mozilla / fx-private-relay / d3886f8c-7a4b-4d2f-b01f-784ae76fdf67

92%

main: 92%

push

circleci

MPP-4626: feat(blender): harden fix-dependabot against prompt injection

Untrusted PR data flows into the LLM prompt. Three defenses added:
input sanitization, Dependabot author validation, and a canary token
that aborts if the model leaks its system prompt into changed files.

Also fetches commit statuses alongside check runs for broader CI coverage.

3056 of 3915 branches covered (78.06%)

Branch coverage included in aggregate %.

18841 of 19985 relevant lines covered (94.28%)

14.42 hits per line