Issues

• [build] docker-compose starts IBM's stack, so the forked frontend never runs

  BreachSAFE/breachsafe-cbom-kit-viewer#50 · Filter by author paul007ex opened on Sep 15, 2026

• [bug][backend] Every request body is echoed to stdout, producing an 85 MB container log

  BreachSAFE/breachsafe-cbom-kit-viewer#49 · Filter by author paul007ex opened on Sep 15, 2026

• [bug][backend] CBOMs at or above 10 MiB are refused by closing the socket, with no 413 and no log entry

  BreachSAFE/breachsafe-cbom-kit-viewer#48 · Filter by author paul007ex opened on Sep 15, 2026

• [ci][blocker] Backend image has never been published: a telemetry step gates the publish, and the push target is still upstream's namespace

  BreachSAFE/breachsafe-cbom-kit-viewer#47 · Filter by author paul007ex opened on Sep 15, 2026

• Add OPA compliance architecture documentation

  BreachSAFE/breachsafe-cbom-kit-viewer#46 · Filter by author paul007ex opened on Sep 13, 2026

• [docs][agents] CLAUDE.md defers to a private parent checkout an outside agent cannot load

  BreachSAFE/breachsafe-cbom-kit-viewer#45 · Filter by author paul007ex opened on Sep 13, 2026

• [bug] getComplianceLevels() tests a function reference instead of calling it, so its guard never fires

  BreachSAFE/breachsafe-cbom-kit-viewer#44 · Filter by author paul007ex opened on Sep 7, 2026

• [architecture] One compliance verdict: three implementations answer the same question and one silently substitutes for another

  BreachSAFE/breachsafe-cbom-kit-viewer#43 · Filter by author paul007ex opened on Sep 7, 2026

• [feat][home] Compliance rollup across the stored CBOMs, as an additive component to minimise upstream drift

  BreachSAFE/breachsafe-cbom-kit-viewer#42 · Filter by author paul007ex opened on Sep 7, 2026

• [feat][home] The repository page counts assets but states no posture, so it reads as an inventory tool rather than a compliance one

  BreachSAFE/breachsafe-cbom-kit-viewer#41 · Filter by author paul007ex opened on Sep 7, 2026

• [perf] Rendering time grows superlinearly with component count; an 8100-component CBOM never paints and kills the renderer

  BreachSAFE/breachsafe-cbom-kit-viewer#40 · Filter by author paul007ex opened on Sep 7, 2026
  1

• [bug] Empty table with no explanation when pagination never initialises

  BreachSAFE/breachsafe-cbom-kit-viewer#38 · Filter by author paul007ex opened on Sep 6, 2026

• [perf] getDetections re-unwraps the whole CBOM on every render

  BreachSAFE/breachsafe-cbom-kit-viewer#37 · Filter by author paul007ex opened on Sep 6, 2026

• [bug] Download CBOM exports altered component names

  BreachSAFE/breachsafe-cbom-kit-viewer#36 · Filter by author paul007ex opened on Sep 6, 2026

• [bug][ux] No loading state or timeout between fetch and first row

  BreachSAFE/breachsafe-cbom-kit-viewer#35 · Filter by author paul007ex opened on Sep 6, 2026

• [bug] The ?cbom= handoff reports nothing when it fails

  BreachSAFE/breachsafe-cbom-kit-viewer#34 · Filter by author paul007ex opened on Sep 6, 2026

• Viewer misclassifies valid path-only CycloneDX occurrences

  BreachSAFE/breachsafe-cbom-kit-viewer#32 · Filter by author paul007ex opened on Sep 4, 2026

• [ci][ux] Surface viewer build identity and prove it matches OCI provenance

  enhancement
  BreachSAFE/breachsafe-cbom-kit-viewer#28 · Filter by author paul007ex opened on Sep 3, 2026

• [bug] Embedded Download CBOM cannot preserve host artifact bytes or filename

  BreachSAFE/breachsafe-cbom-kit-viewer#25 · Filter by author paul007ex opened on Sep 3, 2026

• Retire orphaned legacy viewer package after consumer migration

  bug
  BreachSAFE/breachsafe-cbom-kit-viewer#19 · Filter by author paul007ex opened on Sep 3, 2026
  1

• [P2][supply-chain] Eliminate vulnerable Vue 2 viewer dependency closure

  bug
  BreachSAFE/breachsafe-cbom-kit-viewer#17 · Filter by author paul007ex opened on Sep 3, 2026
  1

• [ux][reliability] Remove IBM/runtime internet coupling and make embedded viewer responsive

  accessibilitybug
  BreachSAFE/breachsafe-cbom-kit-viewer#14 · Filter by author paul007ex opened on Sep 3, 2026

• [build][release] Publish a reproducible, signed and runtime-hardened viewer image from CI

  buggithub_actions
  BreachSAFE/breachsafe-cbom-kit-viewer#13 · Filter by author paul007ex opened on Sep 3, 2026

• [P2][bug] Define a bounded, origin-validated CBOM postMessage ready/ack contract

  bug
  BreachSAFE/breachsafe-cbom-kit-viewer#12 · Filter by author paul007ex opened on Sep 3, 2026
  1

• [bug][conformance] Accept valid CycloneDX 1.7 CBOMs without serialNumber or version

  bug
  BreachSAFE/breachsafe-cbom-kit-viewer#11 · Filter by author paul007ex opened on Sep 3, 2026