Issues

• [SCF high][easy] Add a production dependency license report

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#401 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Avoid publishing mutable major-only container tags

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#403 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Restrict release tags to valid semantic versions

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#404 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Build both service images on pull requests

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#398 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Enable provenance attestations for released images

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#396 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Add OCI source and revision labels to images

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#400 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Reject public workspace packages missing private metadata

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#392 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Align Node engine metadata with the CI toolchain

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#395 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Validate repository metadata for every workspace

  documentationgood first issuehelp wantedpriority: highStellar Wave
  karagozemin/OverSync#394 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Include lockfile changes in contract workflow path filters

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#387 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Upload the Slither report even when analysis fails

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#386 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Add a deterministic formatting check across workspaces

  enhancementgood first issuehelp wantedpriority: highStellar Wave
  karagozemin/OverSync#390 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Add concurrency cancellation to address verification

  enhancementgood first issuehelp wantedpriority: highStellar Wave
  karagozemin/OverSync#389 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Give Slither artifacts commit-specific names

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#388 · Filter by author karagozemin opened on Oct 22, 2026

• [SCF high][easy] Verify release tags match package version

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#382 · Filter by author karagozemin opened on Oct 22, 2026
  23

  

• [SCF high][easy] Publish container image digests in the release summary

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#375 · Filter by author karagozemin opened on Oct 22, 2026
  10

  

• [SCF high][easy] Scan the resolver image before publication

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#373 · Filter by author karagozemin opened on Oct 22, 2026
  8

  

• [SCF high][easy] Add SBOM generation to resolver container releases

  good first issuehelp wantedpriority: highsecurityStellar Wave
  karagozemin/OverSync#374 · Filter by author karagozemin opened on Oct 22, 2026
  10

  

• [SCF high][easy] Enable weekly Dependabot updates for workspace and CI dependencies

  good first issuehelp wantedlow riskpriority: highsecurityStellar Wave
  karagozemin/OverSync#354 · Filter by author karagozemin opened on Oct 21, 2026
  6

  

• [SCF high][easy] Pin all GitHub Actions to immutable commit SHAs

  good first issuehelp wantedlow riskpriority: highsecurityStellar Wave
  karagozemin/OverSync#352 · Filter by author karagozemin opened on Oct 21, 2026
  6