feat(scanner): reject plugin s3 writes and containerapp up - #1179

Draft

seonghobae wants to merge 16 commits into

feat/claude-plugin-cloud-deploy-1099from

feat/claude-plugin-object-store-1099

Commits on Sep 8, 2026

test(scanner): fail closed on plugin s3 writes and containerapp up
seonghobae
committed
97cdbd0
feat(scanner): reject plugin s3 writes and containerapp up
seonghobae
committed
8ca0628
test(scanner): distinguish s3 downloads from writes RED
seonghobae
committed
f480ae0
merge: integrate current predecessor command-context repair
seonghobae
committed
79a6788
fix(scanner): distinguish literal S3 downloads from writes
seonghobae
committed
51d1da4
test(scanner): reproduce download-before-upload false negative
seonghobae
committed
44761c2
fix(scanner): scan past safe S3 downloads
seonghobae
committed
3073ffd
fix(scanner): inherit quoted command-context repair
seonghobae
committed
7f30f70
test(scanner): inherit quoted command-context regressions
seonghobae
committed
f130c2c
merge: integrate current parent command-context repair
seonghobae
committed
f8372ec
test(scanner): inherit assignment command boundary
seonghobae
committed
097b6dd
fix(scanner): inherit assignment command boundary
seonghobae
committed
5e8b198
Merge PR #1177 assignment-context repair into detector stack
seonghobae
committed
10c0a34
fix(scanner): carry heredoc command boundary
seonghobae
committed
f5dd35d
test(scanner): carry heredoc command regressions
seonghobae
committed
e527fd2
merge: restack #1179 on heredoc-safe predecessor
seonghobae
committed
730d429