fix(security): fail closed on ambiguous dependency-review HTTP responses - #1725

Open

seonghobae wants to merge 21 commits into

mainfrom

fix/dependency-review-non200-fail-closed

Commits on Sep 2, 2026

test(security): require non-200 dependency review fail-closed
seonghobae
committed
cb07b8b
fix(security): fail closed on dependency graph non-200
seonghobae
committed
31f60e5
test(security): require caller permission envelope
seonghobae
committed
ee0f1ce
fix(security): preserve dependency-review caller permissions
seonghobae
committed
ca3bdbd
docs(security): record dependency-review authority boundary
seonghobae
committed
6d288ff
merge(main): preserve concurrent control-plane repairs
seonghobae
committed
403ca1c
merge(main): preserve dependency-review control-plane fixes
seonghobae
committed
ca7cb12
test(security): preserve latest reusable dependency-review contract
seonghobae
committed
2595e24
merge(main): preserve dependency-review owner and current controls
seonghobae
committed
754121d
test(security): require immutable dependency-review identities
seonghobae
committed
3736634
fix(security): validate immutable dependency-review identity
seonghobae
committed
b1e6263
fix(security): carry exact identity validation into bundled scan
seonghobae
committed
8b86c0d
docs(security): record authenticated dependency-review evidence
seonghobae
committed
ae12837
test(security): preserve bundled dependency-review identity gate
seonghobae
committed
58a0b4c

Commits on Sep 3, 2026

Merge branch 'main' into fix/dependency-review-non200-fail-closed
seonghobae
authored
6e8998f

Commits on Sep 6, 2026

Commits on Sep 7, 2026

chore(security): adopt protected main directly
seonghobae
committed
0bb8f7c

Commits on Sep 8, 2026

chore(security): adopt protected main for dependency review
seonghobae
committed
4ccb21d

Commits on Sep 12, 2026

Merge protected main into dependency review owner
seonghobae
committed
59063ff
Merge protected main into dependency review owner
seonghobae
committed
f27c5cf