Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
OWASP
openshield
Repository navigation
Code
Issues
31
(31)
Pull requests
16
(16)
Discussions
Actions
Projects
Security and quality
Insights
More
items
feat(automation): finding lifecycle engine, scan outcome contracts, and pattern detection [1/5]
- #326
#326
Open
TFT444
wants to merge 23 commits into
dev
OWASP/openshield:dev
from
feat/311-finding-lifecycle
OWASP/openshield:feat/311-finding-lifecycle
Copy head branch name to clipboard
Conversation
Commits
23
(23)
Checks
Files changed
Open
feat(automation): finding lifecycle engine, scan outcome contracts, and pattern detection [1/5]
#326
TFT444
wants to merge 23 commits into
dev
OWASP/openshield:dev
from
feat/311-finding-lifecycle
OWASP/openshield:feat/311-finding-lifecycle
Copy head branch name to clipboard
Commits
Commits on Sep 20, 2026
feat(lifecycle): implement finding lifecycle tracking (#311)
Show description for 9c9a389
TFT444
committed
9c9a389
View commit details
Copy full SHA for 9c9a389
Browse repository at this point
fix(security): close IDOR and tenant-bypass in patterns API
Show description for 53d5d62
TFT444
committed
53d5d62
View commit details
Copy full SHA for 53d5d62
Browse repository at this point
fix(lifecycle): address all code review findings from #311
Show description for 938824d
TFT444
committed
938824d
View commit details
Copy full SHA for 938824d
Browse repository at this point
fix(security): strip internal exception detail from all 500 error responses
Show description for 9426a86
TFT444
committed
9426a86
View commit details
Copy full SHA for 9426a86
Browse repository at this point
fix(lifecycle): address all reviewer-blocking issues before merge
Show description for a91b5c7
TFT444
committed
a91b5c7
View commit details
Copy full SHA for a91b5c7
Browse repository at this point
fix(lint): remove unused imports and fix E402 in lifecycle test files
Show description for 2f38d4a
TFT444
committed
2f38d4a
View commit details
Copy full SHA for 2f38d4a
Browse repository at this point
fix(lint): apply ruff format to all lifecycle PR files
Show description for d317607
TFT444
committed
d317607
View commit details
Copy full SHA for d317607
Browse repository at this point
fix: apply code review findings for lifecycle PR
Show description for 76b6030
TFT444
committed
76b6030
View commit details
Copy full SHA for 76b6030
Browse repository at this point
Commits on Oct 8, 2026
fix(lifecycle): integrate current dev and enforce verified resource scope
Show description for d76e66e
TFT444
committed
d76e66e
View commit details
Copy full SHA for d76e66e
Browse repository at this point
ci: run required checks for the lifecycle and graph PR stack
Show description for 0cd0a76
TFT444
committed
0cd0a76
View commit details
Copy full SHA for 0cd0a76
Browse repository at this point
ci: use a string key for the PostgreSQL service port
Show description for e982180
TFT444
committed
e982180
View commit details
Copy full SHA for e982180
Browse repository at this point
fix(deps): require patched Werkzeug and multidict releases
Show description for 88c881f
TFT444
committed
88c881f
View commit details
Copy full SHA for 88c881f
Browse repository at this point
test(ci): match validated PostgreSQL service expression
Show description for 9339a3c
TFT444
committed
9339a3c
View commit details
Copy full SHA for 9339a3c
Browse repository at this point
Commits on Oct 9, 2026
fix(lifecycle): add exc_info, autocommit guard, and remove dead param
Show description for 76a656c
TFT444
committed
76a656c
View commit details
Copy full SHA for 76a656c
Browse repository at this point
fix(lifecycle): resolve evaluate()-only rules when no rule_outcomes entry is present
Show description for e33ff03
TFT444
committed
e33ff03
View commit details
Copy full SHA for e33ff03
Browse repository at this point
fix(lint): apply ruff format to lifecycle_service evaluate-only fix
Show description for ef8f6e7
TFT444
committed
ef8f6e7
View commit details
Copy full SHA for ef8f6e7
Browse repository at this point
Commits on Oct 15, 2026
revert(ci): remove ephemeral branch triggers and port-expression change
Show description for cd0c23d
TFT444
committed
cd0c23d
View commit details
Copy full SHA for cd0c23d
Browse repository at this point
fix(lifecycle): normalize tenant_id to lowercase on write and read paths
Show description for 4d99b3b
TFT444
committed
4d99b3b
View commit details
Copy full SHA for 4d99b3b
Browse repository at this point
fix(lifecycle): exclude rules in failed_rule_ids from resolution
Show description for db0d1fa
TFT444
committed
db0d1fa
View commit details
Copy full SHA for db0d1fa
Browse repository at this point
fix(lifecycle): add durable lifecycle_jobs queue with bounded retry and fencing
Show description for 0cd0e8f
TFT444
committed
0cd0e8f
View commit details
Copy full SHA for 0cd0e8f
Browse repository at this point
ci: re-trigger CI on fix commits for PR #326
Show description for f7be383
TFT444
committed
f7be383
View commit details
Copy full SHA for f7be383
Browse repository at this point
ci: nudge CI for PR #326 fix commits
Show description for c83dea5
TFT444
committed
c83dea5
View commit details
Copy full SHA for c83dea5
Browse repository at this point
Commits on Oct 17, 2026
fix(lifecycle): guard apply_scan against out-of-order scan replay
Show description for be5b22f
TFT444
committed
be5b22f
View commit details
Copy full SHA for be5b22f
Browse repository at this point
You can’t perform that action at this time.
