Colin 533b518553 fix(security-scan): update scanner self-exemption allowlists for renamed suite files ...

The three shell scanners exempt their own adversarial test fixtures by exact
filename; the *.security.test.cjs renames broke those entries, so the PR diff
scan flagged the scanners' own test payloads. Verified locally with all three
scanners in --diff origin/next mode (0 findings) and the security suite
(207/207). The .sh files were missed in the original reference sweep because
the rename grep filtered to .cjs/.yml/.json/.md extensions.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-10 00:15:02 -04:00

..

changeset

fix(#935): install changeset CLI so /gsd-update changelog preview works (#938)

2026-06-09 12:37:26 -04:00

lib

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

release-notes

fix discord release changelog announcements

2026-06-07 10:27:20 -04:00

affected-tests-lib.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

build-hooks.js

feat(#770): register Claude Code lifecycle hooks (SubagentStop/Stop/PreCompact/FileChanged) (#821)

2026-06-07 20:36:11 -04:00

check-alias-drift.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

check-env.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

check-npm-integrity.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-guard-runner.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-prepare-test-scope.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-rebase-check.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

ci-test-scope.cjs

ci(scope): narrow #494 invariant — changed tests join windows lane, not full matrix

2026-06-09 23:50:41 -04:00

command-contract-helpers.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

diff-touches-shipped-paths.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

fix-slash-commands.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

gen-capability-registry.cjs

feat(#942): tier→profile/cluster derivation + consistency gate (ADR-857 phase 4a) (#943)

2026-06-09 15:11:42 -04:00

gen-inventory-manifest.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

gen-loop-host-contract.cjs

feat(#903): generate Loop Host Contract from workflow markers (ADR-857 phase 3a-impl-2) (#906)

2026-06-08 22:16:58 -04:00

gen-research-agents.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

generate-package-identity.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

issue-dedupe.cjs

feat(#836): no-LLM duplicate-issue detection + challenge + 1-day auto-close (#843)

2026-06-07 20:35:43 -04:00

lint-command-contract.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-descriptions.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-docs-required.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-legacy-dir-name.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-package-identity-drift.cjs

chore(#604): rename get-shit-done/ runtime directory to gsd-core/ (#615)

2026-06-02 18:35:29 -04:00

lint-pr-check-project-dir.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-regression-test-names.allowlist.json

chore(ratchet): regenerate bug-* allowlist after rebase onto next (244 -> 257)

2026-06-09 23:56:57 -04:00

lint-regression-test-names.cjs

test(ratchet): ban new top-level bug-NNNN test files via identity allowlist

2026-06-09 23:50:41 -04:00

lint-shell-command-projection-drift.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-skill-deps.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

lint-test-file-count.allowlist.json

test(suites): seed security/slow/integration suites via measured retags

2026-06-09 23:50:41 -04:00

lint-test-file-count.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

mutation-matrix.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

pr-template-policy.cjs

fix(ci): replace minimatch with path.matchesGlob in pr-template-policy (#3701)

2026-05-18 12:41:01 -04:00

prompt-injection-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

release-tarball-smoke.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

research-profiles.cjs

chore(#771): convert agent color: hex/magenta values to documented named colors (#823)

2026-06-07 18:50:50 -04:00

run-affected-tests.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

run-tests.cjs

fix(#872): make roadmap-phase-fallback tests hermetic against ambient GSD env (#873)

2026-06-08 12:04:26 -04:00

secret-scan-lint.sh

feat(115): secret-scan exclusion governance + --strict reduced-scan mode (#134)

2026-05-23 10:58:14 -04:00

secret-scan.sh

fix(security-scan): update scanner self-exemption allowlists for renamed suite files

2026-06-10 00:15:02 -04:00

setup-branch-protection.sh

chore(#846): remove unused PR-size labeler (size/S–XL) workflow (#848)

2026-06-07 22:03:48 -04:00

strip-prose-atrefs.cjs

chore: clean up clear-cut ESLint warnings (#732) (#734)

2026-06-06 11:24:48 -04:00

sync-manifest-versions.cjs

fix(#844): sync runtime manifest versions on npm version bump (#845)

2026-06-07 21:43:30 -04:00

sync-rulesets.sh

chore(#518): rename npm package + bin to @opengsd/gsd-core (#519)

2026-05-30 17:25:02 -04:00

sync-runtime-launcher.cjs

chore: clean up clear-cut ESLint warnings (#732) (#734)

2026-06-06 11:24:48 -04:00

test-failure-reasons.cjs

test: add typed failure classification module (#333)

2026-05-26 11:23:29 -04:00

verify-npm-publish.cjs

refactor(scripts): replace process.exit() with ExitError + runMain handler (#739) (#740)

2026-06-06 16:13:13 -04:00

workflow-policy.cjs

fix(#437,#439,#440): restore defaults.run.shell + 'zsh {0}' format + Windows .cmd shell:true (PR #434 fallout) (#438)

2026-05-28 18:06:19 -04:00