All pull requests

Pull requests

• feat(scan): record bundled instruction digests in scan manifests

  enhancement
  #2263·mldangelo-oai opened Nov 3, 2026Collaborator·3 tasks done·

  ·
  5

• fix(sdk): report the exact rubric used for severity classification

  #2262·Aismit opened Nov 2, 2026Collaborator·3 tasks done·

  ·
  1

• refactor(plugin): share bundled severity grading with the SDK

  #2260·Aismit opened Nov 2, 2026Collaborator·3 tasks done·

  ·
  1

• refactor(cli): share the host adapter for records commands

  #2259·Aismit opened Nov 2, 2026Collaborator·3 tasks done·

  ·
  1

• feat(sdk): preserve the severity rubric across standalone scan attempts

  enhancement
  #2258·Aismit opened Nov 2, 2026Collaborator·3 tasks done·

  ·
  1

• feat(cli): check dependency exploitability from a CVE

  enhancement
  #2254·utsav-oai opened Nov 2, 2026·3 tasks done·

  ·

• fix(action): use the singular for one additional finding in the job summary

  bug
  #2252·WenJing95 opened Nov 2, 2026Contributor·3 tasks done·

  ·

• fix(cli): verify large saved scans in bounded requests

  bug
  #2251·mldangelo-oai opened Nov 2, 2026Collaborator·3 tasks done·

  ·
  1

  6

• perf(imports): avoid repeated repository and Snyk project checks

  #2187·mldangelo-oai opened Nov 1, 2026Collaborator·3 tasks done·

  ·
  5

• chore(deps): bump promptfoo from 0.124.1 to 0.125.1 in /evals/triage-finding in the third-party group across 1 directory

  dependencies
  #2188·dependabot[bot] opened Nov 1, 2026Bot·3 tasks done·

  ·
  1

• refactor(mcp): simplify reducer validation and lifecycle fixtures

  #2186·mldangelo-oai opened Nov 1, 2026Collaborator·3 tasks done·

  ·
  2

• fix(deep-scan): avoid dispatch for empty selected targets

  bug
  #2181·dipeshbabu opened Oct 31, 2026Contributor·3 tasks done·

  ·
  90

• fix(bulk-scan): identify invalid committed receipt lines

  bug
  #2180·dipeshbabu opened Oct 31, 2026Contributor·3 tasks done·

  ·
  44

• fix(cost): preserve healthy worker observations and log diagnostics

  bug
  #2178·dipeshbabu opened Oct 31, 2026Contributor·3 tasks done·

  ·
  99

• feat(classify-severity): emit structured diagnostics on hosted records

  enhancement
  #2175·kmbroai opened Oct 31, 2026Collaborator·3 tasks done·

  ·
  1

• feat(cli): export selected HackerOne reports to a private local file

  enhancement
  #2169·at-oai opened Oct 31, 2026·

  ·
  1

• feat(imports): collect Snyk Code and Open Source findings locally

  #2168·mldangelo-oai opened Oct 30, 2026Collaborator·3/5·3 tasks done·

  ·
  13

• feat(imports): collect Semgrep findings through Guardian and the Web API

  enhancement
  #2167·mldangelo-oai opened Oct 30, 2026Collaborator·2/5·3 tasks done·

  ·
  7

• feat(imports): import saved Semgrep selections through the CLI

  enhancement
  #2166·mldangelo-oai opened Oct 30, 2026Collaborator·1/5·3 tasks done·

  ·
  21

• fix(activity): preserve shell-escaped whitespace in repository paths

  bug
  #2163·RakamakadoN opened Oct 30, 2026·3 tasks done·

  ·
  37

• fix(scan): guide analysis helpers to handle cyclic references

  bug
  #2159·suhailpatel-oai opened Oct 30, 2026Collaborator·3 tasks done·

  ·
  1

• fix(cli): bound verification requests for large saved scans

  bug
  #2152·Muzzy5150 opened Oct 30, 2026·2 of 3 tasks·

  ·
  1

  26

• chore(release): 0.9.0

  #2144·github-actions[bot] opened Oct 29, 2026Bot·3 tasks·

  ·
  97

• refactor(deep-scan): merge repeated Standard scans in the host

  #2118·ianw-oai opened Oct 28, 2026Collaborator·3 tasks done·

  ·

• fix(scans): count changed text files during registration

  bugplatform:windows
  #2101·mldangelo-oai opened Oct 28, 2026Collaborator·3 tasks done·

  ·
  10