Open_Ultra_SAST

marius/Open_Ultra_SAST

Fork 0

mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-19 21:19:28 +00:00

Commit Graph

Author	SHA1	Message	Date
Marius CiepluchandClaude Opus 5.5	afff080874	merge(engine): Kubernetes engine workers (Deployment from the image, S3 queue); leak-audit records carry digests, not repository names The Joern leak-audit record named spent population v1/v2 repositories, which the reserved-repository guard forbids outside benchmarks/independent/ (no v3 repository was involved: 0 matches). Records now carry counts and SHA-256 digests. With Codex. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-04 14:39:36 +02:00
Marius CiepluchandClaude Opus 5.5	298bd17780	learn: Joern-slice leak audit on the completed trace run -- no leak; paths differ between pair sides in 2 of 105 both-asked pairs Coverage 72 path, 231 asked-nothing, 9 failed, 189 unsupported. The engine almost never distinguishes a vulnerable function from its fix, so a Joern-slice prompt experiment is not funded; the lever is the engine's knowledge of fix mechanisms. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-04 14:08:26 +02:00

Author

SHA1

Message

Date

Marius CiepluchandClaude Opus 5.5

afff080874

merge(engine): Kubernetes engine workers (Deployment from the image, S3 queue); leak-audit records carry digests, not repository names

The Joern leak-audit record named spent population v1/v2 repositories, which
the reserved-repository guard forbids outside benchmarks/independent/ (no v3
repository was involved: 0 matches). Records now carry counts and SHA-256
digests. With Codex.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-04 14:39:36 +02:00

Marius CiepluchandClaude Opus 5.5

298bd17780

learn: Joern-slice leak audit on the completed trace run -- no leak; paths differ between pair sides in 2 of 105 both-asked pairs

Coverage 72 path, 231 asked-nothing, 9 failed, 189 unsupported. The engine
almost never distinguishes a vulnerable function from its fix, so a Joern-slice
prompt experiment is not funded; the lever is the engine's knowledge of fix
mechanisms.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-04 14:08:26 +02:00