marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-17 20:19:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(three-stage-scan): run or skip deep regression with visible degradation

Browse Source
This commit is contained in:
Marius Ciepluch
2026-09-03 23:43:15 +02:00
parent 803312e75b
commit 2efbbb8024
10 changed files with 325 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/three-stage-scan/tasks.md
+1 -1
View File
@@ -143,7 +143,7 @@ This plan ships the three-stage scan without rebuilding CWE policy or the regex
- _Requirements: 1.2, 1.4, 3.3, 3.4, 6.4, 9.4, 9.6_
- _Depends: 2.3, 6.1_
- [ ] 6.3 Stop exiting on deep; run or skip regression with visible degradation
- [x] 6.3 Stop exiting on deep; run or skip regression with visible degradation
- Deep no longer hard-exits. If the sandbox is missing, stages 1–2 complete and regress is skipped with `sandbox_unavailable`.
- If the sandbox is present, regression runs under the candidate cap and writes verdicts.
- Observable completion: `ousast scan --mode deep` without Docker exits 0 after stages 1–2 and lists the skip in the manifest; with a fake runner it records verdicts.