Commit Graph
10 Commits
Author SHA1 Message Date
Ahmed Allam e82ee2c31e Contextual CVSS as a full 8-metric breakdown, computed like a normal finding 2026-08-17 09:45:04 +00:00
Ahmed Allam 256df30d28 reporting: require the source-to-sink trace in reachability evidence, not just CVSS reasoning 2026-08-17 09:11:59 +00:00
Ahmed Allam 360c549278 reporting: drop per-metric contextual CVSS reasoning, keep the summary 2026-08-17 09:08:07 +00:00
Ahmed Allam 474fb25bf3 feat(reporting): contextual CVSS environmental metrics on dependency reports 2026-08-17 09:05:20 +00:00
Ahmed AllamandAhmed Allam b69af37cb2 feat(report): keep dependency findings from distinct manifests separate in dedupe 2026-08-06 02:20:46 +03:00
Ahmed AllamandAhmed Allam 72cb15a20a feat(reporting): require repo-relative manifest_path on dependency CVE findings 2026-08-06 02:20:46 +03:00
Alex SchapiroandAhmed Allam 97336d53e4 feat(reporting): structured reachability evidence ladder for dependency CVE findings 2026-08-06 00:25:08 +03:00
657aa5cbe6 feat(reporting): record transitive dependency chain on SCA findings (#971)
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-08-04 12:34:52 -07:00
a87bfb4881 fix(reporting): require advisory_cvss for dependency findings + add SCA TUI renderer (#753)
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-07-12 17:31:49 -07:00
alex sandGitHub 4537f33f11 Add dependency reporting fields (#751) 2026-07-12 15:30:33 -04:00