# Tasks

## M11-CIPipeline (0.0.11) — CI Pipeline #360 Remediation

**Orchestrator:** Claude Code
**Started:** 2026-02-12
**Branch:** develop
**Reports:** docs/reports/ci/mosaic-stack-360-\*.log

| id          | status | description                                                                                | issue | repo        | branch             | depends_on            | blocks      | agent    | started_at        | completed_at      | estimate | used      |
| ----------- | ------ | ------------------------------------------------------------------------------------------ | ----- | ----------- | ------------------ | --------------------- | ----------- | -------- | ----------------- | ----------------- | -------- | --------- |
| CI-SEC-001  | done   | Update OpenBao Docker image to fix CRITICAL CVE-2025-68121 + 4 HIGH CVEs                   | #363  | docker      | fix/ci-security    |                       | CI-SEC-003  | worker-1 | 2026-02-12T12:40Z | 2026-02-12T12:42Z | 10K      | 8K        |
| CI-SEC-002  | done   | Update Postgres Docker image/gosu to fix CRITICAL CVE-2025-68121 + 5 HIGH CVEs             | #363  | docker      | fix/ci-security    |                       | CI-SEC-003  | worker-2 | 2026-02-12T12:40Z | 2026-02-12T12:44Z | 10K      | 25K       |
| CI-SEC-003  | done   | Phase 1 verification: validate Docker image security fixes                                 | #363  | docker      | fix/ci-security    | CI-SEC-001,CI-SEC-002 | CI-PIPE-001 | orch     | 2026-02-12T12:45Z | 2026-02-12T12:47Z | 5K       | 2K        |
| CI-PIPE-001 | done   | Fix .woodpecker/api.yml lint step to depend on prisma-generate (fixes 3,919 ESLint errors) | #364  | ci          | fix/ci-pipeline    | CI-SEC-003            | CI-PIPE-002 | worker-3 | 2026-02-12T12:48Z | 2026-02-12T12:50Z | 3K       | 8K        |
| CI-PIPE-002 | done   | Phase 2 verification: validate CI pipeline fix                                             | #364  | ci          | fix/ci-pipeline    | CI-PIPE-001           | CI-CQ-001   | orch     | 2026-02-12T12:50Z | 2026-02-12T12:51Z | 3K       | 1K        |
| CI-CQ-001   | done   | Fix ruff check errors in coordinator (20 errors: StrEnum, imports, line length)            | #365  | coordinator | fix/ci-coordinator | CI-PIPE-002           | CI-CQ-002   | worker-4 | 2026-02-12T12:52Z | 2026-02-12T12:57Z | 8K       | 25K       |
| CI-CQ-002   | done   | Fix mypy error in coordinator src/main.py:144 (add_exception_handler type)                 | #365  | coordinator | fix/ci-coordinator | CI-CQ-001             | CI-CQ-003   | worker-4 | 2026-02-12T12:52Z | 2026-02-12T12:57Z | 5K       | (batched) |
| CI-CQ-003   | done   | Upgrade pip in coordinator Dockerfile and document bandit B104 finding                     | #365  | coordinator | fix/ci-coordinator | CI-CQ-002             | CI-CQ-004   | worker-4 | 2026-02-12T12:52Z | 2026-02-12T12:57Z | 5K       | (batched) |
| CI-CQ-004   | done   | Phase 3 verification: validate all coordinator fixes                                       | #365  | coordinator | fix/ci-coordinator | CI-CQ-003             |             | orch     | 2026-02-12T12:58Z | 2026-02-12T12:58Z | 5K       | 1K        |