marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-18 20:49:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(three-stage-scan): add tool-using hunter that records suspicion only

Browse Source
This commit is contained in:
Marius Ciepluch
2026-09-03 21:18:22 +02:00
parent 90e3b91cf8
commit b34a75a821
3 changed files with 458 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/three-stage-scan/tasks.md
+1 -1
View File
@@ -62,7 +62,7 @@ This plan ships the three-stage scan without rebuilding CWE policy or the regex
- _Boundary: ComplexityMapBuilder_
- _Depends: 2.2_
- [ ] 3. Add repo-bound hunter tools and a scripted tool loop
- [x] 3. Add repo-bound hunter tools and a scripted tool loop
- [x] 3.1 (P) Clamp tool paths and expose read, grep, and reference search
- Read, grep, and reference listing resolve only under the scan root; `..` and absolute escapes raise a path-escape error.
- Grep runs with the standard library over enumerated source files.