René's URL Explorer Experiment


Title: feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coverage by mikolalysenko · Pull Request #117 · SocketDev/socket-patch · GitHub

Open Graph Title: feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coverage by mikolalysenko · Pull Request #117 · SocketDev/socket-patch

X Title: feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coverage by mikolalysenko · Pull Request #117 · SocketDev/socket-patch

Description: Socket patch CLI tool. Contribute to SocketDev/socket-patch development by creating an account on GitHub.

Open Graph Description: What This PR ships the hosted patch-apply mode end to end and consolidates the CLI around three clearly-named modes, each fully VEX-attested and behaviorally tested across Socket's supported ec...

X Description: What This PR ships the hosted patch-apply mode end to end and consolidates the CLI around three clearly-named modes, each fully VEX-attested and behaviorally tested across Socket's supporte...

Opengraph URL: https://github.com/SocketDev/socket-patch/pull/117

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:01ced845-71ad-1059-80d7-2814f60938fb
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idE554:1BDCFF:16B2348:212705A:6A4E521D
html-safe-noncea8e2b344c0751d868e7e60e34cf86b20346edaa106ad2d478c48c016952ce8b9
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFNTU0OjFCRENGRjoxNkIyMzQ4OjIxMjcwNUE6NkE0RTUyMUQiLCJ2aXNpdG9yX2lkIjoiNjY2ODgzNzA2OTkzMjg3NjMxNyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacb7086485c8c18fc7734410ec5b844d941140ea15b392322d7b70fb3ac4270ceb
hovercard-subject-tagpull_request:3971669722
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/SocketDev/socket-patch/117/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/db41617089b3d5e6e937a21063542511394bd9a34e1ad443c130a2cbadf94e3d/SocketDev/socket-patch/pull/117
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/db41617089b3d5e6e937a21063542511394bd9a34e1ad443c130a2cbadf94e3d/SocketDev/socket-patch/pull/117
og:image:altWhat This PR ships the hosted patch-apply mode end to end and consolidates the CLI around three clearly-named modes, each fully VEX-attested and behaviorally tested across Socket's supported ec...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamemikolalysenko
hostnamegithub.com
expected-hostnamegithub.com
None030096ee0db095447bfe77409d33bfac127ca7128299c58deef27c52eaa1b1f0
turbo-cache-controlno-cache
go-importgithub.com/SocketDev/socket-patch git https://github.com/SocketDev/socket-patch.git
octolytics-dimension-user_id69326764
octolytics-dimension-user_loginSocketDev
octolytics-dimension-repository_id1093661456
octolytics-dimension-repository_nwoSocketDev/socket-patch
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id1093661456
octolytics-dimension-repository_network_root_nwoSocketDev/socket-patch
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasef344f1eab54fc7dfc02d0d018cda7e158c3db65c
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/SocketDev/socket-patch/pull/117#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FSocketDev%2Fsocket-patch%2Fpull%2F117
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FSocketDev%2Fsocket-patch%2Fpull%2F117
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=SocketDev%2Fsocket-patch
Reloadhttps://github.com/SocketDev/socket-patch/pull/117
Reloadhttps://github.com/SocketDev/socket-patch/pull/117
Reloadhttps://github.com/SocketDev/socket-patch/pull/117
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
SocketDev https://github.com/SocketDev
socket-patchhttps://github.com/SocketDev/socket-patch
Notifications https://github.com/login?return_to=%2FSocketDev%2Fsocket-patch
Fork 0 https://github.com/login?return_to=%2FSocketDev%2Fsocket-patch
Star 3 https://github.com/login?return_to=%2FSocketDev%2Fsocket-patch
Code https://github.com/SocketDev/socket-patch
Issues 1 https://github.com/SocketDev/socket-patch/issues
Pull requests 0 https://github.com/SocketDev/socket-patch/pulls
Actions https://github.com/SocketDev/socket-patch/actions
Models https://github.com/SocketDev/socket-patch/models
Security and quality 0 https://github.com/SocketDev/socket-patch/security
Insights https://github.com/SocketDev/socket-patch/pulse
Code https://github.com/SocketDev/socket-patch
Issues https://github.com/SocketDev/socket-patch/issues
Pull requests https://github.com/SocketDev/socket-patch/pulls
Actions https://github.com/SocketDev/socket-patch/actions
Models https://github.com/SocketDev/socket-patch/models
Security and quality https://github.com/SocketDev/socket-patch/security
Insights https://github.com/SocketDev/socket-patch/pulse
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
mainhttps://github.com/SocketDev/socket-patch/tree/main
feat/scan-redirect-modehttps://github.com/SocketDev/socket-patch/tree/feat/scan-redirect-mode
Conversationhttps://github.com/SocketDev/socket-patch/pull/117
Commits30 (30)https://github.com/SocketDev/socket-patch/pull/117/commits
Checkshttps://github.com/SocketDev/socket-patch/pull/117/checks
Files changedhttps://github.com/SocketDev/socket-patch/pull/117/files
feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coveragehttps://github.com/SocketDev/socket-patch/pull/117#top
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
mainhttps://github.com/SocketDev/socket-patch/tree/main
feat/scan-redirect-modehttps://github.com/SocketDev/socket-patch/tree/feat/scan-redirect-mode
https://github.com/mikolalysenko
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
Jul 1, 2026https://github.com/SocketDev/socket-patch/pull/117#issue-4786671620
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
https://github.com/mikolalysenko
feat(cli): add scan --redirect hosted-vendored-patch modehttps://github.com/SocketDev/socket-patch/pull/117/commits/c7d668eeb6e2647a11994cfc2cd477d2a2252d6e
c7d668ehttps://github.com/SocketDev/socket-patch/pull/117/commits/c7d668eeb6e2647a11994cfc2cd477d2a2252d6e
https://patch.socket.devhttps://patch.socket.dev
https://github.com/apps/socket-security-staging
socket-security-staginghttps://github.com/apps/socket-security-staging
Jul 1, 2026https://github.com/SocketDev/socket-patch/pull/117#issuecomment-4856622630
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
Socket for GitHubhttps://socket-staging.dev?utm_medium=gh
View full reporthttps://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=alerts&action=error%2Cwarn
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
https://github.com/apps/socket-security
socket-securityhttps://github.com/apps/socket-security
Jul 1, 2026https://github.com/SocketDev/socket-patch/pull/117#issuecomment-4856819364
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
Socket for GitHubhttps://socket.dev?utm_medium=gh
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QHZYbNXt8fXkNzYgD6aa4JgT2f-qcnjYniSifnoT_FOE
Package overviewhttps://socket.dev/actions/package/shivammathur/setup-php/overview/f3e473d116dcccaddc5834248c87452386958240
.github/workflows/ci.ymlhttps://github.com/SocketDev/socket-patch/pull/117/files#diff-b803fcb7f17ed9235f1e5cb1fcd2f5d3b2838429d4368ae4c57ce4436577f03f
This packagehttps://socket.dev/actions/package/shivammathur/setup-php/overview/f3e473d116dcccaddc5834248c87452386958240
This alerthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QHZYbNXt8fXkNzYgD6aa4JgT2f-qcnjYniSifnoT_FOE
What is obfuscated code?https://socket.dev/alerts/obfuscatedFile
triage state of this alerthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QHZYbNXt8fXkNzYgD6aa4JgT2f-qcnjYniSifnoT_FOE
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QYiFqFxLymHEtRabP4x7d-W7xJrFwGLHfbZEFYzveEws
Package overviewhttps://socket.dev/actions/package/shivammathur/setup-php/overview/f3e473d116dcccaddc5834248c87452386958240
.github/workflows/ci.ymlhttps://github.com/SocketDev/socket-patch/pull/117/files#diff-b803fcb7f17ed9235f1e5cb1fcd2f5d3b2838429d4368ae4c57ce4436577f03f
This packagehttps://socket.dev/actions/package/shivammathur/setup-php/overview/f3e473d116dcccaddc5834248c87452386958240
This alerthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QYiFqFxLymHEtRabP4x7d-W7xJrFwGLHfbZEFYzveEws
What is obfuscated code?https://socket.dev/alerts/obfuscatedFile
triage state of this alerthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QYiFqFxLymHEtRabP4x7d-W7xJrFwGLHfbZEFYzveEws
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QWMrjuX2ugQ486s7og1og88-Y3HqUJWFP6RLleF6zquE
Package overviewhttps://socket.dev/actions/package/shivammathur/setup-php/overview/f3e473d116dcccaddc5834248c87452386958240
.github/workflows/ci.ymlhttps://github.com/SocketDev/socket-patch/pull/117/files#diff-b803fcb7f17ed9235f1e5cb1fcd2f5d3b2838429d4368ae4c57ce4436577f03f
This packagehttps://socket.dev/actions/package/shivammathur/setup-php/overview/f3e473d116dcccaddc5834248c87452386958240
This alerthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QWMrjuX2ugQ486s7og1og88-Y3HqUJWFP6RLleF6zquE
What is obfuscated code?https://socket.dev/alerts/obfuscatedFile
triage state of this alerthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4/alert/QWMrjuX2ugQ486s7og1og88-Y3HqUJWFP6RLleF6zquE
View full reporthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=alerts&action=error%2Cwarn
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
https://github.com/Wenxin-Jiang
Wenxin Jiang (Wenxin-Jiang)https://github.com/Wenxin-Jiang
Jul 1, 2026 https://github.com/SocketDev/socket-patch/pull/117#pullrequestreview-4611368342
View reviewed changes https://github.com/SocketDev/socket-patch/pull/117/files/c7d668eeb6e2647a11994cfc2cd477d2a2252d6e
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
July 1, 2026 15:40https://github.com/SocketDev/socket-patch/pull/117#commits-pushed-8fcd7b3
https://github.com/mikolalysenko
feat(vex): attest redirected patches with a (redirected) provenance m…https://github.com/SocketDev/socket-patch/pull/117/commits/8fcd7b345c695dcff215d23c44235409a1fbd84b
8fcd7b3https://github.com/SocketDev/socket-patch/pull/117/commits/8fcd7b345c695dcff215d23c44235409a1fbd84b
https://github.com/mikolalysenko
Merge remote-tracking branch 'origin/main' into feat/scan-redirect-modehttps://github.com/SocketDev/socket-patch/pull/117/commits/7b23bc8dda2f8ca1f3e8bd50097f1ed2c004b6ab
7b23bc8https://github.com/SocketDev/socket-patch/pull/117/commits/7b23bc8dda2f8ca1f3e8bd50097f1ed2c004b6ab
https://github.com/mikolalysenko
style: cargo fmthttps://github.com/SocketDev/socket-patch/pull/117/commits/b47b9d4a7eae638068dda9e76a043afdf4e4f36a
b47b9d4https://github.com/SocketDev/socket-patch/pull/117/commits/b47b9d4a7eae638068dda9e76a043afdf4e4f36a
#116https://github.com/SocketDev/socket-patch/pull/116
https://github.com/mikolalysenko
test(vex): real-install npm redirect capstone + docker gem/composer V…https://github.com/SocketDev/socket-patch/pull/117/commits/554b4865d9d9aca173db4dd0baedc85b930b6441
554b486https://github.com/SocketDev/socket-patch/pull/117/commits/554b4865d9d9aca173db4dd0baedc85b930b6441
https://github.com/mikolalysenko
fix(redirect,vex): fail-closed attestation, idempotent rewriters, sur…https://github.com/SocketDev/socket-patch/pull/117/commits/baedf28f5b72c67ca6c0ed80c076363fa769ab8c
baedf28https://github.com/SocketDev/socket-patch/pull/117/commits/baedf28f5b72c67ca6c0ed80c076363fa769ab8c
https://github.com/mikolalysenko
fix(ci): check the redirect golden fixtures out byte-exact on Windowshttps://github.com/SocketDev/socket-patch/pull/117/commits/be23ae22298bf55919c75622ad7a3bdd64fc62d1
be23ae2https://github.com/SocketDev/socket-patch/pull/117/commits/be23ae22298bf55919c75622ad7a3bdd64fc62d1
https://github.com/mikolalysenko
chore: exclude test fixtures from Socket dependency scanninghttps://github.com/SocketDev/socket-patch/pull/117/commits/e93f21c9dfe1c9bc567cd0701c14d0c75987cd57
e93f21chttps://github.com/SocketDev/socket-patch/pull/117/commits/e93f21c9dfe1c9bc567cd0701c14d0c75987cd57
https://github.com/mikolalysenko
feat(cli): three-mode selector, maven hosted rewriter, nuget config f…https://github.com/SocketDev/socket-patch/pull/117/commits/0c925d1647e02a6259beca28b991c9db3e70139d
0c925d1https://github.com/SocketDev/socket-patch/pull/117/commits/0c925d1647e02a6259beca28b991c9db3e70139d
https://github.com/mikolalysenko
feat(vendor): NuGet and Maven vendored backends with fragment-level r…https://github.com/SocketDev/socket-patch/pull/117/commits/a8dfb7e2ccef40680e7eb5a3af307fc647ba2328
a8dfb7ehttps://github.com/SocketDev/socket-patch/pull/117/commits/a8dfb7e2ccef40680e7eb5a3af307fc647ba2328
https://github.com/mikolalysenko
test: three-mode × ecosystem behavioral matrixhttps://github.com/SocketDev/socket-patch/pull/117/commits/1cfd02c4b57538de6bdb9c266d88bb44cd804281
1cfd02chttps://github.com/SocketDev/socket-patch/pull/117/commits/1cfd02c4b57538de6bdb9c266d88bb44cd804281
https://github.com/mikolalysenko
docs: three-mode README, CHANGELOG, CLI_CONTRACT + support matrixhttps://github.com/SocketDev/socket-patch/pull/117/commits/a85f4541618dedade75b7c9b1d3ceee641d28114
a85f454https://github.com/SocketDev/socket-patch/pull/117/commits/a85f4541618dedade75b7c9b1d3ceee641d28114
https://github.com/mikolalysenko
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
Jul 2, 2026https://github.com/SocketDev/socket-patch/pull/117#event-27457027431
https://github.com/apps/socket-security
socket-securityhttps://github.com/apps/socket-security
Jul 2, 2026https://github.com/SocketDev/socket-patch/pull/117#issuecomment-4861490886
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
Socket for GitHubhttps://socket.dev?utm_medium=gh
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies&dependency_item_key=101915615289
github/​shivammathur/​setup-php@​f3e473d116dcccaddc5834248c87452386958240https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies&dependency_item_key=101915615289
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies&dependency_item_key=101915615289
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies&dependency_item_key=101915615289
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies&dependency_item_key=101915615289
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies&dependency_item_key=101915615289
https://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies&dependency_item_key=101915615289
View full reporthttps://socket.dev/dashboard/org/SocketDev/diff-scan/3374c571-dce3-4fbb-8da5-ecda2c0c49a4?tab=dependencies
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
https://github.com/mikolalysenko
test(vendor): jsr is the unsupported-ecosystem exemplar now that nuge…https://github.com/SocketDev/socket-patch/pull/117/commits/839941675fdc4948fd54af393384132367ff5c0a
8399416https://github.com/SocketDev/socket-patch/pull/117/commits/839941675fdc4948fd54af393384132367ff5c0a
https://github.com/apps/socket-security-staging
socket-security-staginghttps://github.com/apps/socket-security-staging
Jul 2, 2026https://github.com/SocketDev/socket-patch/pull/117#issuecomment-4861508698
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
Socket for GitHubhttps://socket-staging.dev?utm_medium=gh
https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies&dependency_item_key=79613118914
github/​shivammathur/​setup-php@​f3e473d116dcccaddc5834248c87452386958240https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies&dependency_item_key=79613118914
https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies&dependency_item_key=79613118914
https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies&dependency_item_key=79613118914
https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies&dependency_item_key=79613118914
https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies&dependency_item_key=79613118914
https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies&dependency_item_key=79613118914
View full reporthttps://socket-staging.dev/dashboard/org/SocketDev/diff-scan/e05c32e3-ea34-454d-a67c-fcd55e4c10f7?tab=dependencies
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
July 1, 2026 22:32https://github.com/SocketDev/socket-patch/pull/117#commits-pushed-56f3550
https://github.com/mikolalysenko
fix(cli): mode-conflict errors match the clap contract phrasinghttps://github.com/SocketDev/socket-patch/pull/117/commits/56f3550b342b9a331a9e1e5aa9ea6521c7f7c0c6
56f3550https://github.com/SocketDev/socket-patch/pull/117/commits/56f3550b342b9a331a9e1e5aa9ea6521c7f7c0c6
https://github.com/mikolalysenko
docs: spell out Maven's checksum-failure fallback for hosted modehttps://github.com/SocketDev/socket-patch/pull/117/commits/d9aa32fa87f875b4822048d4231a61120abbc94b
d9aa32fhttps://github.com/SocketDev/socket-patch/pull/117/commits/d9aa32fa87f875b4822048d4231a61120abbc94b
https://github.com/mikolalysenko
refactor(core): factor bun text-lock grammar + share uri encode; gene…https://github.com/SocketDev/socket-patch/pull/117/commits/7ee80d730d52a9b1e6562ad9e0a9babd3024ba34
7ee80d7https://github.com/SocketDev/socket-patch/pull/117/commits/7ee80d730d52a9b1e6562ad9e0a9babd3024ba34
https://github.com/mikolalysenko
feat(patches): Rush monorepo support — vendored refusal, scan invento…https://github.com/SocketDev/socket-patch/pull/117/commits/1db0d6d5c833f0b2d69297a971cb9b5c71a71bb9
1db0d6dhttps://github.com/SocketDev/socket-patch/pull/117/commits/1db0d6d5c833f0b2d69297a971cb9b5c71a71bb9
https://github.com/mikolalysenko
feat(core): yarn-berry + bun hosted registry-redirect rewriters + sha…https://github.com/SocketDev/socket-patch/pull/117/commits/27165921e0012d3faac80f1aeb39ddecce12641d
2716592https://github.com/SocketDev/socket-patch/pull/117/commits/27165921e0012d3faac80f1aeb39ddecce12641d
https://github.com/mikolalysenko
feat(cli): berry/bun redirect plumbing + bun.lockb auto-migrationhttps://github.com/SocketDev/socket-patch/pull/117/commits/20534a018ce0ab80f4bd922317a03bbbae6898a1
20534a0https://github.com/SocketDev/socket-patch/pull/117/commits/20534a018ce0ab80f4bd922317a03bbbae6898a1
https://github.com/mikolalysenko
feat(cli): scan --redirect discovers Rush pnpm locks + stale repo-sta…https://github.com/SocketDev/socket-patch/pull/117/commits/8154b187e6733575ad5aa4fafed3ef10edd83f56
8154b18https://github.com/SocketDev/socket-patch/pull/117/commits/8154b187e6733575ad5aa4fafed3ef10edd83f56
https://github.com/mikolalysenko
test(redirect,repair): pnpm hosted-lock legs + flavor repair matrixhttps://github.com/SocketDev/socket-patch/pull/117/commits/d6f736b943bfb04f5982f1de87683801ab6a5dd5
d6f736bhttps://github.com/SocketDev/socket-patch/pull/117/commits/d6f736b943bfb04f5982f1de87683801ab6a5dd5
https://github.com/mikolalysenko
test(apply): agent-mode legs for bun, yarn-berry node-modules, rush farmhttps://github.com/SocketDev/socket-patch/pull/117/commits/29bbb802ed126c56f1480faf5df82b1fb0eace3f
29bbb80https://github.com/SocketDev/socket-patch/pull/117/commits/29bbb802ed126c56f1480faf5df82b1fb0eace3f
https://github.com/mikolalysenko
feat(redirect): fail-closed maven suffixing + trusted checksumshttps://github.com/SocketDev/socket-patch/pull/117/commits/58decbc424605985afa63c4fe9f2fe9b6b087f83
58decbchttps://github.com/SocketDev/socket-patch/pull/117/commits/58decbc424605985afa63c4fe9f2fe9b6b087f83
https://github.com/mikolalysenko
test(redirect): real-install berry + bun hosted capstoneshttps://github.com/SocketDev/socket-patch/pull/117/commits/bd317b8b1f05253350683c84fb8ef294b6c57ef7
bd317b8https://github.com/SocketDev/socket-patch/pull/117/commits/bd317b8b1f05253350683c84fb8ef294b6c57ef7
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
July 2, 2026 09:02https://github.com/SocketDev/socket-patch/pull/117#commits-pushed-dea45e6
https://github.com/mikolalysenko
test(docker): yarn berry 4.x agent + vendored e2e legshttps://github.com/SocketDev/socket-patch/pull/117/commits/dea45e6dfaefcced709efed7c3a7a99480685f96
dea45e6https://github.com/SocketDev/socket-patch/pull/117/commits/dea45e6dfaefcced709efed7c3a7a99480685f96
https://github.com/mikolalysenko
test(redirect): Rush hosted-mode redirect capstone (sim + gated real …https://github.com/SocketDev/socket-patch/pull/117/commits/90632420af21da876cec92bdd826a6518c60811a
9063242https://github.com/SocketDev/socket-patch/pull/117/commits/90632420af21da876cec92bdd826a6518c60811a
https://github.com/mikolalysenko
test(redirect): clippy cleanups in berry + rush redirect legshttps://github.com/SocketDev/socket-patch/pull/117/commits/bd76bcbdbd5f4911a05b84441267c7794dddb09c
bd76bcbhttps://github.com/SocketDev/socket-patch/pull/117/commits/bd76bcbdbd5f4911a05b84441267c7794dddb09c
https://github.com/mikolalysenko
docs: berry/bun + Rush hosted support, maven fail-closed, de-document…https://github.com/SocketDev/socket-patch/pull/117/commits/bf74543d30929939dcd4e6d3c90e68e654959784
bf74543https://github.com/SocketDev/socket-patch/pull/117/commits/bf74543d30929939dcd4e6d3c90e68e654959784
https://github.com/mikolalysenko
style(core): satisfy clippy cloned_ref_to_slice_refs in rewriter testshttps://github.com/SocketDev/socket-patch/pull/117/commits/8f591ded13af9f30afaeba003db6c56c83b826c4
8f591dehttps://github.com/SocketDev/socket-patch/pull/117/commits/8f591ded13af9f30afaeba003db6c56c83b826c4
https://github.com/mikolalysenko
test(cli): fix windows + release CI failures in in-process suiteshttps://github.com/SocketDev/socket-patch/pull/117/commits/14088c9b71cab6c2b610fdcd92c4f89ef1666e83
14088c9https://github.com/SocketDev/socket-patch/pull/117/commits/14088c9b71cab6c2b610fdcd92c4f89ef1666e83
https://github.com/mikolalysenko
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
e9b0a58https://github.com/SocketDev/socket-patch/commit/e9b0a58234cf866a0e26ad4f5054f491d2b35b6a
Jul 2, 2026https://github.com/SocketDev/socket-patch/pull/117#event-27486771416
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
https://github.com/mikolalysenko
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
July 2, 2026 15:23https://github.com/SocketDev/socket-patch/pull/117#event-27486773312
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
Jul 6, 2026 https://github.com/SocketDev/socket-patch/pull/117#ref-commit-8f4d150
https://github.com/mikolalysenko
https://github.com/claude
fix CI: admit maven at the vendor service gate; clippy manual_striphttps://github.com/SocketDev/socket-patch/commit/8f4d150857eb03266f38f297adfc9fa6ea96cd75
8f4d150https://github.com/SocketDev/socket-patch/commit/8f4d150857eb03266f38f297adfc9fa6ea96cd75
#117https://github.com/SocketDev/socket-patch/pull/117
Mikola Lysenko (mikolalysenko)https://github.com/mikolalysenko
Jul 7, 2026 https://github.com/SocketDev/socket-patch/pull/117#ref-commit-071e127
https://github.com/mikolalysenko
https://github.com/claude
cleanup: CLI simplify pass, correctness fixes, core dedups, scan spli…https://github.com/SocketDev/socket-patch/commit/071e127142a405a9322664c3989f453543f835c2
071e127https://github.com/SocketDev/socket-patch/commit/071e127142a405a9322664c3989f453543f835c2
#120https://github.com/SocketDev/socket-patch/pull/120
#117https://github.com/SocketDev/socket-patch/pull/117
https://github.co/hiddenchars
https://github.com/SocketDev/socket-patch/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FSocketDev%2Fsocket-patch%2Fpull%2F117
https://github.com/Wenxin-Jiang
Wenxin Jiang (Wenxin-Jiang) https://github.com/Wenxin-Jiang
https://github.com/SocketDev/socket-patch/pull/117/files/c7d668eeb6e2647a11994cfc2cd477d2a2252d6e
Please reload this pagehttps://github.com/SocketDev/socket-patch/pull/117
https://github.com/mikolalysenko
https://github.com/Wenxin-Jiang
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.