All pull requests

Pull requests

• check: a scoped name npm does not have is not measured

  #851·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• docs: REGISTRY_INTEGRATION commands parse and name the API host (#762)

  #850·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• explain answers every id scan-soul prints

  #849·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• engines.node names the floor the CLI starts on: _20.19.0 __ _=22.12.0

  #848·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• check: a late error after a settled verdict keeps that verdict_s exit code (#658)

  #847·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• attack: accumulate repeated -H/--header flags

  #846·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• secure: SARIF benchmark results cite the records the control failed on

  #845·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• hackmyagent_benchmark names a failing checkId once

  #844·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• secure: refuse -l, -c and --aws-_ where nothing reads them, keep the footer off refusals

  #843·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• secure: refuse -o with the text format instead of ignoring it

  #842·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• secure: refuse the publish and contribute flags with -b instead of dropping them

  #841·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Every --fix run that wrote a backup says where it is

  #840·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Hold SEMANTIC_OASB_MAPPINGS to the OASB-1 catalogue (#645)

  #839·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• SEM-MCP-004/007/008: cite the line of the server entry

  #838·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Lead the Verdict with an input the run could not read (#568)

  #837·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Stop counting a confirmed openclaw fix as a pass too (#609)

  #836·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Compose the Verdict line in one pure function

  #835·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Report atomicFix false when a fix in the same run was disproved (#608)

  #834·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• MCP benchmark: refuse a level outside L1-L3 with the CLI message

  #833·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• narrative: no phantom hardcoded secret from forwarding findings (#586)

  #832·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Make the JS-family extension guard order- and line-independent (#548)

  #831·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Correct the 0.33.0 redaction-boundary claim under Unreleased (#553)

  #830·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• harden-soul: refuse a --profile value that is not a profile

  #829·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• CHANGELOG: correct the 0.32.0 claim that every channel reads the redaction stamp (#553)

  #828·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1

• Ignore comments when the freshness gate decides a suite spawns dist/cli.js

  #827·benignhacker-fleet[bot] opened Sep 28, 2026Bot·

  ·
  1

  1