Harden cve-fix with pre-fix scanning, binary verification, PR dedup and input guardrails#41

Merged

amir-yogev-gh merged 20 commits into

flightctl:mainfrom

amir-yogev-gh:cve-fix-hardening

May 12, 2026

Commits on May 11, 2026

Harden cve-fix with pre-fix scanning, binary verification, PR dedup, and input guardrails
amir-yogev-gh
committed
Fix lint failure: replace absolute path with ${TMPDIR} in validate.md
amir-yogev-gh
committed
Fix inconsistent error handling in check_existing_prs.py
amir-yogev-gh
committed
Fix check_manifests returning first file line instead of matching line
amir-yogev-gh
committed
Fix scanner exit code misinterpretation in scan.py
amir-yogev-gh
committed
Fix scanner exit code misinterpretation in verify.py
amir-yogev-gh
committed
Add VEX justification to scan output for Jira ticket closure
amir-yogev-gh
committed

Commits on May 12, 2026