feat(security-review): automated per-PR security-review pipeline (EXP-440)#1940

Open

gvladika wants to merge 54 commits into

mainfrom

feature/exp-440-security-review-pipeline

Commits on Jun 8, 2026

feat(commands): add /extract-audit-knowledge skill (EXP-478)

gvladika
and
claude
committed
fix(commands): correct idempotency check in /extract-audit-knowledge (EXP-478)

gvladika
and
claude
committed
feat(audit): seed audit/knowledge/ corpus from existing audit reports (EXP-479)

gvladika
and
claude
committed
feat(audit-knowledge): backfill 39 missing audits; corpus schema 1.1 (EXP-479)

gvladika
and
claude
committed
feat(ci): add Stage 1 static-analysis workflow for security review (EXP-480)

gvladika
and
claude
committed
chore(ci): remove Aderyn job from Stage 1 workflow (EXP-484)
gvladika
committed

Commits on Jun 15, 2026

Commits on Jun 17, 2026

Commits on Jun 18, 2026

Scope Stage 1 SARIF queue to changed files in fp-check triage

gvladika
and
claude
committed

Commits on Jun 19, 2026

Strip ticket IDs, changelog notes, and stale terms from pipeline code

gvladika
and
claude
committed

Commits on Jun 26, 2026

Commits on Jul 2, 2026

fix(security-review): harden keyed Stage 2 against prompt injection (EXP-440)

gvladika
and
claude
committed

Commits on Jul 15, 2026

Merge remote-tracking branch 'origin/main' into feature/exp-440-security-review-pipeline
gvladika
committed