All pull requests

Pull requests

• Add plugin.json so the repo loads as an Agent Plugin

  #110·srid opened Oct 25, 2026·

  ·

• Move fix design out of discovery into a separate remediation step

  #109·itinance opened Oct 25, 2026·

  ·

• Treat target content as untrusted data in every agent prompt

  #108·itinance opened Oct 25, 2026·

  ·

• fix: allow artifact sharing within an attempt

  #106·Dinesh-design786 opened Oct 25, 2026·

  ·
  1

• Fix typo in README

  #105·Ted9178 opened Oct 25, 2026·

  ·

• fix: reject a coverage unit that excludes its own ordinary attack-class block

  #104·rudycelekli opened Oct 25, 2026·

  ·

• fix: reject duplicate object keys in coverage-ledger.json

  #103·rudycelekli opened Oct 25, 2026·

  ·

• fix: reject duplicate object keys in findings.json

  #102·rudycelekli opened Oct 25, 2026·

  ·
  2

• Add cryptography and key-management hunting companion guide

  #101·spidervirus opened Oct 24, 2026·

  ·
  1

• fix: support platforms without O_NOFOLLOW/O_NONBLOCK

  #99·SatriaBagusNurhadianto opened Oct 24, 2026·

  ·

• Ground-truth claimed finding paths with --target

  #97·LieBieS opened Oct 23, 2026·1 task done·

  ·

• Harden the audit workflow against target-influenced results

  #96·LieBieS opened Oct 23, 2026·2 tasks done·

  ·

• Derive run paths and prior-run identity from a sanitized repo ID, not the raw repo name

  #95·bodapatisaikrishna opened Oct 23, 2026·

  ·
  1

• Add abort-path cleanup and cross-request stale state classes

  #93·kelmia-stack opened Oct 22, 2026·

  ·

• Add domain-format validators to Business logic class and recon mapping

  #92·Himanshu-Sharma12 opened Oct 22, 2026·2 tasks done·

  ·
  1

  1

• fix: allow checks in one attempt to share a promoted artifact

  #91·Adarsh-mk7 opened Oct 21, 2026·

  ·
  1

• feat: add CWE, CVSS base vector, and references to findings

  #90·zavxai opened Oct 21, 2026·

  ·
  1

• Remediation should name and preserve legitimate uses of the refused path

  #89·sarfaraz1212 opened Oct 21, 2026·

  ·
  1

  2

• Validate run-metadata.json against the documented run-state contract

  #85·mvanhorn opened Oct 20, 2026·

  ·
  1

• Reject in_progress units at terminal coverage validation

  #84·mvanhorn opened Oct 20, 2026·

  ·
  1

• docs: align completion gates and carried record validation

  #83·Dante-dan opened Oct 20, 2026·

  ·
  1

• fix: allow artifact sharing within an archived attempt

  #82·Dante-dan opened Oct 20, 2026·

  ·
  1

• Harden git and symlink handling for untrusted targets

  #76·alvessh opened Oct 13, 2026·

  ·

• Treat audited code as untrusted input, run the validators on Windows, add CI

  #75·oherbawi opened Oct 11, 2026·

  ·
  2

• feat: model shared validation blockers in findings

  #74·Dante-dan opened Oct 11, 2026·

  ·