Issues

• investigate(ci): diagnose non-deterministic self-scan results across Dependabot root bumps

  area:ciarea:scannersreliability:determinismrisk:low
  DecOperations/OWASP.WTF#97 · Filter by author jeremyjs opened on Jun 18, 2026

• feat(output): report suppressed finding count in terminal, JSON, and SARIF metadata

  agent:claude-devagent:readyarea:cliarea:outputcycle:nextenhancementreliability:trustrisk:low
  DecOperations/OWASP.WTF#87 · Filter by author jeremyjs opened on Jun 14, 2026

• feat(config): project-level .owasp-wtf.yml config file with CLI flag precedence

  area:cliarea:configcycle:nextenhancementreliability:configrisk:medium
  DecOperations/OWASP.WTF#86 · Filter by author jeremyjs opened on Jun 14, 2026

• fix(ci): configure commitlint to accept workspace-scoped Dependabot commit format

  agent:claude-devagent:readyarea:cicycle:currentreliability:determinismrisk:low
  DecOperations/OWASP.WTF#85 · Filter by author jeremyjs opened on Jun 14, 2026
  3

• feat(config): framework-aware safe-pattern allowlist for native rules

  area:clicycle:nextenhancementreliability:trustrisk:medium
  DecOperations/OWASP.WTF#81 · Filter by author jeremyjs opened on Jun 7, 2026

• feat(rules): reduce A09-SENSITIVE-LOG false positives on configuration/status messages

  agent:claude-devagent:readyarea:clicycle:currentenhancementreliability:trustrisk:low
  DecOperations/OWASP.WTF#80 · Filter by author jeremyjs opened on Jun 7, 2026
  3

• feat(rules): reduce A02-HARDCODED-SECRET false positives on type definitions and UI strings

  agent:claude-devagent:readyarea:clicycle:currentenhancementreliability:trustrisk:low
  DecOperations/OWASP.WTF#79 · Filter by author jeremyjs opened on Jun 7, 2026
  3

• feat(rules): avoid SQL injection false positives on parameterized tagged template literals

  agent:claude-devagent:readyarea:clicycle:currentenhancementreliability:trustrisk:low
  DecOperations/OWASP.WTF#78 · Filter by author jeremyjs opened on Jun 7, 2026
  3

• feedback(rollout): Dial-WTF/PeerSpeak follow-up priorities from #33

  blockedenhancementrisk:high
  DecOperations/OWASP.WTF#51 · Filter by author jeremyjs opened on May 27, 2026

• meta: operationalize release process across DecOperations / Dial-WTF / YLaunchinator repos (xCoder scaffolds, Calibrate gates)

  blockedmetareleasetooling
  DecOperations/OWASP.WTF#38 · Filter by author jeremyjs opened on May 27, 2026
  1

• rollout: adopt OWASP.WTF as the security gate in Dial-WTF/PeerSpeak

  blockedenhancement
  DecOperations/OWASP.WTF#33 · Filter by author jeremyjs opened on May 27, 2026

• Adopt @decoperations/calibrate for code quality gating

  area:cicicycle:laterenhancementqualityrisk:low
  DecOperations/OWASP.WTF#20 · Filter by author jeremyjs opened on May 21, 2026
  1