Issues

• Release manager worked examples

  documentation
  apache/tooling-trusted-releases#1708 · Filter by author alitheg opened on Oct 2, 2026

• Documentation housekeeping

  documentation
  apache/tooling-trusted-releases#1707 · Filter by author alitheg opened on Oct 2, 2026

• Discuss email template storage

  apache/tooling-trusted-releases#1704 · Filter by author dave2wave opened on Oct 1, 2026
  10

  

• Discuss: restructure of existing 3rd party distribution method

  3rd party distributiondiscussion
  apache/tooling-trusted-releases#1702 · Filter by author alitheg opened on Oct 1, 2026
  4

• Add a check for crashed quarantines

  ASVS
  apache/tooling-trusted-releases#1701 · Filter by author sbp opened on Sep 30, 2026
  1

• Discuss cross-origin opener and resource policy headers

  ASVSdiscussion
  apache/tooling-trusted-releases#1700 · Filter by author sbp opened on Sep 30, 2026
  2

  

• CSP violation reporting pilot

  ASVSdiscussion
  apache/tooling-trusted-releases#1699 · Filter by author sbp opened on Sep 30, 2026
  1

• Check ASVS 3.1.1 browser security documentation requirements

  ASVSdiscussion
  apache/tooling-trusted-releases#1698 · Filter by author sbp opened on Sep 30, 2026
  1

• Check ASVS 16.3.3 security event logging in ATR

  ASVSdiscussion
  apache/tooling-trusted-releases#1691 · Filter by author sbp opened on Sep 30, 2026
  1

• Check ASVS 16.1.1 logging inventory requirements

  ASVSdiscussion
  apache/tooling-trusted-releases#1690 · Filter by author sbp opened on Sep 30, 2026
  1

• Set explicit permissions for secrets backups

  ASVS
  apache/tooling-trusted-releases#1689 · Filter by author sbp opened on Sep 30, 2026

• Report worker-pool saturation

  ASVS
  apache/tooling-trusted-releases#1685 · Filter by author sbp opened on Sep 30, 2026

• Require HTTPS in SVN trusted-URL validation

  ASVS
  apache/tooling-trusted-releases#1684 · Filter by author sbp opened on Sep 30, 2026

• Require secure transport for the PubSub URL

  ASVS
  apache/tooling-trusted-releases#1683 · Filter by author sbp opened on Sep 30, 2026

• Explicitly configure LDAP TLS versions and cipher suites

  ASVS
  apache/tooling-trusted-releases#1682 · Filter by author sbp opened on Sep 30, 2026
  1

• Verify ASVS 13.3.4 key-rotation requirements

  ASVSquestion
  apache/tooling-trusted-releases#1681 · Filter by author sbp opened on Sep 30, 2026
  1

• Add the secondary path containment check to upload_files

  ASVS
  apache/tooling-trusted-releases#1678 · Filter by author sbp opened on Sep 30, 2026

• Add project quotas and per-release artifact quotas

  ASVS
  apache/tooling-trusted-releases#1677 · Filter by author sbp opened on Sep 30, 2026
  1

• Bound vote duration and upload content in API models

  ASVS
  apache/tooling-trusted-releases#1671 · Filter by author sbp opened on Sep 30, 2026

• Limit form list fields to 1000 items

  ASVS
  apache/tooling-trusted-releases#1670 · Filter by author sbp opened on Sep 30, 2026
  1

• Improve and document contextual validation rules

  ASVSdocumentation
  apache/tooling-trusted-releases#1667 · Filter by author sbp opened on Sep 30, 2026
  1

• Restrict hosts for remote key imports

  ASVS
  apache/tooling-trusted-releases#1665 · Filter by author sbp opened on Sep 30, 2026
  2

• Reject CR/LF in email subjects

  ASVS
  apache/tooling-trusted-releases#1664 · Filter by author sbp opened on Sep 30, 2026
  1

• Make suspicious authentication notifications

  ASVSdiscussion
  apache/tooling-trusted-releases#1655 · Filter by author sbp opened on Sep 30, 2026
  1

• Log authorization denials and add an irregular events dashboard

  ASVSpriorityUI
  apache/tooling-trusted-releases#1654 · Filter by author sbp opened on Sep 30, 2026
  1