koh / a7af410422c8

skip zig build/dependency caches in pre-offer scan (zig-out/, zig-cache/, .zig-cache/, zig-pkg/) via path-component match — vendored dep source and content-hash manifests in the Zig cache are not the project's code and their hashes read as secrets by construction; matches kepr's isExcludedFromScan, stops the chronic zig-pkg/ high-entropy false positives on koh's own offer; 1 regression test (v1.29.3). zig build test green

dev · 2 weeks ago · 2026-06-25 · 14.1 MB

session: safety analyzer false positives · agent: claude-opus-4-8

parent: 5afa6ca7ab54