docs/ci: ssh-authz grace-time wording, stale architecture doc, pin sshpiperd checksum
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 48/100
- Issue type
- Documentation
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- github-actions, go
- Domain
- ci-cd, documentation, security
Research direction
Read docs/SENTINEL-SSH-AUTHZ.md and docs/architecture/ssh-live-authorization.md, then inspect .github/workflows/ssh-ban.yml and scripts/ci/build-fetches.allow. Check the sshpiperd release checksums.txt for the download checksum and see whether the inventory gate requires its fingerprint. Done means the grace-time wording, Component 3 description, and checksum pin are updated.
Written by the indexing model from the issue text.
Description
Docs and workflow follow-ups from the review of #3075 (merged).
-
docs/SENTINEL-SSH-AUTHZ.md: state that the 90s login grace (--login-grace-time 90s, #3074) applies to all unauthenticated connections, not just approval ones. -
docs/architecture/ssh-live-authorization.mdComponent 3 is stale: it still describesapproval_idin sshpiperd meta. -
.github/workflows/ssh-ban.yml: the sshpiperd download is by tag only; pin its sha256 from the releasechecksums.txt(and add the fingerprint toscripts/ci/build-fetches.allowif the inventory gate requires it).
- Dominant language
- Go
- Stars
- 296
- Forks
- 38
- Avg merge
- 7h 44m
- Merged PRs (30d)
- 631
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from FootprintAI/Containarium
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
FootprintAI/Containarium#2491 ·
Maintainers usually reply within 1 day
-
Sprint 2026-W45 (model overrides track): a per-member model choice reaches crews, graphs and MCPOpenepic size:M sprint
Difficulty 5/5 Over a week Newbie friendliness 20/100
FootprintAI/Containarium#3315 ·
Maintainers usually reply within 1 day
-
ci: verification harness for #3213 (backup status managed-key detection) against published release binariesPossibly taken @hsinatfootprintai claimed this 1 day ago. Openci model:sonnet runtime:claude size:M
FootprintAI/Containarium#3306 · 2 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
enhancement needs-decision runtime:claude size:S
Difficulty 5/5 Over a week Newbie friendliness 30/100
FootprintAI/Containarium#3305 ·
Maintainers usually reply within 1 day
-
enhancement needs-decision runtime:claude size:M
Difficulty 5/5 Over a week Newbie friendliness 30/100
FootprintAI/Containarium#3304 ·
Maintainers usually reply within 1 day
All issues in FootprintAI/Containarium
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
lognorman20/monaco#7428 ·
-
docs(prompts): IF BLOCKED workflow-scope branch says to comment on the issue on jira/local trackersOpenagent-butler-finding bug
Difficulty 2/5 1-3 hours Newbie friendliness 77/100
jordansmall/spindrift#6238 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
microcks/microcks-cli#608 · 1 comment ·
Maintainers usually reply within 1 day
-
bug from-studio
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
esengine/DeepSeek-Reasonix#14868 ·
Maintainers usually reply within 1 day