Security hardening: close 17 findings (3 High, 7 Medium, 5 Low, 2 Info) — fetch safety, schema validation, supply-chain pinning, prompt-injection guardrails - #32

Closed

Jose Luis Latorre Millas (joslat) wants to merge 5 commits into

microsoft:mainfrom

joslat:security/hardening-2026-05

Commits on May 20, 2026

Add security review and implementation fix plan

Jose Luis Latorre Millas (joslat)
and
Claude (claude)
committed
ef63889
Phase 1: network safety + escape hygiene

Jose Luis Latorre Millas (joslat)
and
Claude (claude)
committed
149f06a
Phase 2: input validation + atomic IO

Jose Luis Latorre Millas (joslat)
and
Claude (claude)
committed
80ffe05
Phase 3: supply chain + CI integrity, version 0.3.0

Jose Luis Latorre Millas (joslat)
and
Claude (claude)
committed
2680ace
Address Copilot PR review (6 inline + 1 low-confidence)

Jose Luis Latorre Millas (joslat)
and
Claude (claude)
committed
b771aca