Issues

• feat: add EV-10 Bicep generation evidence

  evalsfeatureinstructionspriority-3
  microsoft/hve-core#3156 · Filter by author WilliamBerryiii opened on Oct 7, 2026
  

• fix(scripts): eval annotations interpolate paths into workflow commands without encoding

  bugneeds-triage
  microsoft/hve-core#3153 · Filter by author WilliamBerryiii opened on Oct 6, 2026
  

• fix(skills): pr-reference readers return empty or wrong results for generate.ps1 output and undercount diff lines

  bugpriority-2scriptsskillstesting
  microsoft/hve-core#3149 · Filter by author WilliamBerryiii opened on Oct 6, 2026
  1

• VEX detection: untriaged vulnerabilities found

  automatedneeds-triagesecurity
  microsoft/hve-core#3147 · Filter by author github-actions opened on Oct 6, 2026

• [Security] Replace URI fixture that resembles a PostgreSQL credential

  microsoft/hve-core#3145 · Filter by author icecold009 opened on Oct 6, 2026

• Track upstream fixes for generated agentic-workflow scan findings

  agentic-workflowssecuritytech-debt
  microsoft/hve-core#3137 · Filter by author WilliamBerryiii opened on Oct 5, 2026
  2

  

• fix(skills): bash vally safety lint exits 1 on every input

  microsoft/hve-core#3135 · Filter by author MohammedAlkindi opened on Oct 5, 2026

• feat(skills): add portable root cause analysis workflow

  featurepriority-3skills
  microsoft/hve-core#3134 · Filter by author eugeneboms opened on Oct 5, 2026

• fix(security): dependency-pinning misses list-item run steps and npm options before install

  microsoft/hve-core#3133 · Filter by author MohammedAlkindi opened on Oct 5, 2026

• fix(evals): moderation record ids drop the leading dot of .github

  microsoft/hve-core#3132 · Filter by author MohammedAlkindi opened on Oct 5, 2026

• fix(skills): read-diff.sh --summary reports +0/-0 for every file

  microsoft/hve-core#3131 · Filter by author MohammedAlkindi opened on Oct 5, 2026

• chore(workflows): decide the agentic maintenance operations and clear its generated scan findings

  agentic-workflowsmaintenanceneeds-investigationsecurity
  microsoft/hve-core#3130 · Filter by author WilliamBerryiii opened on Oct 5, 2026
  

• docs: Update stale documentation - docs/planning/adrs/0009-anchor-vex-trust-to-reusable-workflow.md

  automateddocumentationneeds-triagestale-docs
  microsoft/hve-core#3128 · Filter by author github-actions opened on Oct 5, 2026

• docs: Update stale documentation - docs/planning/adrs/0005-adopt-sssc-planner-agent-ecosystem.md

  automateddocumentationneeds-triagestale-docs
  microsoft/hve-core#3127 · Filter by author github-actions opened on Oct 5, 2026

• [Security][high] Vulnerabilities

  automatedcode-scanningsecurity
  microsoft/hve-core#3125 · Filter by author github-actions opened on Oct 5, 2026
  

• [Security][high] Branch-Protection

  automatedcode-scanningsecurity
  microsoft/hve-core#3124 · Filter by author github-actions opened on Oct 5, 2026

• [demo-material-author] Authored L100–L400 demo content for hve-core-general

  demo-material-author
  microsoft/hve-core#3123 · Filter by author github-actions opened on Oct 5, 2026

• docs: update scripts/README.md for new scripts/ci directory

  agent-readydocumentationneeds-triage
  microsoft/hve-core#3119 · Filter by author github-actions opened on Oct 4, 2026

• feat(workflows): warn maintainers when fork PRs add or modify secret references

  agentic-workflowsfeatureneeds-triagesecurity
  microsoft/hve-core#3118 · Filter by author WilliamBerryiii opened on Oct 4, 2026
  

• chore(workflows): retire or restore the release/prerelease and release/stable branch ladder

  automationciextensionmaintenanceworkflows
  microsoft/hve-core#3117 · Filter by author jkim323 opened on Oct 4, 2026
  1

  

• fix(workflows): clear Poutine alerts, remove scanner suppressions, and harden CI supply chain

  securityworkflows
  microsoft/hve-core#3112 · Filter by author WilliamBerryiii opened on Oct 3, 2026
  4

  

• chore(deps): bump braces and http-cache-semantics when upstream patches ship

  dependenciessecurity
  microsoft/hve-core#3109 · Filter by author WilliamBerryiii opened on Oct 3, 2026
  

• feat(skills): make rpi-research and RPI Agent closeouts lead with the result the user asked for

  agentsevalsfeatureskills
  microsoft/hve-core#3106 · Filter by author WilliamBerryiii opened on Oct 2, 2026
  

• feat(workflows): enable Merge Queue with fail-safe grouped validation

  featureinfrastructure
  Feature

  microsoft/hve-core#3104 · Filter by author rezatnoMsirhC opened on Oct 2, 2026
  1

  

• docs(skills): add a STRIDE security model for vscode-playwright

  documentationexperimentalneeds-triagesecurityskills
  microsoft/hve-core#3103 · Filter by author WilliamBerryiii opened on Oct 2, 2026