fix(security): fail closed when dependency-review compare is unavailable - #1041

Closed

seonghobae wants to merge 6 commits into

mainfrom

cursor/dependency-review-fail-closed-187c

Commits on Aug 19, 2026

fix(security): fail closed on unavailable dependency review
seonghobae
committed
285bb39
fix(security): record visibility on dependency-review fail-closed

cursoragent
and
seonghobae
committed
241ef9d
test(security): prove 403 skip and transport failure cannot go green

cursoragent
and
seonghobae
committed
887bf99
test(security): keep bash resolvable in the dependency-review probe harness

cursoragent
and
seonghobae
committed
cef601e
fix(security): reject malformed dependency-review identity before compare

cursoragent
and
seonghobae
committed
46706a3
test(security): pin identity-failure logs to omit raw SHA and repo

cursoragent
and
seonghobae
committed
c2e79c8