Commit graph

Select branches

Hide pull requests

add-creview

adversarial-verification-plugin

agentic-actions-cli-detection

c-review-workflow

codex/audit-augmentation-progressive-disclosure

codex/diagramming-code-streamline

ct-analyzer-search

darius-graham/skill-http-fuzz

feat/humanizer-skill

feat/opencode-support

feat/skill-discoverability

feat/skill-extractor

fix-semgrep-rule-creator-docs-reference

fix/fp-check-scope-hooks-to-skill

fp-check-triage-merge

frabert/diataxis-plugin

kumarak/codeql-cpp-data-extensions

kumarak/static-analysis-refactor

let-fate-decode-secrets-randunder

main

omarinuwa/constant-time-sweep

omarinuwa/final-audit-augmentation

omarinuwa/final-codeql

omarinuwa/final-firebase-apk-scanner

omarinuwa/final-fuzzing-dictionary

omarinuwa/fuzzing-obstacles-trim

omarinuwa/genotoxic-triage-script

omarinuwa/mutation-testing-survivors

omarinuwa/simplify-sarif-parsing

omarinuwa/streamline-coverage-analysis

omarinuwa/streamline-devcontainer-setup

omarinuwa/streamline-firebase-apk-scanner

omarinuwa/streamline-graph-evolution

omarinuwa/streamline-mermaid-to-proverif

omarinuwa/streamline-post-patch-validation

omarinuwa/streamline-semgrep-rule-creator

omarinuwa/streamline-slicing-code-context

omarinuwa/streamline-trailmark-structural

omarinuwa/streamline-trailmark-summary

omarinuwa/streamline-yara-rule-authoring

omarinuwa/trailmark-finding-triage-evidence

omarinuwa/trailmark-variant-neighborhood-script

trailmark-finding-triage

trailmark-review-gate

trailmark-variant-neighborhood

#1

#10

#100

#101

#102

#103

#104

#106

#107

#108

#109

#11

#110

#112

#113

#114

#115

#116

#119

#120

#122

#123

#125

#126

#127

#128

#129

#13

#130

#132

#133

#134

#135

#136

#137

#139

#140

#142

#144

#146

#147

#148

#15

#151

#152

#153

#154

#155

#156

#158

#16

#160

#161

#161

#163

#165

#166

#167

#168

#168

#169

#17

#170

#173

#175

#177

#178

#179

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#198

#20

#200

#201

#202

#203

#204

#206

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#234

#235

#236

#237

#238

#239

#24

#240

#241

#243

#243

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#26

#266

#267

#268

#269

#27

#270

#271

#272

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#29

#290

#291

#292

#294

#295

#296

#3

#30

#300

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#311

#312

#313

#314

#314

#315

#316

#317

#317

#318

#318

#319

#319

#320

#320

#321

#321

#322

#322

#323

#323

#324

#324

#325

#325

#326

#326

#327

#327

#328

#328

#329

#33

#331

#331

#332

#332

#334

#334

#335

#335

#336

#336

#337

#337

#338

#338

#339

#339

#34

#340

#340

#35

#36

#37

#38

#39

#4

#40

#41

#43

#44

#45

#46

#47

#48

#49

#5

#50

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#64

#65

#67

#68

#69

#7

#70

#71

#73

#74

#75

#76

#77

#78

#79

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#95

#96

#97

#98

#99

Mono Color

• e0a115c9f7
  Merge fb6fed1a71 into 0cc1c73a5e Sushant Poudel 2026-09-26 18:33:29 +00:00
• fb6fed1a71 feat(agentic-actions-auditor): add Vector J, unbounded tool targets Sushant Poudel 2026-09-17 04:28:23 +05:45
• 9ae006af16
  Merge bf283767b6 into 0cc1c73a5e ColorCl 2026-09-25 08:49:05 -04:00
• c29e3c366b
  Merge 4efcc666e5 into 0cc1c73a5e omarinuwa 2026-09-25 17:10:49 +08:00
• 3556cf81da
  Merge f2bdea6c4c into 0cc1c73a5e omarinuwa 2026-09-25 17:10:41 +08:00
• 4efcc666e5 genotoxic: run the Phase 3 graph triage as a script omarinuwa/genotoxic-triage-script Omar Inuwa 2026-09-25 17:10:40 +08:00
• f2bdea6c4c trailmark-variant-neighborhood: compute the neighborhood in one call omarinuwa/trailmark-variant-neighborhood-script Omar Inuwa 2026-09-25 17:10:32 +08:00
• e93f6b1fc4
  Merge 8c18e575c3 into 0cc1c73a5e omarinuwa 2026-09-25 16:45:34 +08:00
• 8c18e575c3 trailmark-finding-triage: build the evidence packet in one call omarinuwa/trailmark-finding-triage-evidence Omar Inuwa 2026-09-25 16:45:27 +08:00
• 97ee9782f6
  Merge 1d1217f12a into 0cc1c73a5e omarinuwa 2026-09-25 15:34:20 +08:00
• cac4a64ced
  Merge 0e6805bf7c into 0cc1c73a5e omarinuwa 2026-09-25 15:22:52 +08:00
• 0e6805bf7c fuzzing-obstacles: trim the body and correct which tools set the fuzzing macro omarinuwa/fuzzing-obstacles-trim Omar Inuwa 2026-09-25 15:22:44 +08:00
• 1d1217f12a constant-time-analysis: sweep architectures and levels in one call omarinuwa/constant-time-sweep Omar Inuwa 2026-09-25 15:22:07 +08:00
• 36e468f23f
  Merge f8636b50e4 into 0cc1c73a5e omarinuwa 2026-09-25 14:39:49 +08:00
• f8636b50e4 mutation-testing: collect every survivor and its source in one call omarinuwa/mutation-testing-survivors Omar Inuwa 2026-09-25 14:39:07 +08:00
• 4fabbbe725
  Merge 4bb3da9cd5 into 0cc1c73a5e omarinuwa 2026-09-25 12:54:21 +08:00
• 4bb3da9cd5 testing-handbook-skills: bundle the coverage-analysis plumbing as scripts omarinuwa/streamline-coverage-analysis Omar Inuwa 2026-09-25 12:54:01 +08:00
• 00102f7353
  Merge 44ca5c51d0 into 0cc1c73a5e omarinuwa 2026-09-24 18:38:37 -04:00
• 1760e2c9d8
  Merge cdc9a82ec7 into 0cc1c73a5e omarinuwa 2026-09-24 18:38:34 -04:00
• 057e0c5499
  Merge 1cb837dd0e into 0cc1c73a5e omarinuwa 2026-09-24 18:38:26 -04:00
• 98b78acb73
  Merge da41df7188 into 0cc1c73a5e omarinuwa 2026-09-24 18:38:20 -04:00
• 4b53295608
  Merge ac9d73570f into 0cc1c73a5e omarinuwa 2026-09-24 18:38:13 -04:00
• 54bd2bb28d
  Merge fb260936d8 into 0cc1c73a5e omarinuwa 2026-09-24 18:38:10 -04:00
• 52ab266116
  Merge 393a420ca7 into 0cc1c73a5e omarinuwa 2026-09-24 18:38:05 -04:00
• c68c87fad1
  Merge 02c5d3483d into 0cc1c73a5e omarinuwa 2026-09-24 18:38:02 -04:00
• 5ad0354fbc
  Merge 2f68492d45 into 0cc1c73a5e omarinuwa 2026-09-24 18:37:55 -04:00
• 620a13e9bc
  Merge bf2c96b204 into 0cc1c73a5e omarinuwa 2026-09-24 18:37:52 -04:00
• 1a5d1c3792
  Merge ef33093ce5 into 0cc1c73a5e omarinuwa 2026-09-24 18:37:49 -04:00
• 3506d75aca
  Merge f99f1255e8 into 0cc1c73a5e omarinuwa 2026-09-24 18:25:05 -04:00
• 04064cbd76
  Merge 230ca9a410 into 0cc1c73a5e omarinuwa 2026-09-24 14:58:52 -04:00
• 0cc1c73a5e
  deps: Bump ruff (#329) main dependabot[bot] 2026-09-24 14:57:03 -04:00
• bf283767b6 gh-cli: catch GitHub fetches that are not spelled literally ColorCl 2026-09-24 10:33:22 +02:00
• bfb9f450d2
  Merge b434e9ca34 into 32e34f8173 ColorCl 2026-09-24 07:38:46 +00:00
• b434e9ca34 gh-cli: only inspect URLs curl/wget actually fetch ColorCl 2026-09-23 21:31:00 +02:00
• 379a1dc95b
  deps: Bump ruff dependabot[bot] 2026-09-23 16:36:03 +00:00
• 02c5d3483d post-patch-validation: route the mechanical workflow phases to Haiku and verify evidence hashes in code omarinuwa/streamline-post-patch-validation Omar Inuwa 2026-09-23 15:05:00 +08:00
• ac9d73570f trailmark: verify mermaid-to-proverif models mechanically and trim the entry skill omarinuwa/streamline-mermaid-to-proverif Omar Inuwa 2026-09-23 14:22:41 +08:00
• cdc9a82ec7 trailmark: dispatch code-slice workers in a fork so the packet never enters the coordinator omarinuwa/streamline-slicing-code-context Omar Inuwa 2026-09-23 13:57:41 +08:00
• ef33093ce5 devcontainer-setup: scaffold the devcontainer with one deterministic helper omarinuwa/streamline-devcontainer-setup Omar Inuwa 2026-09-23 11:43:34 +08:00
• 393a420ca7 trailmark: build, diff, and pre-fill graph-evolution reports with one helper omarinuwa/streamline-graph-evolution Omar Inuwa 2026-09-22 20:03:34 +08:00
• f99f1255e8 yara-authoring: add a review helper and shorten the authoring entrypoint omarinuwa/streamline-yara-rule-authoring Omar Inuwa 2026-09-22 19:35:11 +08:00
• fb260936d8 semgrep-rule-creator: shorten the entrypoint and route syntax detail to references omarinuwa/streamline-semgrep-rule-creator Omar Inuwa 2026-09-22 19:34:58 +08:00
• 230ca9a410 Preserve prior SARIF PR history with reviewed production tree omarinuwa/simplify-sarif-parsing Omar Inuwa 2026-09-22 18:30:04 +08:00
• 2f68492d45 Streamline CodeQL analysis with reusable helpers omarinuwa/final-codeql Omar Inuwa 2026-09-22 18:29:37 +08:00
• f7aaad8974 Streamline SARIF parsing while preserving helper compatibility Omar Inuwa 2026-09-22 18:27:46 +08:00
• 1cb837dd0e Bundle complete audit augmentation context omarinuwa/final-audit-augmentation Omar Inuwa 2026-09-22 18:20:10 +08:00
• bf2c96b204 Add reusable fuzzing dictionary helpers with portable byte escapes omarinuwa/final-fuzzing-dictionary Omar Inuwa 2026-09-22 18:09:47 +08:00
• 44ca5c51d0 Streamline Firebase report routing and preserve scan evidence omarinuwa/final-firebase-apk-scanner Omar Inuwa 2026-09-22 18:09:03 +08:00
• da41df7188 Bundle complete Trailmark summary collection omarinuwa/streamline-trailmark-summary Omar Inuwa 2026-09-22 18:04:12 +08:00
• ca0bb7bca9 firebase: streamline APK scan reporting omarinuwa/streamline-firebase-apk-scanner Omar Inuwa 2026-09-22 07:11:36 +08:00
• 90aa5e8d2b trailmark: bump plugin version omarinuwa/streamline-trailmark-structural Omar Inuwa 2026-09-22 07:08:12 +08:00
• 7f412c43cf trailmark: streamline structural analysis Omar Inuwa 2026-09-22 07:02:44 +08:00
• 1089dbe41f fix(static-analysis): restore SARIF skill identifier Omar Inuwa 2026-09-22 06:27:45 +08:00
• f79ff44a27 style: format SARIF hook scripts Omar Inuwa 2026-09-22 06:27:45 +08:00
• b83cc38f54 static-analysis: simplify SARIF parsing workflow Omar Inuwa 2026-09-22 06:27:45 +08:00
• 32e34f8173
  deps: bump ruff (#309) dependabot[bot] 2026-09-21 16:59:41 -04:00
• de2bbfa0fd
  Merge branch 'main' into dependabot/uv/plugins/trailmark/skills/slicing-code-context/scripts/python-minor-patch-30fc5c7019 Scott Arciszewski 2026-09-21 16:13:15 -04:00
• 5e5839fe62 style: format diagram compatibility wrapper codex/diagramming-code-streamline Omar Inuwa 2026-09-22 00:16:45 +08:00
• c0b54d6843 trailmark: simplify code diagram generation Omar Inuwa 2026-09-21 19:19:58 +08:00
• 775f34cff6 trailmark: streamline audit augmentation guidance codex/audit-augmentation-progressive-disclosure Omar Inuwa 2026-09-21 16:47:48 +08:00
• 123037ec8a
  Fix skill interface metadata required by ChatGPT imports (#310) Jay Little 2026-09-16 18:05:09 -04:00
• 28f0e41d59 Clarify skill validation requirements and dependency handling Jay Little 2026-09-16 16:53:40 -04:00
• fa825f1cd4 Run skill interface hook for plugin file changes Jay Little 2026-09-16 16:47:49 -04:00
• fb88b68359 Remove plugin JSON interfaces and fix pre-commit dependencies Jay Little 2026-09-16 16:41:32 -04:00
• 221ebb55ac Fix required skill interface metadata for ChatGPT imports Jay Little 2026-09-16 16:27:02 -04:00
• 22af83ea94
  deps: bump ruff dependabot[bot] 2026-09-16 16:35:07 +00:00
• a6d1b23419
  Fix ChatGPT workspace marketplace import metadata (#308) Jay Little 2026-09-15 18:20:22 -04:00
• 1b805585c9 Fix ChatGPT workspace marketplace import metadata Jay Little 2026-09-15 17:32:53 -04:00
• 027bc47a69
  Replace post-patch validation grades with findings and gaps (#304) Dan Guido 2026-09-14 18:58:16 -04:00
• fe76c68f8b
  Merge branch 'main' into post-patch-validation-findings Dan Guido 2026-09-14 18:02:11 -04:00
• 979a3f97a6
  Publish review-walkthrough with validated HTML rendering (#307) Dan Guido 2026-09-14 18:01:57 -04:00
• 5b5b4e88d9 Fix walkthrough export, review controls, and eval coverage Dan Guido 2026-09-14 17:14:17 -04:00
• 3c53367260 Publish review-walkthrough with validated HTML rendering Dan Guido 2026-09-14 16:42:56 -04:00
• f44eeba661
  Fix second-opinion CLI integration and simplify review guidance (#306) Dan Guido 2026-09-14 16:18:36 -04:00
• dbee68173c
  Merge branch 'main' into fix/second-opinion-cli-cleanup Dan Guido 2026-09-14 16:18:24 -04:00
• db9c7b716f Fix second-opinion review preparation and invocation guidance Dan Guido 2026-09-14 16:16:20 -04:00
• 636c4eaf71 Merge main into post-patch-validation-findings Dan Guido 2026-09-14 15:58:08 -04:00
• d30ab4dd0b
  Migrate mutation analysis and bug hunting to the public plugin (#305) Dan Guido 2026-09-14 15:56:15 -04:00
• 412460e1c6 Fix second-opinion CLI integration and simplify review guidance Dan Guido 2026-09-14 15:52:00 -04:00
• f74325b8bf Migrate mutation analysis and bug hunting to the public plugin Dan Guido 2026-09-14 11:54:42 -04:00
• 9b88e01e28 Replace post-patch validation grades with findings and gaps Dan Guido 2026-09-14 11:09:44 -04:00
• eebf076ecd fix(second-opinion): remove obsolete Codex MCP server Arunim Shukla 2026-09-14 13:39:34 +05:30
• ce9ae2e2dc
  Add post-patch-validation plugin (#302) Dan Guido 2026-09-14 01:49:16 -04:00
• 2d8c37196e Fix post-patch validation CLI and artifact edge cases Dan Guido 2026-09-14 01:48:19 -04:00
• 261d0e07d4 Use public contact email for post-patch-validation Dan Guido 2026-09-14 00:47:02 -04:00
• c64f51c68e Add post-patch-validation plugin Dan Guido 2026-09-14 00:42:20 -04:00
• fd0046b574
  Merge 529d093b98 into 321ccfe628 Paweł Płatek 2026-09-09 20:20:45 -04:00
• 321ccfe628
  deps: Bump ruff (#300) dependabot[bot] 2026-09-09 16:48:14 -04:00
• f3ab3ae0a8
  deps: Bump ruff dependabot[bot] 2026-09-09 16:36:15 +00:00
• d3323cefbc
  deps: Bump the python-minor-patch group across 2 directories with 2 updates (#296) dependabot[bot] 2026-09-02 13:44:09 -04:00
• ef52a783d6
  deps: Bump the python-minor-patch group across 2 directories with 2 updates dependabot[bot] 2026-09-02 16:35:32 +00:00
• 14e5a10700
  burpsuite-project-parser: fail rather than report an unverified search as clean (#288) kz-tob 2026-09-01 09:29:40 -04:00
• 0f9c9887bb
  Merge branch 'main' into burp-parser-fail-loudly kz-tob 2026-09-01 09:11:14 -04:00
• 49699bb474
  second-opinion: Gemini CLI is EOL — move to Antigravity, and bump Codex to gpt-5.6-sol (#294) Randy Hanooman 2026-09-01 06:04:15 -07:00
• f68f8aa84f
  Merge branch 'main' into fix/second-opinion-codex-sol-antigravity kz-tob 2026-09-01 08:54:50 -04:00
• b89f6dbc35
  Update brocards source URL (#295) dm 2026-09-01 14:32:54 +02:00
• 5a3d299f7a
  Merge branch 'main' into dm/update-brocards kz-tob 2026-09-01 08:29:38 -04:00
• 52df02f2d5
  Update brocards source URL Alexis 2026-09-01 11:44:42 +02:00
• df0a02f036 Merge remote-tracking branch 'origin/burp-parser-fail-loudly' into burp-parser-fail-loudly kz-tob 2026-08-31 17:28:44 -04:00
• 270cbc40ac burpsuite-project-parser: bound the mirror by length, skip blank lines, fix the control query kz-tob 2026-08-31 17:28:24 -04:00
• 79eec36342
  Merge branch 'main' into burp-parser-fail-loudly kz-tob 2026-08-31 17:10:13 -04:00
• 6feac677af
  building-secure-contracts: require a per-pattern coverage table in the five flat scanners (#287) kz-tob 2026-08-31 17:07:57 -04:00
• 96564ddd50 burpsuite-project-parser: cap the stderr mirror, and make exit 3 resolvable kz-tob 2026-08-31 17:06:38 -04:00
• 6b0128bb8e
  Merge branch 'main' into bsc-scanner-coverage-tables kz-tob 2026-08-31 16:59:50 -04:00
• bc5991b992 agentic-actions-auditor: report unreadable in-scope references, and widen Vector I at source agentic-actions-cli-detection kz-tob 2026-08-31 16:27:51 -04:00
• 04ca267830 agentic-actions-auditor: filter every URL value, and fix two vectors that rule themselves out kz-tob 2026-08-31 15:47:30 -04:00
• c0e88c58c2 agentic-actions-auditor: cut back to the detection fix and the injection fix kz-tob 2026-08-31 15:27:21 -04:00
• 59d2eef8dd agentic-actions-auditor: make the mandated checks runnable, and filter the ref kz-tob 2026-08-31 14:59:41 -04:00
• 4b7a6556ba agentic-actions-auditor: quote repo-supplied API paths, and cut the vector sweep back kz-tob 2026-08-31 14:25:22 -04:00
• 897c4008ba burpsuite-project-parser: flush per line, and pin the classification with a suite kz-tob 2026-08-31 11:26:42 -04:00
• 9ff716d0cb Merge remote-tracking branch 'origin/main' into burp-parser-fail-loudly kz-tob 2026-08-31 11:24:07 -04:00
• 52fac6ac9f second-opinion: Gemini CLI is EOL — move to Antigravity, and bump Codex to gpt-5.6-sol rhanooman12 2026-08-31 11:10:59 -04:00
• 40a0af06d3 agentic-actions-auditor: correct the CLI flag names and reopen the agent signal kz-tob 2026-08-31 11:08:28 -04:00
• 4d39dcb30d agentic-actions-auditor: make vectors A, C, E and F reachable for a CLI agent kz-tob 2026-08-31 10:40:13 -04:00
• 1390ff50e6 agentic-actions-auditor: scope the vector files to both invocation surfaces kz-tob 2026-08-31 10:01:18 -04:00
• 51cc0ec371 Merge main into agentic-actions-cli-detection kz-tob 2026-08-31 09:56:39 -04:00
• 9645e2f89b
  agentic-actions-auditor: the pre-v1 claude-code-action inputs, and the composite-action secrets gap (#292) Max Gorbuk 2026-08-31 16:47:18 +03:00
• 43cbfb11db
  Merge branch 'main' into fix/pre-v1-claude-input-surface kz-tob 2026-08-31 09:40:44 -04:00
• ea5327d467
  fix(semgrep): three bugs that silently drop entire rulesets (#250) Eduard Milushi 2026-08-31 15:25:14 +02:00
• ab3cefeafe
  Merge branch 'main' into fix/semgrep-dropped-rulesets kz-tob 2026-08-31 09:19:47 -04:00
• 7e7a9b2a5d
  supply-chain-risk-auditor: discard undecodable cache entries (#291) iflov 2026-08-31 21:40:51 +09:00
• 5d5e808dcf agentic-actions-auditor: say how secrets cross a resolved-file boundary mkzung 2026-08-25 23:33:43 +01:00
• e539b2f6a9 agentic-actions-auditor: match the pre-v1 claude-code-action inputs mkzung 2026-08-25 23:32:49 +01:00
• 98375033a7 supply-chain-risk-auditor: discard undecodable cache entries iflov 2026-08-29 10:26:23 +09:00
• 3d083fa7f3 static-analysis: preserve TypeScript ruleset selection iflov 2026-08-29 10:26:17 +09:00
• fd6a4d32c3 building-secure-contracts: fill row 1 so the table is not a blank skeleton kz-tob 2026-08-28 16:37:01 -04:00
• e3dd90c374 burpsuite-project-parser: classify the whole stream, not the first line kz-tob 2026-08-28 16:36:23 -04:00
• 734e66d774 agentic-actions-auditor: gate unresolved on an agent signal kz-tob 2026-08-28 16:35:03 -04:00
• 5e34005b0b building-secure-contracts: build every table from the canonical pattern list kz-tob 2026-08-28 16:19:28 -04:00
• 6df3ab9204 agentic-actions-auditor: fix the overrides at source instead of in SKILL.md kz-tob 2026-08-28 16:07:32 -04:00
• c5f282daa2 agentic-actions-auditor: close the gaps the second review found kz-tob 2026-08-28 14:55:07 -04:00
• a39a28cf07 burpsuite-project-parser: fail rather than report an unverified search as clean kz-tob 2026-08-28 14:40:54 -04:00
• 8e7313ea9d
  Merge branch 'main' into agentic-actions-cli-detection kz-tob 2026-08-28 14:39:40 -04:00
• 3c9632a612 agentic-actions-auditor: carry CLI detection through analysis and reporting kz-tob 2026-08-28 14:25:47 -04:00
• 4acc84b642 building-secure-contracts: require a per-pattern coverage table in the five flat scanners kz-tob 2026-08-28 14:23:38 -04:00
• d7b3b4e3dd agentic-actions-auditor: detect agents invoked from run: blocks kz-tob 2026-08-28 14:01:13 -04:00
• d1f1575cff
  audit-context-building: add a dispatch-routing eval case (#285) kz-tob 2026-08-28 13:43:02 -04:00
• 3ba690c9b9 audit-context-building: document routes-to-workflow in the README kz-tob 2026-08-28 13:30:59 -04:00
• d79b19dda4 audit-context-building: add a dispatch-routing eval case kz-tob 2026-08-28 13:16:18 -04:00
• 007839bb34
  Merge branch 'main' into fix/semgrep-dropped-rulesets kz-tob 2026-08-27 15:37:49 -04:00
• 7dee682744
  supply-chain-risk-auditor: don't crash on Windows in the cache owner check (#284) kz-tob 2026-08-27 14:01:58 -04:00
• 472f486839
  Merge branch 'main' into fix-273-getuid-windows kz-tob 2026-08-27 13:42:26 -04:00
• 5e3322364e fix(semgrep): test the prunes, narrow join match, surface partial scans Eduard Milushi 2026-08-27 19:42:02 +02:00
• ab43b17bd8 Merge branch 'main' into fix/semgrep-dropped-rulesets Eduard Milushi 2026-08-27 19:42:02 +02:00
• 70b17ce3ad supply-chain-risk-auditor: make the encoding guard actually guard kz-tob 2026-08-27 13:06:13 -04:00
• fb9346d84b supply-chain-risk-auditor: name the encoding on every text read and write kz-tob 2026-08-27 11:50:49 -04:00
• f9950784a7
  static-analysis: detect every language run-scans.sh can scan (#281) kz-tob 2026-08-27 11:26:19 -04:00
• 87d7a66e31 supply-chain-risk-auditor: don't crash on Windows in the cache owner check kz-tob 2026-08-27 11:23:28 -04:00
• b7f8612df4 static-analysis: tell the detect phase to report cpp, not c kz-tob 2026-08-27 11:09:41 -04:00
• 0f7ae1d749
  Merge branch 'main' into static-analysis-semgrep-detection-globs kz-tob 2026-08-27 11:05:42 -04:00