Open findings
122 critical
Workspace · Core Platform
Security operations overview
Orientation for current risk, active audit work, and decisions that need a human.
Active audits
31 awaiting review
Evidence freshness
96%2 sources stale
Validated fixes
38+7 this week
Audit in progress
AUD-1294 · attempt 2 · exact target main@8e9ac77
northstar/core-platform
8e9ac77Elapsed7m 18s
Observations28
- 01Resolve target snapshotSecuriteSucceeded
- 02Build dependency and route graphAtlas AgentSucceeded
- 03Run static and secret analysisTool group · 4 scannersSucceeded
- 04Validate exploitabilityAtlas AgentSucceeded
- 05Open remediation pull requestHuman gateBlocked
Needs attention
Prioritized by consequence and deadline
Approve remediation PRSEC-1427 · expires in 3h 12mPending review
Repository access degradedidentity-service · 3 audits affectedStaleReview retry planAttempt 3 failed after dependency graphFailedHighest-priority findings
Canonical findings ranked by severity, reachability, and SLA
| Finding | Severity | State | Validation | Owner | SLA |
|---|---|---|---|---|---|
 Hard-coded production signing keySEC-1427 · services/auth/src/jwt.ts:38 | Critical | PR opened | Not run | Maya Chen | 1h 42m |
 Unauthenticated admin export endpointSEC-1424 · apps/api/routes/admin/export.ts:14 | Critical | Open | Not run | Unassigned | 1h 18m |
 Container runs with privileged capabilitiesSEC-1418 · deploy/worker.yaml:66 | High | Fix proposed | Not run | Jon Bell | 21h |