All issues

Search results

Unknown control "containerImageMustBePinnedByDigest"

Status: Open.

Bug

#429 In getplumber/plumber;

· horkko opened on Aug 21, 2026

[FEAT] ISSUE-701 should treat tags backed by immutable releases as pinned

Status: Open.

Feature

#421 In getplumber/plumber;

· thomasboni opened on Aug 17, 2026

Migrate platform control: a security policy project must be linked (ISSUE-601, includes the 601 to 602 renumber)

CLI <> Platform

Status: Open.

#417 In getplumber/plumber;

· Joseph94m opened on Aug 12, 2026

Migrate platform control: MR settings must be compliant (ISSUE-506)

CLI <> Platform

Status: Open.

#416 In getplumber/plumber;

· Joseph94m opened on Aug 12, 2026

Migrate platform control: MR approval settings must be compliant (ISSUE-503)

CLI <> Platform

Status: Open.

#415 In getplumber/plumber;

· Joseph94m opened on Aug 12, 2026

ISSUE-705 remediation guidance is unactionable for setup-* managed caches

cliCommand-line interfaceCommand-line interface

controls

Status: Open.

Feature

#409 In getplumber/plumber;

· Totara-thib opened on Aug 12, 2026

identity: give the prose-identified controls structured subject keys (next RecipeVersion bump)

Status: Open.

#407 In getplumber/plumber;

· thomasboni opened on Aug 10, 2026

Declare variable-value provenance in control findings (unblocks two controls whose pushes are rejected today)

Status: Open.

#400 In getplumber/plumber;

· thomasboni opened on Aug 7, 2026

Detect workflows using long-lived cloud keys instead of OIDC

Status: Open.

Feature

#399 In getplumber/plumber;

· thomasboni opened on Aug 5, 2026

Tag protection check

Status: Open.

Feature

#398 In getplumber/plumber;

· thomasboni opened on Aug 5, 2026

[FEAT] Curated source allowlist: cover the VM/cross-platform testing action family

Status: Open.

Feature

#397 In getplumber/plumber;

· Totara-thib opened on Aug 5, 2026

ISSUE-103 fires on unresolved matrix expressions in container.image

Status: Open.

Bug

#396 In getplumber/plumber;

· Totara-thib opened on Aug 5, 2026