mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Opus 5.5
80eb0f2a36
- Root .dockerignore for the root Dockerfile's context: local state (.git, .claude worktrees, .venv, .env, caches, reports, *.sarif) and the benchmarks/measurements archive (~20 MB of evidence). Kept: everything the Dockerfile COPYs, the two 2026-09-13 records ops/smoke_report.py reads from /app inside the image, and the harnessx-removal baseline pairs.json that learn/sources.toml names as a label source. plane/Dockerfile.runner keeps its own ignore file. - Remove 2026-09-30-harnessx-removal-baseline/scan/report.sarif: tracked despite .gitignore's *.sarif, with no counterpart on the candidate side. The directory's README says why. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
4 lines
976 B
Plaintext
4 lines
976 B
Plaintext
Excluded from comparison: JSON keys: created_at, finished, generated_at, runtime_seconds, scan_id, started, timestamp; JSON keys ending in: _seconds, _ms; run directory names / run ids (<timestamp>-<8 hex>, benchmark.py create_benchmark_run, run.py create_scan_run) -> <RUN_ID>; trace/events.jsonl as a whole (timings); never copied; the export's absolute root path -> <ROOT>; the children's TMPDIR -> <TMP>; suite: only the outcome per test id is kept (junit durations dropped); env.json is a provenance record (commit, freeze hash, instrument checks), not compared
|
|
|
|
scan/report.sarif was removed from git on 2026-10-02. It had been committed in ca5caf7 despite .gitignore excluding *.sarif, and the candidate side (../2026-09-30-harnessx-removal-equality/candidate/scan) has none, so the committed pair was asymmetric. What a reader can recheck from git is the remaining scan files: findings.json, verification.json, fusion.json, harness.json, manifest.json and stdout.txt.
|