Issues

• REVIEW_ENFORCED shows the gate was configured, not that the final revision was approved

  slsa-framework/source-tool#450 · Filter by author DrVelvetFog opened on Sep 17, 2026

• Backend drops dynamic GH_REQUIRED_CHECK_* controls, breaking ORG_SOURCE_ status-check policies

  slsa-framework/source-tool#434 · Filter by author CarlAllenn opened on Aug 10, 2026

• Org-level rulesets 404: three GetRuleset call sites pass includes_parents=false

  slsa-framework/source-tool#433 · Filter by author CarlAllenn opened on Aug 10, 2026

• ElegibleSince for provenance control may cause false L1 compliance asessment

  bug
  slsa-framework/source-tool#365 · Filter by author puerco opened on Mar 11, 2026
  1

• Warn early on unsupported repos

  slsa-framework/source-tool#326 · Filter by author puerco opened on Oct 30, 2025

• Prove generation on first tag push always fails

  bug
  slsa-framework/source-tool#308 · Filter by author puerco opened on Sep 12, 2025

• User feedback when applying controls

  readiness-pilot
  slsa-framework/source-tool#294 · Filter by author puerco opened on Aug 13, 2025
  

• Pure go clone+commit on Windows drops execution bit

  bugreadiness-pilot
  Bug

  slsa-framework/source-tool#291 · Filter by author puerco opened on Aug 13, 2025
  1

• Migrate existing repos to new actions

  readiness-final
  slsa-framework/source-tool#283 · Filter by author puerco opened on Aug 5, 2025

• Deprecate and remove old actions and workflow

  readiness-final
  slsa-framework/source-tool#282 · Filter by author puerco opened on Aug 5, 2025

• Do we need a sourcetool presubmit check?

  readiness-pilot
  slsa-framework/source-tool#275 · Filter by author puerco opened on Aug 2, 2025

• Function to find latest, uninterrumpted provenance attestation

  readiness-pilot
  slsa-framework/source-tool#272 · Filter by author puerco opened on Aug 2, 2025

• Support static token in authenticator

  readiness-pilot
  slsa-framework/source-tool#269 · Filter by author puerco opened on Aug 2, 2025

• TOCTOU Race Condition in ruleset verification

  slsa-framework/source-tool#230 · Filter by author TomHennen opened on Jul 15, 2025
  3

• Include a sequence diagram in DESIGN.md about how this all works

  slsa-framework/source-tool#202 · Filter by author TomHennen opened on Jun 12, 2025
  3

• This tool doesn't _need_ to require Pull Requests for L2 and L3.

  slsa-framework/source-tool#181 · Filter by author TomHennen opened on Jun 3, 2025

• We should try to include PR authors and reviewers in provenance

  slsa-framework/source-tool#180 · Filter by author TomHennen opened on Jun 3, 2025

• Conflation of 'Controls' and 'Properties'

  slsa-framework/source-tool#163 · Filter by author TomHennen opened on May 31, 2025
  1

• Remove 'CanonicalRepo' field from the repo policy

  cleanup
  slsa-framework/source-tool#157 · Filter by author TomHennen opened on May 30, 2025

• Document limitations imposed by the platform

  slsa-framework/source-tool#138 · Filter by author TomHennen opened on Apr 28, 2025
  3

• How to deal with repository renames (should we?)

  spec_issue
  slsa-framework/source-tool#136 · Filter by author TomHennen opened on Apr 22, 2025

• Simplify policies?

  slsa-framework/source-tool#131 · Filter by author TomHennen opened on Apr 1, 2025

• Nightly Tags in SLSA Tag Controls

  slsa-framework/source-tool#129 · Filter by author maennchen opened on Apr 1, 2025
  1

• What's needed for MVP?

  slsa-framework/source-tool#128 · Filter by author TomHennen opened on Mar 31, 2025

• It's too difficult to create the repo policy

  slsa-framework/source-tool#127 · Filter by author TomHennen opened on Mar 26, 2025