Fix CodeQL and SonarCloud findings; exclude generated files from CodeQL - #8

Merged

Malcolmnixon merged 10 commits into

mainfrom

fix/codeql-sonarcloud-findings

Sep 14, 2026

Commits on Sep 14, 2026

Fix CodeQL and SonarCloud findings; exclude generated files from CodeQL

authored and
Malcolm Nixon
committed
62147d0
Address automated review feedback on zip-slip and logging fixes

authored and
Malcolm Nixon
committed
386deae
Address third round of PR review feedback

authored and
Malcolm Nixon
committed
507c120
Address fourth round of PR review feedback

authored and
Malcolm Nixon
committed
d2348df
Harden symlink/reparse-point defenses in PackageZipExtractor

authored and
Malcolm Nixon
committed
0b35579
Close AllManagedFoldersExist reparse-point bypass

authored and
Malcolm Nixon
committed
463b8e9
Centralize reparse-point detection into PathHelpers

authored and
Malcolm Nixon
committed
af2c682
Add preflight/preflighted/preflights to cspell dictionary

authored and
Malcolm Nixon
committed
27e8c36
Remove reparse-point/symlink hardening from PackageZipExtractor

authored and
Malcolm Nixon
committed
063076b
Reject invalid zip entries before deleting managed folders

authored and
Malcolm Nixon
committed
ba54427