feat(scanner): reject plugin aws gcloud and az deploy writes - #1177

Draft

seonghobae wants to merge 14 commits into

feat/claude-plugin-path-depth-1099from

feat/claude-plugin-cloud-deploy-1099

Commits on Sep 8, 2026

test(scanner): fail closed on plugin aws gcloud and az deploy
seonghobae
committed
ee554d2
feat(scanner): reject plugin aws gcloud and az deploy writes
seonghobae
committed
af6aa91
test(scanner): lock manifest cloud-deploy context
seonghobae
committed
481e171
fix(scanner): preserve structural manifest context for cloud deploy
seonghobae
committed
a1ca31f
merge: integrate terraform and helm command-context repair
seonghobae
committed
fdcda62
fix(scanner): inherit quoted command-context repair
seonghobae
committed
1e81305
test(scanner): inherit quoted command-context regressions
seonghobae
committed
cfa2ed7
merge: integrate current parent command-context repair
seonghobae
committed
7802ad6
test(scanner): inherit assignment command boundary
seonghobae
committed
d081a88
fix(scanner): inherit assignment command boundary
seonghobae
committed
c0a1a0e
Merge PR #1176 assignment-context repair into detector stack
seonghobae
committed
9e35b6e
fix(scanner): carry heredoc command boundary
seonghobae
committed
10ead66
test(scanner): carry heredoc command regressions
seonghobae
committed
5659c0d
merge: restack #1177 on heredoc-safe predecessor
seonghobae
committed
9e0e4ad