All pull requests

Pull requests

• fix(sc9): avoid flagging skill helper scripts

  #749·efegokdemir opened Oct 5, 2026Contributor·

  ·
  1

  7

• fix(provider): replace the retired NVIDIA Build default

  #748·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  1

• fix(opencode): redact short credential values from scan output

  #745·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  3

• fix(batch): enforce the per-skill process timeout

  #743·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  6

• fix(analyzer): enforce deadlines for projected prompt matching

  #742·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  3

• fix(analyzer): bound static pattern regex searches

  #741·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  6

• fix(pi): make scanner output redaction linear

  #739·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  3

• fix(provider): allowlist agent CLI environment variables

  #738·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  6

• fix(provider): fail closed for unsafe Codex CLI analysis

  #737·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  1

• fix(mcp): isolate Git credentials for HTTP scans

  #736·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  6

• fix(report): contain untrusted Markdown fields

  #735·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  3

• fix(batch): render skill names and console fields literally

  #734·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  1

• fix(batch): prevent Markdown report injection

  #733·yashrajp22 opened Oct 5, 2026Collaborator·

  ·
  3

• fix(report): display terminal report text literally

  #725·YMuskrat opened Oct 4, 2026Contributor·

  ·
  1

  2

• fix(report): escape paths and reasons in Markdown tables

  #723·fallintoplace opened Oct 4, 2026Contributor·

  ·
  2

• fix(taint): detect inline urllib opener network sinks

  #721·agentsope opened Oct 4, 2026Contributor·

  ·
  1

  4

• feat(providers): accept OpenCode 1.18.31-1.18.34 version range

  #713·Yoseph-Zuskin opened Oct 3, 2026Contributor·

  ·
  1

• fix(static): stop TR2/TR3 over-reading trigger descriptions (#669)

  #709·Zhuoxi2000 opened Oct 1, 2026·

  ·
  1

  10

• fix(static): decode provable printf escapes in shell literals

  #704·Harbor404 opened Oct 1, 2026Contributor·

  ·
  1

  10

• feat(report): expose the file surface a finding landed on

  #703·Harbor404 opened Oct 1, 2026Contributor·

  ·
  1

  21

• fix(behavioral-ast): clarify subprocess execution guidance

  #701·Harbor404 opened Oct 1, 2026Contributor·

  ·
  1

  15

• feat(analyzers): inventory skill images and scan extracted text layers

  #699·Yoseph-Zuskin opened Oct 1, 2026Contributor·

  ·
  1

  18

• fix: preserve markdown context for TP4 fenced code

  #693·bniladridas opened Sep 30, 2026Contributor·

  ·
  1

  14

• fix: prefer tool output for OpenAI Opus 5 TP4

  #691·chrisknvidia opened Sep 30, 2026Collaborator·

  ·
  7

• docs: clarify Stage 2 analysis behavior

  #684·efegokdemir opened Sep 29, 2026Contributor·

  ·
  1

  6