Issues

• [SEC-CI-8/8][P1] Unabhängiges Monitoring, Alarmierung und Incident-Runbook

  enhancementsecurity
  SpecterAoD/pqkeep#187 · Filter by author SpecterAoD opened on Nov 13, 2026

• [SEC-CI-7/8][P1] Release Trust Chain und Artefakt-Provenance härten

  enhancementsecurity
  SpecterAoD/pqkeep#186 · Filter by author SpecterAoD opened on Nov 13, 2026

• [SEC-CI-6/8][P1] Supply Chain und ausgehende Netzwerkverbindungen absichern

  enhancementsecurity
  SpecterAoD/pqkeep#185 · Filter by author SpecterAoD opened on Nov 13, 2026

• [SEC-CI-5/8][P0] OpenCode/Gemini: autorisierte Befehle und Prompt-Injection-Abwehr

  enhancementsecurity
  SpecterAoD/pqkeep#184 · Filter by author SpecterAoD opened on Nov 13, 2026

• [SEC-CI-4/8][P0] Secrets und Tokens strikt nach Vertrauensgrenzen isolieren

  enhancementsecurity
  SpecterAoD/pqkeep#183 · Filter by author SpecterAoD opened on Nov 13, 2026

• [SEC-CI-3/8][P0] Workflow-Dateien, Branches und privilegierte Änderungen schützen

  enhancementsecurity
  SpecterAoD/pqkeep#182 · Filter by author SpecterAoD opened on Nov 13, 2026

• [SEC-CI-2/8][P0] Workflow Policy: actionlint, zizmor und Least Privilege erzwingen

  enhancementsecurity
  SpecterAoD/pqkeep#181 · Filter by author SpecterAoD opened on Nov 13, 2026

• [SEC-CI-1/8][P0] GitHub Actions Security Baseline und Bedrohungsmodell

  enhancementsecurity
  SpecterAoD/pqkeep#180 · Filter by author SpecterAoD opened on Nov 13, 2026

• OpenCode mit Gemini: Integration prüfen / evaluate OpenCode integration with Gemini

  chorezukunft
  SpecterAoD/pqkeep#176 · Filter by author SpecterAoD opened on Nov 13, 2026

• Paket-Tests in eigenen VMs: Platzmangel, dpkg-Abbruch, Distributionskernel, 64-KiB-Seiten

  SpecterAoD/pqkeep#163 · Filter by author SpecterAoD opened on Nov 12, 2026

• [QA-4/4] Reproduzierbarkeit, unabhängigen Audit und Release-Gate vorbereiten

  enhancementsecurity
  SpecterAoD/pqkeep#154 · Filter by author SpecterAoD opened on Nov 9, 2026

• [QA-3/4] Parser-/IPC-Fuzzing und Berechtigungs-Matrix ausbauen

  enhancementsecurity
  SpecterAoD/pqkeep#153 · Filter by author SpecterAoD opened on Nov 9, 2026

• [QA-2/4] Deterministische Fehler-Injektion und Crash-Recovery-Tests

  enhancementsecurity
  SpecterAoD/pqkeep#152 · Filter by author SpecterAoD opened on Nov 9, 2026

• [QA-1/4] Versionierte Angriffstest-Matrix und Baseline definieren

  enhancementsecurity
  SpecterAoD/pqkeep#151 · Filter by author SpecterAoD opened on Nov 9, 2026

• [MEM-4/4] Prozess-/Handle-Grenzen und Secret-Isolation testen

  enhancementsecurity
  SpecterAoD/pqkeep#150 · Filter by author SpecterAoD opened on Nov 9, 2026

• [MEM-3/4] Crash-Dump- und Debug-Exposition reduzieren

  enhancementsecurity
  SpecterAoD/pqkeep#149 · Filter by author SpecterAoD opened on Nov 9, 2026

• [MEM-2/4] Secret-Wrapper und Zeroize-Pfade absichern

  enhancementsecurity
  SpecterAoD/pqkeep#148 · Filter by author SpecterAoD opened on Nov 9, 2026

• [MEM-1/4] Secret-Lifetime, Core-Dumps und Prozessgrenzen auditieren

  enhancementsecurity
  SpecterAoD/pqkeep#147 · Filter by author SpecterAoD opened on Nov 9, 2026

• [UP-4/4] Opt-in Update-Staging mit atomarem Rollback

  enhancementsecurity
  SpecterAoD/pqkeep#146 · Filter by author SpecterAoD opened on Nov 9, 2026

• [UP-3/4] Offline-Update-Verifier mit Negativtests

  enhancementsecurity
  SpecterAoD/pqkeep#145 · Filter by author SpecterAoD opened on Nov 9, 2026

• [UP-2/4] Signierte Release-Metadaten separat erzeugen

  enhancementsecurity
  SpecterAoD/pqkeep#144 · Filter by author SpecterAoD opened on Nov 9, 2026

• [UP-1/4] Update-Vertrauensmodell und TUF-orientierte ADR

  enhancementsecurity
  SpecterAoD/pqkeep#143 · Filter by author SpecterAoD opened on Nov 9, 2026

• [ROT-4/4] Migrations-/Restore-Prüfung und Abschlussfreigabe

  enhancementsecurity
  SpecterAoD/pqkeep#142 · Filter by author SpecterAoD opened on Nov 9, 2026

• [ROT-3/4] Expliziten Schlüsselwechsel mit Alt-Schlüssel-Erhalt vorbereiten

  enhancementsecurity
  SpecterAoD/pqkeep#141 · Filter by author SpecterAoD opened on Nov 9, 2026

• [ROT-2/4] Rotationswarnungen und Bestandsinventar read-only

  enhancementsecurity
  SpecterAoD/pqkeep#140 · Filter by author SpecterAoD opened on Nov 9, 2026