All pull requests

Pull requests

• fix(tm1): use the final repeated assignment target

  #820·chrisknvidia opened Oct 12, 2026Collaborator·

  ·

• fix(p2): bound Markdown reference-comment findings

  #819·chrisknvidia opened Oct 12, 2026Collaborator·

  ·

• Harden LLM prompts against scanned-skill steering; build the image from uv.lock as non-root

  #817·oherbawi opened Oct 11, 2026·

  ·
  6

• fix(p6): avoid target-word matches inside longer identifiers

  #815·chrisknvidia opened Oct 10, 2026Collaborator·

  ·
  7

• fix(analyzer): keep checking command lines inside a word that spans lines

  #814·elliottwaves-20 opened Oct 9, 2026·

  ·
  1

  4

• fix: distinguish urllib parsing from network access

  #812·sholmes222 opened Oct 9, 2026·

  ·
  3

• feat(report): annotate static findings with structured source roles

  #811·optimization2026 opened Oct 8, 2026·

  ·
  1

• fix(providers): keep OpenCode's internal plugins so OAuth logins work

  #810·elliottwaves-20 opened Oct 8, 2026·

  ·
  1

  2

• fix(providers): cut per-call cost of CLI-provider scans

  #808·rng1995 opened Oct 8, 2026Collaborator·

  ·
  1

• docs(dev): fix llm_analyzer_base source links

  #807·tonydzi opened Oct 8, 2026·

  ·

• fix(report): keep missing references as non-blocking caveats

  #805·efegokdemir opened Oct 8, 2026Contributor·4 tasks done·

  ·
  1

• Fix security phase1 phase2

  #803·KodeCharya opened Oct 8, 2026·

  ·
  2

• fix(ledger): exclude scope boundaries from analyzer work

  #802·efegokdemir opened Oct 7, 2026Contributor·

  ·
  1

• fix(analyzer): recognize JavaScript template literals

  #801·efegokdemir opened Oct 7, 2026Contributor·3 tasks done·

  ·
  3

• fix(taint): scope taint to functions and bind call-site arguments

  #799·rng1995 opened Oct 7, 2026Collaborator·

  ·
  117

• fix: prevent report output symlink races

  #798·yashrajp22 opened Oct 7, 2026Collaborator·

  ·
  21

• fix: report incomplete batch gap-fill analysis

  #797·yashrajp22 opened Oct 7, 2026Collaborator·

  ·
  19

• fix(ingest): inspect unverified OMS bundle contents

  #795·yashrajp22 opened Oct 7, 2026Collaborator·

  ·
  17

• fix(artifacts): inspect text behind printable binary prefixes

  #794·yashrajp22 opened Oct 7, 2026Collaborator·

  ·
  16

• fix(artifacts): prevent disk paths from colliding with archive members

  #793·yashrajp22 opened Oct 7, 2026Collaborator·

  ·
  18

• fix(analyzer): index variable shell-flag scopes once per window

  #790·yashrajp22 opened Oct 7, 2026Collaborator·

  ·
  6

• fix(tm3): skip umask-masked modes and report permissive umask values

  #783·ilaigold opened Oct 7, 2026·

  ·
  6

• fix(rp1): identify the Docker image operand after options

  #782·ilaigold opened Oct 7, 2026·

  ·
  1

  10

• fix(analyzer): treat a command wrapper with no command as complete

  #779·elliottwaves-20 opened Oct 6, 2026·

  ·
  2

• fix(mcp-rug-pull): inspect npx commands in JSON configs

  #776·efegokdemir opened Oct 6, 2026Contributor·

  ·
  1

  2