Fix security gaps, command injection, and add comprehensive scanning coverage (worktrees, hooks, LFS)#211

Merged

djdefi merged 16 commits into

mainfrom

copilot/fix-test-coverage-gaps

Jan 30, 2026

Commits on Jan 30, 2026

Initial plan

Copilot
authored and
djdefi
committed
Fix critical security gaps, bugs, and add comprehensive test coverage

Copilot
and
djdefi
committed
Address code review feedback: fix arithmetic expressions, variable quoting, and command injection vulnerability

Copilot
and
djdefi
committed
Add comprehensive summary of all fixes applied

Copilot
and
djdefi
committed
Add comprehensive guide for scanning git objects, reflog, worktrees, and other advanced areas

Copilot
and
djdefi
committed
Implement worktree, hooks, and LFS scanning (easy wins)

Copilot
and
djdefi
committed
Update FIXES_SUMMARY.md with new worktree, hooks, and LFS scanning features

Copilot
and
djdefi
committed
Address code review feedback: cache lists, fix quoting, improve LFS parsing

Copilot
and
djdefi
committed
Add test for safe handling of options (command injection fix)
djdefi
committed
Fix: remove SCRIPT variable that broke command execution
djdefi
committed
Fix: scan current directory (.) instead of $REPO path
djdefi
committed
Fix: remove EXCLUDE from initial scan (matches original behavior)
djdefi
committed
DEBUG: Add verbose output to diagnose scan test failure
djdefi
committed
Fix test: search for 'FOUND' instead of old signature name
djdefi
committed
Remove extra documentation files for cleaner PR
djdefi
committed
Remove redundant static validation tests
djdefi
committed