darnitdevorg/darnit

Issues somebody may already be working on are listed last. List everything by date

• Container audit loses the repository identity: git refuses the mounted repo (dubious ownership)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs triage

  Difficulty 3/5 1-2 days Newbie friendliness 52/100

  darnitdevorg/darnit#586 · Opened Oct 11, 2026

  Maintainers usually reply within 1 day

• Plugins hard-code version "0.1.0" while the packages are at 0.1.1

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs triage

  Difficulty 2/5 1-3 hours Newbie friendliness 83/100

  darnitdevorg/darnit#587 · Opened Oct 11, 2026

  Maintainers usually reply within 1 day

• Container image has no zizmor, so OSPS-AC-04.02 always reports missing_tool

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs triage

  Difficulty 2/5 1-3 hours Newbie friendliness 65/100

  darnitdevorg/darnit#585 · Opened Oct 11, 2026

  Maintainers usually reply within 1 day

• No-workflows repositories: three controls report unexpected_exit instead of saying there is nothing to audit

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs triage

  Difficulty 3/5 Half a day Newbie friendliness 55/100

  darnitdevorg/darnit#584 · Opened Oct 10, 2026

  Maintainers usually reply within 1 day

• Stale kusari-oss references: signing identities, container image name, package metadata

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs triage

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  darnitdevorg/darnit#583 · Opened Oct 10, 2026

  Maintainers usually reply within 1 day

• access_control audit profile lists three undefined controls and omits OSPS-AC-04.01/04.02

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs triage

  Difficulty 3/5 Half a day Newbie friendliness 45/100

  darnitdevorg/darnit#581 · Opened Oct 10, 2026

  Maintainers usually reply within 1 day

• OSPS-AC-01.01 is always ERROR on a user-owned repository (owner-type detection, follow-up to #467)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs triage

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  darnitdevorg/darnit#580 · Opened Oct 10, 2026

  Maintainers usually reply within 1 day

• darnit plan and darnit validate crash on openssf-baseline: controls mix level=None and int

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  interface-cli module-baseline module-core needs triage

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  darnitdevorg/darnit#568 · Opened Oct 8, 2026

  Maintainers usually reply within 1 day

• Let a verified runtime trace from an allowlisted monitor conclude PASS for RE-02.01

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-reproducibility needs triage

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  darnitdevorg/darnit#553 · 1 comment · Opened Oct 4, 2026

  Maintainers usually reply within 1 day

• darnit run --apply can ask twice for one remediation step

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  interface-cli ux

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#547 · Opened Oct 3, 2026

  Maintainers usually reply within 1 day

• Verify that PATCH required_pull_request_reviews enables reviews on a protected branch without them

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-core testing

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#546 · 1 comment · Opened Oct 3, 2026

  Maintainers usually reply within 1 day

• OSPS-SA-03.02 sets security.threat_model.path unconditionally

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline quality

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  darnitdevorg/darnit#545 · Opened Oct 3, 2026

  Maintainers usually reply within 1 day

• enhance_with_llm rewrites created files outside the remediation executor and manifest

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline needs triage quality

  Difficulty 4/5 3-5 days Newbie friendliness 49/100

  darnitdevorg/darnit#544 · 1 comment · Opened Oct 3, 2026

  Maintainers usually reply within 1 day

• Exec remediation preview lists files with uncommitted user changes that the apply will not touch

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-core needs triage quality

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#543 · Opened Oct 3, 2026

  Maintainers usually reply within 1 day

• create_security_policy fails on every call; its template parameter is ignored

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  interface-mcp module-baseline needs triage

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  darnitdevorg/darnit#541 · Opened Oct 3, 2026

  Maintainers usually reply within 1 day

• amber: repro_deps_pinned and repro_build_env_declared only look at the repo root

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-reproducibility

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  darnitdevorg/darnit#536 · Opened Oct 2, 2026

  Maintainers usually reply within 1 day

• amber: 5/5 WARN on an AEC-reproduced artifact whose build environment is documented but not in a Dockerfile

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-reproducibility

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  darnitdevorg/darnit#535 · Opened Oct 2, 2026

  Maintainers usually reply within 1 day

• Amber artifact corpus: darnitdevorg/amber-corpus

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-reproducibility

  Difficulty 3/5 1-2 days Newbie friendliness 65/100

  darnitdevorg/darnit#534 · Opened Oct 2, 2026

  Maintainers usually reply within 1 day

• Stale context documentation outside the 042 update

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  darnitdevorg/darnit#529 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• Remove unused parameters: `audit_openssf_baseline(auto_init_config)` and pending-data `level`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  interface-mcp maintenance

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  darnitdevorg/darnit#528 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• A concluded `has_releases` (or other detectable key) is never offered for confirmation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-core ux

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  darnitdevorg/darnit#526 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• Remove unreachable judgment defaults from Community Specification templates and text

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  maintenance

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  darnitdevorg/darnit#525 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• `darnit config migrate` drops comments in `.project/darnit.yaml`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  interface-cli module-core quality

  Difficulty 3/5 1-2 days Newbie friendliness 54/100

  darnitdevorg/darnit#524 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• `scripts/csl_onboard.py` defaults judgment values

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  quality

  Difficulty 2/5 1-3 hours Newbie friendliness 66/100

  darnitdevorg/darnit#523 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• Community Specification: `coc_policy='org'` is not in the `csl_coc_policy` vocabulary

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  quality

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  darnitdevorg/darnit#522 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• Attestation predicate reads `project_config.project_type`, which `ProjectConfig` does not define

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline quality

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  darnitdevorg/darnit#521 · Opened Sep 30, 2026

  Maintainers usually reply within 1 day

• framework-design.md CEL examples use '!= null', which cel-python rejects

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation good first issue

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  darnitdevorg/darnit#516 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• OSPS-GV-04.01 fails when CODEOWNERS is missing even if the policy is documented elsewhere

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 4/5 3-5 days Newbie friendliness 50/100

  darnitdevorg/darnit#514 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• OSPS-AC-02.01 checks allow_forking, which does not measure collaborator permission defaults

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  darnitdevorg/darnit#513 · 1 comment · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• OSPS-AC-04.01 scans workflow files, but the requirement is the platform's default workflow permission

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#512 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• OSPS-DO-03.01 checks for a support file, but the requirement is release verification instructions

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#511 · 1 comment · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• OSPS-LE-01.01 checks for a license file, but the requirement is contributor sign-off (DCO/CLA)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  darnitdevorg/darnit#508 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• cncf_slack_channel deprecation warning cites an internal darnit spec version

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue module-core

  Difficulty 1/5 1-3 hours Newbie friendliness 88/100

  darnitdevorg/darnit#506 · Opened Sep 27, 2026

  Maintainers usually reply within 1 day

• Make deterministic (non-LLM) audits explicitly test-only

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation interface-cli

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  darnitdevorg/darnit#505 · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Organization-level policy source for operator configuration

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-core

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  darnitdevorg/darnit#503 · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• .project/ files written by darnit do not conform to the upstream CNCF dot-project schema

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline module-core

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  darnitdevorg/darnit#498 · 2 comments · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Optional Security Insights import/export alongside .project/

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted module-core

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#497 · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• OSPS catalog drift: retired BR-01.02 still assessed; VM-04.01 PASSes on GitHub Issues being enabled

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#495 · 1 comment · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Outputs disagree on Baseline version and assessor identity (2025.10.10 vs v2026.02.19, nonexistent baseline-mcp)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue module-baseline quality

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  darnitdevorg/darnit#494 · 1 comment · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• pydantic-ai-slim is declared `>=0.0.14` with no upper bound; the floor lacks the API darnit uses

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue infrastructure module-core

  Difficulty 2/5 1-3 hours Newbie friendliness 70/100

  darnitdevorg/darnit#489 · 1 comment · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Docs describe removed code: rules/catalog.py, main.py/baseline-mcp, check adapters, darnit.plugins entry-point group

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation good first issue quality

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#488 · 2 comments · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Installed MCP entry points serve the wrong framework or nothing: `darnit serve` picks the alphabetically first framework, and the plugin runner calls a nonexistent `darnit-mcp` executable

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  infrastructure interface-cli interface-mcp

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#478 · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Test/reference control STAGE1-REF-SECURITY-01 ships in the OpenSSF Baseline audit and counts toward results

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  darnitdevorg/darnit#466 · Opened Sep 26, 2026

  Maintainers usually reply within 1 day

• Profile for private / internal repositories

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-baseline

  Difficulty 5/5 Over a week Newbie friendliness 32/100

  darnitdevorg/darnit#458 · 1 comment · Opened Sep 23, 2026

  Maintainers usually reply within 1 day

• Determinism Tier 1 follow-up: markdown audit reports embed a wall-clock timestamp

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-core

  Difficulty 3/5 1-2 days Newbie friendliness 48/100

  darnitdevorg/darnit#436 · Opened Sep 9, 2026

  Maintainers usually reply within 1 day

• repro_build_env_declared and repro_deps_pinned overlook native C/C++ build systems and toolchains

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-reproducibility

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#433 · Opened Sep 8, 2026

  Maintainers usually reply within 1 day

• Ship darnit itself in a hermetic container to eliminate host-environment as an audit-nondeterminism source

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  infrastructure

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  darnitdevorg/darnit#423 · 1 comment · Opened Sep 5, 2026

  Maintainers usually reply within 1 day

• `darnit-reproducibility`: environment-generation sieve (deterministic-first, LLM fallback)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-reproducibility

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  darnitdevorg/darnit#422 · Opened Sep 5, 2026

  Maintainers usually reply within 1 day

• Determinism Tier 3: capture LLM reasoning and evidence trail in attestations, logs, and reports

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-core

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  darnitdevorg/darnit#421 · 1 comment · Opened Sep 5, 2026

  Maintainers usually reply within 1 day

• Determinism Tier 2: remediation must be atomic and idempotent under partial failure

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  module-core

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  darnitdevorg/darnit#420 · Opened Sep 5, 2026

  Maintainers usually reply within 1 day