mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00

T

Marius CiepluchandClaude Opus 4.8 6699f1f8f9 chore: add kiro spec-driven tooling and steering docs

Add the Kiro-style agentic SDLC tooling used to drive this project: the
.opencode/skills/kiro-* skill set (discovery, spec init/requirements/design/
tasks, validation, implementation, review, steering), the .kiro/settings
templates, and AGENTS.md describing the workflow. Update the spec docs
(assessment/design/requirements/tasks) to current state.

Scope tests/test_opencode_skills.py to the project's own openultrasast-*
skills so the third-party kiro-* tooling (which uses a different frontmatter
convention) no longer breaks the frontmatter check.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-06-21 14:28:19 +02:00

.github/workflows

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

.kiro

chore: add kiro spec-driven tooling and steering docs

2026-06-21 14:28:19 +02:00

.opencode/skills

chore: add kiro spec-driven tooling and steering docs

2026-06-21 14:28:19 +02:00

benchmarks

feat(detection): language-scoped rules + multi-language benchmark corpora

2026-06-21 11:49:31 +02:00

dagger

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

src/openultrasast

feat(detection): language-scoped rules + multi-language benchmark corpora

2026-06-21 11:49:31 +02:00

tests

chore: add kiro spec-driven tooling and steering docs

2026-06-21 14:28:19 +02:00

.gitignore

feat(scan): add initial SAST pipeline

2026-06-17 21:13:51 +02:00

.pre-commit-config.yaml

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

.python-version

feat(scan): add initial SAST pipeline

2026-06-17 21:13:51 +02:00

AGENTS.md

chore: add kiro spec-driven tooling and steering docs

2026-06-21 14:28:19 +02:00

pyproject.toml

ci: exclude benchmark fixtures from ruff

2026-06-21 14:17:22 +02:00

README.md

docs(spec): add OpenRouter SAST harness spec

2026-06-17 19:39:58 +02:00

uv.lock

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

README.md

OpenUltraSAST

OpenUltraSAST is an independent OpenCode security harness project. It combines HarnessX-style harness composition, OpenUltraCode verification discipline, OpenRouter-hosted models and embeddings, Docker-isolated code analysis, and Trail of Bits security skills into a SAST-oriented workflow.

The initial project spec lives in:

.kiro/specs/openrouter-sast-harness/requirements.md
.kiro/specs/openrouter-sast-harness/design.md
.kiro/specs/openrouter-sast-harness/tasks.md
.kiro/specs/openrouter-sast-harness/assessment.md

Clearwing is used as an implementation oracle for proven source-hunting ideas, not as a dependency or fork target.