fix(sdp): unblock CI — fuzz OOM + crash-log visibility + base SAST remediation - #34

Merged

opencode-agent[bot] merged 25 commits into

mainfrom

claude/bandscope-pr-audit-ci-zgl127

Aug 9, 2026

Commits on Jul 30, 2026

fix(fuzz): surface Atheris crash reproducers in the run log
claude
committed
b4254a9
fix(fuzz): bound in-memory evidence growth to stop execute_query OOM
claude
committed
25fe95c
fix(security): remediate base-branch Semgrep SAST findings blocking PRs
claude
committed
82911bd
test(authz): cover JWKS URL scheme guard (unblock coverage-evidence)
claude
committed
cc6dbeb
test(authz): reach 100% coverage of the OIDC/JWKS module
claude
committed
47386e7
test(authz): drop constant-condition ternary flagged by code-quality
claude
committed
38ab65f
test(policy): pin governance deny-paths (policy.py 88% -> 98%)
claude
committed
d1691c1
test(browse): cover PII-masking + policy-deny/validation paths (browse.py 85% -> 100%)
claude
committed
23909c7
test(observability): cover log-sink export + header extraction (80% -> 99%)
claude
committed
aec9570
test(config): cover the DB-backed KV config loader (config.py 77% -> 100%)
claude
committed
cbaf7c8
test(orchestrator): pin SQL-safety guards + query-draft branches (89% -> 98%)
claude
committed
a504523
test(connectors): pin source-connector contract guards (84% -> 100%)
claude
committed
529aa03
test(sdp): cover embeddings, connector-secret status, semantic validation (->100%)
claude
committed
a72033a
test(sdp): bring catalog + demo_smoke to 100% line coverage
claude
committed
6263c0c

Commits on Aug 2, 2026

chore: refresh head for last-push approval
opencode-agent[bot]
authored
03f0225

Commits on Aug 3, 2026

docs(fuzz): document all reproducer artifact types
seonghobae
committed
02a63c6
fix(fuzz): emit shell-safe absolute replay command
seonghobae
committed
a71f4b4
test(authz): prove rejected JWKS schemes never fetch
seonghobae
committed
492ea6e
test(credentials): remove vacuous secret exposure assertion
seonghobae
committed
c73b872
fix(catalog): preserve schema fields in patch requests
seonghobae
committed
88e4f39
test(catalog): exercise schema patch through public contract
seonghobae
committed
c257ae4
test(browse): require masking integration fixture
seonghobae
committed
03fe04c
chore(ci): retrigger required review pipeline at same tree
claude
committed
bd8b307
chore(ci): re-fire synchronize after Actions event-processing outage
claude
committed
2ba30b9
chore: refresh head for last-push approval
opencode-agent[bot]
authored
8130be1