Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
Contrast-Security-OSS
/
runtime-analyst
Public
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Issues
0
Pull requests
3
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Add VEX generation/advisor and Blueprint connection-ID resolution
- #10
#10
Merged
jason-at-contrast
merged 16 commits into
main
Contrast-Security-OSS/runtime-analyst:main
from
vex-and-blueprint
Contrast-Security-OSS/runtime-analyst:vex-and-blueprint
Copy head branch name to clipboard
Sep 3, 2026
Conversation
Commits
16
(16)
Checks
Files changed
Merged
Add VEX generation/advisor and Blueprint connection-ID resolution
#10
jason-at-contrast
merged 16 commits into
main
Contrast-Security-OSS/runtime-analyst:main
from
vex-and-blueprint
Contrast-Security-OSS/runtime-analyst:vex-and-blueprint
Copy head branch name to clipboard
Commits
Commits on Sep 2, 2026
Add VEX generation/advisor and Blueprint connection-ID resolution
Show description for bc9d715
planetlevel
committed
bc9d715
View commit details
Copy full SHA for bc9d715
Browse repository at this point
Enrich VEX with description, recommendation, response, EPSS/CISA KEV signals
Show description for d14f881
planetlevel
committed
d14f881
View commit details
Copy full SHA for d14f881
Browse repository at this point
Add samples/ with real output from every generator + advisor report
Show description for 9e284d3
planetlevel
committed
9e284d3
View commit details
Copy full SHA for 9e284d3
Browse repository at this point
Scope all samples to a single app per report type
Show description for 5cfd192
planetlevel
committed
5cfd192
View commit details
Copy full SHA for 5cfd192
Browse repository at this point
Rework VEX Advisor report: merge duplicate CVE lists, summary-first layout
Show description for 33de63c
planetlevel
committed
33de63c
View commit details
Copy full SHA for 33de63c
Browse repository at this point
Commits on Sep 3, 2026
Merge VEX Advisor's per-app tables into one compressed table with coded rationale
Show description for a6e30fe
planetlevel
committed
a6e30fe
View commit details
Copy full SHA for a6e30fe
Browse repository at this point
Add explicit Action column (Safe/Monitor/Review) to VEX Advisor table
Show description for 6b8d5ec
planetlevel
committed
6b8d5ec
View commit details
Copy full SHA for 6b8d5ec
Browse repository at this point
Bump GitHub Actions to Node 24-native versions
Show description for c35228f
planetlevel
committed
c35228f
View commit details
Copy full SHA for c35228f
Browse repository at this point
Spell out Rationale, add day counts, drop the Action column
Show description for 513d736
planetlevel
committed
513d736
View commit details
Copy full SHA for 513d736
Browse repository at this point
Clarify Rationale wording: Library Unused / CVE Shielded / CVE Not Used Nd / CVE Watching Nd
Show description for b34cf8c
planetlevel
committed
b34cf8c
View commit details
Copy full SHA for b34cf8c
Browse repository at this point
Report Assess/Protect module enablement per app/environment in VEX
Show description for c7d00a6
planetlevel
committed
c7d00a6
View commit details
Copy full SHA for c7d00a6
Browse repository at this point
Rename Protect->ADR, detect real CVE Shield availability, fix a dropped-CVE bug
Show description for 651ea7d
planetlevel
committed
651ea7d
View commit details
Copy full SHA for 651ea7d
Browse repository at this point
Never claim not_affected via duration when CVE Shield has no coverage
Show description for 0999309
planetlevel
committed
0999309
View commit details
Copy full SHA for 0999309
Browse repository at this point
Give the shield-unavailable in_triage case its own rationale word
Show description for e59a4d5
planetlevel
committed
e59a4d5
View commit details
Copy full SHA for e59a4d5
Browse repository at this point
Simplify shieldAvailability to the org-wide fact, drop per-env inference
Show description for e08e249
planetlevel
committed
e08e249
View commit details
Copy full SHA for e08e249
Browse repository at this point
VEXGenerator: exclude CVEs with no Shield coverage entirely, don't claim in_triage
Show description for b5ee8a7
planetlevel
committed
b5ee8a7
View commit details
Copy full SHA for b5ee8a7
Browse repository at this point
You can’t perform that action at this time.
