Issues

• The docs dependency group is unaudited and pins vulnerable packages

  dependencies
  OpenRAE/workbench#79 · Filter by author doublewhy opened on Oct 12, 2026

• Dev and main require no status checks before merge

  OpenRAE/workbench#78 · Filter by author doublewhy opened on Oct 12, 2026

• Workflow lint reports unpinned actions and persisted checkout credentials

  OpenRAE/workbench#77 · Filter by author doublewhy opened on Oct 12, 2026

• chore(deps): upgrade cryptography, django, pyjwt and sqlparse for published advisories

  OpenRAE/workbench#76 · Filter by author doublewhy opened on Oct 9, 2026

• ci: SonarCloud rejects the repository SONAR_TOKEN

  OpenRAE/workbench#75 · Filter by author doublewhy opened on Oct 9, 2026

• Adopt Ground Control from the published grndctl package

  OpenRAE/workbench#68 · Filter by author Brad-Edwards opened on Sep 22, 2026

• ci: shorten PR feedback without reducing verification coverage

  OpenRAE/workbench#61 · Filter by author Brad-Edwards opened on Jul 27, 2026

• chore: use one pre-push Codex review, one pre-push test-quality review, and disable automatic review disposition

  OpenRAE/workbench#60 · Filter by author Brad-Edwards opened on Jul 26, 2026

• Add OpenSSF Scorecard workflow and README badge

  OpenRAE/workbench#53 · Filter by author Brad-Edwards opened on Jul 19, 2026