marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-18 12:39:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(three-stage-scan): add complexity and regression config caps

Browse Source
This commit is contained in:
Marius Ciepluch
2026-09-03 19:29:54 +02:00
parent 723e3a76cf
commit 926c8c273e
3 changed files with 108 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/three-stage-scan/tasks.md
+1 -1
View File
@@ -12,7 +12,7 @@ This plan ships the three-stage scan without rebuilding CWE policy or the regex
- _Requirements: 1.1, 1.2, 1.3, 1.6_
- _Boundary: StagePlan_
- [ ] 1.2 Add complexity and regression configuration with candidate caps
- [x] 1.2 Add complexity and regression configuration with candidate caps
- Configuration exposes map top-k, max hunter hotspots, max regression candidates, and optional language image pins, with defaults that keep pull-request scans cheap.
- Sandbox memory, pids, timeout, network-off, and read-only workspace remain the existing sandbox settings.
- Observable completion: loading config without a file yields those defaults; an override file changes top-k and max candidates only.