Sharang ParnerkarandClaude Fable 5
b7b9c812ab
CI / Check (push) Skipped
CI / Check (pull_request) Failing after 3m1s
CI / Detect Changes (pull_request) Skipped
CI / Deploy Agent (pull_request) Skipped
CI / Deploy Dashboard (pull_request) Skipped
CI / Deploy Docs (pull_request) Skipped
CI / Deploy MCP (pull_request) Skipped
CVE matching is done directly against OSV.dev (by purl) and NVD (CVSS, CODESYS CPE) in pipeline/cve.rs; Grype is not installed or invoked. DAST/pentest use the in-house compliance-dast agents, not ZAP or nuclei. Found while reconciling the Certifai requirements spec (Collectives) with the code. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EgxGHn22YEfQz5fLHSHkLv