All pull requests

Pull requests

• fix(config): pass native settings through scan workers

  bug
  #1717·mldangelo-oai opened Oct 18, 2026Collaborator·3 tasks done·

  ·
  3

• fix(plugin): use the SHA-256 empty tree for root commit diffs

  bug
  #1716·WenJing95 opened Oct 18, 2026Contributor·3 tasks done·

  ·

• fix(plugin): read diff blobs with Git before 2.38

  bug
  #1715·WenJing95 opened Oct 18, 2026Contributor·3 tasks done·

  ·

• fix(knowledge-base): drop deleted revisions and field codes from DOCX

  bug
  #1714·LittleYier opened Oct 18, 2026Contributor·3 tasks done·

  ·
  1

• feat(action): support GitHub Enterprise Cloud on ghe.com

  enhancement
  #1713·mldangelo-oai opened Oct 18, 2026Collaborator·3 tasks done·

  ·
  1

• fix(release): publish matching Action releases with metadata

  bug
  #1711·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• fix(deep-scan): retain unfinished deadline checkpoints

  bug
  #1710·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  4

• fix(paths)!: preserve physical parent traversal

  breaking-change
  #1709·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• ci: skip source checks for body-only pull request edits

  #1708·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• fix(runtime): find bundled tools through executable symlinks

  bug
  #1707·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• fix(import): align required finding text across runtimes

  bug
  #1706·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• fix(runtime): release inherited command pipes after cancellation

  bug
  #1705·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• fix(knowledge-base): preserve DOCX text during extraction

  bug
  #1704·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• feat(action): report usage and extend integration attribution

  #1703·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  3

• test: isolate worker credential fixtures from workload identity

  skip-release-notes
  #1702·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• docs: add an Invoice Desk scan and fix walkthrough

  documentation
  #1701·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• test(evals): measure natural-language security skill routing

  skip-release-notes
  #1700·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• docs: map source ownership and regression checks for contributors

  documentation
  #1699·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• docs: make security workflows discoverable to agents

  documentation
  #1698·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• fix(artifacts): close directory handles after cleanup failures

  bug
  #1697·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·
  1

• chore(deps): bump the third-party group across 3 directories with 3 updates

  dependencies
  #1696·dependabot[bot] opened Oct 17, 2026Bot·

  ·
  1

• chore(deps-dev): bump ruff from 0.16.10 to 0.17.0 in /plugins/codex-security

  dependencies
  #1695·dependabot[bot] opened Oct 17, 2026Bot·

  ·
  1

• fix(plugin): separate diff revisions from paths in scan inputs

  bug
  #1694·WenJing95 opened Oct 17, 2026Contributor·3 tasks done·

  ·

• feat(wiz): import repository vulnerability CSV reports

  #1693·mldangelo-oai opened Oct 17, 2026Collaborator·3 tasks done·

  ·

• fix(cli): detect Windows Yarn global installs in update notices

  bug
  #1692·WenJing95 opened Oct 17, 2026Contributor·3 tasks done·

  ·