feat(security): cve-lite 1.28 + override hygiene scanning (0.21.0) - #133

Merged

alamb-hex merged 16 commits into

mainfrom

feat/cve-lite-1.28-integration

Aug 10, 2026

Commits on Aug 10, 2026

chore(deps): cve-lite-cli 1.24.0 -> 1.28.0 + version-gated scan cache
alamb-hex
committed
6571e14
fix(security): track cve-lite 1.28 parent-upgrade confidence enum
alamb-hex
committed
243cd20
feat(security): derive scan completeness from cve-lite 1.28 output
alamb-hex
committed
0e0e17f
feat(security): let a ScanSource report a partial-coverage warning
alamb-hex
committed
f2a0c91
feat(security): mark cve-lite degraded when a scan is incomplete
alamb-hex
committed
50763ba
feat(security): add cve-lite override-hygiene audit runner
alamb-hex
committed
618737f
feat(security): add OverrideHygieneSource for cve-lite OA rules
alamb-hex
committed
c5e883b
feat(security): add override-hygiene read endpoint
alamb-hex
committed
4777b4a
feat(security): add gated override-hygiene fix endpoint
alamb-hex
committed
f5a8560
feat(security): add override hygiene panel to the project view
alamb-hex
committed
99f952a
feat(security): warn when a cve-lite scan is incomplete
alamb-hex
committed
a5a7e31
fix(security): close whole-branch review gaps in override-hygiene + completeness
alamb-hex
committed
9006193
fix(security): tighten override-hygiene dedup key and ruleId handling
alamb-hex
committed
8a65c79
refactor(security): make json-cache.ts the shared cache, cve-lite-cache a thin wrapper
alamb-hex
committed
5a15114
fix(security): remove module-load namespace collision self-check
alamb-hex
committed
2528acd
chore(release): 0.21.0
alamb-hex
committed
c38c8e9