ajmallesh 098bf4be05 fix(sast): align Capella export with the submit-time code-path contract ...

The export gate required every code_paths entry to be file:line, but submit only
requires the primary sink to be file:line and accepts bare trace steps. A single
malformed trace step therefore dropped an otherwise-valid finding at export.

- add isValidPrimaryCodePath as the one shared primary-sink contract
- validate only the primary at export; buildResult already drops unusable steps
- route the submit-time validator through the same helper so the two cannot drift

2026-08-27 18:40:31 -07:00

..

cli

merge: integrate Shannon 3.0 with public v2.6.0

2026-08-27 14:30:16 -07:00

worker

fix(sast): align Capella export with the submit-time code-path contract

2026-08-27 18:40:31 -07:00