Issues

[quality] PR template's relative CONTRIBUTING.md link 404s in the pull request body, and no test guards template link form
cncf/endusers#1017 · opened on Oct 3, 2026
[quality] .vscode/settings.json is unguarded and excludes a Hugo/Docsy layout this repo does not have, while every generated directory is searched
cncf/endusers#1015 · opened on Oct 3, 2026
[quality] codeql.yml has no contract test: the only static-analysis gate can be silently disabled
cncf/endusers#1013 · opened on Oct 3, 2026
[quality] .cspell.yml contents are unguarded: 15 word entries can never match
cncf/endusers#1011 · opened on Oct 3, 2026
[quality] No test reads .markdownlint.yaml: one key turns the gating check:markdown step into a silent no-op
cncf/endusers#1009 · opened on Oct 3, 2026
[quality] .markdown-link-check.json declares fallbackHttpStatus, a key markdown-link-check never reads, and no test guards that file
cncf/endusers#1006 · opened on Oct 3, 2026
[sec-check] SVG active-content scanner is blind to payloads hidden in internal DTD entities, and every DOCTYPE-removal regex halves an internal subset
cncf/endusers#1005 · opened on Oct 3, 2026
[quality] .prettierignore and .markdownlintignore have no contract test: a stale or orphaned entry silently drops content from check:format and check:markdown
cncf/endusers#1003 · opened on Oct 3, 2026
[quality] no test pins the concurrency/cancel-in-progress contract on PR-triggered workflows
cncf/endusers#1001 · opened on Oct 3, 2026
[quality] nothing stops a gating CI job from being turned advisory with continue-on-error
cncf/endusers#999 · opened on Oct 3, 2026
[quality] two adr-contract assertions are still marked todo after the deviation they documented was fixed, so the ADR contract is unenforced
cncf/endusers#997 · opened on Oct 3, 2026
[quality] unit coverage gates are ratios over observed files, so a src/ or scripts/ module nothing imports passes --check-source 100
cncf/endusers#995 · opened on Oct 3, 2026
[sec-check] 34 high npm audit advisories from two unpatched roots (braces, http-cache-semantics) with no upstream fix
cncf/endusers#993 · opened on Oct 3, 2026
[quality] e2e coverage summary is computed only over observed files, so a src file dropping out of the run is invisible
cncf/endusers#992 · opened on Oct 3, 2026
1
[quality] e2e browser coverage is reported but never gated: report:e2e:coverage has no threshold flag
cncf/endusers#990 · opened on Oct 2, 2026
1
[quality] e2e coverage reporter's CLI entrypoint is untested, and its CI job is continue-on-error
cncf/endusers#988 · opened on Oct 2, 2026
[strategist] Define the path from personal repo to CNCF ownership (endusers.cncf.io cutover)
cncf/endusers#46 · opened on Aug 8, 2026 · Phase 2 — Community and governance
4