mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 19:59:26 +00:00

T

Marius CiepluchandClaude Opus 4.8 8fe8911020 ci: exclude benchmark fixtures from ruff

CI runs `ruff format --check .` and `ruff check .` over the whole repo. The
benchmark fixtures are intentionally vulnerable, unformatted sample code (e.g.
a `% uid` SQL injection that ruff flags as UP031), and reformatting them would
shift the ground-truth line numbers the manifests depend on. Exclude
benchmarks/fixtures from ruff so lint/format only cover real project sources.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-06-21 14:17:22 +02:00

.github/workflows

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

.kiro/specs/openrouter-sast-harness

feat(hunter): add standard-mode scheduling

2026-06-18 10:59:25 +02:00

.opencode/skills

feat(opencode): add OpenUltraSAST steering skills

2026-06-17 21:16:20 +02:00

benchmarks

feat(detection): language-scoped rules + multi-language benchmark corpora

2026-06-21 11:49:31 +02:00

dagger

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

src/openultrasast

feat(detection): language-scoped rules + multi-language benchmark corpora

2026-06-21 11:49:31 +02:00

tests

feat(detection): language-scoped rules + multi-language benchmark corpora

2026-06-21 11:49:31 +02:00

.gitignore

feat(scan): add initial SAST pipeline

2026-06-17 21:13:51 +02:00

.pre-commit-config.yaml

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

.python-version

feat(scan): add initial SAST pipeline

2026-06-17 21:13:51 +02:00

pyproject.toml

ci: exclude benchmark fixtures from ruff

2026-06-21 14:17:22 +02:00

README.md

docs(spec): add OpenRouter SAST harness spec

2026-06-17 19:39:58 +02:00

uv.lock

ci: add quality gates and release workflows

2026-06-18 10:06:21 +02:00

README.md

OpenUltraSAST

OpenUltraSAST is an independent OpenCode security harness project. It combines HarnessX-style harness composition, OpenUltraCode verification discipline, OpenRouter-hosted models and embeddings, Docker-isolated code analysis, and Trail of Bits security skills into a SAST-oriented workflow.

The initial project spec lives in:

.kiro/specs/openrouter-sast-harness/requirements.md
.kiro/specs/openrouter-sast-harness/design.md
.kiro/specs/openrouter-sast-harness/tasks.md
.kiro/specs/openrouter-sast-harness/assessment.md

Clearwing is used as an implementation oracle for proven source-hunting ideas, not as a dependency or fork target.