All pull requests

Pull requests

• Bump System.Text.Json from 8.0.4 to 10.0.13

  dependencies.NET
  #79·dependabot[bot] opened Oct 16, 2026Bot·

  ·
  1

• Bump Microsoft.Data.SqlClient from 5.0.2 to 7.1.1

  dependencies.NET
  #78·dependabot[bot] opened Oct 2, 2026Bot·

  ·
  1

• Fix 9 critical IaC security vulnerabilities in Terraform Azure configuration

  #57·emmanuelknafo opened May 11, 2026Contributor·

  ·
  3

• docs(security): sample supply chain analysis for webapp01 (custom agent output)

  #56·emmanuelknafo opened May 8, 2026Contributor·4 tasks done·

  ·
  1

  1

• Bump Azure.Identity from 1.13.2 to 1.21.0

  dependencies.NET
  #49·dependabot[bot] opened Apr 17, 2026Bot·

  ·
  1

• chore(deps): Bump aquasecurity/trivy-action from 0.32.0 to 0.34.0 in /.github/workflows in the github_actions group across 1 directory

  dependenciesgithub_actions
  #41·dependabot[bot] opened Feb 18, 2026Bot·

  ·
  2

• feat: Add initial implementation of Dockerfile, Pipfile.lock, Terrafo…

  #39·emmanuelknafo opened Feb 10, 2026Contributor·

  ·
  33

• Fresh threat model for gh-aspnet-webapp blueprint

  #38·emmanuelknafo with CopilotAI opened Feb 10, 2026·

  ·
  

• Feature/tt343 demo 01

  #37·emmanuelknafo opened Feb 10, 2026Contributor·

  ·
  33

• Bump Newtonsoft.Json from 13.0.1 to 13.0.4

  dependencies.NET
  #35·dependabot[bot] opened Feb 6, 2026Bot·

  ·
  1

• Bump Microsoft.VisualStudio.Azure.Containers.Tools.Targets from 1.21.0 to 1.23.0

  dependencies.NET
  #34·dependabot[bot] opened Feb 6, 2026Bot·

  ·
  1

• Bump Azure.Identity and Microsoft.Data.SqlClient

  dependencies.NET
  #33·dependabot[bot] opened Feb 6, 2026Bot·

  ·
  1

• feat(security): enforce supply chain security for repository

  #31·emmanuelknafo opened Feb 5, 2026Contributor·

  ·
  1

  1

• Harden Bicep IaC: enforce HTTPS, TLS 1.2, SQL TDE, auditing, and diagnostic settings

  #27·emmanuelknafo with CopilotAI opened Feb 5, 2026·

  ·
  

• Initial security review plan for web application

  #26·emmanuelknafo with CopilotAI opened Jan 29, 2026·

  ·
  

• Security assessment: webapp01 ASP.NET Core application

  #25·emmanuelknafo with CopilotAI opened Jan 29, 2026·

  ·
  

• Bump actions/checkout from 5 to 6

  dependenciesgithub_actions
  #5·dependabot[bot] opened Jan 16, 2026Bot·

  ·
  1

• Bump anchore/sbom-action from 0.20.5 to 0.21.1

  dependenciesgithub_actions
  #4·dependabot[bot] opened Jan 16, 2026Bot·

  ·
  1

• Bump ossf/scorecard-action from 2.4.2 to 2.4.3

  dependenciesgithub_actions
  #3·dependabot[bot] opened Jan 16, 2026Bot·

  ·
  1

• Bump zaproxy/action-full-scan from 0.12.0 to 0.13.0

  dependenciesgithub_actions
  #2·dependabot[bot] opened Jan 16, 2026Bot·

  ·
  2

• Bump zaproxy/action-baseline from 0.14.0 to 0.15.0

  dependenciesgithub_actions
  #1·dependabot[bot] opened Jan 16, 2026Bot·

  ·
  2