All pull requests

Pull requests

• fix(sc2): lower pipe-to-interpreter findings when stdin is only data

  #653·JayOfTheKeyboard opened Sep 28, 2026·

  ·
  1

  7

• fix(yara): require standalone mining terms in crypto_coinjacking $wasm_miner

  #648·udsy19 opened Sep 27, 2026Contributor·

  ·
  4

• fix(rp1): prevent npx matches across lines

  #646·agentsope opened Sep 27, 2026Contributor·

  ·
  1

  5

• fix(cli): baseline command fingerprints expanded findings (#630)

  #643·Cid-oe opened Sep 26, 2026·

  ·
  1

  3

• feat(registry): compare normalized MCP snapshots

  #642·deepujain opened Sep 26, 2026Contributor·

  ·
  4

• fix(mcp): include match details in JSON findings

  #641·Ai-Eastern opened Sep 26, 2026·

  ·
  1

  4

• fix(baseline): fingerprint every occurrence of a deduplicated finding

  #637·drakeo338 opened Sep 25, 2026·

  ·
  1

• fix: improve Windows compatibility

  #636·JJM1986 opened Sep 25, 2026·

  ·
  6

• feat(scan): make file exclusions explicit in coverage reports

  #635·deepujain opened Sep 24, 2026Contributor·

  ·
  1

  6

• fix(analyzer): avoid false parse limits on quoted shell assignments

  #634·deepujain opened Sep 24, 2026Contributor·

  ·
  1

  4

• fix(analyzer): analyze hooks declared in .claude-plugin/plugin.json

  #632·deepujain opened Sep 24, 2026Contributor·

  ·
  1

  7

• fix(baseline): fingerprint every occurrence so repeated findings stay suppressed

  #631·deepujain opened Sep 24, 2026Contributor·

  ·
  1

  3

• fix(analyzer): avoid false shell parse limits in Markdown

  #627·mohgupta-ship-it opened Sep 24, 2026Member·

  ·
  2

• fix: support bounded larger JSON quote ownership and explain limits

  #626·mohgupta-ship-it opened Sep 24, 2026Member·

  ·

• fix(references): resolve sentence-final periods conservatively

  #625·mohgupta-ship-it opened Sep 24, 2026Member·

  ·
  3

• fix: deduplicate padding findings by original source occurrence

  #624·mohgupta-ship-it opened Sep 24, 2026Member·

  ·
  4

• fix(analyzers): retain findings with unavailable Python AST columns

  #623·mohgupta-ship-it opened Sep 24, 2026Member·

  ·
  3

• fix(analyzers): carve out only structurally benign P2 comment matches

  #622·Yoseph-Zuskin opened Sep 24, 2026Contributor·

  ·
  10

• fix(sarif): emit security-severity and scope recursive result URIs

  #621·deepujain opened Sep 23, 2026Contributor·

  ·
  1

  5

• fix: detect destructive folder commands and natural-language instructions

  #619·mohgupta-ship-it opened Sep 23, 2026Member·

  ·
  1

  7

• Fix Windows test suite compatibility

  #617·JJM1986 opened Sep 23, 2026·

  ·
  4

• fix: preserve metadata for LLM findings

  #616·efegokdemir opened Sep 23, 2026·

  ·
  1

  4

• fix(taint): walk the AST in source order, not breadth-first

  #611·udsy19 opened Sep 23, 2026Contributor·

  ·
  1

  4

• fix(yara): avoid ransomware findings for Bitcoin payment prose

  #608·chrisknvidia opened Sep 22, 2026Collaborator·

  ·
  1

  4

• fix: inspect TypeScript declaration content

  #601·efegokdemir opened Sep 21, 2026·

  ·
  1

  7