Issues

• "(optional)" not showing on the evidence page for English not first language when both evidence types are optional and allow user to submit without filling them in. AB#309468

  DFE-Digital/check-performance-data#634 · Filter by author davidgouge opened on Oct 16, 2026 · Sprint 27

• Confirm the OWASP review process items

  tech-debt
  Task

  DFE-Digital/check-performance-data#620 · Filter by author davidgouge opened on Oct 15, 2026

• Platform team requests from the OWASP review

  tech-debt
  Task

  DFE-Digital/check-performance-data#619 · Filter by author davidgouge opened on Oct 15, 2026

• Run an OWASP ZAP baseline scan against the review app

  tech-debt
  Task

  DFE-Digital/check-performance-data#618 · Filter by author davidgouge opened on Oct 15, 2026

• Pin GitHub Actions to commit SHAs and base images to digests

  tech-debt
  Task

  DFE-Digital/check-performance-data#617 · Filter by author davidgouge opened on Oct 15, 2026

• Turn on Dependabot for NuGet, Docker and GitHub Actions

  tech-debt
  Task

  DFE-Digital/check-performance-data#616 · Filter by author davidgouge opened on Oct 15, 2026

• Set Cache-Control: no-store on personal data downloads

  tech-debt
  Task

  DFE-Digital/check-performance-data#615 · Filter by author davidgouge opened on Oct 15, 2026

• Generate an SBOM for each image

  tech-debt
  Task

  DFE-Digital/check-performance-data#614 · Filter by author davidgouge opened on Oct 15, 2026

• Add NuGet lock files and restore in locked mode

  tech-debt
  Task

  DFE-Digital/check-performance-data#613 · Filter by author davidgouge opened on Oct 15, 2026

• Log access control refusals, and alert on repeated refusals

  tech-debt
  Task

  DFE-Digital/check-performance-data#612 · Filter by author davidgouge opened on Oct 15, 2026

• Remove 'unsafe-inline' and 'unsafe-eval' from the CSP script-src

  tech-debt
  Task

  DFE-Digital/check-performance-data#611 · Filter by author davidgouge opened on Oct 15, 2026

• Add frame-ancestors to the content security policy

  tech-debt
  Task

  DFE-Digital/check-performance-data#610 · Filter by author davidgouge opened on Oct 15, 2026

• Run the web container as a non-root user

  tech-debt
  Task

  DFE-Digital/check-performance-data#609 · Filter by author davidgouge opened on Oct 15, 2026

• Trust the ingress forwarded headers, and make every cookie Secure

  tech-debt
  Task

  DFE-Digital/check-performance-data#608 · Filter by author davidgouge opened on Oct 15, 2026
  

• OWASP Top 10 (2025): hardening from the controls review AB#309509

  tech-debt
  Epic

  DFE-Digital/check-performance-data#607 · Filter by author davidgouge opened on Oct 15, 2026

• E2E: choosing a radio button sometimes fails with "Clicking the checkbox did not change its state"

  bug
  Bug

  DFE-Digital/check-performance-data#584 · Filter by author dfe-lance opened on Oct 12, 2026 · Sprint 27
  1

  

• Admin - Cross cutting - Extending Exercises for specific organisations AB#307773

  DFE-Digital/check-performance-data#567 · Filter by author davidgouge opened on Oct 8, 2026 · Sprint 27
  

• Admin ability to generate synthetic data for an exercise to easily support UR / Testing AB#307770

  blocked
  DFE-Digital/check-performance-data#565 · Filter by author davidgouge opened on Oct 8, 2026

• CI: Teams or Slack messaging from GitHub for pipeline and test results

  devopsenhancement
  Task

  DFE-Digital/check-performance-data#564 · Filter by author dfe-lance opened on Oct 7, 2026 · Sprint 27
  

• CMS - add file upload for design

  enhancement
  DFE-Digital/check-performance-data#559 · Filter by author dfe-lance opened on Oct 6, 2026 · Sprint 27
  

• CMS - add custom css and icon to project

  enhancement
  DFE-Digital/check-performance-data#558 · Filter by author dfe-lance opened on Oct 6, 2026 · Sprint 27
  

• Allow LAESTAB impersonation

  Feature

  DFE-Digital/check-performance-data#529 · Filter by author Edu-GG opened on Oct 1, 2026
  

• Create clear readme for the Json schema pattern

  Task

  DFE-Digital/check-performance-data#528 · Filter by author Edu-GG opened on Oct 1, 2026
  

• [Bug] This pupil may already be on the roll page is different to the Figma design

  DFE-Digital/check-performance-data#504 · Filter by author antk43 opened on Sep 29, 2026

• Notifications - per-environment Notify identity and a frictionless local default

  devopsenhancement
  DFE-Digital/check-performance-data#488 · Filter by author dfe-lance opened on Sep 22, 2026