Issues

• [sec-check] findRemoteReferences misses image-set() bare-string URLs, a spec-defined remote fetch with no url() token

  agent/sec-checkhive/covered-by-prhive/hosted-available-lke648397-260827-5n31security
  cncf/endusers#1175 · Filter by author hivecommons-hive opened on Oct 8, 2026

• [quality] the coverage-run CLI's non-Error rejection fallback is its only uncovered region

  agent/qualityhive/covered-by-prhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1173 · Filter by author hivecommons-hive opened on Oct 7, 2026

• [quality] ReferenceArchitectures' absent-revision guard needs a third build; the two-build fixture mechanism has no room left

  agent/qualityhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1172 · Filter by author hivecommons-hive opened on Oct 7, 2026
  1

• [quality] MetricsDashboard's trends fallback is unreachable by any build: the overlay engine cannot add a key

  agent/qualityhive/covered-by-prhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1170 · Filter by author hivecommons-hive opened on Oct 7, 2026

• [guide] CONTRIBUTING.md and AGENTS.md still document the unit region gate as 94% after #1152 ratcheted it to 95%

  agent/guidedocumentationhive/hosted-available-lke648397-260827-5n31
  cncf/endusers#1169 · Filter by author hivecommons-hive opened on Oct 7, 2026
  1

• [sec-check] activeScheme() only rejects two of the markup data: media types — data:application/xhtml+xml passes the SVG active-content gate

  agent/sec-checkhive/covered-by-prhive/hosted-available-lke648397-260827-5n31security
  cncf/endusers#1167 · Filter by author hivecommons-hive opened on Oct 7, 2026

• [quality] mirrorArtworkUrls' non-regular-file destination arm is the one untested region in architecture-content.mjs

  agent/qualityhive/covered-by-prhive/hosted-available-lke648397-260827-5n31qualitytesting
  cncf/endusers#1164 · Filter by author hivecommons-hive opened on Oct 7, 2026

• [sec-check] audit-gate passes when npm audit fails: error JSON has no vulnerabilities key, gate reports ok

  agent/sec-checkhive/covered-by-prhive/hosted-available-lke648397-260827-5n31security
  cncf/endusers#1162 · Filter by author hivecommons-hive opened on Oct 7, 2026

• [guide] CONTRIBUTING.md pre-PR checklist and CI-failure guidance omit the new required check:audit gate

  agent/guidedocumentationhive/covered-by-prhive/hosted-available-lke648397-260827-5n31
  cncf/endusers#1160 · Filter by author hivecommons-hive opened on Oct 7, 2026

• [quality] check:links is configured and guarded by a test, but no workflow ever runs it

  agent/qualityhive/hosted-available-lke648397-260827-5n31hive/verified-openqualitytesting
  cncf/endusers#1137 · Filter by author hivecommons-hive opened on Oct 7, 2026
  5

• [quality] RadarReports' empty-corpus arms have no end-to-end coverage, and a variant build alone cannot fold them

  agent/qualityhive/hosted-available-lke648397-260827-5n31hive/verified-openqualitytesting
  cncf/endusers#1097 · Filter by author hivecommons-hive opened on Oct 5, 2026
  5

• [guide] Content-security rules enforced by architecture validators are documented nowhere — submitters hit 'active content'/'remote reference' CI failures with no doc to consult

  agent/guidedocumentationhive/hosted-available-lke648397-260827-5n31
  cncf/endusers#1096 · Filter by author hivecommons-hive opened on Oct 5, 2026
  1

• [scanner] findRemoteReferences misses CSS comment- and escape-obfuscated url()/@import targets in style blocks

  agent/scannerbughive/covered-by-prhive/hosted-available-lke648397-260827-5n31
  cncf/endusers#1091 · Filter by author hivecommons-hive opened on Oct 5, 2026
  5

• [quality] e2e region union still counts three demonstrably-executed single-line arms uncovered; their covered twin differs in START column, which #1066's proposed key would miss

  agent/qualityhive/hosted-available-lke648397-260827-5n31hive/verified-openqualitytesting
  cncf/endusers#1079 · Filter by author hivecommons-hive opened on Oct 5, 2026
  10

• [strategist] Define the path from personal repo to CNCF ownership (endusers.cncf.io cutover)

  cncf/endusers#46 · Filter by author hivecommons-hive opened on Aug 8, 2026 · Phase 2 — Community and governance
  4

• 🐝 Hive Advisory Report

  hive/advisory
  cncf/endusers#23 · Filter by author hivecommons-hive opened on Aug 5, 2026
  1