SECURITY: SOPS decryption without integrity verification
SECURITY: Unquoted curl URLs with variables in API calls
SECURITY: Replace eval usage with safer alternatives
fix: dev-poll.sh in-progress scan falls through on waiting PRs