ansible/apme

View on GitHub

A multi-validator static analysis platform for Ansible content with deterministic and human-in-the-loop agentic remediation.

Stars: 14
Forks: 19
Open beginner issues: 0
Indexed issues: 63
Avg merge: 1d 2h
Merged PRs (30d): 37

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

63 open issues indexed

feat(gateway): add REST endpoint for CI-triggered scans (POST /api/v1/projects/{id}/scans) Open

ansible/apme#199 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(cli): support multiple target paths in `apme check` Open

ansible/apme#225 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(cli): add `--exclude` flag to `apme check` Open

ansible/apme#226 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Consider immutable violation model (frozen ViolationDict) Open

enhancement

ansible/apme#229 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Gateway: persist Proposal.source field in proposals table Open

ansible/apme#233 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
test(native): 40 implemented rules lack dedicated test coverage Open

ansible/apme#248 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
chore(gateway): add DB schema migration for SQLite Open

ansible/apme#268 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(ui): show remediation progress and completion reports, not just heartbeats Open

ansible/apme#269 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(ansible): return per-scan cache deltas instead of cumulative stats Open

ansible/apme#278 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(daemon): register standard grpc.health.v1.Health servicer for native K8s probes Open

ansible/apme#293 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
refactor(gateway): address router monolith and duplicated query patterns Open

ansible/apme#334 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
need to be able to point to local python repos not just pypi Open

ansible/apme#358 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
look at integrating osv Open

ansible/apme#366 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
dependency findings hash system doesn't unique to file Open

question

ansible/apme#367 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
remove collections from python package list Open

ansible/apme#368 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
look at adding max token usage per scan and per month Open

ansible/apme#369 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
test(catalog): tighten tested heuristic for planned rules referenced only in infra tests Open

ansible/apme#373 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(gateway): register delegated P001-P004 policy rules in ADR-041 catalog Open

ansible/apme#375 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Remove L030 (non-builtin-use) graph rule — duplicates Ansible validator M001 Open

enhancement

ansible/apme#377 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
perf(native): cache loaded graph rules across Validate requests Open

ansible/apme#388 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
RFE: AI resubmit with additonal context. Open

ansible/apme#390 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
fix(abbenay): adopt gRPC TLS (or --insecure) before bumping Abbenay past #63 Open

ansible/apme#400 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
refactor(ui): ApmeApiProvider context isolation (drop module singleton) Open

ansible/apme#447 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
refactor(ui): unify ProjectOperationState shapes with types/operation Open

ansible/apme#448 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(observability): OTLP forward-out from in-pod collector to platform/BYO collector Open

ansible/apme#457 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Critical] Validator failures silently reported as zero violations Open

bug

ansible/apme#473 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Refactor] Decompose god functions in Primary and Gateway Open

enhancement

ansible/apme#480 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Enhancement] Standardize validator servicer patterns and behavior Open

enhancement

ansible/apme#481 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Enhancement] Reduce type ignore suppressions in Gateway and proto layers Open

enhancement

ansible/apme#482 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Bug] Improve model_loader silent exception handling Open

bug

ansible/apme#483 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Tech debt] Codebase audit backlog — low-priority cleanup items Open

enhancement

ansible/apme#486 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(observability): wire OTEL_* env on Helm engine validator containers Open

ansible/apme#487 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(rules): 1 new ansible-core deprecation(s) need rules (core 2.22.0.dev0) Open

automation modernization rules

ansible/apme#495 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
ci(release): publish ansible/apme@v1 action tag with engine-address input Open

ansible/apme#501 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(gateway): persist and expose ansible_core_version in rule catalog (ADR-057) Open

ansible/apme#502 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
chore(grpc): regenerate committed *_pb2.pyi via --pyi_out Open

ansible/apme#506 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
security(galaxy): TLS/mTLS for credential-bearing gRPC hops (ADR-045) Open

ansible/apme#509 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
security(bootc): pin quadlet images to immutable digests at release Open

ansible/apme#510 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
feat(engine): expose ScanDiagnostics on SessionResult proto field Open

ansible/apme#512 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make Galaxy TLS ignore_certs configurable (not always on) Open

ansible/apme#526 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Surface failed collection installs in dependency manifest and violations Open

enhancement

ansible/apme#531 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Security][P1-P2] Gateway secrets, SSRF, Helm inline keys, insecure reporting gRPC, and unused OPA REST Open

ansible/apme#532 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Correctness][P1-P2] Session, operation, remediation, and scanner silent-failure gaps Open

ansible/apme#533 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Performance][P1] Gateway N+1 queries and engine scan/remediation hotspots Open

ansible/apme#534 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[API][P1] Deprecate legacy WebSocket `ws/operate` project operation path Open

ansible/apme#535 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[API][P2-P3] OpenAPI and REST contract completeness (ADR-060) Open

ansible/apme#536 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Reliability][P1-P3] Health probe leaks, reporting sink blocking, and Health readiness semantics Open

ansible/apme#537 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Standards][P3] Align docs/e2e and OPA env with tox-first and subprocess OPA Open

ansible/apme#538 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Agent/CLI][P1-P2] CLI and skills gaps for agent-driven check/remediate Open

ansible/apme#539 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
fix(podman): Darwin virtiofs cannot grant UID 1001 write to secrets.json without world access Open

enhancement

ansible/apme#562 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026

ansible/apme

Get new issues in your inbox