@clear-capabilities/agentic-security-scanner 0.139.1 → 0.141.0

package/dist/agentic-security.mjs.sha256

@@ -1 +1 @@
-6644269053578a17693b6dbb13795c1195ddf4faf6816063d8fb5e33c78bdbae  agentic-security.mjs
+deeb49d41f22000f35683bc1e9dc2c2368c4b79af6272740c5e96cece4732475  agentic-security.mjs

package/dist/compliance-frameworks/ccpa.json

@@ -4,29 +4,56 @@
   "publisher": "California Legislature",
   "license": "California statute (public)",
   "url": "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5",
+  "scope": "SELECTIVE SUBSET. 4 of the CCPA/CPRA obligations, chosen because a code scanner can produce evidence for them. The statute is far broader; the majority of its duties (notice, consumer request handling, contracts, retention policy) are organisational and are NOT represented here. Absence of a control is not a statement of compliance.",
+  "controlsDigest": "ebc1f708c329ab42",
+  "controlCount": 4,
   "controls": [
     {
       "id": "§1798.100",
       "summary": "Consumer right to know — businesses inform consumers about categories of personal info collected.",
-      "evidence": ["DPIA artifact lists every PII field with file:line provenance."],
-      "mapsTo": ["module:privacy-taint"]
+      "codeTestable": "partial",
+      "evidence": [
+        "DPIA artifact lists every PII field with file:line provenance."
+      ],
+      "mapsTo": [
+        "module:privacy-taint"
+      ]
     },
     {
       "id": "§1798.105",
       "summary": "Right to delete — businesses comply with verified deletion requests.",
-      "evidence": ["No data-exposure findings on PII storage paths."]
+      "codeTestable": "no",
+      "evidence": [
+        "No data-exposure findings on PII storage paths."
+      ]
     },
     {
       "id": "§1798.150",
       "summary": "Civil action for security breach affecting personal information.",
-      "evidence": ["Crypto findings cleared on PII handling code.", "TLS pinning checks pass."],
-      "mapsTo": ["family:crypto-weak-cipher", "family:crypto-tls-version", "family:crypto-tls-no-verify"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Crypto findings cleared on PII handling code.",
+        "TLS pinning checks pass."
+      ],
+      "mapsTo": [
+        "family:crypto-weak-cipher",
+        "family:crypto-tls-version",
+        "family:crypto-tls-no-verify"
+      ]
     },
     {
       "id": "§1798.81.5",
       "summary": "Reasonable security procedures and practices.",
-      "evidence": ["No critical findings on user-data endpoints.", "Auth-missing zero on PII paths."],
-      "mapsTo": ["family:auth-missing", "family:authz", "family:hardcoded-secret"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No critical findings on user-data endpoints.",
+        "Auth-missing zero on PII paths."
+      ],
+      "mapsTo": [
+        "family:auth-missing",
+        "family:authz",
+        "family:hardcoded-secret"
+      ]
     }
   ]
 }

package/dist/compliance-frameworks/eu-ai-act.json

@@ -4,48 +4,99 @@
   "publisher": "European Parliament & Council",
   "license": "EU law (Official Journal)",
   "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
+  "scope": "SELECTIVE SUBSET. 7 obligations drawn from the high-risk-system and GPAI articles where a code signal exists. The Act is far broader; conformity assessment, registration, human oversight and post-market monitoring are organisational and are NOT represented here.",
+  "controlsDigest": "16d15998a686a19b",
+  "controlCount": 7,
   "controls": [
     {
       "id": "Art.9",
       "summary": "Risk management system — continuous, iterative risk identification and mitigation.",
-      "evidence": ["Threat model artifact (.agentic-security/threat-model.{json,md}).", "Continuous scan history present."],
-      "mapsTo": ["module:threat-model-auto", "module:scan-history"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Threat model artifact (.agentic-security/threat-model.{json,md}).",
+        "Continuous scan history present."
+      ],
+      "mapsTo": [
+        "module:threat-model-auto",
+        "module:scan-history"
+      ]
     },
     {
       "id": "Art.10",
       "summary": "Data governance — training/validation data is relevant, representative, and bias-checked.",
-      "evidence": ["No training-data-pii findings.", "DPIA artifact for any PII handling."],
-      "mapsTo": ["family:training-data-pii", "family:pii-exposure"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No training-data-pii findings.",
+        "DPIA artifact for any PII handling."
+      ],
+      "mapsTo": [
+        "family:training-data-pii",
+        "family:pii-exposure"
+      ]
     },
     {
       "id": "Art.11",
       "summary": "Technical documentation — system architecture, components, training procedures documented.",
-      "evidence": ["AIBOM artifact at .agentic-security/aibom.json.", "Threat model + DPIA + compliance-evidence present."],
-      "mapsTo": ["module:aibom", "module:threat-model-auto", "module:compliance-policy"]
+      "codeTestable": "partial",
+      "evidence": [
+        "AIBOM artifact at .agentic-security/aibom.json.",
+        "Threat model + DPIA + compliance-evidence present."
+      ],
+      "mapsTo": [
+        "module:aibom",
+        "module:threat-model-auto",
+        "module:compliance-policy"
+      ]
     },
     {
       "id": "Art.12",
       "summary": "Record-keeping — automatic logging of system events for traceability.",
-      "evidence": ["MCP audit log .agentic-security/mcp-audit.log present.", "Scan history retained."],
-      "mapsTo": ["module:mcp-audit", "module:scan-history"]
+      "codeTestable": "partial",
+      "evidence": [
+        "MCP audit log .agentic-security/mcp-audit.log present.",
+        "Scan history retained."
+      ],
+      "mapsTo": [
+        "module:mcp-audit",
+        "module:scan-history"
+      ]
     },
     {
       "id": "Art.13",
       "summary": "Transparency — instructions for use enable users to interpret the system's output correctly.",
-      "evidence": ["why-fired annotation surfaces detection provenance on every finding."],
-      "mapsTo": ["module:why-fired"]
+      "codeTestable": "partial",
+      "evidence": [
+        "why-fired annotation surfaces detection provenance on every finding."
+      ],
+      "mapsTo": [
+        "module:why-fired"
+      ]
     },
     {
       "id": "Art.14",
       "summary": "Human oversight — system permits humans to override / interrupt.",
-      "evidence": ["Fix application requires confirm:true.", "Bodyguard hook can refuse risky edits."],
-      "mapsTo": ["module:pre-edit-bodyguard", "module:apply-fix"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Fix application requires confirm:true.",
+        "Bodyguard hook can refuse risky edits."
+      ],
+      "mapsTo": [
+        "module:pre-edit-bodyguard",
+        "module:apply-fix"
+      ]
     },
     {
       "id": "Art.15",
       "summary": "Accuracy, robustness, cybersecurity — appropriate level of accuracy and resilience.",
-      "evidence": ["Calibration + held-out evaluation present (.agentic-security/calibration-seed.json).", "OWASP Benchmark regression gate."],
-      "mapsTo": ["module:calibration", "module:holdout-eval"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Calibration + held-out evaluation present (.agentic-security/calibration-seed.json).",
+        "OWASP Benchmark regression gate."
+      ],
+      "mapsTo": [
+        "module:calibration",
+        "module:holdout-eval"
+      ]
     }
   ]
 }

package/dist/compliance-frameworks/gdpr.json

@@ -4,42 +4,86 @@
   "publisher": "European Parliament & Council",
   "license": "EU law (Official Journal)",
   "url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj",
+  "scope": "SELECTIVE SUBSET. 6 articles where a code scanner can produce evidence (security of processing, data minimisation, DPIA inputs). GDPR has 99 articles; lawful basis, data-subject rights, transfers and records of processing are organisational and are NOT represented here.",
+  "controlsDigest": "749f9dad2b5657cb",
+  "controlCount": 6,
   "controls": [
     {
       "id": "Art.5",
       "summary": "Principles relating to processing of personal data (lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, accountability).",
-      "evidence": ["DPIA artifact at .agentic-security/dpia.md.", "PII fields enumerated by the privacy-taint module."],
-      "mapsTo": ["family:pii-exposure", "module:privacy-taint"]
+      "codeTestable": "yes",
+      "evidence": [
+        "DPIA artifact at .agentic-security/dpia.md.",
+        "PII fields enumerated by the privacy-taint module."
+      ],
+      "mapsTo": [
+        "family:pii-exposure",
+        "module:privacy-taint"
+      ]
     },
     {
       "id": "Art.25",
       "summary": "Data protection by design and by default.",
-      "evidence": ["Threat model produced before code.", "PII annotation runs at scan time, not as an afterthought."],
-      "mapsTo": ["module:threat-model-auto", "module:privacy-taint"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Threat model produced before code.",
+        "PII annotation runs at scan time, not as an afterthought."
+      ],
+      "mapsTo": [
+        "module:threat-model-auto",
+        "module:privacy-taint"
+      ]
     },
     {
       "id": "Art.30",
       "summary": "Records of processing activities — controller maintains a register.",
-      "evidence": ["DPIA + privacy-taint annotations cover each PII field with file:line provenance."],
-      "mapsTo": ["module:privacy-taint"]
+      "codeTestable": "partial",
+      "evidence": [
+        "DPIA + privacy-taint annotations cover each PII field with file:line provenance."
+      ],
+      "mapsTo": [
+        "module:privacy-taint"
+      ]
     },
     {
       "id": "Art.32",
       "summary": "Security of processing — appropriate technical and organizational measures.",
-      "evidence": ["Zero open critical crypto findings.", "Auth-missing findings zero on user-data endpoints.", "TLS pinning checks pass."],
-      "mapsTo": ["family:crypto-weak-cipher", "family:crypto-tls-version", "family:crypto-tls-no-verify", "family:auth-missing"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical crypto findings.",
+        "Auth-missing findings zero on user-data endpoints.",
+        "TLS pinning checks pass."
+      ],
+      "mapsTo": [
+        "family:crypto-weak-cipher",
+        "family:crypto-tls-version",
+        "family:crypto-tls-no-verify",
+        "family:auth-missing"
+      ]
     },
     {
       "id": "Art.33",
       "summary": "Notification of personal data breach to the supervisory authority within 72 hours.",
-      "evidence": ["Fix history retained.", "Audit log preserves the breach-window evidence."],
-      "mapsTo": ["module:fix-history", "module:mcp-audit"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Fix history retained.",
+        "Audit log preserves the breach-window evidence."
+      ],
+      "mapsTo": [
+        "module:fix-history",
+        "module:mcp-audit"
+      ]
     },
     {
       "id": "Art.35",
       "summary": "Data protection impact assessment (DPIA) for high-risk processing.",
-      "evidence": ["DPIA artifact present at .agentic-security/dpia.md."],
-      "mapsTo": ["module:privacy-taint:emitDpiaArtifact"]
+      "codeTestable": "partial",
+      "evidence": [
+        "DPIA artifact present at .agentic-security/dpia.md."
+      ],
+      "mapsTo": [
+        "module:privacy-taint:emitDpiaArtifact"
+      ]
     }
   ]
 }

package/dist/compliance-frameworks/hipaa-security-rule.json

@@ -4,53 +4,106 @@
   "publisher": "US Department of Health and Human Services",
   "license": "US Federal regulation (public)",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164",
+  "scope": "SELECTIVE SUBSET. 8 of the Security Rule technical safeguards. Administrative and physical safeguards are outside what a code scanner can observe and are NOT represented here.",
+  "controlsDigest": "a99f9c4015ffbf72",
+  "controlCount": 8,
   "controls": [
     {
       "id": "§164.308(a)(1)",
       "summary": "Security management process — risk analysis and risk management.",
-      "evidence": ["Scan history under .agentic-security/scan-history/.", "Triage transitions logged."],
-      "mapsTo": ["module:scan-history", "module:triage"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Scan history under .agentic-security/scan-history/.",
+        "Triage transitions logged."
+      ],
+      "mapsTo": [
+        "module:scan-history",
+        "module:triage"
+      ]
     },
     {
       "id": "§164.308(a)(3)",
       "summary": "Workforce security — authorization and supervision of access.",
-      "evidence": ["Zero auth-missing on PHI endpoints.", "IAM policy reviewed via cloud-iam scanner."],
-      "mapsTo": ["family:auth-missing", "family:iam-overpermissive"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero auth-missing on PHI endpoints.",
+        "IAM policy reviewed via cloud-iam scanner."
+      ],
+      "mapsTo": [
+        "family:auth-missing",
+        "family:iam-overpermissive"
+      ]
     },
     {
       "id": "§164.308(a)(4)",
       "summary": "Information access management — minimum necessary access.",
-      "evidence": ["Zero open findings in family idor / authz / k8s-rbac-cluster-admin."],
-      "mapsTo": ["family:idor", "family:authz", "family:k8s-rbac-cluster-admin"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open findings in family idor / authz / k8s-rbac-cluster-admin."
+      ],
+      "mapsTo": [
+        "family:idor",
+        "family:authz",
+        "family:k8s-rbac-cluster-admin"
+      ]
     },
     {
       "id": "§164.308(a)(5)",
       "summary": "Security awareness and training.",
-      "evidence": ["CLAUDE.md / AGENTS.md documents the project's security defaults."]
+      "codeTestable": "no",
+      "evidence": [
+        "CLAUDE.md / AGENTS.md documents the project's security defaults."
+      ]
     },
     {
       "id": "§164.312(a)(1)",
       "summary": "Technical safeguards — access control (unique user identification, automatic logoff, encryption/decryption).",
-      "evidence": ["Zero hardcoded-secret findings.", "Crypto findings cleared on PHI handling code."],
-      "mapsTo": ["family:hardcoded-secret", "family:crypto-weak-cipher"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero hardcoded-secret findings.",
+        "Crypto findings cleared on PHI handling code."
+      ],
+      "mapsTo": [
+        "family:hardcoded-secret",
+        "family:crypto-weak-cipher"
+      ]
     },
     {
       "id": "§164.312(b)",
       "summary": "Audit controls — record and examine activity in systems containing PHI.",
-      "evidence": ["MCP audit log + fix history present and hash-chained."],
-      "mapsTo": ["module:mcp-audit", "module:fix-history"]
+      "codeTestable": "partial",
+      "evidence": [
+        "MCP audit log + fix history present and hash-chained."
+      ],
+      "mapsTo": [
+        "module:mcp-audit",
+        "module:fix-history"
+      ]
     },
     {
       "id": "§164.312(c)",
       "summary": "Integrity — PHI not altered or destroyed in an unauthorized manner.",
-      "evidence": ["last-scan.json HMAC integrity check passing.", "Sigstore provenance verified for ML model files (if opt-in)."],
-      "mapsTo": ["module:integrity", "module:sigstore-verify"]
+      "codeTestable": "partial",
+      "evidence": [
+        "last-scan.json HMAC integrity check passing.",
+        "Sigstore provenance verified for ML model files (if opt-in)."
+      ],
+      "mapsTo": [
+        "module:integrity",
+        "module:sigstore-verify"
+      ]
     },
     {
       "id": "§164.312(e)",
       "summary": "Transmission security — PHI in transit is protected.",
-      "evidence": ["Zero TLS-no-verify / TLS-version findings."],
-      "mapsTo": ["family:crypto-tls-no-verify", "family:crypto-tls-version"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero TLS-no-verify / TLS-version findings."
+      ],
+      "mapsTo": [
+        "family:crypto-tls-no-verify",
+        "family:crypto-tls-version"
+      ]
     }
   ]
 }

package/dist/compliance-frameworks/nist-ai-600-1.json

@@ -4,48 +4,93 @@
   "publisher": "NIST",
   "license": "public-domain (US Federal publication)",
   "url": "https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf",
+  "scope": "SELECTIVE SUBSET. 6 actions from the Generative AI Profile with a code-observable signal. The profile is far larger; governance, provenance and incident-response actions are organisational and are NOT represented here. The full control catalogue is built and gated separately by scripts/nist-compliance/build-catalog.py.",
+  "controlsDigest": "a6ad567713796b05",
+  "controlCount": 6,
   "controls": [
     {
       "id": "GV-1.1-001",
       "function": "GOVERN",
       "summary": "Document and disseminate AI policies, processes, and procedures.",
-      "evidence": ["CLAUDE.md / SECURITY.md present.", ".agentic-security/compliance.policy.yml present."],
-      "mapsTo": ["module:compliance-policy"]
+      "codeTestable": "partial",
+      "evidence": [
+        "CLAUDE.md / SECURITY.md present.",
+        ".agentic-security/compliance.policy.yml present."
+      ],
+      "mapsTo": [
+        "module:compliance-policy"
+      ]
     },
     {
       "id": "MP-2.3-002",
       "function": "MAP",
       "summary": "Identify and document GAI risks (CBRN, confabulation, harmful bias, prompt injection, IP, etc.).",
-      "evidence": ["Threat model artifact.", "Attack-taxonomy ATLAS mappings on findings."],
-      "mapsTo": ["module:threat-model-auto", "module:attack-taxonomy"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Threat model artifact.",
+        "Attack-taxonomy ATLAS mappings on findings."
+      ],
+      "mapsTo": [
+        "module:threat-model-auto",
+        "module:attack-taxonomy"
+      ]
     },
     {
       "id": "MS-2.1-001",
       "function": "MEASURE",
       "summary": "Continuously monitor GAI system for risks identified during the MAP function.",
-      "evidence": ["Watch mode artifacts.", "Continuous scan history."],
-      "mapsTo": ["module:watch-mode", "module:scan-history"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Watch mode artifacts.",
+        "Continuous scan history."
+      ],
+      "mapsTo": [
+        "module:watch-mode",
+        "module:scan-history"
+      ]
     },
     {
       "id": "MG-3.2-005",
       "function": "MANAGE",
       "summary": "Manage GAI risks tied to prompt injection.",
-      "evidence": ["Zero open critical findings in family prompt-injection / llm-app-security."],
-      "mapsTo": ["family:prompt-injection", "family:llm-app-security"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in family prompt-injection / llm-app-security."
+      ],
+      "mapsTo": [
+        "family:prompt-injection",
+        "family:llm-app-security"
+      ]
     },
     {
       "id": "MG-4.1-001",
       "function": "MANAGE",
       "summary": "Establish processes for managing GAI supply chain risks.",
-      "evidence": ["No mlflow-untrusted-uri / hf-datasets-rce / streaming-dataset-url findings.", "AIBOM artifact present."],
-      "mapsTo": ["family:mlflow-untrusted-uri", "family:hf-datasets-rce", "family:streaming-dataset-url", "module:aibom"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No mlflow-untrusted-uri / hf-datasets-rce / streaming-dataset-url findings.",
+        "AIBOM artifact present."
+      ],
+      "mapsTo": [
+        "family:mlflow-untrusted-uri",
+        "family:hf-datasets-rce",
+        "family:streaming-dataset-url",
+        "module:aibom"
+      ]
     },
     {
       "id": "MG-2.4-001",
       "function": "MANAGE",
       "summary": "Establish content provenance / authenticity controls.",
-      "evidence": ["Sigstore provenance opt-in configured for model loads.", "ATTRIBUTIONS.md generated."],
-      "mapsTo": ["module:sigstore-verify", "module:license-attributions"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Sigstore provenance opt-in configured for model loads.",
+        "ATTRIBUTIONS.md generated."
+      ],
+      "mapsTo": [
+        "module:sigstore-verify",
+        "module:license-attributions"
+      ]
     }
   ]
 }