391d81bea7
feat(agents): evidence discipline, and coverage as a first-class artifact (#961)
devin-ai-integration[bot]
2026-08-24 03:34:09 -07:00
c5eac30bf0
Say what MCP servers are worth connecting for
Jonathan Singer
2026-08-21 17:38:05 -04:00
1c499c5b2d
perf: bootstrap Caido concurrently with the scan start (#1143)
devin-ai-integration[bot]
2026-08-21 12:09:59 -07:00
01ea94920d
Show MCP tool calls distinctly in the terminal and the run viewer
Jonathan Singer
2026-08-21 13:09:24 -04:00
afda373f55
Sanitize namespaced tool names so model APIs accept them
Jonathan Singer
2026-08-21 11:08:23 -04:00
1ce43d1b94
perf: take heavy imports off the startup path and pre-warm them in the background (#1141)
devin-ai-integration[bot]
2026-08-20 20:24:08 -07:00
2cc8167814
docs(skills): correct gRPC guidance, a .proto is not a spec target
Alex Schapiro
2026-08-20 20:40:46 +00:00
d6a3ca7e58
docs(skills): document --workspace-file for supporting files
Alex Schapiro
2026-08-20 20:33:32 +00:00
9099710cef
docs(skills): fix nonexistent --mount flag, document real targeting flags, add application-security-testing skill
Alex Schapiro
2026-08-20 20:28:44 +00:00
634cb98241
docs(skills): use current OWASP editions (Top 10:2025, API Top 10 2023)
Alex Schapiro
2026-08-14 15:12:04 +00:00
1b36343eea
fix(skills): avoid unquoted colon in api-security-testing description
Alex Schapiro
2026-08-14 15:07:26 +00:00
b5ef93e744
feat(skills): add target-specific security testing skills (web app, API, OWASP Top 10, code review)
Alex Schapiro
2026-08-14 15:06:58 +00:00
305cb13998
Show errored MCP tool calls as failed in the TUI
Jonathan Singer
2026-08-20 18:19:01 -04:00
b1efd6ef1b
Fix telemetry deltas for resumed runs
Alex Schapiro
2026-08-17 14:12:38 +00:00
a46a60cf6a
feat(reporting): require contextual CVSS and usage evidence on dependency reports
Ahmed Allam
2026-08-17 11:34:15 +00:00
918442dbc8
cli: render contextual CVSS vector, advisory score, and reasoning for dependency findings
Ahmed Allam
2026-08-17 09:59:57 +00:00
e442db9c93
Contextual CVSS as a full 8-metric breakdown, computed like a normal finding
Ahmed Allam
2026-08-17 09:45:04 +00:00
9c0d30a0d0
reporting: require the source-to-sink trace in reachability evidence, not just CVSS reasoning
Ahmed Allam
2026-08-17 09:11:59 +00:00
55e6e66030
reporting: surface contextual CVSS in the markdown report; require reasoning only for surviving metrics
Ahmed Allam
2026-08-17 09:10:47 +00:00
99e2d5d826
reporting: drop per-metric contextual CVSS reasoning, keep the summary
Ahmed Allam
2026-08-17 09:08:07 +00:00
310f310e28
feat(reporting): contextual CVSS environmental metrics on dependency reports
Ahmed Allam
2026-08-17 09:05:20 +00:00
e82ee2c31e
Contextual CVSS as a full 8-metric breakdown, computed like a normal finding
Ahmed Allam
2026-08-17 09:45:04 +00:00
256df30d28
reporting: require the source-to-sink trace in reachability evidence, not just CVSS reasoning
Ahmed Allam
2026-08-17 09:11:59 +00:00
84163e8e3b
reporting: surface contextual CVSS in the markdown report; require reasoning only for surviving metrics
Ahmed Allam
2026-08-17 09:10:47 +00:00
360c549278
reporting: drop per-metric contextual CVSS reasoning, keep the summary
Ahmed Allam
2026-08-17 09:08:07 +00:00
474fb25bf3
feat(reporting): contextual CVSS environmental metrics on dependency reports
Ahmed Allam
2026-08-17 09:05:20 +00:00
8551339130
feat: place caller-provided files into the sandbox workspace (extra_files, --workspace-file) (#1085)
yoni-at-strix
2026-08-14 13:43:08 -07:00