-
Notifications
You must be signed in to change notification settings - Fork 6
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
fix(plans): retrying two failed accounts of one ramp step advances CurrentStep twice, so a later step silently never purchases
effort/mDaysDaysimpact/manyAffects most usersAffects most userspriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1669 In LeanerCloud/CUDly;fix(purchase): user-facing Retry ignores recIsSafeToRedrive, so retrying a landed Azure savings-plan buys a second one
effort/sHoursHoursimpact/fewLimited audienceLimited audiencepriority/p1Next up; this sprintNext up; this sprintseverity/criticalMajor harm when it happensMajor harm when it happenstriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1668 In LeanerCloud/CUDly;sec(iac): GCP WIF Terraform bypass - IAM user path defeats contains() role check, plus pool-wide grant
effort/mDaysDaysimpact/all-usersAffects every userAffects every userpriority/p0Drop everything; same-day fixDrop everything; same-day fixseverity/criticalMajor harm when it happensMajor harm when it happenstriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/nowDrop other thingsDrop other thingsStatus: Open.#1667 In LeanerCloud/CUDly;chore(iac): remove or wire up unused roleAssignmentGuidPrefix ARM parameter
effort/xsTrivial / one-linerTrivial / one-linerimpact/internalTeam-internal onlyTeam-internal onlypriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/eventuallyNo deadlineNo deadlineStatus: Open.#1666 In LeanerCloud/CUDly;fix(ci): deploy-all.yml declares no permissions, so called deploy workflows cannot obtain an OIDC token
effort/xsTrivial / one-linerTrivial / one-linerimpact/all-usersAffects every userAffects every userpriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1665 In LeanerCloud/CUDly;fix(gcp): GroupCommitments merges different machine families into one untyped commitment
effort/sHoursHoursimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1664 In LeanerCloud/CUDly;fix(gcp): read the CUD commitment Type from the recommender payload instead of deriving it from the machine family
effort/lWeeksWeeksimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/featNew capabilityNew capabilityurgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1663 In LeanerCloud/CUDly;fix(ci): rollback verifies the image against the assumed role's registry, not AWS_ACCOUNT_ID's
effort/xsTrivial / one-linerTrivial / one-linerimpact/internalTeam-internal onlyTeam-internal onlypriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1662 In LeanerCloud/CUDly;sec(iac): served GCP WIF script swallows provider-create failure + unvalidated CEL subject; OIDC cred-config bug
effort/mDaysDaysimpact/all-usersAffects every userAffects every userpriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1661 In LeanerCloud/CUDly;sec(ci): deployment environments have no protection rules, so environment-bound credentialed jobs run unapproved
effort/mDaysDaysimpact/all-usersAffects every userAffects every userpriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1660 In LeanerCloud/CUDly;sec(ci): sibling deploy and sanity workflows grant id-token write to ungated jobs
effort/mDaysDaysimpact/all-usersAffects every userAffects every userpriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1659 In LeanerCloud/CUDly;sec(api/azure): listExchangeableAzureRIs returns the tenant-wide reservation listing unscoped
effort/sHoursHoursimpact/manyAffects most usersAffects most userspriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1656 In LeanerCloud/CUDly;