Issues

• Fast mode no longer reports rules.rafter.python.general.symlink-following, even on a planted positive control

  Raftersecurity/rafter-cli#275 · Filter by author perfectlyimperfectdigital opened on Oct 10, 2026

• rafter agent scan --staged crashes with spawnSync git ENOBUFS on staged diffs over 1 MiB, and the failure presents as a secrets finding

  Raftersecurity/rafter-cli#274 · Filter by author perfectlyimperfectdigital opened on Oct 8, 2026

• Follow-up to #205: ai-scanner-evasion (the renamed R-07414) still fires on injection-defence test fixtures, descriptive prose, and a backticked <user> in docs

  Raftersecurity/rafter-cli#273 · Filter by author acknex2 opened on Oct 7, 2026

• Audit log hash chain breaks after any entry longer than 64 KB (readLastLineHash reads a fixed 64 KB tail)

  Raftersecurity/rafter-cli#271 · Filter by author perfectlyimperfectdigital opened on Oct 2, 2026

• False positives: R-9D881 on hex hashes next to secret-sounding keys, R-E4AAF on Firebase client keys despite .rafterignore, R-037D6 on U+200E in strings, R-BFBD0 on !== undefined checks

  Raftersecurity/rafter-cli#263 · Filter by author YanivRan opened on Sep 24, 2026

• rafter secrets: Betterleaks directory scan hits the fixed 60 s timeout on a normal Next.js checkout and silently falls back to the regex engine; the Betterleaks branch also ignores .gitignore

  Raftersecurity/rafter-cli#262 · Filter by author acknex2 opened on Sep 21, 2026

• .rafter.yml ignore rules silently fail to match rule_id values with a duplicated segment

  Raftersecurity/rafter-cli#247 · Filter by author workbenchdigital opened on Sep 12, 2026

• False positives: R-501EA fires on process.stdout.write in CLI scripts and R-5651E on a constant SQL string; both re-graded warning to error on unchanged files

  Raftersecurity/rafter-cli#241 · Filter by author acknex2 opened on Sep 9, 2026

• agent init --all: installs a CLAUDE.md reference to a skill it skips; --dry-run over-reports the plan; assorted doc/UX inaccuracies

  Raftersecurity/rafter-cli#231 · Filter by author JJB1 opened on Sep 7, 2026
  1

• False positives: heredoc bodies scanned as executable commands, and the regex secret engine lacks betterleaks' documentation-credential allowlist

  Raftersecurity/rafter-cli#230 · Filter by author JJB1 opened on Sep 7, 2026
  1

• Follow-up to #182: R-6EA94 still fires on SCREAMING_CASE status-enum references (e.g. 'PENDING') in prose comments

  Raftersecurity/rafter-cli#210 · Filter by author acknex2 opened on Jul 22, 2026
  3

• docs: document JSON output schemas in shared-docs/

  documentationhelp wanted
  Raftersecurity/rafter-cli#36 · Filter by author Rome-1 opened on Mar 25, 2026

• ci: add stale issue/PR cleanup workflow

  enhancementgood first issue
  Raftersecurity/rafter-cli#35 · Filter by author Rome-1 opened on Mar 25, 2026
  1

• fix: use consistent error formatting across all commands

  enhancementgood first issue
  Raftersecurity/rafter-cli#34 · Filter by author Rome-1 opened on Mar 25, 2026

• docs: expand minimal platform recipes (aider, cursor, windsurf)

  documentationgood first issue
  Raftersecurity/rafter-cli#33 · Filter by author Rome-1 opened on Mar 25, 2026
  3

• ci: add GitHub Actions auto-labeling for PRs

  enhancementgood first issue
  Raftersecurity/rafter-cli#32 · Filter by author Rome-1 opened on Mar 25, 2026

• feat: add --quiet flag to rafter agent init and install-hook

  enhancementgood first issue
  Raftersecurity/rafter-cli#31 · Filter by author Rome-1 opened on Mar 25, 2026

• test: Python test parity — add missing test files

  help wantedtesting
  Raftersecurity/rafter-cli#29 · Filter by author Rome-1 opened on Mar 25, 2026

• test: add test coverage for rafter brief command

  good first issuehelp wantedtesting
  Raftersecurity/rafter-cli#28 · Filter by author Rome-1 opened on Mar 25, 2026
  2

• pattern: add Datadog API key detection

  good first issuesecret-pattern
  Raftersecurity/rafter-cli#23 · Filter by author Rome-1 opened on Mar 25, 2026

• Add CI integration testing for backend API commands

  Raftersecurity/rafter-cli#1 · Filter by author Rome-1 opened on Feb 10, 2026