Issues

• [sec-check] CodeQL never analyses the Actions workflows: add the GA actions language to .github/workflows/codeql.yml

  agent/sec-checkhive/hosted-available-lke648397-260827-5n31security
  cncf/endusers#1302 · Filter by author hivecommons-hive opened on Oct 11, 2026

• [quality] nothing holds ci.yml's Playwright setup: the OS-package install on a cache hit and the version-keyed browser cache are both unpinned

  agent/qualityhive/covered-by-prhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1300 · Filter by author hivecommons-hive opened on Oct 11, 2026

• [guide] LAUNCH.md milestone 9 (launch blog post drafted) links closed issue #1271 as its tracker; the undelivered draft has no open tracking issue

  agent/guidedocumentationhive/hosted-available-lke648397-260827-5n31
  cncf/endusers#1299 · Filter by author hivecommons-hive opened on Oct 11, 2026

• [quality] the unit coverage gate leaves 27 source regions of slack: --check-source-regions is 99 while scripts/ and src/ measure 100.00%

  agent/qualityhive/covered-by-prhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1297 · Filter by author hivecommons-hive opened on Oct 11, 2026

• [sec-check] audit-gate allowlist never expires: a fixed advisory stays suppressed with nothing to detect it

  agent/sec-checkhive/covered-by-prhive/hosted-available-lke648397-260827-5n31security
  cncf/endusers#1295 · Filter by author hivecommons-hive opened on Oct 11, 2026

• [sec-check] meta CSP leaves manifest-src unnamed: with no default-src, an off-origin <link rel=manifest> is unrestricted

  agent/sec-checkhive/covered-by-prhive/hosted-available-lke648397-260827-5n31security
  cncf/endusers#1288 · Filter by author hivecommons-hive opened on Oct 10, 2026

• [quality] reportAndExit() can drop the tail of a validator's error report: console.error to a pipe is asynchronous on POSIX and process.exit() does not flush it

  hive/covered-by-pr
  cncf/endusers#1286 · Filter by author mrbobbytables opened on Oct 10, 2026
  1

• [scanner] meta CSP: manifest-src and worker-src still unnamed after #1284 (font-src was not the last fetch directive)

  agent/scannerbughive/hosted-available-lke648397-260827-5n31
  cncf/endusers#1285 · Filter by author hivecommons-hive opened on Oct 10, 2026
  1

• Triage: duplicate and consolidatable open issues and PRs (2026-10-10 review)

  cncf/endusers#1283 · Filter by author mrbobbytables opened on Oct 10, 2026
  7

• [quality] the documented Playwright setup needs root, so the required e2e suite cannot be run locally without it

  agent/qualityhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1277 · Filter by author hivecommons-hive opened on Oct 10, 2026
  1

• [quality] validate-members.mjs checks landscape revision and sourceUrl against the snapshot but not collectedAt, the one field the page renders

  agent/qualityhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1270 · Filter by author hivecommons-hive opened on Oct 10, 2026
  1

• [quality] tests/helpers*.mjs is outside every coverage floor and outside --require-source-files

  agent/qualityhive/covered-by-prhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1258 · Filter by author hivecommons-hive opened on Oct 10, 2026
  2

• [ci-maintainer] merge_group runs fail e2e coverage-gate inventory when queued siblings split spec from its pinned list entry

  agent/ci-maintainercihive/hosted-available-lke648397-260827-5n31needs-direction
  cncf/endusers#1257 · Filter by author hivecommons-hive opened on Oct 10, 2026
  1

• [quality] the e2e coverage gate has no per-file region floor, so one src file can regress invisibly

  agent/qualityhive/hosted-available-lke648397-260827-5n31hive/verified-openqualitytesting
  cncf/endusers#1232 · Filter by author hivecommons-hive opened on Oct 9, 2026
  4

• [quality] automation workflows force-push a fixed PR branch with no concurrency group

  agent/qualityhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1222 · Filter by author hivecommons-hive opened on Oct 9, 2026
  2

• [strategist] Define the path from personal repo to CNCF ownership (endusers.cncf.io cutover)

  cncf/endusers#46 · Filter by author hivecommons-hive opened on Aug 8, 2026 · Phase 2 — Community and governance
  4

• 🐝 Hive Advisory Report

  hive/advisory
  cncf/endusers#23 · Filter by author hivecommons-hive opened on Aug 5, 2026
  1