test 46319a53ff Add grammar security audit and enhance vendor script ...

- vendor-grammar.sh: copy extra headers (.h, .inc) and common/ subdirs
  from grammar src/ directories. Needed for Astro (tag.h), PureScript/
  Typst (unicode.h), VHDL (.h/.inc files), F# (common/scanner.h).

- audit-grammar-security.sh: pre-vendoring scanner for dangerous patterns
  in vendored grammar C files. Checks for dangerous includes (sys/*,
  unistd.h, dlfcn.h), dangerous calls (system, exec, popen, fopen,
  socket, getenv, fork, dlopen), and suspicious patterns (constructor
  attributes, inline assembly, base64 blobs). PASS/WARN/BLOCK per grammar.

2026-04-15 20:08:35 +02:00

..

ci

Fix VirusTotal gate: accept completed scans with < 60 engines

2026-04-06 21:24:56 +02:00

hooks

Add time-bomb + MCP file read audit, tracked pre-commit hooks

2026-03-21 16:43:48 +01:00

audit-grammar-security.sh

Add grammar security audit and enhance vendor script

2026-04-15 20:08:35 +02:00

benchmark-index.sh

Fix C++ SEGV: NULL deref in LSP type resolver on large header files

2026-03-26 16:19:10 +01:00

build.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

check-nolint-whitelist.sh

Fix lint: magic numbers in cypher/sqlite_writer/configlink/gitignore, extract URL-in-args helpers

2026-04-02 01:08:51 +02:00

clean.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

clone-bench-repos.sh

Cross-service communication discovery + RAM-first incremental indexing

2026-03-28 13:59:42 +01:00

embed-frontend.sh

Fix Windows build: add zip pkg, portable embed (od replaces xxd)

2026-03-19 10:59:14 +01:00

env.sh

Fix production build errors, add build step to Docker test infra

2026-03-18 17:15:46 +01:00

extract_nomic_vectors.py

Parallelize post-passes, fix mode filtering + semantic edge quality

2026-04-06 12:41:30 +02:00

lint.sh

Split 168 functions to cognitive complexity 25, zero lint errors

2026-03-31 20:04:12 +02:00

security-allowlist.txt

Skip update when already on latest version

2026-04-03 17:41:27 +02:00

security-audit.sh

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00

security-fuzz-random.sh

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

security-fuzz.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

security-install.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-network.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-strings.sh

Respect nested .gitignore files during indexing, security audit all variants

2026-04-06 19:44:16 +02:00

security-ui.sh

Robust UI audit: skip inline URL scan on dist/, keep structural checks

2026-03-20 20:56:52 +01:00

security-vendored.sh

Fix cross-platform vector blob assembly and vendored security allowlist

2026-04-06 12:54:13 +02:00

setup-windows.ps1

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

setup.sh

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

smoke-test.sh

Fix smoke test: platform-specific config paths + consolidated skill name

2026-04-06 15:25:09 +02:00

soak-test.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

test_mcp_rapid_init.py

fix(mcp): address QA round 1 findings

2026-03-21 12:37:28 -05:00

test.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

vendor-grammar.sh

Add grammar security audit and enhance vendor script

2026-04-15 20:08:35 +02:00

vendored-checksums.txt

Remove AV-triggering words from token vocabulary, revert audit allowlist

2026-04-06 16:12:02 +02:00