The audit's vulnerability clusters are now filed on Gitea as dank/command-center#67..#77, one issue per host-and-package cluster. Link them from omp-docs/reports/index.md and record the PR/issue references on the matching log.md entry, so a reader of the audit can find the open work without leaving the bundle.
2.1 KiB
2.1 KiB
Reports
Dated audit artifacts: one file per investigation. HTML files are the rendered reports, markdown
pages are the working data they were built from. The bundle-wide work log stays in
../log.md — a report is an artifact, not a log.
| File | Type | Description |
|---|---|---|
| fleet-security-audit-2026-10-21.html | report | Fleet security audit (blankpad, Dankclaw, Dankserver, LAN edge): findings register, per-host detail, LAN exposure map, container image pinning census, advisory cross-reference, remediation. |
| vuln-dankclaw.md | reference | CVE/GHSA pass for the 33 Dankclaw quadlet images and the Ubuntu 26.04 host — the evidence base the audit's Dankclaw rows rest on. |
| vuln-dankserver.md | reference | CVE/GHSA pass for Dankserver (containers + host), blankpad's Arch package set, and danklivingroom's OpenSSH. |
| sleep-wake-investigation-report.html | report | blankpad suspend/resume investigation, 2026-09-28. |
Open remediation work is tracked as Gitea issues, one per host-and-package cluster: #67 Ubuntu OpenSSH on both servers · #68 gnome-remote-desktop + rpcbind · #69 SurrealDB · #70 Alpine image bases · #71 Pi-hole · #72 Valkey · #73 copyparty · #74 redis · #75 radiance-vllm · #76 danklivingroom SSH · #77 blankpad unfixed AVGs.