Issues

• fix(gcp): keep CPU and memory recommendation amounts on the same resource

  effort/mimpact/fewpriority/p2severity/mediumtriagedtype/bugurgency/this-quarter
  LeanerCloud/cloud-commitments-go#165 · Filter by author cristim opened on Sep 30, 2026

• fix(gcp): preserve string MEMORY amounts during recommendation conversion

  effort/simpact/fewpriority/p2severity/mediumtriagedtype/bugurgency/this-quarter
  LeanerCloud/cloud-commitments-go#164 · Filter by author cristim opened on Sep 30, 2026

• sec(httpclient): extend the dial guard to NAT64/6to4 metadata forms and unspecified addresses; track private-range SSRF

  effort/spriority/p2type/security
  LeanerCloud/cloud-commitments-go#152 · Filter by author cristim opened on Sep 28, 2026

• docs(contributing): Known Issues Sweep references a known_issues/ directory this repo doesn't have

  effort/xspriority/p3type/docs
  LeanerCloud/cloud-commitments-go#138 · Filter by author cristim opened on Sep 28, 2026

• fix(azure/pricing): Cosmos DB SKU/region mapping, Search SKU filter, exact SKU matching (follow-up to #128)

  effort/mimpact/manypriority/p1severity/hightriagedtype/bugurgency/this-sprint
  LeanerCloud/cloud-commitments-go#132 · Filter by author cristim opened on Sep 28, 2026

• build(deps): bump providers' internal pkg pin off the pre-squash split-branch pseudo-version

  effort/xsimpact/internalpriority/p2severity/lowtriagedtype/choreurgency/this-quarter
  LeanerCloud/cloud-commitments-go#129 · Filter by author cristim opened on Sep 28, 2026

• sec(deps): clear Trivy alerts inherited from the monorepo (x/crypto/openpgp, otel/sdk)

  effort/simpact/internalpriority/p2severity/mediumtriagedtype/securityurgency/this-quarter
  LeanerCloud/cloud-commitments-go#127 · Filter by author cristim opened on Sep 28, 2026

• sec(scripts): audit unanchored .gitallowed placeholder entries and DSN detector coverage (#1972 follow-up)

  effort/simpact/internalpriority/p3severity/lowtriagedtype/securityurgency/eventually
  LeanerCloud/cloud-commitments-go#125 · Filter by author cristim opened on Sep 28, 2026

• sec(money): currency is dropped at every layer boundary, so USD-denominated caps are compared against non-USD amounts [go part]

  effort/limpact/fewpriority/p2severity/hightriagedtype/bugurgency/this-quarter
  LeanerCloud/cloud-commitments-go#124 · Filter by author cristim opened on Sep 27, 2026

• chore(pkg/cmd): medium/low findings from the 2026-07-28 full review [go part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#123 · Filter by author cristim opened on Sep 27, 2026

• chore(test): medium/low findings from the 2026-07-28 full review [go part]

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#122 · Filter by author cristim opened on Sep 27, 2026

• chore(ci): medium/low findings from the 2026-07-28 full review [go part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#121 · Filter by author cristim opened on Sep 27, 2026

• chore(lint): providers/aws module lint debt invisible to root-module CI gate [go part, residual from #1342]

  effort/limpact/internalpriority/p2severity/mediumtriagedtype/choreurgency/this-quarter
  LeanerCloud/cloud-commitments-go#120 · Filter by author cristim opened on Sep 27, 2026

• Adversarial review of merged PRs -- findings tracker [go part]

  effort/xlimpact/manypriority/p1severity/hightriagedtype/bugurgency/this-sprint
  LeanerCloud/cloud-commitments-go#119 · Filter by author cristim opened on Sep 27, 2026

• ci: single-source the gosec pin across ci.yml, pre-commit.yml, Makefile and gosec-hook.sh [go part]

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#117 · Filter by author cristim opened on Sep 27, 2026

• HYG-09: CHANGELOG.md is a stale, cross-repo-copied shared file [go part]

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-go#116 · Filter by author cristim opened on Sep 27, 2026

• chore(exchange): confidence thresholds inlined and drifted from internal/api copy (A09-012) [go part]

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#115 · Filter by author cristim opened on Sep 27, 2026

• refactor(arch): provider-module fragmentation, fan-out/env-reader/savings-formula dup, pkg/errors orphan (A1/D1-D5/S1/A2) [go part]

  effort/xlimpact/internalpriority/p2severity/mediumtriagedtype/choreurgency/this-quarter
  LeanerCloud/cloud-commitments-go#114 · Filter by author cristim opened on Sep 27, 2026

• HYG: Replace 24 pre-existing em-dashes in CLAUDE.md (project rule) [go part]

  effort/simpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-go#113 · Filter by author cristim opened on Sep 27, 2026

• ci: pre-commit gosec hook, CI and Makefile enforce DIFFERENT gosec rule sets [go part]

  effort/simpact/internalpriority/p2severity/mediumtriagedtype/choreurgency/this-quarter
  LeanerCloud/cloud-commitments-go#112 · Filter by author cristim opened on Sep 27, 2026

• HYG-08: README still describes the old monorepo CLI, not this library [go part]

  effort/simpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-go#111 · Filter by author cristim opened on Sep 27, 2026

• chore(reporter): filtered-reason summary emitted in Go map order (A06-022) [go part]

  effort/mimpact/fewpriority/p3severity/lowtriagedtype/bugurgency/eventually
  LeanerCloud/cloud-commitments-go#110 · Filter by author cristim opened on Sep 27, 2026

• ARCH-10: monthlyCostFromConvertibleRI money formula duplicated verbatim, with bare 730/8760 despite named constants [go part]

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#109 · Filter by author cristim opened on Sep 27, 2026

• chore(tests): finish t.Parallel() adoption sweep across remaining packages [go part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#108 · Filter by author cristim opened on Sep 27, 2026

• sec: gitleaks .gitleaksignore has invalid/dead fingerprints; pre-commit test-exclusion gap [go part]

  bugeffort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-go#101 · Filter by author cristim opened on Sep 27, 2026