Issues

• Repository settings: private vulnerability reporting, secret scanning and branch protection are off

  RodnaPamet/scanent#23 · Filter by author h0mele55 opened on Nov 12, 2026

• Report wording: four places where the page says something the run did not do

  RodnaPamet/scanent#22 · Filter by author h0mele55 opened on Nov 12, 2026

• Hardening that needs people or time: real-estate pilots, a 72-hour soak, an external penetration test, a first signed release

  RodnaPamet/scanent#21 · Filter by author h0mele55 opened on Nov 12, 2026

• Follow-ups from the Phase 4 hardening review

  RodnaPamet/scanent#20 · Filter by author h0mele55 opened on Nov 12, 2026

• Owner decisions from Phase 3: image visibility, exit code on an incomplete scan, write-access checks

  RodnaPamet/scanent#19 · Filter by author h0mele55 opened on Nov 12, 2026
  1

• Not yet run for real: cluster install, Podman, the release workflow, an MCP read through the egress overlay

  RodnaPamet/scanent#18 · Filter by author h0mele55 opened on Nov 12, 2026

• Contract: do not print a secret-shaped key in a refusal path

  RodnaPamet/scanent#17 · Filter by author h0mele55 opened on Nov 12, 2026

• Okta: say when API tokens of other users could not be seen

  RodnaPamet/scanent#16 · Filter by author h0mele55 opened on Nov 12, 2026

• Owner decisions: inventory axis names, tier freshness window, and what a standalone scan can evidence

  RodnaPamet/scanent#15 · Filter by author h0mele55 opened on Nov 11, 2026
  1

• OpenShell runtime source is not usable: no gRPC transport, not configurable

  RodnaPamet/scanent#8 · Filter by author h0mele55 opened on Nov 11, 2026

• Inflect should consume @scanent/contract instead of its own copy

  RodnaPamet/scanent#7 · Filter by author h0mele55 opened on Nov 11, 2026
  1