Issues

• Avoid a double full stop after an API error message

  bug
  Hodeitek/hodeishield-cli#136 · Filter by author d0ubl3g opened on Oct 12, 2026 · Short term (Q4 2026)

• Use the singular in the --all-tenants summary line

  ux-design
  Hodeitek/hodeishield-cli#135 · Filter by author d0ubl3g opened on Oct 12, 2026 · Short term (Q4 2026)

• release archives and packages do not include the user information document

  docsoperations
  Hodeitek/hodeishield-cli#133 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• no written policy for third-party component due diligence and upstream reporting

  docslegal-compliancesecurity
  Hodeitek/hodeishield-cli#130 · Filter by author d0ubl3g opened on Oct 11, 2026 · Long term (2027+)

• no technical documentation, declaration of conformity or CE marking process

  docslegal-compliance
  Hodeitek/hodeishield-cli#129 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• no user information document with the contact, support period and secure-use details

  docslegal-compliance
  Hodeitek/hodeishield-cli#128 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• no published support period or end-of-support date for releases

  docslegal-compliance
  Hodeitek/hodeishield-cli#127 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)
  1

• no documented key compromise and rotation procedure for the release signing keys

  legal-complianceoperationssecurity
  Hodeitek/hodeishield-cli#126 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• no security.txt pointing to the security policy

  docssecurity
  Hodeitek/hodeishield-cli#125 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• no documented regular security testing beyond dependency checks

  legal-complianceoperationssecurity
  Hodeitek/hodeishield-cli#124 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• update notification is not in a released version and the update approach is not documented

  docslegal-compliancesecurity
  Hodeitek/hodeishield-cli#123 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• no cybersecurity risk assessment mapped to the essential requirements

  docslegal-compliancesecurity
  Hodeitek/hodeishield-cli#122 · Filter by author d0ubl3g opened on Oct 11, 2026 · Medium term (H1 2027)

• no recorded release gate for known exploitable vulnerabilities

  legal-complianceoperationssecurity
  Hodeitek/hodeishield-cli#121 · Filter by author d0ubl3g opened on Oct 11, 2026 · Long term (2027+)

• security policy does not state a disclosure timeline, a channel for notifying users, or how advisories are published

  docslegal-compliancesecurity
  Hodeitek/hodeishield-cli#120 · Filter by author d0ubl3g opened on Oct 11, 2026 · Functional beta

• after a signing subkey revocation, the package repository job cannot publish until the existing rpm packages are signed again

  operationssecurity
  Hodeitek/hodeishield-cli#114 · Filter by author d0ubl3g opened on Oct 10, 2026 · Short term (Q4 2026)
  1

• sign-in of an MSSP user has not been tested on macOS or Windows with the published version

  beta-blockeroperations
  Hodeitek/hodeishield-cli#61 · Filter by author d0ubl3g opened on Oct 6, 2026 · Functional beta
  1

• the cli is read-only and cannot change the status of alerts or risks

  feature
  Hodeitek/hodeishield-cli#60 · Filter by author d0ubl3g opened on Oct 6, 2026 · Long term (2027+)

• the cli gives no access to the inventory of ai systems

  feature
  Hodeitek/hodeishield-cli#59 · Filter by author d0ubl3g opened on Oct 6, 2026 · Medium term (H1 2027)

• no public stability commitment for commands, json output and exit codes

  docsoperations
  Hodeitek/hodeishield-cli#58 · Filter by author d0ubl3g opened on Oct 6, 2026 · Medium term (H1 2027)

• cli alerts do not show the associated MITRE ATT&CK techniques

  feature
  Hodeitek/hodeishield-cli#57 · Filter by author d0ubl3g opened on Oct 6, 2026 · Medium term (H1 2027)

• the cli gives no access to incidents or their notification status

  feature
  Hodeitek/hodeishield-cli#56 · Filter by author d0ubl3g opened on Oct 6, 2026 · Medium term (H1 2027)

• the cli cannot download the reports the app generates

  feature
  Hodeitek/hodeishield-cli#55 · Filter by author d0ubl3g opened on Oct 6, 2026 · Medium term (H1 2027)

• --severity, --category, --domain and --status filters (risks and controls) accept any text and a typo returns an empty list

  ux-design
  Hodeitek/hodeishield-cli#53 · Filter by author d0ubl3g opened on Oct 6, 2026 · Short term (Q4 2026)

• macOS and Windows binaries carry no Apple code signature or Authenticode

  operationssecurity
  Hodeitek/hodeishield-cli#50 · Filter by author d0ubl3g opened on Oct 6, 2026 · Short term (Q4 2026)
  3

• whoami does not show which tenant the credential gives access to

  feature
  Hodeitek/hodeishield-cli#48 · Filter by author d0ubl3g opened on Oct 6, 2026 · Short term (Q4 2026)