Issues - a73x/eitri - Forgejo: Beyond coding. We forge.

a73x/eitri

Watch

New issue

A changed --cidr-pool is ignored without a word

#104 by a73x was closed 2026-08-23 11:27:05 +00:00

SaveIdentity accepts a trust root it cannot use

#103 by a73x was closed 2026-08-23 11:26:59 +00:00

[security] Slowloris timeouts and HSTS max-age are asserted against themselves — 0 passes CI

#101 by a73x was closed 2026-08-23 11:26:47 +00:00

Eight tests that pass for the wrong reason (and three self-referential assertions)

#98 by a73x was closed 2026-08-23 11:26:40 +00:00

reconcile: the concurrency invariants are argued in prose and observed by nothing

#97 by a73x was closed 2026-08-23 11:26:53 +00:00

[DEF-7] Web: no filtering for large fleets; dismiss drops keyboard focus

#28 by a73x was closed 2026-07-04 18:00:07 +00:00

[DEF-6] SSE stream authenticates with the long-lived admin token in the query string

#27 by a73x was closed 2026-07-04 17:58:27 +00:00

[DEF-5] CreateTap silently adopts a non-tap device with a colliding name

#26 by a73x was closed 2026-07-04 17:59:56 +00:00

[DEF-4] audit_log grows forever; no retention and no read API

#25 by a73x was closed 2026-07-04 17:55:57 +00:00

[DEF-3] Rate limiter buckets IPv6 per-address; should bucket by /64

#24 by a73x was closed 2026-07-04 17:55:16 +00:00

[DEF-2] Permanent create errors burn the full retry budget

#23 by a73x was closed 2026-07-04 17:58:57 +00:00

[DEF-1] Image cache has no eviction — agent disk fills

#22 by a73x was closed 2026-07-04 17:58:41 +00:00

[P2] CreateTap not idempotent: retry attempts mask the root-cause create error

#20 by a73x was closed 2026-07-03 14:17:16 +00:00

[P3] Web dashboard captures errors but never surfaces them

#9 by a73x was closed 2026-07-03 13:11:28 +00:00

[P3] Self-signed server cert has 10-year validity, no rotation path

#8 by a73x was closed 2026-07-03 12:57:24 +00:00

[P3] No enrollment audit log or rate limiting

#7 by a73x was closed 2026-07-03 13:08:15 +00:00

[P3] SSE snapshot built from two non-transactional reads (mixed-epoch)

#6 by a73x was closed 2026-07-03 12:51:31 +00:00

[P2] R2 governance loophole: only direct os/exec imports are caught

#5 by a73x was closed 2026-07-03 12:49:29 +00:00

[P2] No watchdog/timeout around reconcile Step()

#4 by a73x was closed 2026-07-03 12:44:22 +00:00

[P1] Host credentials have no expiry or per-host revocation

#3 by a73x was closed 2026-07-03 13:24:37 +00:00

1 2