marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
8d6921d2dfa10280b3c9019573b105f14753881d
Open_Ultra_SAST/benchmarks
T
History
Marius CiepluchandClaude Opus 5.5 298bd17780 learn: Joern-slice leak audit on the completed trace run -- no leak; paths differ between pair sides in 2 of 105 both-asked pairs 
Coverage 72 path, 231 asked-nothing, 9 failed, 189 unsupported. The engine
almost never distinguishes a vulnerable function from its fix, so a Joern-slice
prompt experiment is not funded; the lever is the engine's knowledge of fix
mechanisms.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-04 14:08:26 +02:00
..
archive
ci: green again -- format and lint the whole tree; push the scan and runner images to GHCR on tags
2026-10-02 20:09:28 +02:00
dev
ci: green again -- format and lint the whole tree; push the scan and runner images to GHCR on tags
2026-10-02 20:09:28 +02:00
experiments
learn: exp-005 graph slice -- inconclusive (within-pair AUC 0.762 -> 0.746, CI [-0.063, 0.032]); unsure rate 0.29 -> 0.24; fill \$1.59
2026-10-03 16:58:37 +02:00
fixtures
feat(ruleset): PHP quick-mode rules from the engine's vocabulary, measured on the development corpus
2026-09-30 15:05:47 +02:00
independent
ci: green again -- format and lint the whole tree; push the scan and runner images to GHCR on tags
2026-10-02 20:09:28 +02:00
learn
Merge branch 'joern-leak-audit'
2026-10-04 10:53:23 +02:00
manifests
feat(ruleset): PHP quick-mode rules from the engine's vocabulary, measured on the development corpus
2026-09-30 15:05:47 +02:00
measurements
learn: Joern-slice leak audit on the completed trace run -- no leak; paths differ between pair sides in 2 of 105 both-asked pairs
2026-10-04 14:08:26 +02:00
pairs
learn: 251 more advisory-fix pairs whose function survives the fix (advisory-fixes-3)
2026-10-04 11:57:34 +02:00
push
perf(taint): ask the caller check only of a parameter that starts a flow into the field
2026-09-23 22:49:44 +02:00
ranking
feat(pre-push-safety-net): preserve uncertainty in benchmark scoring
2026-09-12 19:04:20 +02:00
repos
feat(pre-push-safety-net): pin labeled evaluation inputs
2026-09-12 18:45:54 +02:00