Skip to content

[pull] main from NVIDIA:main - #85

Merged
pull[bot] merged 2 commits into
levik-opsilient:mainfrom
NVIDIA:main
Sep 22, 2026
Merged

pull[bot] merged 2 commits into
levik-opsilient:mainfrom
NVIDIA:main

Conversation

@pull

@pull pull Bot commented Sep 22, 2026 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

* feat(llm): add compact prompt line numbering

Signed-off-by: Deepak Jain <[email protected]>

* fix(llm): trim compact prompt env value, document option, pin contract

Address rng1995 reviews on #542 (2026-09-16, 2026-09-18): normalize SKILLSPECTOR_COMPACT_PROMPTS with .strip().lower() matching the existing provider/SSL env parsers, document the option/default/truthy values in the README environment-variable table, and extend the focused test to pin the unset/default path plus normalized truthy inputs.

Signed-off-by: Deepak Jain <[email protected]>

---------

Signed-off-by: Deepak Jain <[email protected]>
* fix(patterns): detect literal XOR decoded commands

Signed-off-by: Deepak Jain <[email protected]>

* fix(patterns): preserve shared Python AST cache

Signed-off-by: Deepak Jain <[email protected]>

* style(patterns): format XOR command resolver

Signed-off-by: Deepak Jain <[email protected]>

* fix(patterns): bound malformed XOR decoder inputs

Signed-off-by: Deepak Jain <[email protected]>

* style(patterns): apply repository formatter

Signed-off-by: Deepak Jain <[email protected]>

* style(patterns): apply repository formatter

Signed-off-by: Deepak Jain <[email protected]>

* fix(patterns): use logical line starts for XOR-decoded SC2 context

_decoded_literal_xor_calls reports line numbers via get_line_number, which
counts logical separators (CR, form feed, U+2028/U+2029), but the SC2 call
site indexed context with LF-only line offsets. A leading comment containing
U+2028 separators pushed line_num past the LF-offset array, raising
IndexError and dropping every supply-chain finding for the file. Index the
context on the existing logical_line_starts offsets instead, consistent with
the decoder.

Add a mixed-file regression test with two U+2028 characters in a leading
comment, an independent plaintext SC2 match, and the XOR fixture last,
asserting both SC2 findings survive with correct line numbers.

Signed-off-by: Deepak Jain <[email protected]>

---------

Signed-off-by: Deepak Jain <[email protected]>
@pull pull Bot locked and limited conversation to collaborators Sep 22, 2026
@pull pull Bot added the ⤵️ pull label Sep 22, 2026
@pull
pull Bot merged commit 844ac30 into levik-opsilient:main Sep 22, 2026
5 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant