Alex Schapiro
38a7121bdd
merge origin/main into evidence-discipline branch
2026-08-07 00:25:25 +00:00
Ahmed Allam and Ahmed Allam
b69af37cb2
feat(report): keep dependency findings from distinct manifests separate in dedupe
2026-08-06 02:20:46 +03:00
Ahmed Allam and Ahmed Allam
72cb15a20a
feat(reporting): require repo-relative manifest_path on dependency CVE findings
2026-08-06 02:20:46 +03:00
Alex Schapiro and Ahmed Allam
97336d53e4
feat(reporting): structured reachability evidence ladder for dependency CVE findings
2026-08-06 00:25:08 +03:00
657aa5cbe6
feat(reporting): record transitive dependency chain on SCA findings ( #971 )
...
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com >
2026-08-04 12:34:52 -07:00
Ahmed Allam
5cf49f8527
feat(agents): evidence discipline, shared coverage ledger, and target-scoped threat models
...
Adds the negative-path half of the analysis process: a mutable coverage ledger recording what was reviewed and cleared, a target-scoped threat model shared across agents and runs, a required counterevidence pass before filing, and a fix-verification gate on inline patches.
2026-08-03 01:41:28 +00:00
Ahmed Allam
c071db79ee
x
2026-08-03 01:40:02 +00:00
a87bfb4881
fix(reporting): require advisory_cvss for dependency findings + add SCA TUI renderer ( #753 )
...
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com >
2026-07-12 17:31:49 -07:00
alex s and GitHub
4537f33f11
Add dependency reporting fields ( #751 )
2026-07-12 15:30:33 -04:00
Alex Schapiro