Repository navigation

Merge staging into main (AST-181538) - #1592

Merged

cx-alon-rosenhek merged 12 commits into

mainfrom

staging-signed

Oct 21, 2026

Merged

Merge staging into main (AST-181538)#1592
cx-alon-rosenhek merged 12 commits into
mainfrom
staging-signed

Commits on Oct 21, 2026
- Add provenance tag and confidence-gated suppression to guardrail prompts (AST-180794) (#1578)
  
  authored and
  cx-rahul-pidde
  committed
  5fe71f3
- Merge branch 'main' into staging
  cx-rahul-pidde
  committed
  5daccd6
- Block agent file edits that introduce hardcoded secrets (AST-181538) (#1583)
  cx-rahul-pidde
  committed
  c30cb1d
- AST-181538 - Honour scanner switches and severity threshold from cx-onboarding.properties (#1586)
  cx-rahul-pidde
  committed
  f560262
- AST-181538 - Fix golangci-lint issues in agent hooks
  
  cx-rahul-pidde
  and
  claude
  committed
  0140e36
- AST-181538 - Fix remaining revive comment lint issues
  
  cx-rahul-pidde
  and
  claude
  committed
  f3ecac1
- Updated misleading message on wrong scan-report format (AST-182790) (#1588)
  
  cx-aniket-shinde
  authored and
  cx-rahul-pidde
  committed
  d25fbf0
- Fix pillow and sqlparse SCA findings (AST-188320) (#1590)
  cx-rahul-pidde
  committed
  69cae1c
- Bump bash base image to echo bash:5.3.20 for Trivy (AST-000)
  
  cx-rahul-pidde
  and
  claude
  committed
  2276e77
- Revert bash base image to checkmarx/bash:5.3-r14 on Docker Hub (AST-000)
  
  cx-rahul-pidde
  and
  claude
  committed
  3273a33
- Ignore CVE-2026-111943 in Trivy until bash base image is rebuilt (AST-000)
  
  cx-rahul-pidde
  and
  claude
  committed
  ffdc186
- Restore vulnerable lodash 4.17.21 in oss-realtime test fixture (AST-000)
  
  cx-rahul-pidde
  and
  claude
  committed
  da0ad7e

Commits

Commits on Oct 21, 2026