fix(security): bind repository scanners to exact PR head - #799

Open

seonghobae wants to merge 7 commits into

mainfrom

fix/security-scan-exact-head

Commits on Aug 7, 2026

test(security): require literal PR-head scanner checkout

seonghobae
authored and
pr-auto-rebase[bot]
committed
1a25b12
ci(security): execute exact-head scanner contract

seonghobae
authored and
pr-auto-rebase[bot]
committed
7d20fb7
test(security): require literal-head SARIF attribution

seonghobae
authored and
pr-auto-rebase[bot]
committed
e75172d
fix(security): scan and publish literal PR-head evidence

seonghobae
authored and
pr-auto-rebase[bot]
committed
a7028f2
ci(security): verify exact-head checkout and SARIF contracts

seonghobae
authored and
pr-auto-rebase[bot]
committed
115b2fc
docs(security): record literal-head scanner evidence

seonghobae
authored and
pr-auto-rebase[bot]
committed
fc37844
docs: record exact-head security scanner repair

seonghobae
authored and
pr-auto-rebase[bot]
committed
323c07b