Add Risk Surface Guard, a deterministic PR-diff risk scanner - #139

Merged

nateshpp merged 4 commits into

mainfrom

feature/risk-surface-guard

Jul 28, 2026

Commits on Jul 27, 2026

Add Risk Surface Guard, an execution and credential blast-radius scanner (WI-055)
nateshpp
committed
8b49b02
Add SARIF upload, suppression allowlist, and heuristic tuning to Risk Surface Guard (WI-055)
nateshpp
committed
bb8626e

Commits on Jul 28, 2026

Merge remote-tracking branch 'origin/main' into feature/risk-surface-guard
nateshpp
committed
3a6dec4
Bump the new Risk Surface Guard SARIF upload to codeql-action v4
nateshpp
committed
18d7436