marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-17 12:09:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(three-stage-scan): reject unsafe regression snippets before execution

Browse Source
This commit is contained in:
Marius Ciepluch
2026-09-03 22:12:45 +02:00
parent f78ea55e5d
commit eb87ef85ec
5 changed files with 222 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/three-stage-scan/tasks.md
+1 -1
View File
@@ -78,7 +78,7 @@ This plan ships the three-stage scan without rebuilding CWE policy or the regex
- _Boundary: ToolHunter_
- _Depends: 3.1, 2.2_
- [ ] 4. Stand up the isolated sandbox runner
- [x] 4. Stand up the isolated sandbox runner
- [x] 4.1 (P) Probe whether the sandbox runtime is usable
- A short `docker info` style probe returns available or unavailable without throwing into the scan.
- Observable completion: the fake probe can be forced off; the real probe is skippable in unit tests.