows;

· bdelanghe opened on Jul 30, 2026