All pull requests

Pull requests

• chore(iac): derive the CFN issuer host, create the GCP signing key first, read the dev Function URL from state

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1312·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• chore(security): drop inert .gitleaksignore and detect-private-key exclusions

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1311·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• refactor(provider): build credentialed Azure/GCP providers through the registry

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1310·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• fix(iac/azure): let the runtime identity write the admin-password secret, and log sync failures as errors

  effort/simpact/internalpriority/p3severity/lowtriagedtype/bugurgency/eventually
  #1309·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• fix(credentials): pin stored GCP credential JSON types, drop deprecated CredentialsFromJSON

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1308·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• chore(ci): make local gates fail honestly and pin pre-commit hook repos (#349, slice 1)

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1307·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• chore(iac): remove the unused roleAssignmentGuidPrefix ARM parameter

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1306·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• test(purchase): pin the Azure savings-plans alias to the re-drive token through the real client

  effort/mimpact/fewpriority/p2severity/mediumtriagedtype/choreurgency/this-quarter
  #1305·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• fix(ci): fail Azure deploys on unreadable terraform outputs and show logs after a failed health check

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1304·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• sec(iac/azure): detect nested Key Vault access_policy blocks with an HCL parse

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/securityurgency/eventually
  #1303·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• fix(analytics): label snapshot commitment types from provider and service

  effort/mimpact/fewpriority/p3severity/lowtriagedtype/bugurgency/eventually
  #1302·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• fix(api): fail the dashboard summary on a purchase-history store error

  effort/simpact/manypriority/p3severity/mediumtriagedtype/bugurgency/this-quarter
  #1301·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• fix(cfn): schedule the missing server tasks on the CloudFormation stack

  effort/mimpact/manypriority/p1severity/hightriagedtype/bugurgency/this-sprint
  #1300·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• fix(marketplace): recover pending listings through cancel and never record an empty or revived state

  effort/limpact/fewpriority/p2severity/mediumtriagedtype/bugurgency/this-quarter
  #1299·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• test: wait on goroutines and barriers instead of wall-clock sleeps in Go tests

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1298·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• fix(config/db): first slice of the 2026-07-28 review findings (hidden_by min_count, RI-exchange limits, credential not-found, DB env parsing)

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1297·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• sec(purchase): refuse a capped purchase whose price is not provably USD

  effort/limpact/fewpriority/p2severity/hightriagedtype/bugurgency/this-quarter
  #1296·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• test(api/federation): guard provider bounds across bundles and list them in the README

  effort/simpact/fewpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1295·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• sec(auth): retry failed key loads, fail closed without a limiter pool, key rate limits on the client address

  effort/limpact/manypriority/p3severity/lowtriagedtype/securityurgency/eventually
  #1294·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• chore(dev): match the dev container user to the host uid/gid and fix Air builds

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1293·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• sec(docs): replace the CUDly host account ID in the UX review with a placeholder

  effort/simpact/internalpriority/p2severity/mediumtriagedtype/securityurgency/this-quarter
  #1292·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• fix(scripts): route make frontend-only through tf-deploy.sh

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1291·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

  1

• sec(iac): narrow three hosted-infra least-privilege grants (GCP CI trust ref, rotation RDS ARN, Cloud Run compute reads)

  effort/simpact/internalpriority/p3severity/lowtriagedtype/securityurgency/eventually
  #1290·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• feat(marketplace): poll RI Marketplace listings and record proceeds and AWS fee (backend slice of #27)

  effort/limpact/fewpriority/p2severity/lowtriagedtype/featurgency/eventually
  #1289·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1

• chore(auth): enumerate permission actions and resources, and check the TS unions against them

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1288·IAmJSD opened Oct 23, 2026Collaborator·

  ·
  1