All pull requests

Pull requests

• fix(api-spec): preserve referenced Postman environment values

  #1635·samirhvbr opened Oct 30, 2026·

  ·
  1

  3

• fix(report): validate deduplication decisions before suppressing findings

  #1634·samirhvbr opened Oct 30, 2026·

  ·
  1

  1

• fix(cloud): deduplicate conflicted Git source paths

  #1631·samirhvbr opened Oct 30, 2026·

  ·
  1

  1

• fix(models): preserve case-sensitive LiteLLM catalog lookups

  #1627·Muzzy5150 opened Oct 30, 2026·

  ·
  1

  1

• feat(llm): add OrcaRouter Cyber Inference provider (API key + browser sign-in)

  #1626·armyluki-wq opened Oct 30, 2026·

  ·
  6

• Feat/str 1646 opengrep

  #1625·bearsyankees opened Oct 30, 2026Collaborator·

  ·
  3

• fix(cloud): handle interrupted download error bodies

  #1624·samirhvbr opened Oct 29, 2026·

  ·
  1

  1

• fix(cli): restore staged API specifications on resume

  #1621·samirhvbr opened Oct 29, 2026·

  ·
  1

  1

• fix(sarif): qualify CWE rule ids with the finding's vulnerability class

  #1618·bharathvemula opened Oct 29, 2026·

  ·
  1

  2

• fix(llm): distinguish duplicate tool call IDs within a response

  #1615·samirhvbr opened Oct 28, 2026·

  ·
  1

  1

• fix(cloud): report scope metadata persistence failures

  #1614·samirhvbr opened Oct 28, 2026·

  ·
  1

  2

• fix(tools): preserve notes and todos when updates are rejected

  #1613·samirhvbr opened Oct 28, 2026·

  ·
  1

  1

• fix(runtime): honor shell-selected Docker contexts

  #1612·samirhvbr opened Oct 28, 2026·

  ·
  1

  2

• docs: add Opper provider guide

  #1606·Felixkw12 opened Oct 28, 2026·2 tasks·

  ·
  2

• fix(agent): use instruction credentials, flag demonstrated unauth acc…

  #1601·ljluestc opened Oct 27, 2026·

  ·

• build(deps): bump the actions group across 1 directory with 9 updates

  dependenciesgithub_actions
  #1600·dependabot[bot] opened Oct 27, 2026Bot·

  ·
  1

• fix(sarif): stabilize synthetic finding fingerprints across targets and aliases

  #1590·Muzzy5150 opened Oct 26, 2026·

  ·
  1

• fix(update): verify release assets before replacing binaries

  #1589·utkutugrul opened Oct 25, 2026Contributor·

  ·
  5

• docs: add Bandit source-aware triage playbook

  #1588·utkutugrul opened Oct 25, 2026Contributor·

  ·
  1

• build(deps): bump filelock from 3.29.4 to 4.2.1

  dependenciespython:uv
  #1586·dependabot[bot] opened Oct 24, 2026Bot·

  ·
  1

• fix(sarif): link CVE-keyed rules to NVD and tag CWE rules for code scanning

  #1582·jav1er8 opened Oct 23, 2026·

  ·
  1

• fix(sarif): drop the SECURITY.md anchor from findings of DAST-only runs

  #1581·jav1er8 opened Oct 23, 2026·

  ·
  1

  1

• fix(cloud): stop --wait from polling or succeeding after --wait-timeout

  #1580·jav1er8 opened Oct 23, 2026·

  ·
  1

  1

• Add the Claude Code subscription backend (claude -p)

  #1579·seanturner83 opened Oct 23, 2026Contributor·

  ·
  11

• Reporting controls: optional PoC, relaxed fields, read-only mounts, validation logging

  #1578·seanturner83 opened Oct 23, 2026Contributor·

  ·
  6