fix(security): reject dot path components before dependency-review compare - #1050

Draft

cursor[bot] wants to merge 7 commits into

mainfrom

cursor/bc-f59729bf-862b-4dcf-bba2-73fdecc98207-5447

Commits on Aug 20, 2026

fix(security): fail closed on unavailable dependency review
seonghobae
committed
640b37d
fix(security): record visibility on dependency-review fail-closed

cursoragent
and
seonghobae
committed
e4f1a2d
test(security): prove 403 skip and transport failure cannot go green

cursoragent
and
seonghobae
committed
a70e5dc
test(security): keep bash resolvable in the dependency-review probe harness

cursoragent
and
seonghobae
committed
fa63c43
fix(security): treat curl 000 as unavailable dependency-review evidence

cursoragent
and
seonghobae
committed
b8276c6
fix(security): reject named refs before dependency-review compare

cursoragent
and
seonghobae
committed
d4ab623
fix(security): reject dot path components before dependency-review compare

cursoragent
and
seonghobae
committed
948de32