bkd-dotcom/umbra-core - 5 Help Wanted Issues

Open Issues Need Help

Docs: add a 'scan a repo in 60 seconds' quickstart to the docs site about 3 hours ago

documentation good first issue

Agent-agnostic change-control plane for coding agents. Govern Claude Code, Codex, Cursor, or any agent behind one admission pipeline — prove every change with a signed receipt.

Python

#ai-agents#claude-code#codex#coding-agents#devsecops#github-actions#prompt-injection#slsa#supply-chain-security

Executor: add an Aider adapter behind the Executor protocol about 3 hours ago

enhancement help wanted good first issue

bkd-dotcom/umbra-core

Agent-agnostic change-control plane for coding agents. Govern Claude Code, Codex, Cursor, or any agent behind one admission pipeline — prove every change with a signed receipt.

Python

#ai-agents#claude-code#codex#coding-agents#devsecops#github-actions#prompt-injection#slsa#supply-chain-security

Detection: add Kotlin support (SQLi + command injection) about 3 hours ago

enhancement help wanted good first issue

bkd-dotcom/umbra-core

Agent-agnostic change-control plane for coding agents. Govern Claude Code, Codex, Cursor, or any agent behind one admission pipeline — prove every change with a signed receipt.

Python

#ai-agents#claude-code#codex#coding-agents#devsecops#github-actions#prompt-injection#slsa#supply-chain-security

Detection: add insecure-deserialization rule for Ruby (Marshal.load / YAML.load) about 3 hours ago

enhancement good first issue

bkd-dotcom/umbra-core

Agent-agnostic change-control plane for coding agents. Govern Claude Code, Codex, Cursor, or any agent behind one admission pipeline — prove every change with a signed receipt.

Python

#ai-agents#claude-code#codex#coding-agents#devsecops#github-actions#prompt-injection#slsa#supply-chain-security

Detection: add SSRF (CWE-918) rule for JavaScript/Node about 3 hours ago

enhancement good first issue

bkd-dotcom/umbra-core

Agent-agnostic change-control plane for coding agents. Govern Claude Code, Codex, Cursor, or any agent behind one admission pipeline — prove every change with a signed receipt.

Python

#ai-agents#claude-code#codex#coding-agents#devsecops#github-actions#prompt-injection#slsa#supply-chain-security