lacs-project/sysknife

View on GitHub

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the command.

Stars: 12
Forks: 19
Open beginner issues: 0
Indexed issues: 28
Avg merge: 18h 57m
Merged PRs (30d): 116

Dominant language: Rust
License: MIT
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue

Open All

28 open issues indexed

HOL Registry: claim ownership and publish the plugin blog post Open

enhancement maintainer-only

lacs-project/sysknife#130 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Record a current Fedora Atomic validation run Open

blocked enhancement help wanted tedious

lacs-project/sysknife#217 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Make the syslog forwarder's enterprise number configurable (currently the RFC 5612 documentation PEN) Open

enhancement help wanted medium

lacs-project/sysknife#218 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Add E2E story coverage for the fail2ban action family Open

claimed enhancement good first issue medium

lacs-project/sysknife#219 · 6 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Story coverage map: 64 Ubuntu and cross-family actions have no story, clustered into takeable pieces Open

claimed enhancement help wanted medium

lacs-project/sysknife#233 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
The signed trail names which account asked for a change, never which one approved it Open

enhancement hard help wanted

lacs-project/sysknife#249 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
open_read_only writes: audit verify and audit export migrate the database and fail on a read-only copy Open

bug help wanted medium

lacs-project/sysknife#267 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
audit export publishes request_hash, an unsalted hash over unredacted params, with no statement of its sensitivity Open

bug help wanted medium

lacs-project/sysknife#268 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Fedora Atomic: make install has never completed, and it fails halfway Open

bug hard help wanted

lacs-project/sysknife#301 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
packages/setup claims Node 18 support, and Node 18 has been end-of-life since 2025-04-30 Open

easy enhancement good first issue help wanted twir-listed

lacs-project/sysknife#327 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Nothing requires that a tests/release/*.test.sh is actually invoked by a gate Open

claimed easy enhancement good first issue

lacs-project/sysknife#331 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
docs/cli.md and the binary disagree on the unattended flag, and omit the variable that controls audit commands Open

bug easy good first issue

lacs-project/sysknife#336 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
audit verify says OK over a wiped log, so an empty store and a deleted one read the same Open

bug help wanted medium

lacs-project/sysknife#338 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
cargo test fails intermittently on main: a test sets a process-global env var Open

bug help wanted medium twir-listed

lacs-project/sysknife#356 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
npm audit makes `frontend` fail whenever registry.npmjs.org does Open

bug easy help wanted

lacs-project/sysknife#367 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Four action pins name a version they are not, and nothing checks Open

bug help wanted medium

lacs-project/sysknife#369 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Seven links in the published book point at pages mdBook never wrote Open

claimed documentation easy good first issue

lacs-project/sysknife#371 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
The ShellCheck job passes when a search root disappears, and it never lints the two git hooks Open

bug claimed easy good first issue help wanted

lacs-project/sysknife#409 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Nothing says the suite is only observed on Linux, and a macOS contributor unclaimed a working fix over it Open

documentation easy good first issue help wanted

lacs-project/sysknife#411 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
The release publishes on a fixed sleep, and v0.15.0 half-published when crates.io was slow Open

bug claimed easy help wanted

lacs-project/sysknife#420 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
vm-env-secrets passes while atomic-vm.sh test-exec puts every provider key in the ssh command line Open

bug hard help wanted

lacs-project/sysknife#428 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
The developer guide describes a pre-commit hook that runs two checks, and tells you both to use and not to use the pre-commit framework Open

documentation easy good first issue help wanted

lacs-project/sysknife#430 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
release-rehearsal.test.sh reads its pass condition out of a fixed /tmp path, so a run that could not write reports as a refusal Open

bug easy good first issue help wanted

lacs-project/sysknife#431 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
ci-local reports PASS after a root-only assertion silently skipped, and nothing compares how CI invokes a test with how ci-local does Open

bug help wanted medium

lacs-project/sysknife#433 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Post-release manual steps for v0.16.0 Open

lacs-project/sysknife#434 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
The unattended flag implies nothing: --help and docs/cli.md both promise --yes, --max-risk high and --non-interactive Open

bug easy help wanted

lacs-project/sysknife#440 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
The action-pin check reads uses: with a line grep, so a flow-style mapping is never checked Open

bug help wanted medium

lacs-project/sysknife#441 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
The action-pin check reports success over a workflow it could not read Open

bug easy help wanted

lacs-project/sysknife#442 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

lacs-project/sysknife

Get new issues in your inbox