Skip to content

feat(audit): the mobile aspect with its MASVS links, the client's own AI exclusions, and release 1.12.0 - #20

Merged
anaidenko merged 1 commit into
mainfrom
feat/audit-mobile-exclusions
Oct 11, 2026
Merged

anaidenko merged 1 commit into
mainfrom
feat/audit-mobile-exclusions

Conversation

@anaidenko

Copy link
Copy Markdown
Owner

/audit catches up with Auditdesk main at 9ee82b3:

  • What it covers: a paragraph for the Mobile app aspect (Capacitor, Cordova, React Native, Expo), mapped to OWASP MASVS 2.1.0, with native code read only where JavaScript can call it.
  • What you get: the engineers' references add MASVS for a mobile app.
  • Your code: files the client's team already keeps from AI tools (Claude Code Read denies, the ignore files of Cursor, Gemini, JetBrains AI, Windsurf and Aider, and patterns the client names) stay out of the agents' reach; the scanners still check them and the report lists them.

An e2e test checks the three sections on /audit. Format, lint, types, 294 unit tests, e2e 228 passed and 12 skipped.

@anaidenko
anaidenko merged commit 0328246 into main Oct 11, 2026
1 check passed
@anaidenko
anaidenko deleted the feat/audit-mobile-exclusions branch October 11, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant