| route-pattern | /:user_id/:repository/pull/*id(.:format) |
| route-controller | pull_requests |
| route-action | show |
| fetch-nonce | v2:472bd181-cb7c-cb59-5b43-1ba24ff40963 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | BBFA:3FD636:38E22C:4C53D6:6A4EB56F |
| html-safe-nonce | 8e88f9072ce2f53e42faead1b2b82db944b373158b93e616a58d09cd49ad6554 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCQkZBOjNGRDYzNjozOEUyMkM6NEM1M0Q2OjZBNEVCNTZGIiwidmlzaXRvcl9pZCI6IjYzMDAxNjgxMDEyOTczMjk3NSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | c0f0349eb151a7f435fc8bd28a327254538330d5c321761fff88ac705f413158 |
| hovercard-subject-tag | pull_request:3738641834 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///pull_requests/show |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/SocketDev/socket-patch/pull/81 |
| twitter:image | https://opengraph.githubassets.com/0f6fb0a0298cdcb5bd8549485719e057a4c9767a6dcf9466befb25d1d397c908/SocketDev/socket-patch/pull/81 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/0f6fb0a0298cdcb5bd8549485719e057a4c9767a6dcf9466befb25d1d397c908/SocketDev/socket-patch/pull/81 |
| og:image:alt | Summary
New socket-patch vex subcommand emits an OpenVEX 0.2.0 document from the local manifest, attesting that patched dependencies render the top-level product not_affected by their associated v... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | mikolalysenko |
| hostname | github.com |
| expected-hostname | github.com |
| None | 41b6ab3ba6d20a71766ac245b5a4a94c6fc672a9cd4da7d44c1b33ab8bf6a21c |
| turbo-cache-control | no-cache |
| go-import | github.com/SocketDev/socket-patch git https://github.com/SocketDev/socket-patch.git |
| octolytics-dimension-user_id | 69326764 |
| octolytics-dimension-user_login | SocketDev |
| octolytics-dimension-repository_id | 1093661456 |
| octolytics-dimension-repository_nwo | SocketDev/socket-patch |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1093661456 |
| octolytics-dimension-repository_network_root_nwo | SocketDev/socket-patch |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | e6a744804e8e70f97b4d5a18a94dcc63db22f97a |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/SocketDev/socket-patch/pull/81#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FSocketDev%2Fsocket-patch%2Fpull%2F81 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FSocketDev%2Fsocket-patch%2Fpull%2F81 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow&source=header-repo&source_repo=SocketDev%2Fsocket-patch |
| Reload | https://github.com/SocketDev/socket-patch/pull/81 |
| Reload | https://github.com/SocketDev/socket-patch/pull/81 |
| Reload | https://github.com/SocketDev/socket-patch/pull/81 |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
|
SocketDev
| https://github.com/SocketDev |
| socket-patch | https://github.com/SocketDev/socket-patch |
|
Notifications
| https://github.com/login?return_to=%2FSocketDev%2Fsocket-patch |
|
Fork
0
| https://github.com/login?return_to=%2FSocketDev%2Fsocket-patch |
|
Star
3
| https://github.com/login?return_to=%2FSocketDev%2Fsocket-patch |
|
Code
| https://github.com/SocketDev/socket-patch |
|
Issues
1
| https://github.com/SocketDev/socket-patch/issues |
|
Pull requests
1
| https://github.com/SocketDev/socket-patch/pulls |
|
Actions
| https://github.com/SocketDev/socket-patch/actions |
|
Models
| https://github.com/SocketDev/socket-patch/models |
|
Security and quality
0
| https://github.com/SocketDev/socket-patch/security |
|
Insights
| https://github.com/SocketDev/socket-patch/pulse |
|
Code
| https://github.com/SocketDev/socket-patch |
|
Issues
| https://github.com/SocketDev/socket-patch/issues |
|
Pull requests
| https://github.com/SocketDev/socket-patch/pulls |
|
Actions
| https://github.com/SocketDev/socket-patch/actions |
|
Models
| https://github.com/SocketDev/socket-patch/models |
|
Security and quality
| https://github.com/SocketDev/socket-patch/security |
|
Insights
| https://github.com/SocketDev/socket-patch/pulse |
| Mikola Lysenko (mikolalysenko) | https://github.com/mikolalysenko |
| main | https://github.com/SocketDev/socket-patch/tree/main |
| feat/openvex-vex-subcommand | https://github.com/SocketDev/socket-patch/tree/feat/openvex-vex-subcommand |
| Conversation | https://github.com/SocketDev/socket-patch/pull/81 |
| Commits6 (6) | https://github.com/SocketDev/socket-patch/pull/81/commits |
| Checks | https://github.com/SocketDev/socket-patch/pull/81/checks |
| Files changed | https://github.com/SocketDev/socket-patch/pull/81/files |
| feat(vex): OpenVEX 0.2.0 attestation generator | https://github.com/SocketDev/socket-patch/pull/81#top |
| Mikola Lysenko (mikolalysenko) | https://github.com/mikolalysenko |
| main | https://github.com/SocketDev/socket-patch/tree/main |
| feat/openvex-vex-subcommand | https://github.com/SocketDev/socket-patch/tree/feat/openvex-vex-subcommand |
|
| https://github.com/mikolalysenko |
| Mikola Lysenko (mikolalysenko) | https://github.com/mikolalysenko |
| May 24, 2026 | https://github.com/SocketDev/socket-patch/pull/81#issue-4512939082 |
| b96a13f | https://github.com/SocketDev/socket-patch/commit/b96a13fe3e72982de26ec2de705bb1c6907e21be |
| Claude Code | https://claude.com/claude-code |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
|
| https://github.com/mikolalysenko |
|
| https://github.com/claude |
| feat(vex): OpenVEX 0.2.0 attestation generator | https://github.com/SocketDev/socket-patch/pull/81/commits/0fdc1aa5ba93144b3310b02813d8752bee254343 |
| 0fdc1aa | https://github.com/SocketDev/socket-patch/pull/81/commits/0fdc1aa5ba93144b3310b02813d8752bee254343 |
| https://github.com/apps/socket-security-staging |
| socket-security-staging | https://github.com/apps/socket-security-staging |
| May 24, 2026 | https://github.com/SocketDev/socket-patch/pull/81#issuecomment-4529988237 |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
| Socket for GitHub | https://socket-staging.dev?utm_medium=gh |
| https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies&dependency_item_key=79607448400 |
| github/actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c | https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies&dependency_item_key=79607448400 |
| https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies&dependency_item_key=79607448400 |
| https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies&dependency_item_key=79607448400 |
| https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies&dependency_item_key=79607448400 |
| https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies&dependency_item_key=79607448400 |
| https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies&dependency_item_key=79607448400 |
| View full report | https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=dependencies |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
| https://github.com/apps/socket-security-staging |
| socket-security-staging | https://github.com/apps/socket-security-staging |
| May 24, 2026 | https://github.com/SocketDev/socket-patch/pull/81#issuecomment-4529988295 |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
| Socket for GitHub | https://socket-staging.dev?utm_medium=gh |
| View full report | https://socket-staging.dev/dashboard/org/SocketDev/diff-scan/2f219c25-0928-4e63-8337-2b5f38a4ab82?tab=alerts&action=error%2Cwarn |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
|
| https://github.com/mikolalysenko |
|
| https://github.com/claude |
| ci(vex): pin actions/setup-go to v6.4.0 SHA | https://github.com/SocketDev/socket-patch/pull/81/commits/e8d0aaac96b1302ebfa567aa0be686bfce21c849 |
| e8d0aaa | https://github.com/SocketDev/socket-patch/pull/81/commits/e8d0aaac96b1302ebfa567aa0be686bfce21c849 |
| https://github.com/apps/socket-security |
| socket-security | https://github.com/apps/socket-security |
| May 24, 2026 | https://github.com/SocketDev/socket-patch/pull/81#issuecomment-4529990639 |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
| Socket for GitHub | https://socket.dev?utm_medium=gh |
| https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies&dependency_item_key=101871320762 |
| github/actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c | https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies&dependency_item_key=101871320762 |
| https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies&dependency_item_key=101871320762 |
| https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies&dependency_item_key=101871320762 |
| https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies&dependency_item_key=101871320762 |
| https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies&dependency_item_key=101871320762 |
| https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies&dependency_item_key=101871320762 |
| View full report | https://socket.dev/dashboard/org/SocketDev/diff-scan/47f874ce-6eb0-43fe-bfad-6a93102cd5b5?tab=dependencies |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
| Mikola Lysenko (mikolalysenko) | https://github.com/mikolalysenko |
| May 24, 2026 17:41 | https://github.com/SocketDev/socket-patch/pull/81#commits-pushed-bd7721f |
|
| https://github.com/mikolalysenko |
|
| https://github.com/claude |
| feat(vex): detect product from git remote origin first | https://github.com/SocketDev/socket-patch/pull/81/commits/bd7721f7c7ab6d41e5442922d95f0479ce13ae58 |
| bd7721f | https://github.com/SocketDev/socket-patch/pull/81/commits/bd7721f7c7ab6d41e5442922d95f0479ce13ae58 |
| https://github.com/owner/repo | https://github.com/owner/repo |
| @id | https://github.com/id |
|
| https://github.com/mikolalysenko |
|
| https://github.com/claude |
| ci(vex): use vexctl merge for round-trip validation | https://github.com/SocketDev/socket-patch/pull/81/commits/6a22f2e8367af2bf877b2bae7a942be4ab29d093 |
| 6a22f2e | https://github.com/SocketDev/socket-patch/pull/81/commits/6a22f2e8367af2bf877b2bae7a942be4ab29d093 |
|
| https://github.com/mikolalysenko |
|
| https://github.com/claude |
| ci(vex): pass file path positionally to vexctl merge | https://github.com/SocketDev/socket-patch/pull/81/commits/e2356f2f12b7ced827879badf84ae3e48ba2d155 |
| e2356f2 | https://github.com/SocketDev/socket-patch/pull/81/commits/e2356f2f12b7ced827879badf84ae3e48ba2d155 |
|
| https://github.com/mikolalysenko |
|
| https://github.com/claude |
| test(vex): extensive unit + conformance tests, OpenVEX 0.2.0 schema c… | https://github.com/SocketDev/socket-patch/pull/81/commits/e978c84a892b2d1a9239c25e889c183c130a1a39 |
| e978c84 | https://github.com/SocketDev/socket-patch/pull/81/commits/e978c84a892b2d1a9239c25e889c183c130a1a39 |
| @context | https://github.com/context |
| https://github.com/mikolalysenko |
| Mikola Lysenko (mikolalysenko) | https://github.com/mikolalysenko |
| May 26, 2026 17:59 | https://github.com/SocketDev/socket-patch/pull/81#event-25979775650 |
| https://github.com/Wenxin-Jiang |
| Wenxin Jiang (Wenxin-Jiang) | https://github.com/Wenxin-Jiang |
|
May 26, 2026
| https://github.com/SocketDev/socket-patch/pull/81#pullrequestreview-4366263923 |
|
View reviewed changes
| https://github.com/SocketDev/socket-patch/pull/81/files/e978c84a892b2d1a9239c25e889c183c130a1a39 |
| https://github.com/mikolalysenko |
| Mikola Lysenko (mikolalysenko) | https://github.com/mikolalysenko |
| 8ee38a3 | https://github.com/SocketDev/socket-patch/commit/8ee38a3a4a70229ac3385e95f3c93c02ed7f7f33 |
| May 26, 2026 | https://github.com/SocketDev/socket-patch/pull/81#event-25979983339 |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
| https://github.com/mikolalysenko |
| Mikola Lysenko (mikolalysenko) | https://github.com/mikolalysenko |
| May 26, 2026 18:05 | https://github.com/SocketDev/socket-patch/pull/81#event-25979984893 |
| https://github.co/hiddenchars |
| https://github.com/SocketDev/socket-patch/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FSocketDev%2Fsocket-patch%2Fpull%2F81 |
|
| https://github.com/Wenxin-Jiang |
|
Wenxin Jiang (Wenxin-Jiang)
| https://github.com/Wenxin-Jiang |
|
| https://github.com/SocketDev/socket-patch/pull/81/files/e978c84a892b2d1a9239c25e889c183c130a1a39 |
| Please reload this page | https://github.com/SocketDev/socket-patch/pull/81 |
|
| https://github.com/mikolalysenko |
|
| https://github.com/Wenxin-Jiang |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |