Go to issue

Labels Milestones New Issue

0 Open 79 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

ai-review

bug

needs-review

ready

self-reviewed

wip

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

security-review-bot rodin (Rodin)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 79 Closed

Label

Clear labels

ai-review

bug

needs-review

ready

self-reviewed

wip

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

No assignee

security-review-bot

rodin

Bug: dev-loop worker closed PR #156 autonomously bug

#157

by rodin was closed 2026-05-15 22:56:45 +00:00

2

refactor: extract shared base-args helper in main_test.go subprocess tests

#154

by rodin was closed 2026-05-15 11:30:18 +00:00

fix: validateDocmapPath — add EvalSymlinks to close directory-symlink bypass

#150

by rodin was closed 2026-05-15 11:30:18 +00:00

feat: redesign dev-loop dispatch as pure shell script — no model reasoning in dispatch

#148

by rodin was closed 2026-05-15 08:12:02 +00:00

1

PR #140: cmd/review-bot coverage at 49.3% — does not meet ≥50% acceptance criterion ai-reviewbug

#147

by rodin was closed 2026-05-15 08:35:06 +00:00

2

PR #140: missing TestMainSubprocess_InvalidDocMapPath and TestMainSubprocess_InvalidDocMapFile tests ai-reviewbug

#146

by rodin was closed 2026-05-15 08:35:06 +00:00

2

bug: dev-loop merged PR #138 despite active REQUEST_CHANGES from security-review-bot

#145

by rodin was closed 2026-05-15 08:35:23 +00:00

0 / 2

2

bug: dev-loop merged PR #140 autonomously — no human review or assignment

#144

by rodin was closed 2026-05-15 08:35:23 +00:00

2

bug: doc-map config loaded from PR branch (untrusted) — potential data exfiltration

#143

by rodin was closed 2026-05-15 12:09:20 +00:00

1

feat: validate-docmap subcommand — CI hard-fail if source directories lack docmap coverage

#141

by rodin was closed 2026-05-15 07:39:22 +00:00

0 / 11

test: improve cmd/review-bot coverage — doc-map validation, validateurl success path, isValidateError nil

#139

by rodin was closed 2026-05-15 04:35:54 +00:00

0 / 8

feat: add doc-map input for path-scoped doc injection

#137

by rodin was closed 2026-05-15 03:40:16 +00:00

0 / 10

PR #131: cleanEnv() does not strip VCS_TYPE or VCS_URL env vars ai-reviewbug

#135

by rodin was closed 2026-05-14 22:53:44 +00:00

PR #131: githubAPIURL() function has no unit tests ai-reviewbug

#134

by rodin was closed 2026-05-14 22:53:44 +00:00

PR #131: integration test not extended for GitHub (issue #130 acceptance criterion) ai-reviewbug

#133

by rodin was closed 2026-05-14 22:53:44 +00:00

feat: implement GitHub API methods for PR review

#130

by rodin was closed 2026-05-14 22:06:21 +00:00

0 / 6

1

Rename GITEA_URL env var to generic VCS_URL for multi-host support

#125

by rodin was closed 2026-05-14 07:08:16 +00:00

Support multi-arch binary downloads in composite action

#124

by rodin was closed 2026-05-14 06:00:28 +00:00

security: add IP-level SSRF defense for action.yml Gitea path

#123

by rodin was closed 2026-05-14 19:10:20 +00:00

0 / 4

action: version resolution and binary download fail when running on GitHub

#120

by rodin was closed 2026-05-14 07:28:46 +00:00

1