Repository navigation

Preserve pull request context, full-scan SCM branch pipelines, and gate ignore commands - #302

Merged

lelia merged 30 commits into

mainfrom

lelia/patched-version-and-pr-context

Sep 15, 2026

Commits on Sep 11, 2026
- feat(output): show patched versions in security findings
  lelia
  committed
  950694b
- feat(ci): preserve pull request context in scan metadata
  lelia
  committed
  7c1ec81
- chore(release): bump version to 2.9.0
  
  lelia
  and
  Claude (claude)
  committed
  7cf8682
- refactor: share one git remote parser between Buildkite consumers
  
  lelia
  and
  Claude (claude)
  committed
  fa6ec9a
- fix(ci): apply the pull request link to an already-compared scan pair
  
  lelia
  and
  Claude (claude)
  committed
  0bdac6c
- fix(comments): make per-alert ignores round trip
  lelia
  committed
  54e4b2f
- fix(comments): preserve dependency change types
  lelia
  committed
  90462b7
- fix(ci): use full scans outside pull requests
  lelia
  committed
  004cae4
- docs: update release notes for comment fixes
  lelia
  committed
  167554f
- fix(ci): restrict SCM diffs to pull requests
  lelia
  committed
  95483f3
- fix(scans): keep the package list on full scans
  
  lelia
  and
  Claude (claude)
  committed
  8f9e402
- fix(ci): keep branch pipelines out of pull request handling
  
  lelia
  and
  Claude (claude)
  committed
  9e9bc58
- fix(comments): stop reading an npm scope as an ecosystem
  
  lelia
  and
  Claude (claude)
  committed
  39403c7
- fix(comments): keep the diff badge where artwork exists
  
  lelia
  and
  Claude (claude)
  committed
  78199e2
- refactor(config): scope the config-file defaults dict to its block
  
  lelia
  and
  Claude (claude)
  committed
  f869a52
- docs: correct the release notes for branch pipeline scans
  
  lelia
  and
  Claude (claude)
  committed
  fc36c76
- fix(comments): stop legacy comment updates crashing on scoped names
  
  lelia
  and
  Claude (claude)
  committed
  63e938d
- fix(comments): require write access to ignore an alert
  
  lelia
  and
  Claude (claude)
  committed
  977a8fb
- fix(ci): validate CI-supplied server URLs before building a link
  
  lelia
  and
  Claude (claude)
  committed
  f16525f
- docs: correct the add_purl_capabilities docstring
  
  lelia
  and
  Claude (claude)
  committed
  d7b01b0
- docs: record the review fixes in the 2.9.0 release notes
  
  lelia
  and
  Claude (claude)
  committed
  bd2a3c3
- docs: rewrite branch comments for the reader, not the author
  
  lelia
  and
  Claude (claude)
  committed
  239c85f
- fix(comments): parse legacy alert rows defensively
  
  lelia
  and
  Claude (claude)
  committed
  7a986c8
Commits on Sep 12, 2026
- feat(comments): add --ignore-authorization
  
  lelia
  and
  Claude (claude)
  committed
  adb56c6
- fix(comments): escape repository-derived values when rendering comments
  
  lelia
  and
  Claude (claude)
  committed
  b8502bb
- fix(gitlab): make the authentication fallback actually run
  
  lelia
  and
  Claude (claude)
  committed
  a320008
- fix(review): address authorization and full-scan findings
  lelia
  committed
  87a631b
Commits on Sep 15, 2026

Navigation Menu

Repository navigation

Preserve pull request context, full-scan SCM branch pipelines, and gate ignore commands - #302

Preserve pull request context, full-scan SCM branch pipelines, and gate ignore commands#302
lelia merged 30 commits into
mainfrom
lelia/patched-version-and-pr-context

Commits on Sep 11, 2026

feat(output): show patched versions in security findings

feat(ci): preserve pull request context in scan metadata

chore(release): bump version to 2.9.0

refactor: share one git remote parser between Buildkite consumers

fix(ci): apply the pull request link to an already-compared scan pair

fix(comments): make per-alert ignores round trip

fix(comments): preserve dependency change types

fix(ci): use full scans outside pull requests

docs: update release notes for comment fixes

fix(ci): restrict SCM diffs to pull requests

fix(scans): keep the package list on full scans

fix(ci): keep branch pipelines out of pull request handling

fix(comments): stop reading an npm scope as an ecosystem

fix(comments): keep the diff badge where artwork exists

refactor(config): scope the config-file defaults dict to its block

docs: correct the release notes for branch pipeline scans

fix(comments): stop legacy comment updates crashing on scoped names

fix(comments): require write access to ignore an alert

fix(ci): validate CI-supplied server URLs before building a link

docs: correct the add_purl_capabilities docstring

docs: record the review fixes in the 2.9.0 release notes

docs: rewrite branch comments for the reader, not the author

fix(comments): parse legacy alert rows defensively

Commits on Sep 12, 2026

feat(comments): add --ignore-authorization

fix(comments): escape repository-derived values when rendering comments

fix(gitlab): make the authentication fallback actually run

fix(review): address authorization and full-scan findings

Commits on Sep 15, 2026

Merge remote-tracking branch 'origin/main' into lelia/patched-version-and-pr-context

fix(comments): close ignore authorization gaps

Merge remote-tracking branch 'origin/main' into lelia/patched-version-and-pr-context