Repository navigation

security: harden scanning, signing keyring, MCP and the eval protocol - #80

Open

criptogus wants to merge 7 commits into

mainfrom

security/harden-scanning-keyring-mcp-and-eval-protocol

Open

security: harden scanning, signing keyring, MCP and the eval protocol#80
criptogus wants to merge 7 commits into
mainfrom
security/harden-scanning-keyring-mcp-and-eval-protocol

Commits on Oct 31, 2026
- chore(security): pin SkillSpector by SHA and add blocking secret scanning
  
  Gustavo Caetano
  authored and
  Gustavo Caetano
  committed
  b03fcda
- fix(trust): fail closed when the signing keyring has no active key
  
  Gustavo Caetano
  authored and
  Gustavo Caetano
  committed
  f9128cd
- feat(eval): versioned verdicts, exclusion basis and evidence stamping
  
  Gustavo Caetano
  authored and
  Gustavo Caetano
  committed
  45437bd
- feat(security): port SkillSpector golden patterns into the audit gate
  
  Gustavo Caetano
  authored and
  Gustavo Caetano
  committed
  338c70e
- feat(marketplace): rug-pull detection for already-published packages
  
  Gustavo Caetano
  authored and
  Gustavo Caetano
  committed
  75318dc
- feat(mcp): expose security_scan as a runtime guardrail + cover the server
  
  Gustavo Caetano
  authored and
  Gustavo Caetano
  committed
  c93724a
- chore: unblock CI — dependency-free keyring check, CLI bundle, lint drift
  
  Gustavo Caetano
  authored and
  Gustavo Caetano
  committed
  aae9afb