feat(three-stage-scan): report map and honor fail-on worth-fixing

This commit is contained in:
Marius Ciepluch
2026-09-04 00:18:33 +02:00
parent a916e2d173
commit 818a0b10d3
11 changed files with 330 additions and 7 deletions
+1 -1
View File
@@ -127,7 +127,7 @@ This plan ships the three-stage scan without rebuilding CWE policy or the regex
## Phase 4 — Integration: Wire stages into the scan
- [ ] 6. Run stages from the existing scan command
- [x] 6. Run stages from the existing scan command
- [x] 6.1 Keep quick as stage-1 inventory with no model and no target execution
- Quick still loads policy, ruleset, preprocess, rank, pattern inventory, structural verify, and score.
- The report labels those hits as inventory, not as worth-fixing.