stephrobert/pepin

View on GitHub

CSPM multi-cloud souverain : évalue la posture d'un cloud (Outscale, Scaleway, Exoscale…) contre un référentiel commun ancré sur SCSL, SecNumCloud, CIS et ISO.

Stars: 16
Forks: 2
Open beginner issues: 0
Indexed issues: 39
Avg merge: 12h 25m
Merged PRs (30d): 84

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 12, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

39 open issues indexed

[collect] Un 200 illisible sur ListBuckets se lit « ce tenant n'a aucun bucket » Open

bug collector P1 trust-model

Difficulty 5/5 Over a week Newbie friendliness 48/100

stephrobert/pepin#257 · Opened Sep 21, 2026
[scaleway][exoscale] Un refus d'identifiants inconnus est classé « privilège insuffisant » Open

collector provider trust-model

Difficulty 4/5 3-5 days Newbie friendliness 45/100

stephrobert/pepin#250 · 1 comment · Opened Sep 12, 2026
[tfmap] A located type whose region a plan does not write blocks the sovereignty control Open

bug coverage P1

Difficulty 5/5 Over a week Newbie friendliness 38/100

stephrobert/pepin#245 · Opened Sep 11, 2026
[tfmap] On a plan, an optional argument left unwritten is an observation, not an absence Open

bug collector coverage P1

Difficulty 5/5 Over a week Newbie friendliness 45/100

stephrobert/pepin#243 · 3 comments · Opened Sep 11, 2026
[quality] Make authenticated qualification runs first-class detection evidence Open

P1 quality trust-model

Difficulty 4/5 3-5 days Newbie friendliness 55/100

stephrobert/pepin#234 · Opened Sep 10, 2026
Outscale plans: 13 controls not-evaluated on the Terraform source for resources and attributes the plan carries (deletion_protection, access keys, API access rules, LBU, peering, snapshots, region) Open

collector coverage provider

Difficulty 4/5 3-5 days Newbie friendliness 70/100

stephrobert/pepin#203 · 1 comment · Opened Sep 9, 2026
Scaleway live coverage: nine controls the qualification tenant pins not-evaluated, with the endpoint each one needs Open

collector coverage provider

Difficulty 4/5 3-5 days Newbie friendliness 50/100

stephrobert/pepin#195 · 1 comment · Opened Sep 9, 2026
[controls] Measurements an Outscale auditor will ask for next, with the field or call each one needs Open

controls coverage P1

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#179 · Opened Sep 9, 2026
[testing] La mutation est la pratique du projet mais pas sa porte ; le fuzzing ne cherche rien Open

ci-cd P1 quality testing

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#122 · 1 comment · Opened Sep 8, 2026
[cli] pepin feedback --false-positive : transformer un faux positif en test de non-régression Open

P1 product testing

Difficulty 5/5 Over a week Newbie friendliness 48/100

stephrobert/pepin#116 · Opened Sep 8, 2026
[quality] Pondérer une preuve par la fidélité mesurée de ce qui l'a produite Open

P2 quality trust-model

Difficulty 5/5 Over a week Newbie friendliness 42/100

stephrobert/pepin#97 · 1 comment · Opened Aug 21, 2026
[collect] Mesurer Classify contre le dialecte d'erreur natif de chaque fournisseur Open

collector P1 trust-model

Difficulty 4/5 3-5 days Newbie friendliness 48/100

stephrobert/pepin#96 · 1 comment · Opened Aug 21, 2026
[veracity] Prouver les verdicts de dégradation à la frontière de l'API, par injection de faute Open

collector P1 testing trust-model

Difficulty 4/5 3-5 days Newbie friendliness 48/100

stephrobert/pepin#95 · Opened Aug 21, 2026
[sarif] Une dérogation valide bloque quand même la porte de fusion, faute de suppression native Open

output P1 trust-model

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#94 · Opened Aug 21, 2026
[outscale] Quatre endpoints sont émis deux fois par scan Open

collector P2 provider

Difficulty 4/5 3-5 days Newbie friendliness 52/100

stephrobert/pepin#93 · 2 comments · Opened Aug 21, 2026
[api] Exposer une API locale en lecture seule Open

engine P2

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#80 · Opened Aug 19, 2026
[plugins] Charger des packs de contrôles externes Open

controls P2 plugins

Difficulty 5/5 Over a week Newbie friendliness 30/100

stephrobert/pepin#79 · Opened Aug 19, 2026
[plugins] Charger un provider externe sans recompiler Open

P2 plugins provider

Difficulty 5/5 Over a week Newbie friendliness 32/100

stephrobert/pepin#78 · Opened Aug 19, 2026
[remediation] Proposer un correctif Terraform, sans jamais l'appliquer Open

controls P2

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#77 · Opened Aug 19, 2026
[remediation] Produire des plans de remédiation propres au provider Open

controls P2

Difficulty 5/5 Over a week Newbie friendliness 38/100

stephrobert/pepin#76 · Opened Aug 19, 2026
[framework] Ajouter les correspondances MITRE ATT&CK, là où elles sont justifiées Open

controls P1

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#75 · Opened Aug 19, 2026
[output] Ajouter une sortie OCSF Open

output P1

Difficulty 4/5 3-5 days Newbie friendliness 55/100

stephrobert/pepin#74 · Opened Aug 19, 2026
[benchmarks] Composer des profils de contrôles Open

controls P1

Difficulty 5/5 Over a week Newbie friendliness 42/100

stephrobert/pepin#73 · Opened Aug 19, 2026
[inventory] Ajouter un mode inventaire, qui n'affirme rien Open

engine P1

Difficulty 4/5 3-5 days Newbie friendliness 52/100

stephrobert/pepin#72 · Opened Aug 19, 2026
[evidence] Comparer deux bundles de preuve Open

engine P1 quality

Difficulty 4/5 3-5 days Newbie friendliness 55/100

stephrobert/pepin#71 · Opened Aug 19, 2026
[risk] Pondérer le risque par le contexte, une fois le graphe disponible Open

engine P1 quality

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#70 · Opened Aug 19, 2026
[attack-path] Calculer les chemins d'attaque réellement exploitables Open

engine graph P1

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#69 · Opened Aug 19, 2026
[graph] Introduire un modèle de relations entre ressources, agnostique du provider Open

engine graph P1

Difficulty 5/5 Over a week Newbie friendliness 25/100

stephrobert/pepin#68 · Opened Aug 19, 2026
[drift] Corréler l'intention Terraform et l'état vivant Open

engine P2

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#60 · Opened Aug 19, 2026
[providers] Auditer chaque exigence SCSL non supportée contre les API Scaleway et Exoscale Open

coverage P1 provider

Difficulty 4/5 3-5 days Newbie friendliness 48/100

stephrobert/pepin#57 · Opened Aug 19, 2026
[coverage] Atteindre 100 % des exigences SCSL techniquement mesurables Open

controls coverage P1

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#56 · 1 comment · Opened Aug 19, 2026
[network] Construire le graphe d'exposition effective Open

controls engine P1

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#55 · Opened Aug 19, 2026
[iam] Construire le graphe des permissions effectives Open

controls engine P1

Difficulty 5/5 Over a week Newbie friendliness 25/100

stephrobert/pepin#54 · Opened Aug 19, 2026
[crypto] Étendre les contrôles de posture KMS et gestion de clés Open

controls coverage P1

Difficulty 4/5 3-5 days Newbie friendliness 50/100

stephrobert/pepin#53 · Opened Aug 19, 2026
[logging] Construire la famille de contrôles de journalisation d'audit Open

controls coverage P1

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#52 · Opened Aug 19, 2026
[scaleway] Ajouter le collecteur live des bases de données managées Open

collector coverage P1 provider

Difficulty 4/5 3-5 days Newbie friendliness 55/100

stephrobert/pepin#51 · Opened Aug 19, 2026
[scaleway] Compléter la couverture IAM en collecte live Open

coverage P1 provider

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#50 · Opened Aug 19, 2026
[dist] Distribuer Pépin par Homebrew, sans affaiblir la vérification de provenance Open

ci-cd P2 product trust-model

Difficulty 5/5 Over a week Newbie friendliness 35/100

stephrobert/pepin#35 · Opened Aug 19, 2026
Scorecard: badge OpenSSF Best Practices non demandé Open

security

Difficulty 3/5 1-2 days Newbie friendliness 55/100

stephrobert/pepin#9 · 1 comment · Opened Aug 19, 2026

stephrobert/pepin

Get new issues in your inbox