marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

engine: admit TypeScript (jssrc2cpg, JavaScript taint specs via one alias), .mts/.cts, mixed JS/TS builds one CPG

Browse Source 
Implemented with Codex. Not merged: wall-clock deadline tests failed at host
load 47; to be re-checked against main at normal load.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
Marius Ciepluch
2026-10-04 10:34:50 +02:00
co-authored by Claude Opus 5.5
parent 20777d8863
commit e13ce35a75
13 changed files with 175 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_plane_loop.py
+12
View File
@@ -311,3 +311,15 @@ def test_the_loop_runs_as_one_plane_run_and_the_gate_rejects_a_demotion_that_cos
assert set(features) == {"lmdeploy/vl/media/connection.py::_load_http_url"}, "no fixed-pin alert became a candidate"
assert all(r["pin"] == VULNERABLE and "in_fix_range" not in json.dumps(r["x"]) for r in features.values())
assert fixed_alert.row["in_fix_range"] is True and fixed_alert.row["function"] == "load"
def test_engine_languages_include_aliases_only_for_available_tables(tmp_path):
from openultrasast.plane.tasks.alerts import engine_languages
assert "typescript" in engine_languages()
semantic = tmp_path / "semantic"
semantic.mkdir()
(semantic / "python.toml").write_text("")
assert engine_languages(tmp_path) == {"python"}
(semantic / "javascript.toml").write_text("")
assert engine_languages(tmp_path) == {"python", "javascript", "typescript"}