Attack-surface gate

Workflow runs for Attack-surface gate

• chore(release): 0.1.9

  completed successfully:
  Attack-surface gate#27:Pull request#92openedbyRinkia
  release/0.1.9

  Sep 8, 202615s
  More actions for workflow run 27

• docs(bench): record why SQLAlchemy's 1.00 band is at its static ceiling

  completed successfully:
  Attack-surface gate#26:Pull request#91openedbyRinkia
  docs/sqlalchemy-band-ceiling

  Sep 8, 202614s
  More actions for workflow run 26

• feat(security): cross-check the Java lens against Semgrep, and fix the gap it found

  completed successfully:
  Attack-surface gate#25:Pull request#90openedbyRinkia
  feat/security-lens-java-crosscheck

  Sep 8, 202619s
  More actions for workflow run 25

• chore(release): 0.1.8

  completed successfully:
  Attack-surface gate#24:Pull request#89openedbyRinkia
  release/0.1.8

  Sep 8, 202618s
  More actions for workflow run 24

• feat(security): add a Java risk-sink catalog

  completed successfully:
  Attack-surface gate#23:Pull request#88openedbyRinkia
  feat/security-lens-java-sinks

  Jul 24, 202613s
  More actions for workflow run 23

• bench: add a second, non-circular authority for the moddability labels

  completed successfully:
  Attack-surface gate#22:Pull request#87openedbyRinkia
  bench/usage-crosscheck

  Jul 24, 202621s
  More actions for workflow run 22

• bench: add flask, the first target that can falsify a ranking change

  completed successfully:
  Attack-surface gate#21:Pull request#86openedbyRinkia
  bench/flask-target

  Jul 24, 202615s
  More actions for workflow run 21

• feat(detect): disclose score ties instead of presenting them as a ranking

  completed successfully:
  Attack-surface gate#20:Pull request#85openedbyRinkia
  feat/detect-tie-disclosure

  Jul 24, 202614s
  More actions for workflow run 20

• fix(parser): collapse @overload stubs into one seam

  completed successfully:
  Attack-surface gate#19:Pull request#84openedbyRinkia
  fix/overload-stub-duplicates

  Jul 24, 202614s
  More actions for workflow run 19

• bench: report recall@10 with tie bounds

  completed successfully:
  Attack-surface gate#18:Pull request#83openedbyRinkia
  bench/tie-aware-recall

  Jul 24, 202614s
  More actions for workflow run 18

• bench: add function labels, and say plainly why the aggregate jumped

  completed successfully:
  Attack-surface gate#17:Pull request#82openedbyRinkia
  bench/function-labels

  Jul 24, 202621s
  More actions for workflow run 17

• docs: refresh the README for three languages, and record the benchmark's blind spot

  completed successfully:
  Attack-surface gate#16:Pull request#81openedbyRinkia
  docs/refresh-languages-and-blindspot

  Jul 24, 202638s
  More actions for workflow run 16

• feat(cli): add --version to modscan and modscan-audit

  completed successfully:
  Attack-surface gate#15:Pull request#80openedbyRinkia
  feat/cli-version

  Jul 24, 202621s
  More actions for workflow run 15

• chore: release 0.1.7

  completed successfully:
  Attack-surface gate#14:Pull request#79openedbyRinkia
  release/0.1.7

  Jul 23, 202621s
  More actions for workflow run 14

• bench: add junit-jupiter-api, the first Java target, and record its baseline

  completed successfully:
  Attack-surface gate#13:Pull request#78openedbyRinkia
  bench/java-target

  Jul 23, 202615s
  More actions for workflow run 13

• feat(java): Java language front-end (tree-sitter)

  completed successfully:
  Attack-surface gate#12:Pull request#77openedbyRinkia
  feat/java-frontend

  Jul 23, 202616s
  More actions for workflow run 12

• fix(typescript): do not scan .d.ts declaration files

  completed successfully:
  Attack-surface gate#11:Pull request#76openedbyRinkia
  fix/skip-declaration-files

  Jul 23, 202620s
  More actions for workflow run 11

• feat(mcp): expose the security lens as an audit_attack_surface tool

  completed successfully:
  Attack-surface gate#10:Pull request#75openedbyRinkia
  feat/mcp-audit-tool

  Jul 23, 202613s
  More actions for workflow run 10

• bench: add commander, the first JavaScript target, and record its baseline

  completed successfully:
  Attack-surface gate#9:Pull request#74openedbyRinkia
  bench/typescript-target

  Jul 23, 202626s
  More actions for workflow run 9

• fix(typescript): recognise CommonJS exports, and widen the labels gate

  completed successfully:
  Attack-surface gate#8:Pull request#73openedbyRinkia
  fix/ts-commonjs-exports

  Jul 23, 202621s
  More actions for workflow run 8

• test(security): cross-check the TS lens against eslint-plugin-security

  completed successfully:
  Attack-surface gate#7:Pull request#72openedbyRinkia
  feat/ts-crosscheck

  Jul 23, 202624s
  More actions for workflow run 7

• feat(security): TypeScript/JavaScript sinks for the security lens (M4)

  completed successfully:
  Attack-surface gate#6:Pull request#71openedbyRinkia
  feat/security-ts-sinks

  Jul 23, 202618s
  More actions for workflow run 6

• test(security): commit the Bandit cross-check harness

  completed successfully:
  Attack-surface gate#5:Pull request#70openedbyRinkia
  feat/security-crosscheck

  Jul 23, 202622s
  More actions for workflow run 5

• feat(security): close the process-sink gaps Bandit cross-check found

  completed successfully:
  Attack-surface gate#4:Pull request#69openedbyRinkia
  feat/security-process-sinks

  Jul 23, 202618s
  More actions for workflow run 4

• chore: release 0.1.6

  completed successfully:
  Attack-surface gate#3:Pull request#68openedbyRinkia
  release/0.1.6

  Jul 23, 202618s
  More actions for workflow run 3