fix(security): reject malformed dependency-review identity before compare - #1045

Open

cursor[bot] wants to merge 5 commits into

mainfrom

cursor/bc-527d280c-f70e-4274-bf3f-c41170e804cf-54b1

Commits on Aug 16, 2026

fix(security): fail closed on unavailable dependency review
seonghobae
committed
07efb4a
fix(security): record visibility on dependency-review fail-closed

cursoragent
and
seonghobae
committed
4ca7d9e
test(security): prove 403 skip and transport failure cannot go green

cursoragent
and
seonghobae
committed
9650fd8
test(security): keep bash resolvable in the dependency-review probe harness

cursoragent
and
seonghobae
committed
fbb8432
fix(security): reject malformed dependency-review identity before compare

cursoragent
and
seonghobae
committed
6a7103a