All pull requests

Pull requests

• fix(reports): keep HTML entities literal in report text

  bug
  #1851·WenJing95 opened Oct 21, 2026Contributor·3 tasks done·

  ·

• fix(threat-model): render scope paths like report paths

  bug
  #1850·WenJing95 opened Oct 21, 2026Contributor·3 tasks done·

  ·

• chore(release): 0.6.0

  #1849·github-actions[bot] opened Oct 21, 2026Bot·3 tasks·

  ·
  3

• feat(imports): add local report import and readback

  #1848·mldangelo-oai opened Oct 21, 2026Collaborator·3 tasks done·

  ·
  4

• feat(imports): store external findings locally

  #1847·mldangelo-oai opened Oct 21, 2026Collaborator·3 tasks done·

  ·
  3

• refactor!: share sealed scan reads with tracking

  breaking-change
  #1846·mldangelo-oai opened Oct 20, 2026Collaborator·3 tasks done·

  ·
  7

• feat(scan): finalize owner hints within the scan budget

  enhancement
  #1845·jameshiester-oai opened Oct 20, 2026Collaborator·3 tasks done·

  ·

• fix(deep-scan): recognize usage limits reported during compaction

  bug
  #1844·Shizoqua opened Oct 20, 2026Contributor·3 tasks done·

  ·

• fix(deep-scan): stop workers when the plan does not include Codex

  bug
  #1843·Shizoqua opened Oct 20, 2026Contributor·3 tasks done·

  ·

• fix(sdk): pass severity record efforts through to the host

  bug
  #1842·Shizoqua opened Oct 20, 2026Contributor·3 tasks done·

  ·

• fix(telemetry): preserve usage coverage and operation outcomes

  bug
  #1841·mldangelo-oai opened Oct 20, 2026Collaborator·3 tasks done·

  ·
  8

• refactor!: prepare local deduplication in Node

  breaking-change
  #1840·mldangelo-oai opened Oct 20, 2026Collaborator·3 tasks done·

  ·
  1

• refactor: render MCP threat models in TypeScript

  #1839·mldangelo-oai opened Oct 20, 2026Collaborator·3 tasks done·

  ·
  4

• fix(skill): allow readable interactive verification results

  bug
  #1836·dipeshbabu opened Oct 20, 2026Contributor·3 tasks done·

  ·
  1

• fix(cli): report verification failures in structured output

  bug
  #1835·dipeshbabu opened Oct 20, 2026Contributor·3 tasks done·

  ·
  1

• test: keep line-ending defaults local to Git fixtures

  skip-release-notes
  #1833·mldangelo-oai opened Oct 20, 2026Collaborator·3 tasks done·

  ·
  2

• fix(evals): accept tilde and longer backtick fences in triage results

  bug
  #1764·Shizoqua opened Oct 19, 2026Contributor·3 tasks done·

  ·

• refactor!: stop writing coverage.json

  breaking-change
  #1762·ianw-oai opened Oct 19, 2026Collaborator·3 tasks done·

  ·
  5

• chore: added the pnpm modules

  #1758·yaqoob1152-ai opened Oct 19, 2026·3 tasks·

  ·

• fix(sdk): skip work cancelled before it starts

  bug
  #1733·mldangelo-oai opened Oct 19, 2026Collaborator·3 tasks done·

  ·
  5

• fix(action): isolate artifact upload failures

  bug
  #1719·mldangelo-oai opened Oct 18, 2026Collaborator·3 tasks done·

  ·
  13

• fix(deep-scan): retain unfinished deadline checkpoints

  bug
  #1710·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  12

• fix(paths)!: preserve physical parent traversal

  breaking-change
  #1709·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  7

• test(knowledge-base): cover DOCX text extraction edge cases

  skip-release-notes
  #1704·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  7

• feat(action): report usage and extend integration attribution

  enhancement
  #1703·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  3