Merge updates from upstream and integrate local security report optimizations#163

Open

hbui290 wants to merge 8 commits into

NVIDIA:mainfrom

Commits on Jun 22, 2026

feat: optimize performance with SQLite caching, smart block chunking, pre-filtering, and bug fixes

Winston
authored and
Winston
committed
security: prevent Zip Slip vulnerability in zip extractor

Winston
authored and
Winston
committed
security: resolve import aliases in AST analyzer to prevent evasion

Winston
authored and
Winston
committed
security: fix trusted domain verification by parsing hostname instead of substring match

Winston
authored and
Winston
committed
fix: drop ge/le Pydantic bounds and enforce with runtime clamping validators

Winston
authored and
Winston
committed
fix: apply scoring multiplier only to findings in executable files

Winston
authored and
Winston
committed

Commits on Jun 23, 2026

Merge upstream/main into main, resolving conflicts

Winston
authored and
Winston
committed
Fix executable scripts multiplier propagation and mock get_chat_model in optimization test

Winston
authored and
Winston
committed