-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Design-debt roll-up: lower-severity findings from Fable review of PR #232 -> HEAD
fable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: lowNice to have / laterNice to have / laterStatus: Open.#282 In IcebergAI/IcebergCTI;Dockerfile pins the uv binary by mutable tag while base images are digest-pinned
dockerPull requests that update docker codePull requests that update docker codefable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingsecuritySecurity hardening / vulnerabilitySecurity hardening / vulnerabilityStatus: Open.#281 In IcebergAI/IcebergCTI;Retention pruners do unbatched single-transaction DELETE on the fastest-growing table
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingStatus: Open.#280 In IcebergAI/IcebergCTI;k8s prune CronJobs mount the app's RWO PVC; a stuck job silently halts all retention
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingStatus: Open.#279 In IcebergAI/IcebergCTI;Report publish/transition races the 1.2s autosave debounce, can freeze stale content into the immutable snapshot
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingStatus: Open.#278 In IcebergAI/IcebergCTI;OIDC outbound HTTP (discovery/JWKS/token) bypasses the global proxy
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingStatus: Open.#277 In IcebergAI/IcebergCTI;OIDC update path dropped the email-collision guard (two-step account-shadowing bypass)
fable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingsecuritySecurity hardening / vulnerabilitySecurity hardening / vulnerabilityStatus: Open.#276 In IcebergAI/IcebergCTI;AI resolve() overlays max_tlp/timeout unvalidated -> 500 instead of failing closed
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingStatus: Open.#275 In IcebergAI/IcebergCTI;Effective-config MISP/Webhook/SSO tiles still have the #264 stored-vs-resolved bug
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingStatus: Open.#274 In IcebergAI/IcebergCTI;/admin/config leaks credential-bearing URLs (inline proxy creds, Slack webhook URL) despite 'never their value' promise
fable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingsecuritySecurity hardening / vulnerabilitySecurity hardening / vulnerabilityStatus: Open.#273 In IcebergAI/IcebergCTI;Body-size limit returns misleading 400 instead of documented 413 on chunked/streaming bodies
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: mediumImportant, not blockingImportant, not blockingStatus: Open.#272 In IcebergAI/IcebergCTI;Report editor: stale-write 409 is silent and unrecoverable under the one-save model
bugSomething isn't workingSomething isn't workingfable-reviewCorrectness findings from Claude Fable code reviewCorrectness findings from Claude Fable code reviewpriority: highDo first / blocks go-publicDo first / blocks go-publicStatus: Open.#271 In IcebergAI/IcebergCTI;