Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

create_security_policy fails on every call; its template parameter is ignored

Open
#541 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
python
Domain
security, tooling

Research direction

Start with tests/darnit_baseline/test_tools_signatures.py and inspect the create_security_policy tool and the control template it uses. The issue leaves a choice between implementing the standard, minimal, and enterprise TOML variants or removing the pinned parameter. Done means the parameter is honored or removed consistently, while the existing SECURITY.md behavior remains unchanged.

Written by the indexing model from the issue text.

Description

interface-mcp module-baseline needs triage

On main (0581c0d), the create_security_policy MCP tool fails on every call. It passes an EffectiveConfig to FrameworkConfig(**...), which raises. When it did produce output, it also reported "Created" when SECURITY.md already existed.

Fixed on the 043 branch: the tool runs OSPS-VM-02.01 through the remediation executor and the run manifest, never overwrites an existing SECURITY.md (it reports unchanged / already_exists), and returns the structured run.

Still open on the branch: the template parameter (standard / minimal / enterprise) is accepted but ignored; every call renders the control's own template. Either implement the variants as TOML templates selected by the parameter, or remove the parameter (it is pinned by tests/darnit_baseline/test_tools_signatures.py).

Found while implementing feature 043 (remediation safety, branch 043-remediation-safety, not yet merged).

Dominant language
Python
Stars
22
Forks
27
Avg merge
2d 1h
Merged PRs (30d)
35

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from darnitdevorg/darnit

All issues in darnitdevorg/darnit

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.