feat(security): add the NVD reconciliation library and the #7276 post-mortem - #7370

Merged

apurvvkumaria merged 11 commits into

mainfrom

dongniy/7338-nvd-reconciliation

Jul 24, 2026

Commits on Jul 22, 2026

feat(security): advisory early-warning scan and audit provenance records

Dongni-Yang
and
claude
committed
79d6625
docs(security): add SPDX header to advisory early-warning doc

Dongni-Yang
and
claude
committed
1b53bb7
feat(security): reconcile early-warning signals with NVD

Dongni-Yang
and
claude
committed
fa46c2d
Merge remote-tracking branch 'origin/main' into dongniy/7338-audit-provenance
Dongni-Yang
committed
9759ce2
Merge branch 'dongniy/7338-audit-provenance' into dongniy/7338-nvd-reconciliation
Dongni-Yang
committed
acf6675
test(security): make NVD scan CLI tests hermetic via --inventory

Dongni-Yang
and
claude
committed
1abcf3a

Commits on Jul 24, 2026

Merge branch 'main' into dongniy/7338-nvd-reconciliation

Dongni-Yang
and
claude
committed
2a27dd0
chore: retrigger checks after the pr title fix

Dongni-Yang
and
claude
committed
cb4de75
fix(security): fail loudly on malformed --inventory entries and align doc style

Dongni-Yang
and
claude
committed
27e6cf5
chore: apply biome format to the inventory test fixture

Dongni-Yang
and
claude
committed
63efa7f
fix(security): traverse nested NVD configuration nodes
apurvvkumaria
committed
389a282