orchestrator/security-review/checkers/fixtures/dependency-cve/EXPECTED_VULN_COUNT at 0898fb50a92b31cf37b29ff368148b96e520d873 - adam/orchestrator - Sea Haven Git

adam/orchestrator

Archived

This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.

Adam Moussa 0898fb50a9 feat(secrev): dependency-cve Plane-1 Tier-1 checker (OSV, ALARM-only)

Read-only checker on the Phase-0 substrate: scans $MIRROR_DIR mirrors for
pinned deps (requirements/poetry/Pipfile/package-lock/yarn/csproj across
PyPI/npm/NuGet), cross-refs OSV querybatch (live) or an offline advisory
fixture (canary). Mode-600 reports, ALARM-only, --canary asserts 2 planted
vulns (jinja2 2.11.2, lodash 4.17.15). Complements Dependabot. Not provisioned.

2026-06-18 14:57:07 -04:00

1 line

2 B

Text

Raw Blame History

2