All issues

Search results

Server crate-wide lint suppressions hide maintainability and protocol-safety signals

Status: Open.

#163 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Runner protocol authorization policy is implicit in router composition and easy to bypass

Status: Open.

#162 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Known fallback PRELOOP_SYSTEM_TOKEN makes direct server launches insecure by default

Status: Open.

#161 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Postgres backend does not provide multi-replica control-plane safety or leader fencing

Status: Open.

#160 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Results Service mutation handlers are not consistently bound to the caller's job identity

Status: Open.

#159 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Action archive downloads ignore configured GitHub origin and lack cache/download bounds

Status: Open.

#158 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Blob staging and commit paths allow unbounded memory and disk exhaustion

Status: Open.

#157 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Out-of-order run projections can regress durable state after newer commits

Status: Open.

#156 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Job runtime JWT is accepted as a generic runner-protocol credential

Status: Open.

#155 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

Legacy runner compatibility routes allow unauthorized registration and job claiming

Status: Open.

#154 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 20, 2026

GET /api/v1/runs/<id>/logs returns truncated logs while files are complete on disk

bugSomething isn't workingSomething isn't working

Status: Open.

#134 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 13, 2026

GitHub App runs stale workflow YAML for a push (races the ref update)

bugSomething isn't workingSomething isn't working

Status: Open.

#133 In preloopdev/preloop;

· Bnjoroge1 opened on Aug 13, 2026