Issues

• Flaky spec: the serve command's goroutine-leak check samples once, and can catch a goroutine that has already finished

  bugcigo
  Bug

  voxpupuli/openvox-ca#556 · Filter by author bootc opened on Oct 27, 2026

• Pin the collector's index path on etcd and Redis, not only SQLite

  go
  Task

  voxpupuli/openvox-ca#555 · Filter by author bootc opened on Oct 27, 2026

• Make a truncated shutdown visible: the launcher's hard kill is silent, and nothing records drain time

  enhancementgo
  Feature

  voxpupuli/openvox-ca#549 · Filter by author bootc opened on Oct 24, 2026

• CI fails intermittently on proxy.golang.org stream resets during module downloads

  ci
  Task

  voxpupuli/openvox-ca#525 · Filter by author bootc opened on Oct 14, 2026

• Neither import nor migrate can encrypt the CA key they write

  enhancementgosecurity
  Feature

  voxpupuli/openvox-ca#516 · Filter by author bootc opened on Oct 14, 2026 · 1.0.0

• Make the backend integration suites fail when their service variable is unset

  ci
  Task

  voxpupuli/openvox-ca#509 · Filter by author bootc opened on Oct 14, 2026

• Pin every server environment binding in a spec

  enhancement
  Task

  voxpupuli/openvox-ca#508 · Filter by author bootc opened on Oct 14, 2026 · 1.0.0

• verify-release-tag does not require Container images success

  ci
  Bug

  voxpupuli/openvox-ca#502 · Filter by author bootc opened on Oct 13, 2026 · 1.0.0
  

• internal/ca: unconditional log I/O inside the cluster-wide locks extends every other replica's wait

  buggo
  Bug

  voxpupuli/openvox-ca#492 · Filter by author bootc opened on Oct 11, 2026

• Assert each GitHub Action carries one pin across .github/

  cienhancement
  Task

  voxpupuli/openvox-ca#491 · Filter by author bootc opened on Oct 11, 2026

• The CA cannot run under GODEBUG=fips140=only

  enhancementgo
  Feature

  voxpupuli/openvox-ca#490 · Filter by author bootc opened on Oct 11, 2026

• Mixin: alert when a ready CA's store holds no certificates

  enhancementsecurity
  Feature

  voxpupuli/openvox-ca#488 · Filter by author bootc opened on Oct 11, 2026
  1

• A server with backend settings but no storage_backend silently starts on an empty filesystem store

  buggosecurity
  Bug

  voxpupuli/openvox-ca#484 · Filter by author bootc opened on Oct 11, 2026 · 1.0.0
  

• Tracking: independent security audit at fb856f1, re-checked at 145cb53 (22 public findings)

  security
  Task

  voxpupuli/openvox-ca#453 · Filter by author trevor-vaughan-ai opened on Oct 10, 2026 · 1.0.0

• CI and image build hardening

  cidockersecurity
  Task

  voxpupuli/openvox-ca#451 · Filter by author trevor-vaughan-ai opened on Oct 10, 2026 · 1.0.0

• Helm chart hardening: multi-replica guard, DNS egress, off-cluster agents, quoting

  enhancementsecurity
  Task

  voxpupuli/openvox-ca#450 · Filter by author trevor-vaughan-ai opened on Oct 10, 2026 · 1.0.0
  

• Add govulncheck to CI and a CODEOWNERS file for .github/ and charts/

  cisecurity
  Task

  voxpupuli/openvox-ca#449 · Filter by author trevor-vaughan-ai opened on Oct 9, 2026 · 1.0.0
  

• Config parsing silently ignores unknown keys and unparseable booleans

  buggosecurity
  Bug

  voxpupuli/openvox-ca#436 · Filter by author trevor-vaughan-ai opened on Oct 9, 2026 · 1.0.0
  

• Metrics scrape cost grows with the certificate count, and a timeout blanks expiry series

  buggosecurity
  Bug

  voxpupuli/openvox-ca#435 · Filter by author trevor-vaughan-ai opened on Oct 9, 2026 · 1.0.0
  

• /generate's refusal to return private keys over plain HTTP can never fire

  buggosecurity
  Bug

  voxpupuli/openvox-ca#433 · Filter by author trevor-vaughan-ai opened on Oct 9, 2026 · 1.0.0

• Rate-limit /ocsp and let deployments that don't use OCSP turn it off

  enhancementgosecurity
  Feature

  voxpupuli/openvox-ca#431 · Filter by author trevor-vaughan-ai opened on Oct 9, 2026 · 1.0.0

• Honour If-Modified-Since on GET /certificate/{subject}

  enhancementgo
  Feature

  voxpupuli/openvox-ca#414 · Filter by author bootc opened on Oct 4, 2026

• Implement CRL upload: PUT /certificate_revocation_list

  enhancementgo
  Feature

  voxpupuli/openvox-ca#413 · Filter by author bootc opened on Oct 4, 2026

• Match POST /sign's answers for empty and malformed input

  buggo
  Bug

  voxpupuli/openvox-ca#412 · Filter by author bootc opened on Oct 4, 2026

• Exclude the bare auth arc OID from authorization_extensions

  buggo
  Bug

  voxpupuli/openvox-ca#409 · Filter by author bootc opened on Oct 4, 2026