Repository navigation

Add Risk Surface Guard, a deterministic PR-diff risk scanner - #139

Merged

nateshpp merged 4 commits into

mainfrom

feature/risk-surface-guard

Jul 28, 2026

Merged

Add Risk Surface Guard, a deterministic PR-diff risk scanner#139
nateshpp merged 4 commits into
mainfrom
feature/risk-surface-guard

Commits on Jul 27, 2026
- Add Risk Surface Guard, an execution and credential blast-radius scanner (WI-055)
  nateshpp
  committed
  8b49b02
- Add SARIF upload, suppression allowlist, and heuristic tuning to Risk Surface Guard (WI-055)
  nateshpp
  committed
  bb8626e
Commits on Jul 28, 2026
- Merge remote-tracking branch 'origin/main' into feature/risk-surface-guard
  nateshpp
  committed
  3a6dec4
- Bump the new Risk Surface Guard SARIF upload to codeql-action v4
  nateshpp
  committed
  18d7436