5.2: Vulnerability Scanner #278

Open

Rockachopa wants to merge 4 commits from step35/108-5-2-vulnerability-scanner into main

Author	SHA1	Message	Date
STEP35	9e2514723f	Merge fix from test branch: handle package extras Some checks failed Test / pytest (pull_request) Failing after 12s Details	2026-04-26 20:47:14 -04:00
STEP35	c04227b03b	fix: handle package extras in requirements parsing Fixed regex to correctly extract version spec when package includes extras like django[argon2]==4.2.0. The previous pattern consumed the version spec in the non-greedy .*? part when extras were present.	2026-04-26 20:47:05 -04:00
STEP35	a7b14c4b2b	test push	2026-04-26 20:43:19 -04:00
STEP35	a46d465d2d	feat: add vulnerability scanner for issue #108 Some checks failed Test / pytest (pull_request) Failing after 10s Details - scripts/vulnerability_scanner.py: scan Python dependencies against OSV CVE database - tests/test_vulnerability_scanner.py: 10 comprehensive tests - Supports requirements.txt parsing with -r includes - Outputs text, JSON, and markdown reports - Filters by severity (critical/high/medium/low) - Exit codes 0/1/2 for CI integration	2026-04-26 20:40:12 -04:00