Issues

• Let a verified Witness attestation conclude PASS for RE-02.01 (split it from repro_hermetic_build)

  module-reproducibilityneeds triage
  darnitdevorg/darnit#553 · Filter by author mlieberman85 opened on Oct 4, 2026

• Audit tests call the real GitHub API and run zizmor online, so results vary between runs

  qualitytesting
  darnitdevorg/darnit#548 · Filter by author mlieberman85 opened on Oct 3, 2026

• darnit run --apply can ask twice for one remediation step

  interface-cliux
  darnitdevorg/darnit#547 · Filter by author mlieberman85 opened on Oct 3, 2026

• Verify that PATCH required_pull_request_reviews enables reviews on a protected branch without them

  module-coretesting
  darnitdevorg/darnit#546 · Filter by author mlieberman85 opened on Oct 3, 2026
  1

• OSPS-SA-03.02 sets security.threat_model.path unconditionally

  module-baselinequality
  darnitdevorg/darnit#545 · Filter by author mlieberman85 opened on Oct 3, 2026

• enhance_with_llm rewrites created files outside the remediation executor and manifest

  module-baselineneeds triagequality
  darnitdevorg/darnit#544 · Filter by author mlieberman85 opened on Oct 3, 2026
  1

• Exec remediation preview lists files with uncommitted user changes that the apply will not touch

  module-coreneeds triagequality
  darnitdevorg/darnit#543 · Filter by author mlieberman85 opened on Oct 3, 2026

• Remediation trusts the audit cache regardless of framework, level, or tag filter

  module-baselinemodule-coreneeds triagequality
  darnitdevorg/darnit#542 · Filter by author mlieberman85 opened on Oct 3, 2026

• create_security_policy fails on every call; its template parameter is ignored

  interface-mcpmodule-baselineneeds triage
  darnitdevorg/darnit#541 · Filter by author mlieberman85 opened on Oct 3, 2026

• amber: repro_deps_pinned and repro_build_env_declared only look at the repo root

  module-reproducibility
  darnitdevorg/darnit#536 · Filter by author Marc-cn opened on Oct 2, 2026

• amber: 5/5 WARN on an AEC-reproduced artifact whose build environment is documented but not in a Dockerfile

  module-reproducibility
  darnitdevorg/darnit#535 · Filter by author Marc-cn opened on Oct 2, 2026

• Amber artifact corpus: darnitdevorg/amber-corpus

  module-reproducibility
  darnitdevorg/darnit#534 · Filter by author Marc-cn opened on Oct 2, 2026

• Stale context documentation outside the 042 update

  documentation
  darnitdevorg/darnit#529 · Filter by author mlieberman85 opened on Sep 30, 2026

• Remove unused parameters: audit_openssf_baseline(auto_init_config) and pending-data level

  interface-mcpmaintenance
  darnitdevorg/darnit#528 · Filter by author mlieberman85 opened on Sep 30, 2026

• tests/integration/test_mcp_server.py is skipped everywhere

  testing
  darnitdevorg/darnit#527 · Filter by author mlieberman85 opened on Sep 30, 2026

• A concluded has_releases (or other detectable key) is never offered for confirmation

  module-coreux
  Bug

  darnitdevorg/darnit#526 · Filter by author mlieberman85 opened on Sep 30, 2026

• Remove unreachable judgment defaults from Community Specification templates and text

  maintenance
  darnitdevorg/darnit#525 · Filter by author mlieberman85 opened on Sep 30, 2026

• darnit config migrate drops comments in .project/darnit.yaml

  interface-climodule-corequality
  Bug

  darnitdevorg/darnit#524 · Filter by author mlieberman85 opened on Sep 30, 2026

• scripts/csl_onboard.py defaults judgment values

  quality
  darnitdevorg/darnit#523 · Filter by author mlieberman85 opened on Sep 30, 2026

• Community Specification: coc_policy='org' is not in the csl_coc_policy vocabulary

  quality
  Bug

  darnitdevorg/darnit#522 · Filter by author mlieberman85 opened on Sep 30, 2026

• Attestation predicate reads project_config.project_type, which ProjectConfig does not define

  module-baselinequality
  Bug

  darnitdevorg/darnit#521 · Filter by author mlieberman85 opened on Sep 30, 2026

• docs/install/pypi.md recommends 'pip install --verify-attestations', which pip does not have

  documentationgood first issue
  Bug

  darnitdevorg/darnit#520 · Filter by author mlieberman85 opened on Sep 29, 2026

• framework-design.md CEL examples use '!= null', which cel-python rejects

  documentationgood first issue
  Bug

  darnitdevorg/darnit#516 · Filter by author mlieberman85 opened on Sep 27, 2026

• audit_org computes repository compliance itself instead of calling calculate_compliance

  good first issuemodule-corequality
  Bug

  darnitdevorg/darnit#515 · Filter by author mlieberman85 opened on Sep 27, 2026

• OSPS-GV-04.01 fails when CODEOWNERS is missing even if the policy is documented elsewhere

  module-baseline
  Bug

  darnitdevorg/darnit#514 · Filter by author mlieberman85 opened on Sep 27, 2026