Search results

Renovate not configured to pin GitHub Actions to SHA digests

Status: Open.

#589 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

All third-party GitHub Actions unpinned to SHA commit hashes

Status: Open.

#588 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

All 10 GitHub Actions workflows missing permissions block

Status: Open.

#587 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

Fbe.kill_if produces malformed OR query — missing space between sub-expressions

Status: Open.

#586 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

GitHub Actions pinned to @master branch — supply chain attack vector (xcop.yml)

Status: Open.

#585 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

GitHub Actions pinned to @master branch — supply chain attack vector (pdd.yml)

Status: Open.

#584 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

Trace array is not thread-safe — concurrent append and clear corrupt entries

Status: Open.

#583 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

Non-thread-safe SqliteStore @db initialization — double DB handle, leaked FD

Status: Open.

#582 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

RateLimit track_request decrements counter before confirming request succeeds

Status: Open.

#581 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

Fbe::Conclude#fill crashes with NoMethodError when follow property is missing on fact

Status: Open.

#580 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

Award variable substitution silently returns nil/empty for undefined variables

Status: Open.

#579 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026

Award calculation crashes with ZeroDivisionError on zero denominator

Status: Open.

#578 In zerocracy/fbe;

· sdghsdkjlas27-dotcom opened on Jul 1, 2026