feat(security): plugin security scanner with trust signals, CLI scan command, and CI integration#82

Merged

siracusa5 merged 22 commits intomainfrom

feat/plugin-security-scanner

Apr 6, 2026

Commits on Apr 6, 2026

auto-claude: subtask-1-1 - Define security report types in shared package

siracusa5
and
claude
committed
auto-claude: subtask-1-2 - Create security scanner rule engine

siracusa5
and
claude
committed
auto-claude: subtask-1-3 - Create security scanner main logic

siracusa5
and
claude
committed
auto-claude: subtask-1-4 - Create security report formatter

siracusa5
and
claude
committed
auto-claude: subtask-1-5 - Export security scanner from core package

siracusa5
and
claude
committed
auto-claude: subtask-1-6 - Add unit tests for security scanner

siracusa5
and
claude
committed
auto-claude: subtask-2-1 - Create scan command implementation

siracusa5
and
claude
committed
auto-claude: subtask-2-2 - Register scan command in CLI

siracusa5
and
claude
committed
auto-claude: subtask-2-3 - Create scan command formatter

siracusa5
and
claude
committed
auto-claude: subtask-2-4 - Add CLI integration tests for scan command

siracusa5
and
claude
committed
auto-claude: subtask-3-1 - Create SecurityBadge component

siracusa5
and
claude
committed
auto-claude: subtask-3-2 - Create PermissionsSummary component

siracusa5
and
claude
committed
auto-claude: subtask-3-3 - Update plugin detail page with security info

siracusa5
and
claude
committed
auto-claude: subtask-3-4 - Update TrustBadge to include security-scanned variant

siracusa5
and
claude
committed
feat(security): add database migration for security metadata columns

siracusa5
and
claude
committed
feat(security): wire security scan fields into Component type and UI

siracusa5
and
claude
committed
feat(ci): add security-scan job to validate workflow

siracusa5
and
claude
committed
fix(security): remove dead formatter and fix CI count regex patterns

siracusa5
and
claude
committed
fix(security): address critical and high security findings from review

siracusa5
and
claude
committed
chore: remove accidentally committed node_modules symlinks and .claude

siracusa5
and
claude
committed
fix(ci): fix crypto import and add shared build step before core

siracusa5
and
claude
committed
fix(tests): replace message.includes(url) with startsWith to clear CodeQL alerts

siracusa5
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(security): plugin security scanner with trust signals, CLI scan command, and CI integration#82

feat(security): plugin security scanner with trust signals, CLI scan command, and CI integration#82
siracusa5 merged 22 commits intomainfrom
feat/plugin-security-scanner

Commits on Apr 6, 2026

auto-claude: subtask-1-1 - Define security report types in shared package

auto-claude: subtask-1-2 - Create security scanner rule engine

auto-claude: subtask-1-3 - Create security scanner main logic

auto-claude: subtask-1-4 - Create security report formatter

auto-claude: subtask-1-5 - Export security scanner from core package

auto-claude: subtask-1-6 - Add unit tests for security scanner

auto-claude: subtask-2-1 - Create scan command implementation

auto-claude: subtask-2-2 - Register scan command in CLI

auto-claude: subtask-2-3 - Create scan command formatter

auto-claude: subtask-2-4 - Add CLI integration tests for scan command

auto-claude: subtask-3-1 - Create SecurityBadge component

auto-claude: subtask-3-2 - Create PermissionsSummary component

auto-claude: subtask-3-3 - Update plugin detail page with security info

auto-claude: subtask-3-4 - Update TrustBadge to include security-scanned variant

feat(security): add database migration for security metadata columns

feat(security): wire security scan fields into Component type and UI

feat(ci): add security-scan job to validate workflow

fix(security): remove dead formatter and fix CI count regex patterns

fix(security): address critical and high security findings from review

chore: remove accidentally committed node_modules symlinks and .claude

fix(ci): fix crypto import and add shared build step before core

fix(tests): replace message.includes(url) with startsWith to clear CodeQL alerts