GUI Attestation & Comment Engine — supersedes #8278#8283

Draft

aaronlippold wants to merge 64 commits into

feature/attestation-comment-engine

GitHub Advanced Security / SonarCloud succeeded Jun 25, 2026 in 3s

3 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

2 high
1 low

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 983 in libs/hdf-converters/sample_jsons/trufflehog_mapper/trufflehog-docker-hdf-withraw.json

Code scanning / SonarCloud

Cryptographic private keys should not be disclosed High

Make sure this private key gets revoked, changed, and removed from the code. See more on SonarQube Cloud

Check failure on line 1031 in libs/hdf-converters/sample_jsons/trufflehog_mapper/trufflehog-docker-hdf-withraw.json

Code scanning / SonarCloud

Cryptographic private keys should not be disclosed High

Make sure this private key gets revoked, changed, and removed from the code. See more on SonarQube Cloud

Check notice on line 13 in libs/hdf-converters/test/global-setup.ts

Code scanning / SonarCloud

OS commands should not rely on PATH resolution Low test

Make sure the "PATH" variable only contains fixed, unwriteable directories. See more on SonarQube Cloud