All pull requests

Pull requests

• fix(plugin): include source-file type changes in diff inventories

  bug
  #1137·LittleYier opened Oct 1, 2026·

  ·
  1

• feat(sca): add OSV-backed dependency assessment to the SDK

  enhancement
  #1136·mldangelo-oai opened Oct 1, 2026Collaborator·

  ·
  1

• fix(workbench): preserve trailing whitespace in Git paths

  bug
  #1135·WenJing95 opened Sep 30, 2026Contributor·

  ·

• fix(scan): detect credentials exposed in source

  bug
  #1134·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  6

• feat(threat-model)!: save models with results and support offline export

  breaking-change
  #1133·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  8

• feat(scan): report saved unconfirmed candidates

  enhancement
  #1132·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  7

• fix(cli): support custom inference providers in patch commands

  bug
  #1131·ianw-oai opened Sep 30, 2026Collaborator·

  ·

• ci: reuse native builds across package and container checks

  #1130·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  1

• ci: smoke test published npm installs across supported platforms

  #1129·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  2

• ci: require workflow checks and production dependency audits

  #1128·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  4

• refactor: remove the old Deep Scan result and merge tools

  #1127·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  4

• refactor: remove the retired Deep Scan engine

  #1126·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  4

• refactor(deep-scan)!: run Deep Scans as batches of Standard scans

  #1125·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  15

• refactor: let plugin tool calls wait on the same scan

  #1124·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  8

• refactor: prepare plugin scans with the caller's Codex settings

  #1123·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  21

• fix!: support scan recovery without a new model session

  #1122·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  22

• fix: preserve cost records when scans stop or resume

  #1121·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  15

• refactor: schedule Deep Scan passes and resume saved progress

  #1120·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  26

• refactor: merge findings without rewriting their evidence

  #1119·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  8

• fix: keep scan drafts when saving results fails

  #1118·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  16

• feat: copy verified child scan results into a Deep Scan

  #1117·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  15

• test: cover saved severity assessment caching

  #1116·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  12

• feat: record which scans belong to a Deep Scan

  #1115·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  18

• refactor: share scan result preparation between the SDK and plugin

  #1114·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  6

• refactor: extract scan registration and result saving

  #1113·mldangelo-oai opened Sep 30, 2026Collaborator·

  ·
  4