-
Notifications
You must be signed in to change notification settings - Fork 2
All issues
Issue creation is restricted in this repository
- #68 · CoderSufiyan opened
on Jul 29, 2026
Issues
is:issue state:open
is:issue state:open
Search results
[Roadmap] Version plan and contribution guide
documentationImprovements or additions to documentationImprovements or additions to documentationroadmapPlanned on the public release roadmapPlanned on the public release roadmapStatus: Open.#68 In CoderSufiyan/mcp-risk;Add release-to-release security diff
area: verificationArtifact verification and report behaviorArtifact verification and report behaviorblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.1Planned for v1.1.0Planned for v1.1.0Status: Open.Add source-to-tool data-flow analysis
area: runtimeRuntime and sandbox analysisRuntime and sandbox analysisblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.1Planned for v1.1.0Planned for v1.1.0Status: Open.Add attestation transparency log
area: attestationsAttestation generation, verification, and transparencyAttestation generation, verification, and transparencyblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.0Planned for v1.0.0Planned for v1.0.0Status: Open.Add package signature verification
area: supply-chainProvenance, vulnerabilities, signatures, and SBOM workProvenance, vulnerabilities, signatures, and SBOM workblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.0Planned for v1.0.0Planned for v1.0.0Status: Open.Add attestation signing key management and rotation
area: attestationsAttestation generation, verification, and transparencyAttestation generation, verification, and transparencyblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.0Planned for v1.0.0Planned for v1.0.0Status: Open.Add reproducible verification mode
area: verificationArtifact verification and report behaviorArtifact verification and report behaviorblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.0Planned for v1.0.0Planned for v1.0.0Status: Open.Add SBOM generation for verified MCP artifacts
area: supply-chainProvenance, vulnerabilities, signatures, and SBOM workProvenance, vulnerabilities, signatures, and SBOM workblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.0Planned for v1.0.0Planned for v1.0.0Status: Open.Add stable security rule plugin API
blockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.0Planned for v1.0.0Planned for v1.0.0Status: Open.Add security rule benchmark suite
blockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 1.0Planned for v1.0.0Planned for v1.0.0Status: Open.Add multi-language MCP source scanning
area: runtimeRuntime and sandbox analysisRuntime and sandbox analysisroadmapPlanned on the public release roadmapPlanned on the public release roadmapstatus: readyDependencies are complete and work is ready to startDependencies are complete and work is ready to startversion: 1.1Planned for v1.1.0Planned for v1.1.0Status: Open.Add MCP maintainer release verification workflow
area: ciGitHub Action and CI integration workGitHub Action and CI integration workblockedBlocked by an unfinished dependencyBlocked by an unfinished dependencyroadmapPlanned on the public release roadmapPlanned on the public release roadmapversion: 0.9Planned for v0.9.0Planned for v0.9.0Status: Open.