mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Opus 4.8
53b1d31d82
DeepSeek deepseek-flash reachable: ~$0.0002/call, ~1.1s (sub-cent/push). The LLM gives the correct verdict WHEN aimed at the real sink + source context: asked about the pool's SZZ-labelled site (_load) it correctly says not-vulnerable; asked about the real sink (from_prompt_path line 44, prompt.name request-derived) it correctly says vulnerable. So '2 guided by 1' works as a mechanism. Two blockers, both concrete: (1) it needs the agentic search-with-proof hunter to supply caller/source context -- single-shot on the ranker's region is insufficient; (2) the pool's banks label is mislocated (head_lines 30/104/138-141, function _load; real sink is line 44), so even a correct finding wouldn't score as a catch and the sink pre-exists in base -- a change-scoped hook correctly stays quiet. Part of the pilot engine 0/5 is SZZ mislocation, not a detection failure. GLM/abliteration fallback errors HTTP422 on the thinking param (client fix needed; DeepSeek works). Next: validate the 5 pilot labels (change-located & introduced?) before detection runs; then size the agentic hunter on the sound targets; feed confirmed source shapes back as guarded facts. Co-Authored-By: Claude Opus 4.8 <[email protected]>