← back to report

usestrix/strix

// all events — 2026-07-23

Type AI Score Description Actor Reason Date
commit 1.00 Pin release-workflow actions to commit SHAs + least-privileg Commit message contains explicit AI assi 2026-07-23
commit 1.00 fix(ci): lower Linux release glibc baseline (#707) Commit message contains explicit AI assi 2026-07-10
commit 1.00 fix(logging): keep verbose openai.agents DEBUG off sandbox s Commit message contains explicit AI assi 2026-07-10
commit 1.00 fix(runtime): swallow torn-down docker socket in sandbox del Commit message contains explicit AI assi 2026-07-10
commit 1.00 fix(providers): declare bedrock + vertex extras and add prov Commit message contains explicit AI assi 2026-07-07
commit 1.00 feat(report): tag SARIF rules with STRIDE legs derived from Commit message contains explicit AI assi 2026-07-07
commit 1.00 feat(report): SARIF 2.1.0 emitter for CI / code-scanning int Commit message contains explicit AI assi 2026-07-03
commit 1.00 test: add unit tests for config loader (strix/config/loader. Commit message contains explicit AI assi 2026-06-30
pr 0.20 fix: recover from BadRequestError caused by oversized payloa Somewhat formal summary but strong domai 2026-04-20
pr 0.20 Feature/configurable memory compression Slight formal tone, but technical conten 2026-04-16
pr 0.10 feat: support API specs and Postman collections as targets Technical summary with domain details an 2026-07-23
pr 0.10 Pin release-workflow actions to commit SHAs + least-privileg Strong domain context, informal phrasing 2026-07-23
pr 0.10 Add an npm resolution cooldown for the local-viewer frontend Project-specific context, informal, non- 2026-07-23
pr 0.10 Add a uv resolution cooldown for the Python deps Explains rationale in detail, but with d 2026-07-23
pr 0.10 Add Dependabot for dependency updates Human style, context-aware, and lacks AI 2026-07-23
pr 0.10 fix(report): use bare-model fallback in usage-ledger cost es Domain-specific, technical error explana 2026-07-23
pr 0.10 Sign in with a ChatGPT subscription for inference Long but structured summary; technical l 2026-07-22
pr 0.10 Quit after scan instead of hosting local viewer Direct phrasing, minor verbosity but hum 2026-07-22
pr 0.10 runtime: resolve staged local-dir path to avoid symlink reje Detailed troubleshooting with code refs, 2026-07-22
pr 0.10 test(runner): repair the root-prompt settings stub so the su Detailed test fix log with code context; 2026-07-21
pr 0.10 fix(runtime): reap the sandbox container when Caido bootstra Detailed, domain-specific reasoning with 2026-07-21
pr 0.10 docs(reporting): add CVSS calibration guidance to reduce sev Uses domain-specific examples, concise e 2026-07-21
pr 0.10 fix(bedrock): give Claude an explicit, clamped output ceilin Highly technical with error context and 2026-07-02
pr 0.10 fix: retry transient 'thinking blocks cannot be modified' 40 Technical, cites precise error, no AI-li 2026-04-27
pr 0.10 feat(dedupe): add dedicated deduplication model Cites motivation and details, mostly hum 2026-07-21
pr 0.10 feat(verification): independent adversarial finding verifica Domain-specific and concise with clear c 2026-07-21
pr 0.10 Fine-grained model control: skill routing, budget fallbacks, Contains jargon and detailed config with 2026-07-17
pr 0.10 fix(core): Graceful handling of NFE loops and incremental SA Good technical detail but standard tone 2026-07-19
pr 0.10 fix: tolerate string-encoded skills param for LLM provider c Free text uses domain context and common 2026-07-15
pr 0.10 feat(llm): enable Bedrock/Anthropic prompt caching for Claud Detailed, domain-specific PR explanation 2026-07-15
pr 0.10 feat(cli): --run-name for deterministic, resumable run dirs Explains with concrete use cases, domain 2026-07-16
pr 0.10 feat(tools): batch_view_files / batch_terminal_execute — san Natural technical writing, contextual ex 2026-07-16
pr 0.10 fix(runtime): close the docker client on session cleanup Technical and diagnostic, code and error 2026-07-16
pr 0.10 fix(runtime): cap sandbox container logs to prevent host dis Contains domain jargon, technical detail 2026-07-16
pr 0.10 feat(runtime): session-setup hook (register_session_setup) Technical context, code snippets, and di 2026-07-16
pr 0.05 fix(tui): show rejected vulnerability reports as rejected Technical, concise, domain-specific; no 2026-07-21
pr 0.05 Local viewer: prominent scan switcher + rename to "pentest" Contains informal notes and specific con 2026-07-22
pr 0.05 Local viewer: UI polish and a Feedback & support tab Polished human changelog, specific fixes 2026-07-22
pr 0.05 docs(llm): add NVIDIA Build provider setup Detailed technical reasoning, bullet poi 2026-07-22
pr 0.05 fix(report): write the executive report atomically Specific technical details, explanatory, 2026-07-21
pr 0.05 fix(tui): show proxy tool errors instead of dropping them Technical, concise, with clear issue con 2026-07-22
pr 0.05 feat(routing): per-agent models and skill-based child routin Technical, concise with some abbreviatio 2026-07-21
pr 0.05 fix(tui): don't double-render finish_scan section headings Terse and diagnostic; uses code refs and 2026-07-17
pr 0.04 docs(skills): add MCP/DB read-only guard bypass skill Domain jargon, terseness, truncated deta 2026-07-22
pr 0.01 chore: release v1.3.0 Standard release message with template s 2026-07-22
pr 0.01 fix(container): keep /app/.venv/bin on the login-shell PATH Commit title follows standard pattern, n 2026-07-22
commit 0.00 Quit after scan instead of hosting local viewer Direct, concise commit; technical contex 2026-07-22
commit 0.00 fix(deps): cap cryptography <49 to keep Intel macOS universa Technical commit message with domain jar 2026-07-22
commit 0.00 chore(deps): bump cryptography to 49.0.0 and pyasn1 to 0.6.4 Standard dependency bump commit; uses te 2026-07-22
commit 0.00 feat(cli): update notifications + self-update (strix --updat Contains technical shorthand and informa 2026-07-22
commit 0.00 chore: release v1.3.1 Typical brief release commit message wit 2026-07-22
commit 0.00 sandbox: bump install.sh pre-pull tag to 1.1.0 (match runtim Short, technical commit; no signs of AI- 2026-07-22
commit 0.00 sandbox: bump default inner-sandbox image to 1.1.0 Short technical commit, domain-specific 2026-07-22
commit 0.00 chore: release v1.3.0 (#849) Standard release commit; minimal, human- 2026-07-22
commit 0.00 Local viewer: prominent scan switcher + rename to "pentest" Concise technical summary; no formal or 2026-07-22
commit 0.00 Local viewer: UI polish and a Feedback & support tab (#847) Terse UI update note; informal and domai 2026-07-22
commit 0.00 sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-st Terse, domain-specific changelog, no AI 2026-07-22
commit 0.00 fix(prompt): make root agent orchestrate-only and fold fixin Concise commit message, clear domain ter 2026-07-21
commit 0.00 fix(container): keep /app/.venv/bin on the login-shell PATH Compact technical fix, standard human su 2026-07-22
commit 0.00 chore: release v1.2.0 Standard release commit, no AI signals. 2026-07-21
commit 0.00 Local run viewer: email reports, run history, and the platfo Concise, technical summary with no AI ha 2026-07-21
commit 0.00 docs(skills): add Active Directory / Kerberos domain testing Detailed, domain-specific commit with ge 2026-07-21
commit 0.00 docs(reporting): add CVSS calibration guidance to reduce sev Domain-specific guidance and typical hum 2026-07-21
commit 0.00 fix(report): prevent code-fence breakout in vulnerability ma Deep technical details, human phrasing, 2026-07-21
commit 0.00 strip transfer encoding (#820) Brief/tacit commit, minimal detail, clea 2026-07-21
commit 0.00 fix(proxy): recompute Content-Length when replaying a modifi Contains a co-author GitHub trailer, but 2026-07-21
commit 0.00 docs(skills): add grafana_prometheus observability pivot ski Commit message uses concise, domain-spec 2026-07-20
commit 0.00 recon asset discovery skill (#809) Commit messages are terse and domain-spe 2026-07-19
commit 0.00 chore(llm): shorten timeout helper docstring; update tests Concise, domain-specific commit message; 2026-07-18
commit 0.00 fix(llm): use a JSON-serializable per-turn model timeout Technical language, references to code/d 2026-07-18
commit 0.00 fix(llm): use httpx.Timeout read-inactivity for per-turn mod Direct summary with technical phrasing; 2026-07-18
commit 0.00 fix(llm): add per-turn model request timeout so stalled stre Terse, technical message; no AI indicato 2026-07-18
commit 0.00 fix(llm): retry statusless mid-stream provider errors (quota Domain-specific, concise, references to 2026-07-17
commit 0.00 fix(llm): retry statusless mid-stream provider errors (quota Similar to prior; clear technical focus, 2026-07-17
commit 0.00 fix(report): restore cost tracking for OpenRouter and other — 2026-07-17
commit 0.00 revert(proxy): drop overfit Caido reconnect/HTTPQL band-aids — 2026-07-17
commit 0.00 fix(proxy,tooling): serialize+reconnect Caido client, action — 2026-07-17
commit 0.00 fix(prompt): down-rate or skip findings on demo data / demo — 2026-07-17
commit 0.00 fix(runtime): close the docker client on session cleanup (#7 Standard commit message style; brief and 2026-07-16
commit 0.00 fix(runtime): cap sandbox container logs to prevent host dis Domain-specific commit message; no AI st 2026-07-16
commit 0.00 docs(python skill): recommend a task-unique PoC filename to Direct, human-written doc change; concis 2026-07-16
commit 0.00 docs(python skill): use a distinctive PoC filename to avoid Clear domain context, no AI-typical phra 2026-07-16
commit 0.00 docs(prompts,skills): stop hardcoding /workspace/scratch pat Technical explanation, typical human com 2026-07-16
commit 0.00 docs(tools): guide proportional wait_for_message timeouts (# — 2026-07-16
commit 0.00 docs(skills): add research-backed katana output-reduction fl Uses specific tool flags and domain term 2026-07-16
commit 0.00 docs(prompts,skills): scope cleanup to own files; dedupe JSO Informal, references specific review and 2026-07-16
commit 0.00 docs(prompts,skills): bound recon output for shared-disk hyg Detailed, project-specific, uses domain 2026-07-16
commit 0.00 Revert "fix(runtime): retry transient sandbox startup failur — 2026-07-16
commit 0.00 fix(runtime): bound nano_cpus to docker's int64 NanoCPUs ran Technical, concise, updates bound for do 2026-07-16
commit 0.00 fix(runtime): also suppress OverflowError for non-finite STR Concise technical fix; domain context pr 2026-07-16
commit 0.00 feat(runtime): opt-in resource limits for docker sandbox con Technical commit message with abbreviati 2026-07-16
commit 0.00 fix(core): bound per-agent image memory (proactive budget + — 2026-07-16
commit 0.00 feat(runtime): resolve sandbox ports over a shared Docker ne — 2026-07-15
commit 0.00 fix(runtime): retry transient sandbox startup failures (#768 Commit messages are terse with technical 2026-07-15
commit 0.00 fix(runtime): stage symlink-safe copies for LocalDir uploads Technical language, concise commits, dom 2026-07-14
commit 0.00 chore: release v1.1.0 (#765) — 2026-07-14
commit 0.00 Default sandbox exec commands to Bash (#764) Standard Git commit, human co-author, te 2026-07-14
commit 0.00 Update README Extremely brief update message, no AI si 2026-07-14
commit 0.00 Warn when configured LLM is not frontier-recommended (#586) — 2026-07-14
commit 0.00 chore(telemetry): minor telemetry updates (#761) — 2026-07-13
commit 0.00 feat(llm): change OpenRouter LLM request headers (#760) — 2026-07-13
commit 0.00 fix(tui): restore snappy sweep/progress animation frame rate — 2026-07-13
commit 0.00 feat: add weak password detection skill (#621) (#654) Standard conventional commit, no AI hall 2026-07-13
commit 0.00 Deduplicate scan ended telemetry (#758) Commit messages and steps are natural an 2026-07-13
commit 0.00 docs(prompts): strengthen report guidance (severity, chainin — 2026-07-13
commit 0.00 fix(reporting): require advisory_cvss for dependency finding — 2026-07-13
commit 0.00 Use core LiteLLM dependency (#752) Terse, domain-specific commit, no AI phr 2026-07-12
commit 0.00 Add dependency reporting fields (#751) Straightforward commit message, typical 2026-07-12
commit 0.00 fix(deps): cap openai<2.45 and add litellm[proxy] so fresh i Commit messages and trailers are human s 2026-07-12
commit 0.00 Add root scan prompt options (#750) Simple commit message, fits human patter 2026-07-12
commit 0.00 Add skill directory registration (#746) Human-like phrasing, no formal or AI pat 2026-07-12
commit 0.00 Allow scan agent tool registration (#733) Terse commit, uses standard technical PR 2026-07-12
commit 0.00 Support routed OpenAI required tool choice (#732) Concise PR title, normal routing/jargon, 2026-07-10
commit 0.00 feat(settings): add force_required_tool_choice to LlmSetting Commit subject lines have domain terms a 2026-07-10
commit 0.00 Address Greptile review: GCP and Auth0 recon guidance Human-written bullet points and technica 2026-07-04
commit 0.00 Add GCP and Auth0 security skills Brief description, domain-specific terms 2026-07-03
commit 0.00 fix(providers): match google submodule imports and walk full — 2026-07-10
commit 0.00 test(providers): cover wrapped bedrock import errors Standard test-related commit message, hi 2026-07-07
commit 0.00 fix(providers): show vertex extra hint for wrapped import er Very concise, specific fix message, no A 2026-07-07
commit 0.00 fix(tui): key render cache by content string and return copi — 2026-07-10
commit 0.00 fix(tui): reduce scroll stutter by throttling UI refresh and Informal tone, technical detail, natural 2026-07-02
commit 0.00 fix(report): omit SARIF provenance for multiple repos (#726) Standard bugfix commit with SARIF jargon 2026-07-10
commit 0.00 fix(container): allow configured Caido UI domains (#723) Short, technical fix commit, uses domain 2026-07-10
commit 0.00 fix(session): use HTTPS scheme for Caido endpoint if TLS is Technical commit message with domain-spe 2026-07-10
commit 0.00 Add target list CLI option (#711) Succinct commit message and changes; no 2026-07-07
commit 0.00 test: add report writer artifact tests (#667) Concise test summary typical of human-wr 2026-07-06
commit 0.00 fix(config): make env vars win over persisted JSON across al Detailed technical explanation with doma 2026-07-06
commit 0.00 Update README (#705) Generic 'Update README' commit with no e 2026-07-06
commit 0.00 Add LLM Prompt Injection skill (vulnerabilities) (#616) Short ticket title style; no signs of AI 2026-07-06
commit 0.00 fix(tui): show 'more content available' for view_request ove Human-like concise technical fix with in 2026-07-06
commit 0.00 Add five security skills: OAuth, AWS, prototype pollution, d Technical content, includes jargon and h 2026-07-03
commit 0.00 fix: report cost for streamed OpenRouter calls (#634) Concise, informal technical phrasing; no 2026-07-03
commit 0.00 fix: avoid note ID collisions (#630) Short, domain-specific fix phrasing; no 2026-07-03
commit 0.00 fix grammer (#642) Standard commit message with typos and i 2026-07-03
commit 0.00 fix(report): correct csv_path indentation in write_vulnerabi Technical, domain-specific commit; clear 2026-07-02
commit 0.00 Fix non-atomic CSV and MD writes to prevent corruption on cr Brief, domain-specific commit message; n 2026-07-02
commit 0.00 Remove collection of unhandled exception error messages from Concise summary typical of human commit 2026-06-30
commit 0.00 chore(deps): refresh uv.lock to latest compatible versions ( Chore commit with domain wording; normal 2026-06-30
pr 0.00 fix: bind-mount local --target by default to avoid slow file Terse, technical, with human-typical exp 2026-07-22
pr 0.00 Feat/no progress breaker Ultra-terse commit title, no AI signals 2026-07-23
pr 0.00 fix(deps): cap cryptography <49 to keep Intel macOS universa Precise dependency pinning rationale, hu 2026-07-22
pr 0.00 Quit after scan instead of hosting the local viewer — 2026-07-22
pr 0.00 chore(deps): bump pyasn1 from 0.6.3 to 0.6.4 — 2026-07-22
pr 0.00 chore(deps): bump cryptography to 49.0.0 and pyasn1 to 0.6.4 Straightforward CVE/dependency rationale 2026-07-22
pr 0.00 feat(cli): update notifications + self-update (strix --updat Brief feature changelog, telegraphic, hu 2026-07-19
pr 0.00 chore: release v1.3.1 — 2026-07-22
pr 0.00 sandbox: bump default inner-sandbox image to 1.1.0 — 2026-07-22
pr 0.00 chore(deps): bump setuptools from 82.0.1 to 83.0.0 — 2026-07-22
pr 0.00 sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-st Detailed technical changelog, natural hu 2026-05-04
pr 0.00 sandbox: cut image ~7.2GB → ~3.8GB (multi-stage Go build, dr — 2026-07-22
pr 0.00 fix(prompt): make root agent orchestrate-only and fold fixin — 2026-07-21
pr 0.00 fix(container): keep /app/.venv/bin on the login-shell PATH — 2026-07-22
pr 0.00 fix(core): compile fallback report if agent misses lifecycle Template structure with authentic techni 2026-07-03
pr 0.00 Add explicit CSPT detection skill, categorization, fixtures, Contains domain jargon and review respon 2026-07-16
pr 0.00 chore: release v1.2.0 — 2026-07-21
pr 0.00 Local run viewer: email reports, run history, and the platfo Free-text is technical and direct; no AI 2026-07-20
pr 0.00 docs(skills): add Active Directory / Kerberos domain testing Direct, domain-specific skill addition; 2026-07-21
pr 0.00 feat(tui): add manual compact command Terse changelog, includes test output, n 2026-07-07
pr 0.00 fix: strip chatgpt transcript tags from agent messages Direct language, specific details, no ge 2026-07-10
pr 0.00 fix: propagate sandbox proxy environment aliases Brief, technical, includes error output 2026-07-10
pr 0.00 Handle large exec_command output and surface scan errors as Casual, terse, domain-specific phrasing 2026-06-22
pr 0.00 fix(report): prevent code-fence breakout in vulnerability ma Technical explanation with informal, pre 2026-07-20
pr 0.00 strip transfer encoding Extremely terse and typical of human com 2026-07-21
pr 0.00 fix(proxy): recompute Content-Length when replaying a modifi Uses domain jargon and casual but techni 2026-07-20
pr 0.00 Close two follow-up viewer authz gaps (session-gate history — 2026-07-20
pr 0.00 Harden local viewer authorization (session capability, histo — 2026-07-20
pr 0.00 docs(skills): add grafana_prometheus observability pivot ski Concise, technical phrasing typical of h 2026-07-20
pr 0.00 recon asset discovery skill Message is minimal, just a PR template t 2026-07-19
pr 0.00 feat(cli): update notifications + self-update (strix --updat — 2026-07-19
pr 0.00 fix(telemetry): stop finding() telemetry from blocking the a Filled template, uses code paths, error 2026-07-04
pr 0.00 fix(llm): use a JSON-serializable per-turn model timeout — 2026-07-18
pr 0.00 fix(llm): add per-turn model request timeout so stalled stre — 2026-07-18
pr 0.00 fix(llm): retry statusless mid-stream provider errors (quota — 2026-07-16
pr 0.00 Fall back to token-based cost estimation when observed LiteL — 2026-07-17
pr 0.00 fix(report): restore cost tracking for OpenRouter and other — 2026-07-17
pr 0.00 revert(proxy): drop overfit Caido reconnect/HTTPQL band-aids — 2026-07-17
pr 0.00 fix(proxy,tooling): serialize+reconnect Caido client, action — 2026-07-17
pr 0.00 fix(prompt): down-rate or skip findings on demo data / demo — 2026-07-17
pr 0.00 Pulling Single informal word, clear human author 2026-07-16
pr 0.00 docs(prompts,skills): stop hardcoding /workspace/scratch pat — 2026-07-16
pr 0.00 docs(tools): guide proportional wait_for_message timeouts — 2026-07-16
pr 0.00 docs(prompts,skills): bound recon output for shared-disk hyg — 2026-07-16
pr 0.00 Revert "fix(runtime): retry transient sandbox startup failur — 2026-07-16
pr 0.00 feat(runtime): opt-in resource limits for docker sandbox con — 2026-07-16
pr 0.00 fix(core): bound per-agent image memory (proactive budget + — 2026-07-15
pr 0.00 Need to get the latest updates Message is short, informal, and shows a 2026-07-15
pr 0.00 feat(runtime): resolve sandbox ports over a shared Docker ne — 2026-07-15
pr 0.00 feat(resume): opt-in grounded retraction of fixed findings Uses domain jargon and natural, context- 2026-07-15
pr 0.00 Update vertex.mdx No free text; single generic template-ac 2026-07-14
pr 0.00 fix: prevent context-window crash from huge tool outputs Terse, practical jargon and natural clos 2026-07-11
pr 0.00 perf(runtime): import local sources via single tar put_archi Direct domain language, clear problem/so 2026-07-11
pr 0.00 fix: reject submit-only XSS false positives Abbreviated, technical explanation using 2026-07-12
pr 0.00 fix(tests): skip symlink test when Windows lacks privilege Direct technical explanation; specific t 2026-07-11
pr 0.00 perf(runtime): import local sources via single tar put_archi Direct domain language, clear problem/so 2026-07-05
pr 0.00 fix(runtime): retry transient sandbox startup failures No free-text content; only a terse templ 2026-07-15
pr 0.00 fix(runtime): retry transient sandbox startup failures No free-text content; only a terse templ 2026-07-15
pr 0.00 Warn when configured LLM is not frontier-recommended — 2026-06-26
pr 0.00 fix(runtime): stage symlink-safe copies for LocalDir uploads Technical details, concise, clear monore 2026-07-14
pr 0.00 chore: release v1.1.0 — 2026-07-14
pr 0.00 Default sandbox exec commands to Bash Fills template; includes terse tech summ 2026-07-14