Issues

• Guardrail: forbid acceptance-only Rego from declaring production package lib.* / package release.* namespaces

  documentationready-for-triageready-to-codetooling
  conforma/policy#1853 · Filter by author fullsend-ai-retro opened on Sep 15, 2026
  3

• Require CODEOWNERS approval on main so the review agent's requires-manual-review label actually blocks bot auto-merge

  github_actionsready-for-triagetoolingtriaged
  conforma/policy#1850 · Filter by author fullsend-ai-retro opened on Sep 15, 2026
  2

• Document rule_data defaults inclusion criteria and priority hierarchy in AGENTS.md

  documentationgood first issueready-for-triageready-to-codesize: S
  conforma/policy#1824 · Filter by author fullsend-ai-retro opened on Aug 27, 2026
  4

• Add enforcement-delegation collection-parity review item to AGENTS.md

  documentationready-for-triageready-to-codesize: XS
  conforma/policy#1811 · Filter by author fullsend-ai-retro opened on Aug 13, 2026
  3

• Update stale THREAT_MODEL.md references to removed data.trusted_task_rules architecture

  documentationready-for-triageready-to-code
  conforma/policy#1807 · Filter by author fullsend-ai-retro opened on Aug 13, 2026
  3

• Add direct unit testing requirement for new helper functions to AGENTS.md

  documentationready-to-code
  conforma/policy#1802 · Filter by author fullsend-ai-retro opened on Aug 12, 2026
  3

• Add cross-file consistency review guidance to AGENTS.md

  documentationready-for-triageready-to-code
  conforma/policy#1801 · Filter by author fullsend-ai-retro opened on Aug 12, 2026
  3

• Add CycloneDX/SPDX implementation parity review checklist to AGENTS.md

  documentationready-for-triageready-to-code
  conforma/policy#1799 · Filter by author fullsend-ai-retro opened on Aug 11, 2026
  3

• Document testing expectations for new collection definitions in AGENTS.md

  documentationgood first issueready-for-triageready-to-codesize: XS
  conforma/policy#1776 · Filter by author fullsend-ai-retro opened on Jul 15, 2026
  3

• Add effective_on review checklist item to AGENTS.md for new deny rules

  documentationgood first issueready-to-code
  conforma/policy#1760 · Filter by author fullsend-ai-retro opened on Jun 24, 2026
  3

• Add Rego/OPA paradigm guidance to AGENTS.md to reduce false-positive review findings

  documentationready-to-code
  conforma/policy#1757 · Filter by author fullsend-ai-retro opened on Jun 22, 2026
  3

• Document default values for CVE rule data keys in user-facing docs

  documentationgood first issueready-to-code
  conforma/policy#1753 · Filter by author st3penta opened on Jun 19, 2026
  3

• Replace "Code tampering detected" with a less alarmist message

  enhancementfeaturegood first issuetriaged
  conforma/policy#1752 · Filter by author st3penta opened on Jun 19, 2026
  2

• Add policy rule to prevent variable substitution in Tekton Task script blocks

  enhancementfeaturegood first issuetriaged
  conforma/policy#1751 · Filter by author st3penta opened on Jun 19, 2026
  2

• Document the expected policy rule result format and result_helper functions in the authoring guide

  documentationenhancementgood first issueready-to-code
  conforma/policy#1750 · Filter by author st3penta opened on Jun 19, 2026
  3

• Document how to use time-based data (effective_on) in policy rule data

  documentationgood first issue
  conforma/policy#1749 · Filter by author st3penta opened on Jun 19, 2026

• Add exclusion information to per-rule documentation

  documentationenhancementgood first issueready-to-code
  conforma/policy#1748 · Filter by author st3penta opened on Jun 19, 2026
  3

• Document how to use policy/lib functions in custom policies

  documentationgood first issue
  conforma/policy#1747 · Filter by author st3penta opened on Jun 19, 2026

• Support policy decisions from multiple attestations

  conforma/policy#1315 · Filter by author arewm opened on Mar 12, 2025
  2

• Migrate 'enterprise-contract/ec-policies' to 'Webhook To Fedora Messaging'

  conforma/policy#1214 · Filter by author gridhead opened on Nov 6, 2024

• Documentation of rule data

  documentationgood first issue
  conforma/policy#1205 · Filter by author zregvart opened on Oct 24, 2024

• Schema validation for clair report

  good first issuetooling
  conforma/policy#1199 · Filter by author zregvart opened on Oct 18, 2024
  3

• Document how to bundle policies

  documentationgood first issue
  conforma/policy#1119 · Filter by author lcarva opened on Aug 30, 2024

• Consolidate future_required_tasks_found and required_tasks_found

  conforma/policy#1026 · Filter by author lcarva opened on Jun 5, 2024

• Overlap of attestation_task_bundle and trusted_task

  conforma/policy#1023 · Filter by author zregvart opened on Jun 4, 2024