fix: make workspace security scans and structural rules evidence-aware by alxxjohn · Pull Request #170 · devr-tools/codeguard

alxxjohn · 2026-08-29T22:44:43Z

Summary

run govulncheck per active go.work module with bounded concurrency, timeouts, partial results, advisory deduplication, and operational diagnostics
classify credential fixtures from combined path, symbol, and bounded value evidence without suppressing provider-shaped or realistic secrets
make hidden mutation, command/query mixing, message chains, and optional return contracts ownership- and effect-aware

go test ./...
go vet ./...
focused red/green tests for workspace failures, timeout partial results, fixture false negatives, alias/escape ownership, local constructors, fluent chains, and optional contracts
independent pre-PR review completed with no remaining Critical or Important findings

🤖 I have created a release *beep* *boop* --- ## [1.8.2](v1.8.1...v1.8.2) (2026-08-29) ### Bug Fixes * harden scan evidence edge cases ([d2a4a36](d2a4a36)) * make security scans workspace and fixture aware ([0b86a3b](0b86a3b)) * make structural mutation rules ownership aware ([92e006a](92e006a)) * make workspace security scans and structural rules evidence-aware ([#170](#170)) ([888d988](888d988)) * preserve evidence across precision boundaries ([306b3b1](306b3b1)) * preserve hidden mutation message contract ([6b6ec00](6b6ec00)) * satisfy security lint checks ([0c02e91](0c02e91)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).

AJMini added 7 commits August 29, 2026 17:58

docs: design workspace vulnerability and fixture repair

d4663a6

fix: make security scans workspace and fixture aware

0b86a3b

fix: make structural mutation rules ownership aware

92e006a

fix: preserve evidence across precision boundaries

306b3b1

fix: harden scan evidence edge cases

d2a4a36

fix: satisfy security lint checks

0c02e91

fix: preserve hidden mutation message contract

6b6ec00

alxxjohn merged commit 888d988 into main Aug 29, 2026
16 checks passed

alxxjohn mentioned this pull request Aug 29, 2026

chore(main): release 1.8.2 #171

Merged

alxxjohn deleted the fix/workspace-govulncheck-fixture-evidence branch August 29, 2026 23:03