fix(security): reject dot segments and hide raw dependency-review identity - #1049

Open

cursor[bot] wants to merge 6 commits into

mainfrom

cursor/bc-2fded0e8-f227-4ce0-a45b-b519460985cc-4303

Commits on Aug 19, 2026

fix(security): fail closed on unavailable dependency review
seonghobae
committed
1fccca7
fix(security): record visibility on dependency-review fail-closed

cursoragent
and
seonghobae
committed
98dd747
test(security): prove 403 skip and transport failure cannot go green

cursoragent
and
seonghobae
committed
c151e7b
test(security): keep bash resolvable in the dependency-review probe harness

cursoragent
and
seonghobae
committed
6faf31b
fix(security): reject malformed dependency-review identity before compare

cursoragent
and
seonghobae
committed
280211d
fix(security): reject dot segments and hide raw dependency-review identity

cursoragent
and
seonghobae
committed
378b350