# Tasks

## M11-CIPipeline (0.0.11) — CI Pipeline #360 Remediation

**Orchestrator:** Claude Code
**Started:** 2026-02-12
**Branch:** develop
**Reports:** docs/reports/ci/mosaic-stack-360-\*.log

| id          | status      | description                                                                                | issue | repo        | branch             | depends_on            | blocks      | agent | started_at | completed_at | estimate | used |
| ----------- | ----------- | ------------------------------------------------------------------------------------------ | ----- | ----------- | ------------------ | --------------------- | ----------- | ----- | ---------- | ------------ | -------- | ---- |
| CI-SEC-001  | not-started | Update OpenBao Docker image to fix CRITICAL CVE-2025-68121 + 4 HIGH CVEs                   | #363  | docker      | fix/ci-security    |                       | CI-SEC-003  |       |            |              | 10K      |      |
| CI-SEC-002  | not-started | Update Postgres Docker image/gosu to fix CRITICAL CVE-2025-68121 + 5 HIGH CVEs             | #363  | docker      | fix/ci-security    |                       | CI-SEC-003  |       |            |              | 10K      |      |
| CI-SEC-003  | not-started | Phase 1 verification: validate Docker image security fixes                                 | #363  | docker      | fix/ci-security    | CI-SEC-001,CI-SEC-002 | CI-PIPE-001 |       |            |              | 5K       |      |
| CI-PIPE-001 | not-started | Fix .woodpecker/api.yml lint step to depend on prisma-generate (fixes 3,919 ESLint errors) | #364  | ci          | fix/ci-pipeline    | CI-SEC-003            | CI-PIPE-002 |       |            |              | 3K       |      |
| CI-PIPE-002 | not-started | Phase 2 verification: validate CI pipeline fix                                             | #364  | ci          | fix/ci-pipeline    | CI-PIPE-001           | CI-CQ-001   |       |            |              | 3K       |      |
| CI-CQ-001   | not-started | Fix ruff check errors in coordinator (20 errors: StrEnum, imports, line length)            | #365  | coordinator | fix/ci-coordinator | CI-PIPE-002           | CI-CQ-002   |       |            |              | 8K       |      |
| CI-CQ-002   | not-started | Fix mypy error in coordinator src/main.py:144 (add_exception_handler type)                 | #365  | coordinator | fix/ci-coordinator | CI-CQ-001             | CI-CQ-003   |       |            |              | 5K       |      |
| CI-CQ-003   | not-started | Upgrade pip in coordinator Dockerfile and document bandit B104 finding                     | #365  | coordinator | fix/ci-coordinator | CI-CQ-002             | CI-CQ-004   |       |            |              | 5K       |      |
| CI-CQ-004   | not-started | Phase 3 verification: validate all coordinator fixes                                       | #365  | coordinator | fix/ci-coordinator | CI-CQ-003             |             |       |            |              | 5K       |      |