feat(static): flag unpinned dependencies across manifest formats - #133

Merged

vineethsai7 merged 21 commits into

cisco-ai-defense:mainfrom

federicoroncallo-hub:feat/pr2-unpinned-deps

Aug 3, 2026

Commits on Jul 2, 2026

fix: recognize current ngrok tunnel domains and add bore.pub/serveo.net/localtunnel.me

federicoroncallo-hub
and
cursoragent
committed
3051348
feat(static): flag unpinned dependencies in scanned skill packages

federicoroncallo-hub
and
cursoragent
committed
0b01f29
feat(static): classify URLs in config files via shared url_classifier

federicoroncallo-hub
and
cursoragent
committed
7b24c8a
refactor(static): scan config files via raw URL extraction

federicoroncallo-hub
and
cursoragent
committed
4ebaaf1
feat(static): scan more manifest formats for unpinned dependencies

federicoroncallo-hub
and
cursoragent
committed
d7d4790

Commits on Jul 24, 2026

fix(llm): allow Vertex AI to use ambient Application Default Credentials
gyrospectre
committed
e70193f

Commits on Jul 25, 2026

Bumps to resolve security findings
gyrospectre
committed
cbf9fce

Commits on Aug 3, 2026

fix(llm): don't leak Vertex ADC credential path into GEMINI_API_KEY
gyrospectre
committed
adfbc89
revert unrelated cli-command-reference.md regeneration
gyrospectre
committed
48ba248
fix(static): classify suspicious URLs by hostname
vineethsai7
committed
ecc0720
fix(static): tolerate malformed setup.py input
vineethsai7
committed
93ba6f0
fix(static): harden URL classification and reporting
vineethsai7
committed
6994a42
Merge remote-tracking branch 'origin/main' into HEAD
vineethsai7
committed
a419477
Merge commit 'a4194779' into HEAD
vineethsai7
committed
4c5c18c
Merge commit 'a4194779' into HEAD
vineethsai7
committed
8b50b49
Merge commit '4c5c18cc' into HEAD
vineethsai7
committed
a71e8d8
fix(static): validate suspicious URL schemes
vineethsai7
committed
961588c
docs(vertex): clarify conditional ADC configuration
vineethsai7
committed
d4c7654
Merge commit '961588c1' into HEAD
vineethsai7
committed
6973751
Merge commit '6973751c' into HEAD
vineethsai7
committed
62c10be
Merge main into feat/pr2-unpinned-deps
vineethsai7
committed
ea9eb7e