Issues

• Integration checks fail in CI job (and locally)

  Foxboron/sbctl#516 · Filter by author Fahrj opened on Oct 23, 2026

• sbctl verify returns exit code 0 when a binary is unsigned/foreign-signed (not in files.json) but UI prints ✗

  Foxboron/sbctl#512 · Filter by author OoohPossum opened on Oct 3, 2026

• Monitors disabled after secure boot

  Foxboron/sbctl#506 · Filter by author ynot01 opened on Jul 29, 2026
  1

• sbctl lacks handling for some edge cases involving already signed EFI payloads

  Foxboron/sbctl#502 · Filter by author jackmio32 opened on Jul 14, 2026

• Unable to list files if a directory that should contain an enrolled file is missing

  bug
  Foxboron/sbctl#501 · Filter by author hobbitalastair opened on Jul 8, 2026

• Expiration warning

  Foxboron/sbctl#500 · Filter by author hboetes opened on May 8, 2026
  4

• Remove 2011 Microsoft CA keys

  Foxboron/sbctl#499 · Filter by author Ignatius18652 opened on May 2, 2026
  5

• Support PQC and update crypto defaults

  Foxboron/sbctl#498 · Filter by author Foxboron opened on Apr 29, 2026

• Cannot add file to database if it's already signed

  Foxboron/sbctl#496 · Filter by author lauhayden opened on Apr 28, 2026

• 91-sbctl.install missing '-s' flag causes signed kernels to not be tracked

  Foxboron/sbctl#494 · Filter by author aaron-panic opened on Mar 30, 2026

• sbctl verify silently ignores kernels loaded from outside the ESP

  Foxboron/sbctl#490 · Filter by author Deftera186 opened on Feb 10, 2026
  3

• Feature Request: verify does not indicate an update when .signed output and EFI source differ

  Foxboron/sbctl#488 · Filter by author tolga9009 opened on Jan 25, 2026

• Blobs in self-tests

  Foxboron/sbctl#477 · Filter by author jas4711 opened on Nov 12, 2025
  3

• [Feature Request]: Ignore files/directory in ESP directory

  Foxboron/sbctl#475 · Filter by author emansom opened on Nov 2, 2025

• support configuring path instead of hardcoded /var/lib/sbctl

  enhancement
  Foxboron/sbctl#472 · Filter by author thebigbone opened on Oct 30, 2025
  1

• Yubikey Firmware < 5.7 don't support RSA4096 for key creation

  Foxboron/sbctl#471 · Filter by author DeNo64 opened on Oct 29, 2025
  1

• Feature request: Support mdadm raid for ESP partitions

  Foxboron/sbctl#468 · Filter by author Halfwalker opened on Oct 25, 2025
  2

• [Suggestion] Use AuditMode to check OPROM sig/hash validity.

  Foxboron/sbctl#465 · Filter by author schichtnudelauflauf opened on Oct 17, 2025
  1

• Sbctl is not migrating

  Foxboron/sbctl#461 · Filter by author Dynasty8614 opened on Sep 28, 2025
  3

• Figure out cross-compilation with cgo and ARM

  Foxboron/sbctl#458 · Filter by author Foxboron opened on Sep 17, 2025
  2

• Feature request: configurable certificate validity period (NotAfter)

  enhancement
  Foxboron/sbctl#451 · Filter by author jo-m opened on Jul 17, 2025
  8

• sbctl is trying to locate the kernel in a different location

  Foxboron/sbctl#448 · Filter by author rohitnanda1443 opened on Jul 1, 2025

• How to enroll just the signed auth variables, without also supplying private key?

  enhancement
  Foxboron/sbctl#434 · Filter by author h908714124 opened on Apr 29, 2025
  3

• Support transitioning to Deployed Mode

  enhancementgood first issue
  Foxboron/sbctl#429 · Filter by author quite opened on Apr 7, 2025
  1

• Detect currently set MSI Secure Boot setting

  Foxboron/sbctl#428 · Filter by author dawidpotocki opened on Apr 6, 2025