All pull requests

Pull requests

• Tighten AS3, EA1 and EA3 false-positive handling

  #846·sholmes222 opened Oct 15, 2026·

  ·

• fix(llm): retry structured calls that return no result

  #845·Thanatos9404 opened Oct 15, 2026·

  ·
  1

  1

• fix: avoid checksum false positives and preserve archive error origins

  #844·yashrajp22 opened Oct 15, 2026Collaborator·

  ·

• Keep E1 upload flags within proved command boundaries

  #841·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  

• Reject unsupported skill options in registry mode

  #840·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  

• fix(mp3): recognize descriptive hardware reset states

  #837·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  

• fix(report): align recursive risk recommendations

  #836·chrisknvidia opened Oct 14, 2026Collaborator·

  ·
  1

  

• release: prepare v2.13.0 security and blocking fixes

  #833·yashrajp22 opened Oct 14, 2026Collaborator·

  ·

• fix(pe3): treat ignore-list code fences in Markdown as ignore-file entries

  #831·jwcastillo opened Oct 14, 2026Contributor·

  ·
  1

  2

• fix(analyzer): preserve inline JSON and nested list ownership

  #829·zozozeezee opened Oct 14, 2026Collaborator·

  ·
  5

• fix(sc8): count only the walk's own CPU time against its runtime budget

  #828·rng1995 opened Oct 14, 2026Collaborator·

  ·

• fix(analyzer): trace credentials nested in urllib request headers

  #826·efegokdemir opened Oct 14, 2026Contributor·

  ·
  1

• fix: preserve Pi workspace aliases and strengthen security regressions

  #825·yashrajp22 opened Oct 14, 2026Collaborator·

  ·

• fix(cli): reject shipped baselines in recursive multi-skill scans

  #823·chrisknvidia opened Oct 13, 2026Collaborator·

  ·
  1

• fix(tm1): use the final repeated assignment target

  #820·chrisknvidia opened Oct 12, 2026Collaborator·

  ·

• fix(p2): bound Markdown reference-comment findings

  #819·chrisknvidia opened Oct 12, 2026Collaborator·

  ·

• Harden LLM prompts against scanned-skill steering; build the image from uv.lock as non-root

  #817·oherbawi opened Oct 11, 2026·

  ·
  8

• fix(p6): avoid target-word matches inside longer identifiers

  #815·chrisknvidia opened Oct 10, 2026Collaborator·

  ·
  12

• fix(analyzer): keep checking command lines inside a word that spans lines

  #814·elliottwaves-20 opened Oct 9, 2026Contributor·

  ·
  1

  4

• fix: distinguish urllib parsing from network access

  #812·sholmes222 opened Oct 9, 2026·

  ·
  3

• feat(report): annotate static findings with structured source roles

  #811·optimization2026 opened Oct 8, 2026·

  ·
  1

• fix(providers): cut per-call cost of CLI-provider scans

  #808·rng1995 opened Oct 8, 2026Collaborator·

  ·
  6

• fix(report): keep missing references as non-blocking caveats

  #805·efegokdemir opened Oct 8, 2026Contributor·4 tasks done·

  ·
  1

  3

• Fix security phase1 phase2

  #803·KodeCharya opened Oct 8, 2026·

  ·
  2

• fix(analyzer): recognize JavaScript template literals

  #801·efegokdemir opened Oct 7, 2026Contributor·3 tasks done·

  ·
  4