fix: review findings — 3 Highs + advisory test coverage + CDX VEX per-product component - #4

Closed

MarkAtwood wants to merge 7 commits into

fix/review-highs

Commits on Jul 23, 2026

fix(advisory): validate ids used in output paths
MarkAtwood
committed
82c8e52
fix(ci): bind reusable-workflow inputs to env
MarkAtwood
committed
8d51da1
fix(build): repair autotools gen-sbom discovery
MarkAtwood
committed
3879f9f
feat(advisory): vendor canonical advisories/ tree
MarkAtwood
committed
0c0172d
test(advisory): port unit suite + path-id regression
MarkAtwood
committed
eb95e31
fix(advisory): per-product component in CDX VEX
MarkAtwood
committed
5fcf40b
fix(advisory): validate vex overlay at load time
MarkAtwood
committed
1db8f0a