1 Commits

Author	SHA1	Message	Date
Garry Tan	b856752bfd	test: /cso v2 E2E tests — full audit, diff mode, infra scope ... Three E2E test cases with planted vulnerabilities: - cso-full-audit: hardcoded API key + .env tracked by git - cso-diff-mode: webhook without signature verification on feature branch - cso-infra-scope: unpinned GitHub Action + Dockerfile without USER Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-22 23:15:16 -07:00