Skip to content

Add provenance tag and confidence-gated suppression to guardrail prompts (AST-180794) - #1578

Merged
cx-kedar-bhujade merged 8 commits into
stagingfrom
feature/AST-180794-add-provenance-tag-confidence-gated-remediation
Oct 6, 2026
Merged

cx-kedar-bhujade merged 8 commits into
stagingfrom
feature/AST-180794-add-provenance-tag-confidence-gated-remediation

Merge branch 'main' into feature/AST-180794-add-provenance-tag-confid…

8d5ddbf
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Oct 12, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • PyPI Package Cooldown Check - Fails if any PyPI package version in the PR was released within the configured cooldown period
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers

Details

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.