Issues · dan-petty/devops-cli

feat(roadmap): do not move issues to backlog if they have an open or merged pull request

dan-petty/devops-cli#1244 · opened

on Oct 6, 2026

· v0.2.27

fix(telemetry): devops-cli dashboard command variable covers all registered subcommands

dan-petty/devops-cli#1241 · opened

on Oct 5, 2026

2

fix(security): reference_extractor classifies addresses with ipaddress, and the sandbox local whitelist stops mapping host.docker.internal to pod loopback

dan-petty/devops-cli#1174 · opened

on Oct 4, 2026

fix(config): service clients use only configured urls and never fall back to an unconfigured localhost default

dan-petty/devops-cli#1165 · opened

on Oct 4, 2026

feat(agent): `devops agent env` gives an agent session its own expiring gateway key, run-index access and a read-only kube identity, written to its settings file or a child process and never printed, with `--revoke` and an audit of every grant

dan-petty/devops-cli#1154 · opened

on Oct 4, 2026

1

refactor(review): the persona review stage, the legacy segment engine and review-time RAG are deleted, and devops review builds a model client only for the explanation stages

dan-petty/devops-cli#1151 · opened

on Oct 3, 2026

refactor(review): the model verifier, the hallucination catalog and the model-claim guards are deleted, and person-recorded verdicts become suppressions

dan-petty/devops-cli#1150 · opened

on Oct 3, 2026

feat(ai): knowledge-base manuals state the tool, language and dependency versions they apply to, and reviews ground explanations in the manuals that match the reviewed project

dan-petty/devops-cli#1149 · opened

on Oct 3, 2026

feat(review): related findings are linked by shared CWE, rule family, symbol-graph component or package, and one review-level plan orders the work across groups

dan-petty/devops-cli#1148 · opened

on Oct 3, 2026

feat(review): each finding group gets a model-written explanation and plan grounded in the rule's documentation at the installed tool version, kept apart from findings, with every quote, citation, version and code block checked

dan-petty/devops-cli#1147 · opened

on Oct 3, 2026

feat(review): dependency advisories and the package inventory come from osv-scanner over the lockfiles, offline, with each advisory's own severity

dan-petty/devops-cli#1146 · opened

on Oct 3, 2026

feat(review): devops-cli's rule pack turns the recall set's network-exposure entries into tested Semgrep rules, and CI runs the pack's tests when a rule changes

dan-petty/devops-cli#1145 · opened

on Oct 3, 2026

fix(review): Semgrep runs pinned and offline with metrics off, from a cached registry ruleset plus devops-cli's tested rule pack

dan-petty/devops-cli#1144 · opened

on Oct 3, 2026

feat(review): review tools run at the project's declared language and platform versions, and count only after their output on a canary matches the recorded expected output

dan-petty/devops-cli#1143 · opened

on Oct 3, 2026

feat(review): review tools install from a tools lock with exact versions, binary checksums and hashed Python requirements, and every review records them

dan-petty/devops-cli#1142 · opened

on Oct 3, 2026

fix(security): each finding keeps its own fingerprint across unrelated edits, and deduplication and correlation give one result in every input order, in devops scan and in reviews

dan-petty/devops-cli#1141 · opened

on Oct 3, 2026

fix(review): a branch review leaves the files it deletes out of persona pages and scanners, and a file a scanner cannot read does not mark the scanner failed

dan-petty/devops-cli#1140 · opened

on Oct 3, 2026

fix(ai): the knowledge base is re-indexed whenever the installed knowledge base differs from what its collection holds, and rag status and drift read Qdrant instead of the local cache

dan-petty/devops-cli#1139 · opened

on Oct 3, 2026

feat(review): devops review score scores saved review sessions against a label file offline and reproduces the S11 and loop baselines

dan-petty/devops-cli#1138 · opened

on Oct 3, 2026

feat(review): evidence-first code review — tools find, version-pinned facts ground, models explain and plan, fixes are re-checked

dan-petty/devops-cli#1137 · opened

on Oct 3, 2026

fix(k8s): the kubernetes, node and ingress dashboards query only series something serves, checked against captured exporter families and the chart allow lists

dan-petty/devops-cli#1136 · opened

on Oct 3, 2026

feat(telemetry): traces are stored in tempo on a volume, and grafana and devops-cli read them, linked to logs and profiles

dan-petty/devops-cli#1135 · opened

on Oct 3, 2026

feat(k8s): profiles come from k8s-monitoring's profiling feature for every workload, and the profiling dashboards list what is profiled

dan-petty/devops-cli#1134 · opened

on Oct 3, 2026

fix(k8s): chart defaults stop writing logs and watches nobody reads (loki canary and per-query delete warnings, pyroscope debug logging, grafana's datasource sidecar), and loki admits only grafana and alloy from monitoring

dan-petty/devops-cli#1133 · opened

on Oct 3, 2026

fix(telemetry): devops-cli metrics reach prometheus in one hop, a late sample no longer drops a whole batch, and the collector runs only what its pipelines use

dan-petty/devops-cli#1132 · opened

on Oct 3, 2026