Kjell Tore Guttormsen a3f7ee4897 fix(scope): a clone under cwd is not the caller's own working tree ... isOwnWorkingTree() treated any target at or below cwd as own, so a foreign clone under cwd (cwd = $HOME, a vendor clone in a project) still had its .llm-security-ignore, policy.json and custom SIG rules read. The target must now also share cwd's git root: nearest ancestor with a `.git` entry (dir for a clone, file for a submodule/worktree), or none for both. No git spawn. tmpdir stays foreign. Chosen per the PM order: it is exactly the line between "my repo" and "something I fetched", and the failure direction is safe (foreign => config ignored => more findings, never fewer). Red first: tests/lib/own-working-tree.test.mjs 4 fail / 5 pass (the 5 are known-positives), tests/scanners/nested-clone-scope.test.mjs 5 fail / 4 pass on the old rule. Green after; reverting the git-root comparison turns 9 red. Suite 2306 / 2300 pass / 0 fail / 6 skip; hooks 370/0 (implicit root untouched); golden 109/7/4, 61/61. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-09-22 21:04:19 +02:00
..
e2e	test(llm-security): build poisoned fixtures at test time, never on disk	2026-09-22 13:07:38 +02:00
fixtures	test(ast-taint): materialize the ast-scan fixtures at test time	2026-09-22 14:11:27 +02:00
golden	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
helpers	fix(policy): read policy.json only from the caller's own working tree	2026-09-22 20:15:17 +02:00
hooks	refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0)	2026-08-13 21:10:14 +02:00
lib	fix(scope): a clone under cwd is not the caller's own working tree	2026-09-22 21:04:19 +02:00
scanners	fix(scope): a clone under cwd is not the caller's own working tree	2026-09-22 21:04:19 +02:00
av-surface.test.mjs	test(ast-taint): materialize the ast-scan fixtures at test time	2026-09-22 14:11:27 +02:00