All pull requests

Pull requests

• fix: prevent report output symlink races

  #798·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix: report incomplete batch gap-fill analysis

  #797·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix: preserve malformed LLM responses as incomplete analysis

  #796·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix(ingest): inspect unverified OMS bundle contents

  #795·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix(artifacts): inspect text behind printable binary prefixes

  #794·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix(artifacts): prevent disk paths from colliding with archive members

  #793·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix(suppression): separate local and transitive content caches

  #792·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix(pi): require confirmation for external scan inputs

  #791·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix(analyzer): index variable shell-flag scopes once per window

  #790·yashrajp22 opened Oct 7, 2026Collaborator·

  ·

• fix: encode SARIF artifact URIs per RFC 3986 and route batch progress to stderr

  #789·dajiaohuang opened Oct 7, 2026·

  ·
  2

• fix(static): keep AR2 off Python comments describing program output

  #788·rng1995 opened Oct 7, 2026Collaborator·

  ·
  3

• fix(static): detect shell decode-and-execute chains

  #786·rajusem opened Oct 7, 2026·

  ·
  1

• fix(tm3): skip umask-masked modes and report permissive umask values

  #783·ilaigold opened Oct 7, 2026·

  ·

• fix(rp1): identify the Docker image operand after options

  #782·ilaigold opened Oct 7, 2026·

  ·
  1

• fix(analyzer): end an expansion word at its enclosing double quote

  #780·elliottwaves-20 opened Oct 6, 2026·

  ·

• fix(analyzer): treat a command wrapper with no command as complete

  #779·elliottwaves-20 opened Oct 6, 2026·

  ·

• fix(mcp-rug-pull): inspect npx commands in JSON configs

  #776·efegokdemir opened Oct 6, 2026Contributor·

  ·
  1

• fix(static): honor optionalDependencies in package.json extraction

  #774·drakeo338 opened Oct 6, 2026Contributor·

  ·
  1

• fix(analyzer): report malformed dependency manifests

  #773·efegokdemir opened Oct 6, 2026Contributor·

  ·
  1

• fix(batch): score gap-fill findings

  #772·efegokdemir opened Oct 6, 2026Contributor·

  ·
  1

• fix(lp1): map scoped allowed-tools grants such as Bash(git:*) by tool name

  #768·Zhuoxi2000 opened Oct 6, 2026Contributor·

  ·
  1

  3

• fix(ci): keep release credentials out of the build checkout

  #767·yashrajp22 opened Oct 6, 2026Collaborator·

  ·

• Fix Pipenv dependency extraction and locked version checks

  #765·YMuskrat opened Oct 6, 2026Contributor·

  ·
  1

  3

• fix(batch): release pooled model slots on failures and cancellation

  #763·YMuskrat opened Oct 5, 2026Contributor·

  ·
  1

• fix(report): preserve source text for each compacted occurrence

  #762·YMuskrat opened Oct 5, 2026Contributor·

  ·
  1