Search results

feat(attestor): command-run-ima — chain eBPF file traces to hardware root via Linux IMA + TPM (PCR-10)

ai-agentAuthored or edited by an AI agentAuthored or edited by an AI agent

enhancementNew feature or requestNew feature or request

release-hardeningSupply-chain integrity hardening for cilock releasesSupply-chain integrity hardening for cilock releases

securitySecurity hardening / vulnerability mitigationSecurity hardening / vulnerability mitigation

Status: Open.

#276 In aflock-ai/rookery;

· colek42 opened on Jun 4, 2026

feat(attestor): cloud-attestation — hardware-rooted TEE quotes (AWS Nitro, GCP Confidential VM, Azure MAA)

ai-agentAuthored or edited by an AI agentAuthored or edited by an AI agent

enhancementNew feature or requestNew feature or request

release-hardeningSupply-chain integrity hardening for cilock releasesSupply-chain integrity hardening for cilock releases

securitySecurity hardening / vulnerability mitigationSecurity hardening / vulnerability mitigation

Status: Open.

#275 In aflock-ai/rookery;

· colek42 opened on Jun 4, 2026

feat(attestor): tpm-quote — measured-boot + TPM2 quote bound to build id

ai-agentAuthored or edited by an AI agentAuthored or edited by an AI agent

enhancementNew feature or requestNew feature or request

release-hardeningSupply-chain integrity hardening for cilock releasesSupply-chain integrity hardening for cilock releases

securitySecurity hardening / vulnerability mitigationSecurity hardening / vulnerability mitigation

Status: Open.

#274 In aflock-ai/rookery;

· colek42 opened on Jun 4, 2026

Blind UX test (Argo CD, macOS): friction log + 6 priority bugs

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#225 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

cilock keyid <file> (no subcommand) silently prints help instead of erroring

bugSomething isn't workingSomething isn't working

Status: Open.

#223 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

cilock run writes partial envelope on attestor failure (no .partial marker)

bugSomething isn't workingSomething isn't working

Status: Open.

#222 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

cilock exit codes inconsistent: --trace failure = 1, sbom soft-fail = 0 (CI can't gate)

bugSomething isn't workingSomething isn't working

Status: Open.

#221 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

docs: chain-sidecar-spec.md + migration guide + CILOCK_TRACE_MODE docs

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#216 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

ops: audit logging on branch-protection bypass (enforce_admins=false)

securitySecurity hardening / vulnerability mitigationSecurity hardening / vulnerability mitigation

Status: Open.

#215 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

commandrun: CILOCK_TRACE_MODE=off — explicit no-trace fallback

enhancementNew feature or requestNew feature or request

Status: Open.

#214 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

chain: MultiChainSidecarSource — soft-failure / try-next semantics

enhancementNew feature or requestNew feature or request

Status: Open.

#213 In aflock-ai/rookery;

· colek42 opened on May 26, 2026

chain: Rekor / sigstore interop translation layer

enhancementNew feature or requestNew feature or request

Status: Open.

#212 In aflock-ai/rookery;

· colek42 opened on May 26, 2026