mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
New page docs/detection-techniques.md: the three representations (regex over the file, tree-sitter IR, Joern CPG) and what each can see; Joern as a section of its own (frontends, one graph per language partition, census as the instrument check, batching against the measured cost curve, deadlines, degradations, where the engine sits in the plane, cost and misses with records); taint from fact tables to query to verdict with each refinement traced to its record or commit; obligations, dominance, constant abstraction, census; regions, ranking ties and budgets; the residual question and MAX_JUDGED_CANDIDATES; REGRESS verdicts and the unassigned execution_confirmed rung; an honest table of what each technique misses. Nav entry under "How it works" after Scanning; one link from the index; one cross-link line each in scanning.md and architecture.md. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
70 lines
1.8 KiB
YAML
70 lines
1.8 KiB
YAML
site_name: OpenUltraSAST
|
|
site_description: An experimental static security analyser and repository safety net, with an agentic plane and a learned decision engine in development.
|
|
repo_url: https://github.com/norandom/OpenUltraSAST
|
|
edit_uri: edit/main/docs/
|
|
docs_dir: docs
|
|
site_dir: site
|
|
strict: true
|
|
|
|
theme:
|
|
name: material
|
|
features:
|
|
- navigation.sections
|
|
- navigation.top
|
|
- content.code.copy
|
|
- search.highlight
|
|
palette:
|
|
- media: "(prefers-color-scheme: light)"
|
|
scheme: default
|
|
toggle:
|
|
icon: material/brightness-4
|
|
name: Dark mode
|
|
- media: "(prefers-color-scheme: dark)"
|
|
scheme: slate
|
|
toggle:
|
|
icon: material/brightness-7
|
|
name: Light mode
|
|
|
|
validation:
|
|
omitted_files: warn
|
|
absolute_links: warn
|
|
unrecognized_links: warn
|
|
anchors: warn
|
|
|
|
markdown_extensions:
|
|
- admonition
|
|
- attr_list
|
|
- tables
|
|
- toc:
|
|
permalink: true
|
|
- pymdownx.details
|
|
- pymdownx.snippets:
|
|
base_path: ["."]
|
|
check_paths: true
|
|
- pymdownx.superfences:
|
|
custom_fences:
|
|
- name: mermaid
|
|
class: mermaid
|
|
format: !!python/name:pymdownx.superfences.fence_code_format
|
|
|
|
nav:
|
|
- Overview: index.md
|
|
- How it works:
|
|
- Scanning: scanning.md
|
|
- Detection techniques: detection-techniques.md
|
|
- Architecture: architecture.md
|
|
- The plane on ax: plane.md
|
|
- Memory: memory.md
|
|
- Memory and detection: memory-and-detection.md
|
|
- Decision engine: decision-engine.md
|
|
- Token ergonomics: token-ergonomics.md
|
|
- Evaluation: evaluation.md
|
|
- Using it:
|
|
- Examples: examples.md
|
|
- Threat model: threat-model.md
|
|
- Operations (maintainers):
|
|
- Engine and pre-push: ops/README.md
|
|
- ax on this host: ops/ax/README.md
|
|
- Deployment: deployment.md
|
|
- RustFS setup for the memory store: rustfs.md
|