Kjell Tore Guttormsen 751f1199c8 fix(llm-security): B1 pathguard regex — match multi-segment .env.*.* ... The previous ENV regex `/[\\/]\.env\.[a-z]+$/` only matched a single lowercase segment after `.env`. Multi-segment and mixed-case variants such as `.env.production.local.backup`, `.env.stage-1.local`, and `.env.CI.secret` slipped past the hook. Replaced with `/[\\/]\.env(\.[A-Za-z0-9._-]+)*$/` which matches `.env` plus any number of dot-separated alphanumeric/dot/hyphen/underscore segments. `.envrc` (direnv config, no dot separator) is still allowed. Addresses critical review 2026-04-20 §2 B1 (HIGH). Tests: 7 added (6 new multi-segment BLOCK cases + 1 .envrc ALLOW). All 1494 tests pass.		2026-04-19 23:59:38 +02:00
..
post-mcp-verify.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
post-session-guard.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-bash-destructive.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-compact-scan.mjs	test(hooks): cover pre-compact-scan happy-path, modes, size-cap	2026-04-17 14:44:52 +02:00
pre-edit-secrets.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-install-supply-chain.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-prompt-inject-scan.mjs	feat(governance): add policy-as-code — .llm-security/policy.json for distributable hook configuration	2026-04-10 13:37:02 +02:00
pre-write-pathguard.mjs	fix(llm-security): B1 pathguard regex — match multi-segment .env.*.*	2026-04-19 23:59:38 +02:00
update-check.mjs	feat: initial open marketplace with llm-security, config-audit, ultraplan-local	2026-04-06 18:47:49 +02:00