release: v2.2.0 — ESRP compliance, configurable security policies, hardening#300

Merged

imran-siddique merged 6 commits intomicrosoft:mainfrom

imran-siddique:release/v2.2.0

Mar 18, 2026

Commits on Mar 17, 2026

fix(security): expand SQL policy deny-list to block privilege escalation

imran-siddique
and
Copilot
committed
feat(policy): make SQL policies configurable via YAML config

imran-siddique
and
Copilot
committed
feat(security): externalize hardcoded security rules to YAML configs

imran-siddique
and
Copilot
committed

Commits on Mar 18, 2026