2026-02-16 - CI Catalog : Components report

To triage the merge requests, please check off the box in front of the given MR.

Upon reviewing each merge request, consider pinging a component maintainer for an early review as applicable. For example, these may be MRs with large scope changes with an impact to system performance or product workflow. Keep in mind that even if the MR is in draft, it may still benefit from early feedback.

Recently opened component merge requests (created <7 days)

• components/opentofu!504 (merged) Issue id_token not in custom-command Community contribution, cicomponents, linked-issue, workflowin dev

Inactive component merge requests (updated 2+ months ago)

• components/toolkit!22 fix: adds the CI_JOB_TOKEN for ensure-job-added and not added (partialy fixes: #11 (closed)) Community contribution, cicomponents, linked-issue, workflowin dev
• components/secret-detection!14 feat(ci): add job token to curl call Category:Secret Detection, Community contribution, cicomponents, featureaddition, groupsecret detection, sectionsec, workflowin dev
• components/secret-detection!13 fix(ci): ensure secret_detection run in the same conditions ensure-job-added Community contribution, cicomponents, workflowready for review
• components/code-quality-oss/codequality-os-scanners-integration!55 Roslynator: Simplify template and add configurable NuGet signature verification (default: true) Category:Code Quality, Community contribution, cicomponents, groupstatic analysis, linked-issue, sectionsec, workflowready for review
• components/toolkit!21 docs(create-release): remove invalid job input Community contribution, cicomponents, workflowin dev
• components/container-scanning!20 Remove dependencies keyword/input Community contribution, breaking change, cicomponents, workflowready for review
• components/secret-detection!11 Small improvements to the secrets detection templates (SECRET_DETECTION_HISTORIC_SCAN, SECRET_DETECTION_EXCLUDED_PATHS, artifact) Community contribution, cicomponents, workflowready for review
• components/opentofu!330 Draft: fix: make token format in publish-policy-bundle match README.md Community contribution, cicomponents, workflowin dev
• components/code-quality-oss/codequality-os-scanners-integration!48 Add bicep linter support Community contribution, cicomponents, workflowready for review
• components/opentofu!313 Rename input param post_mr_plan_comment to post_mr_comment Community contribution, breaking change, cicomponents, workflowin dev
• components/sast!28 Allow Use of Pre-Compilation with SpotBugs Analyzer Community contribution, cicomponents, workflowin dev
• components/code-quality-oss/codequality-os-scanners-integration!27 Support base priority threshold for SAST conversion Community contribution, cicomponents, linked-issue, workflowready for review
• components/opentofu!236 Draft: feat: Enable backend support for encrypted state files in test & validate jobs Community contribution, cicomponents, linked-issue, workflowin dev
• components/opentofu!175 Terragrunt support Community contribution, cicomponents, linked-issue, workflowin dev

Old component merge requests (created 2+ months ago)

• components/opentofu!454 (merged) Allow to set oci_registry as input variables Community contribution, cicomponents, featureaddition, workflowin dev
• components/toolkit!22 fix: adds the CI_JOB_TOKEN for ensure-job-added and not added (partialy fixes: #11 (closed)) Community contribution, cicomponents, linked-issue, workflowin dev
• components/opentofu!447 Update file .gitlab-ci.yml Community contribution, cicomponents, workflowin dev
• components/secret-detection!14 feat(ci): add job token to curl call Category:Secret Detection, Community contribution, cicomponents, featureaddition, groupsecret detection, sectionsec, workflowin dev
• components/secret-detection!13 fix(ci): ensure secret_detection run in the same conditions ensure-job-added Community contribution, cicomponents, workflowready for review
• components/code-quality-oss/codequality-os-scanners-integration!55 Roslynator: Simplify template and add configurable NuGet signature verification (default: true) Category:Code Quality, Community contribution, cicomponents, groupstatic analysis, linked-issue, sectionsec, workflowready for review
• components/toolkit!21 docs(create-release): remove invalid job input Community contribution, cicomponents, workflowin dev
• components/container-scanning!20 Remove dependencies keyword/input Community contribution, breaking change, cicomponents, workflowready for review
• components/secret-detection!11 Small improvements to the secrets detection templates (SECRET_DETECTION_HISTORIC_SCAN, SECRET_DETECTION_EXCLUDED_PATHS, artifact) Community contribution, cicomponents, workflowready for review
• components/opentofu!330 Draft: fix: make token format in publish-policy-bundle match README.md Community contribution, cicomponents, workflowin dev
• components/code-quality-oss/codequality-os-scanners-integration!48 Add bicep linter support Community contribution, cicomponents, workflowready for review
• components/opentofu!313 Rename input param post_mr_plan_comment to post_mr_comment Community contribution, breaking change, cicomponents, workflowin dev
• components/sast!28 Allow Use of Pre-Compilation with SpotBugs Analyzer Community contribution, cicomponents, workflowin dev
• components/code-quality-oss/codequality-os-scanners-integration!27 Support base priority threshold for SAST conversion Community contribution, cicomponents, linked-issue, workflowready for review
• components/opentofu!236 Draft: feat: Enable backend support for encrypted state files in test & validate jobs Community contribution, cicomponents, linked-issue, workflowin dev
• components/opentofu!175 Terragrunt support Community contribution, cicomponents, linked-issue, workflowin dev

This report is generated by this triage-ops policy.