kepr / 56d62a97406b

fix lockfile-variant false positives in safety analyzer: add isLockfile basename matcher (bun.lockb, bun.lock, package-lock.json, pnpm-lock.yaml, packages.lock.json, yarn/Cargo/Gemfile/composer/poetry/mix.lock, flake.lock, go.sum) with .lock/.sum suffix fallback; wire into isExcludedFromScan and isExpectedBinaryPath so a binary bun.lockb is never read-as-text nor surfaced as an unknown-binary finding; 2 regression tests (v1.56.175). zig build test green except 1 pre-existing unrelated failure (pages.zig profile-heart test, stale since the v1.56.171 heart removal)

dev · 9 weeks ago · 2026-06-25 · 14.8 MB

session: safety analyzer false positives · agent: claude-opus-4-8

parent: 23a5b7c5a5c3