Issues

• Open/Closed and SRP: string if/elif tool dispatch and exit code set as a side effect of result_pipeline

  Review/Pending
  bancolombia/devsecops-engine-tools#730 · Filter by author Ludocius opened on Nov 7, 2026
  1

• Dependency Inversion: HandleScan use case imports and instantiates LicenseScanManager directly

  Review/Pending
  bancolombia/devsecops-engine-tools#729 · Filter by author Ludocius opened on Nov 7, 2026
  1

• EPSS download has no timeout and loads the full 300k-row feed into memory

  Review/Pending
  bancolombia/devsecops-engine-tools#728 · Filter by author Ludocius opened on Nov 7, 2026
  1

• Risk score: the CVE list is sent in a single HTTP header and fails with 431 for large scans

  Review/Pending
  bancolombia/devsecops-engine-tools#727 · Filter by author Ludocius opened on Nov 7, 2026
  1

• SonarQube sync: search_finding_by_id makes the report sync quadratic (O(F*S))

  Review/Pending
  bancolombia/devsecops-engine-tools#726 · Filter by author Ludocius opened on Nov 7, 2026
  1

• SonarQube get_findings: a retry restarts pagination and duplicates already-fetched issues

  Review/Pending
  bancolombia/devsecops-engine-tools#725 · Filter by author Ludocius opened on Nov 7, 2026
  1

• engine_core BreakBuild: exclusion matching evaluates every finding x exclusion pair (O(N*M))

  Review/Pending
  bancolombia/devsecops-engine-tools#724 · Filter by author Ludocius opened on Nov 7, 2026
  1

• DefectDojo and other HTTP calls have no timeout; pagination parses each page JSON 3 times

  Review/Pending
  bancolombia/devsecops-engine-tools#723 · Filter by author Ludocius opened on Nov 7, 2026
  1

• Solicitud de canal privado para un reporte de seguridad (el correo de SECURITY.md rebota)

  Review/Pending
  bancolombia/devsecops-engine-tools#722 · Filter by author Ludocius opened on Nov 5, 2026
  1

• Security report (details removed per SECURITY.md)

  Review/Pending
  bancolombia/devsecops-engine-tools#704 · Filter by author kendjm opened on Oct 4, 2026
  1

• add custom id in engine iac

  ImprovementReview/Pending
  bancolombia/devsecops-engine-tools#316 · Filter by author cajlopezor opened on Feb 18, 2025
  1