Guardrails
Check an extension
Sign in
Back to extension profile
Immutable Deep Scan reportEvidence is locked to this exact artifact and scan.
About immutable reports

Future scans cannot replace the findings, coverage, ruleset, or artifact hash shown on this URL.

Scan
a3f5f30f-a37d-417e-b3f3-932b6332a251
Artifact
5e40bb78c3af…9e9e2907
Analysis Report

GitHub Pull Requests

GitHub.vscode-pull-request-github@0.159.2026071604

Completed analysis for this exact extension version. Use the summary below to decide what your team should do next.

Scan resultNo known concern

Analysis completed without actionable evidence or unapproved baseline changes.

Required action
Proceed under normal extension controls
Export evidence
Decision nowAnalysis completed without actionable evidence or unapproved baseline changes.Exact artifact only
Actionable evidence017 contextual notes
Capabilities9Observed powers, not intent
Coverage100%Executable-file coverage
Package scope5529 dependencies
Frozen regression fixtureThis exact artifact is in the GuardRails regression corpus.

Hash-pinned as a credential sensitive case. The exact artifact identity matches the frozen cohort; the current decision above comes only from this scan's evidence.

GitHubvs-marketplaceVersion 0.159.2026071604
Security brief

No evidence currently requires review.

Required analysis completed without evidence that crosses the active review policy.

What changed

Analysis completed without actionable evidence or unapproved baseline changes.

Why it matters

This result applies only to the scanned artifact SHA-256, not to future releases or a publisher generally.

Recommended action

Approval can proceed under your organization’s normal extension controls.

Analysis limits

Required analysis completed for this exact artifact; evidence remains scoped to scanner coverage.

  1. 1Artifact boundExtension, version, hash, and scan identity fixed
  2. 2Analysis checkedExecutable-file coverage
  3. 3Evidence grouped0 actionable · 17 contextual
  4. 4Policy appliedExact-release ruleset evaluated
  5. 5No known concernCurrent decision for this artifact
32/100No known concern

Diagnostic risk index for this exact artifact — not a probability of malice.

OutcomeNo known concern

Policy result for this exact artifact

Executable-file coverage
100

7/7 required analyzers completed

Malware signal
0

Diagnostic index, not probability

Evidence groups0

17 contextual notes kept separate

Capabilities9

Power describes access, not intent

Why this outcome

No behavior group currently requires review.

Analysis completed without actionable evidence or unapproved baseline changes.

Exact artifact5e40bb78c3af7ad2df6c30d6c58a5f3b1c483e4151db3e07640007859e9e2907

Build 6aab1d4caaf6 · ruleset 2026.07.24-policy-v3-calibration.6

Evidence assessed by policy