All pull requests

Pull requests

• fix(static): honor optionalDependencies in package.json extraction

  #774·drakeo338 opened Oct 6, 2026Contributor·

  ·
  1

• fix(analyzer): report malformed dependency manifests

  #773·efegokdemir opened Oct 6, 2026Contributor·

  ·
  1

• fix(batch): score gap-fill findings

  #772·efegokdemir opened Oct 6, 2026Contributor·

  ·
  1

• fix(lp1): map scoped allowed-tools grants such as Bash(git:*) by tool name

  #768·Zhuoxi2000 opened Oct 6, 2026Contributor·

  ·
  1

  3

• fix(ci): keep release credentials out of the build checkout

  #767·yashrajp22 opened Oct 6, 2026Collaborator·

  ·

• Fix Pipenv dependency extraction and locked version checks

  #765·YMuskrat opened Oct 6, 2026Contributor·

  ·
  1

  3

• fix(batch): release pooled model slots on failures and cancellation

  #763·YMuskrat opened Oct 5, 2026Contributor·

  ·
  1

• fix(report): preserve source text for each compacted occurrence

  #762·YMuskrat opened Oct 5, 2026Contributor·

  ·
  1

• fix(sarif): encode literal filenames in artifact URIs

  #761·YMuskrat opened Oct 5, 2026Contributor·

  ·
  1

  3

• fix(cli): preserve registry inputs when writing reports

  #758·YMuskrat opened Oct 5, 2026Contributor·

  ·
  1

• fix(batch): keep JSON and Markdown stdout free of diagnostics

  #755·YMuskrat opened Oct 5, 2026Contributor·

  ·
  1

• fix(taint): retain sources across reassignment

  #754·efegokdemir opened Oct 5, 2026Contributor·

  ·
  1

• fix(yara): require a browser cookie-store path in info_stealer

  #752·elliottwaves-20 opened Oct 5, 2026·

  ·
  1

• fix(sc9): avoid flagging skill helper scripts

  #749·efegokdemir opened Oct 5, 2026Contributor·

  ·
  1

  9

• fix(analyzer): enforce deadlines for projected prompt matching

  #742·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  4

• fix(analyzer): bound static pattern regex searches

  #741·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  15

• fix(report): display terminal report text literally

  #725·YMuskrat opened Oct 4, 2026Contributor·

  ·
  1

  3

• fix(taint): detect inline urllib opener network sinks

  #721·agentsope opened Oct 4, 2026Contributor·

  ·
  1

  4

• feat(providers): accept OpenCode 1.18.31-1.18.34 version range

  #713·Yoseph-Zuskin opened Oct 3, 2026Contributor·

  ·
  1

• feat(report): expose the file surface a finding landed on

  #703·Harbor404 opened Oct 1, 2026Contributor·

  ·
  1

  21

• fix(behavioral-ast): clarify subprocess execution guidance

  #701·Harbor404 opened Oct 1, 2026Contributor·

  ·
  1

  15

• feat(analyzers): inventory skill images and scan extracted text layers

  #699·Yoseph-Zuskin opened Oct 1, 2026Contributor·

  ·
  1

  18

• fix: preserve markdown context for TP4 fenced code

  #693·bniladridas opened Sep 30, 2026Contributor·

  ·
  1

  17

• fix: prefer tool output for OpenAI Opus 5 TP4

  #691·chrisknvidia opened Sep 30, 2026Collaborator·

  ·
  14

• fix: avoid defensive-language and skill-installation false positives

  #658·chrisknvidia opened Sep 28, 2026Collaborator·

  ·
  4