Open_Ultra_SAST

marius/Open_Ultra_SAST

Fork 0

mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 19:59:26 +00:00

Files

T

History

Marius CiepluchandClaude Opus 5.5 0a04dbfada bench(independent): freeze population v3 (PHP)

freeze.py, extended for v3 and still reading only git history, file lists and
fix diffs:
- a file the advisory names without a function resolves to the function(s)
  the fix's diff changes at the vulnerable pin (maintainer's decision 2),
  recorded with its basis (advisory-named / resolved-from-fix-diff); a new
  helper inserted at file scope adds no site;
- an inferred fix must change a declared site function, else the case drops;
- a single-language population gets a strict benign proposal (PHP change,
  merges judged with all they bring in, pre-vulnerable history as fallback).

All 15 cases verified, none dropped (pagible and podlove fixes confirmed).
Nine sites in eight cases resolved from diffs; five benign proposals
replaced by hand.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo

2026-09-30 18:15:52 +02:00

dev

chore(dev): token-lean workflow tools -- read guard, bulk reader, transcript report

2026-09-29 17:23:30 +02:00

fixtures

feat(ruleset): PHP quick-mode rules from the engine's vocabulary, measured on the development corpus

2026-09-30 15:05:47 +02:00

independent

bench(independent): freeze population v3 (PHP)

2026-09-30 18:15:52 +02:00

manifests

feat(ruleset): PHP quick-mode rules from the engine's vocabulary, measured on the development corpus