@clear-capabilities/agentic-security-scanner 0.140.0 → 0.141.0

package/src/posture/compliance-frameworks/hipaa-security-rule.json

@@ -4,53 +4,106 @@
   "publisher": "US Department of Health and Human Services",
   "license": "US Federal regulation (public)",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164",
+  "scope": "SELECTIVE SUBSET. 8 of the Security Rule technical safeguards. Administrative and physical safeguards are outside what a code scanner can observe and are NOT represented here.",
+  "controlsDigest": "a99f9c4015ffbf72",
+  "controlCount": 8,
   "controls": [
     {
       "id": "§164.308(a)(1)",
       "summary": "Security management process — risk analysis and risk management.",
-      "evidence": ["Scan history under .agentic-security/scan-history/.", "Triage transitions logged."],
-      "mapsTo": ["module:scan-history", "module:triage"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Scan history under .agentic-security/scan-history/.",
+        "Triage transitions logged."
+      ],
+      "mapsTo": [
+        "module:scan-history",
+        "module:triage"
+      ]
     },
     {
       "id": "§164.308(a)(3)",
       "summary": "Workforce security — authorization and supervision of access.",
-      "evidence": ["Zero auth-missing on PHI endpoints.", "IAM policy reviewed via cloud-iam scanner."],
-      "mapsTo": ["family:auth-missing", "family:iam-overpermissive"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero auth-missing on PHI endpoints.",
+        "IAM policy reviewed via cloud-iam scanner."
+      ],
+      "mapsTo": [
+        "family:auth-missing",
+        "family:iam-overpermissive"
+      ]
     },
     {
       "id": "§164.308(a)(4)",
       "summary": "Information access management — minimum necessary access.",
-      "evidence": ["Zero open findings in family idor / authz / k8s-rbac-cluster-admin."],
-      "mapsTo": ["family:idor", "family:authz", "family:k8s-rbac-cluster-admin"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open findings in family idor / authz / k8s-rbac-cluster-admin."
+      ],
+      "mapsTo": [
+        "family:idor",
+        "family:authz",
+        "family:k8s-rbac-cluster-admin"
+      ]
     },
     {
       "id": "§164.308(a)(5)",
       "summary": "Security awareness and training.",
-      "evidence": ["CLAUDE.md / AGENTS.md documents the project's security defaults."]
+      "codeTestable": "no",
+      "evidence": [
+        "CLAUDE.md / AGENTS.md documents the project's security defaults."
+      ]
     },
     {
       "id": "§164.312(a)(1)",
       "summary": "Technical safeguards — access control (unique user identification, automatic logoff, encryption/decryption).",
-      "evidence": ["Zero hardcoded-secret findings.", "Crypto findings cleared on PHI handling code."],
-      "mapsTo": ["family:hardcoded-secret", "family:crypto-weak-cipher"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero hardcoded-secret findings.",
+        "Crypto findings cleared on PHI handling code."
+      ],
+      "mapsTo": [
+        "family:hardcoded-secret",
+        "family:crypto-weak-cipher"
+      ]
     },
     {
       "id": "§164.312(b)",
       "summary": "Audit controls — record and examine activity in systems containing PHI.",
-      "evidence": ["MCP audit log + fix history present and hash-chained."],
-      "mapsTo": ["module:mcp-audit", "module:fix-history"]
+      "codeTestable": "partial",
+      "evidence": [
+        "MCP audit log + fix history present and hash-chained."
+      ],
+      "mapsTo": [
+        "module:mcp-audit",
+        "module:fix-history"
+      ]
     },
     {
       "id": "§164.312(c)",
       "summary": "Integrity — PHI not altered or destroyed in an unauthorized manner.",
-      "evidence": ["last-scan.json HMAC integrity check passing.", "Sigstore provenance verified for ML model files (if opt-in)."],
-      "mapsTo": ["module:integrity", "module:sigstore-verify"]
+      "codeTestable": "partial",
+      "evidence": [
+        "last-scan.json HMAC integrity check passing.",
+        "Sigstore provenance verified for ML model files (if opt-in)."
+      ],
+      "mapsTo": [
+        "module:integrity",
+        "module:sigstore-verify"
+      ]
     },
     {
       "id": "§164.312(e)",
       "summary": "Transmission security — PHI in transit is protected.",
-      "evidence": ["Zero TLS-no-verify / TLS-version findings."],
-      "mapsTo": ["family:crypto-tls-no-verify", "family:crypto-tls-version"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero TLS-no-verify / TLS-version findings."
+      ],
+      "mapsTo": [
+        "family:crypto-tls-no-verify",
+        "family:crypto-tls-version"
+      ]
     }
   ]
 }

package/src/posture/compliance-frameworks/nist-ai-600-1.json

@@ -4,48 +4,93 @@
   "publisher": "NIST",
   "license": "public-domain (US Federal publication)",
   "url": "https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.600-1.pdf",
+  "scope": "SELECTIVE SUBSET. 6 actions from the Generative AI Profile with a code-observable signal. The profile is far larger; governance, provenance and incident-response actions are organisational and are NOT represented here. The full control catalogue is built and gated separately by scripts/nist-compliance/build-catalog.py.",
+  "controlsDigest": "a6ad567713796b05",
+  "controlCount": 6,
   "controls": [
     {
       "id": "GV-1.1-001",
       "function": "GOVERN",
       "summary": "Document and disseminate AI policies, processes, and procedures.",
-      "evidence": ["CLAUDE.md / SECURITY.md present.", ".agentic-security/compliance.policy.yml present."],
-      "mapsTo": ["module:compliance-policy"]
+      "codeTestable": "partial",
+      "evidence": [
+        "CLAUDE.md / SECURITY.md present.",
+        ".agentic-security/compliance.policy.yml present."
+      ],
+      "mapsTo": [
+        "module:compliance-policy"
+      ]
     },
     {
       "id": "MP-2.3-002",
       "function": "MAP",
       "summary": "Identify and document GAI risks (CBRN, confabulation, harmful bias, prompt injection, IP, etc.).",
-      "evidence": ["Threat model artifact.", "Attack-taxonomy ATLAS mappings on findings."],
-      "mapsTo": ["module:threat-model-auto", "module:attack-taxonomy"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Threat model artifact.",
+        "Attack-taxonomy ATLAS mappings on findings."
+      ],
+      "mapsTo": [
+        "module:threat-model-auto",
+        "module:attack-taxonomy"
+      ]
     },
     {
       "id": "MS-2.1-001",
       "function": "MEASURE",
       "summary": "Continuously monitor GAI system for risks identified during the MAP function.",
-      "evidence": ["Watch mode artifacts.", "Continuous scan history."],
-      "mapsTo": ["module:watch-mode", "module:scan-history"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Watch mode artifacts.",
+        "Continuous scan history."
+      ],
+      "mapsTo": [
+        "module:watch-mode",
+        "module:scan-history"
+      ]
     },
     {
       "id": "MG-3.2-005",
       "function": "MANAGE",
       "summary": "Manage GAI risks tied to prompt injection.",
-      "evidence": ["Zero open critical findings in family prompt-injection / llm-app-security."],
-      "mapsTo": ["family:prompt-injection", "family:llm-app-security"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in family prompt-injection / llm-app-security."
+      ],
+      "mapsTo": [
+        "family:prompt-injection",
+        "family:llm-app-security"
+      ]
     },
     {
       "id": "MG-4.1-001",
       "function": "MANAGE",
       "summary": "Establish processes for managing GAI supply chain risks.",
-      "evidence": ["No mlflow-untrusted-uri / hf-datasets-rce / streaming-dataset-url findings.", "AIBOM artifact present."],
-      "mapsTo": ["family:mlflow-untrusted-uri", "family:hf-datasets-rce", "family:streaming-dataset-url", "module:aibom"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No mlflow-untrusted-uri / hf-datasets-rce / streaming-dataset-url findings.",
+        "AIBOM artifact present."
+      ],
+      "mapsTo": [
+        "family:mlflow-untrusted-uri",
+        "family:hf-datasets-rce",
+        "family:streaming-dataset-url",
+        "module:aibom"
+      ]
     },
     {
       "id": "MG-2.4-001",
       "function": "MANAGE",
       "summary": "Establish content provenance / authenticity controls.",
-      "evidence": ["Sigstore provenance opt-in configured for model loads.", "ATTRIBUTIONS.md generated."],
-      "mapsTo": ["module:sigstore-verify", "module:license-attributions"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Sigstore provenance opt-in configured for model loads.",
+        "ATTRIBUTIONS.md generated."
+      ],
+      "mapsTo": [
+        "module:sigstore-verify",
+        "module:license-attributions"
+      ]
     }
   ]
 }

package/src/posture/compliance-frameworks/nist-csf-2.json

@@ -4,70 +4,132 @@
   "publisher": "NIST",
   "license": "public-domain (US Federal publication)",
   "url": "https://www.nist.gov/cyberframework",
+  "scope": "SELECTIVE SUBSET. 8 subcategories with a code-observable signal. CSF 2.0 has over 100 subcategories; GOVERN in particular is organisational and is NOT represented here.",
+  "controlsDigest": "bcff46f53e75f501",
+  "controlCount": 8,
   "controls": [
     {
       "id": "GV.PO",
       "function": "GOVERN",
       "category": "Policy",
       "summary": "Organizational cybersecurity policy is established, communicated, and enforced.",
-      "evidence": ["Repo contains CLAUDE.md / SECURITY.md / .agentic-security/sca-policy.yml that documents the project's security policy.", "Triage decisions reference an organizational policy."],
-      "mapsTo": ["family:hardcoded-secret", "family:license-graph"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Repo contains CLAUDE.md / SECURITY.md / .agentic-security/sca-policy.yml that documents the project's security policy.",
+        "Triage decisions reference an organizational policy."
+      ],
+      "mapsTo": [
+        "family:hardcoded-secret",
+        "family:license-graph"
+      ]
     },
     {
       "id": "ID.AM",
       "function": "IDENTIFY",
       "category": "Asset Management",
       "summary": "Assets (hardware, software, data) are inventoried.",
-      "evidence": [".agentic-security/sbom-history/*.json snapshots present.", "ATTRIBUTIONS.md generated."],
-      "mapsTo": ["module:sbom-diff", "module:license-attributions"]
+      "codeTestable": "partial",
+      "evidence": [
+        ".agentic-security/sbom-history/*.json snapshots present.",
+        "ATTRIBUTIONS.md generated."
+      ],
+      "mapsTo": [
+        "module:sbom-diff",
+        "module:license-attributions"
+      ]
     },
     {
       "id": "ID.RA",
       "function": "IDENTIFY",
       "category": "Risk Assessment",
       "summary": "Vulnerabilities and threats are identified.",
-      "evidence": ["Regular scan history under .agentic-security/scan-history/.", "ATT&CK / ATLAS technique mapping on findings."],
-      "mapsTo": ["module:attack-taxonomy", "module:exploitability-probability"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Regular scan history under .agentic-security/scan-history/.",
+        "ATT&CK / ATLAS technique mapping on findings."
+      ],
+      "mapsTo": [
+        "module:attack-taxonomy",
+        "module:exploitability-probability"
+      ]
     },
     {
       "id": "PR.AA",
       "function": "PROTECT",
       "category": "Identity Management & Access Control",
       "summary": "Access to assets is limited to authorized users.",
-      "evidence": ["Zero open critical findings in family auth-missing / authz / iam-overpermissive on the current scan."],
-      "mapsTo": ["family:auth-missing", "family:authz", "family:iam-overpermissive", "family:k8s-rbac-cluster-admin"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in family auth-missing / authz / iam-overpermissive on the current scan."
+      ],
+      "mapsTo": [
+        "family:auth-missing",
+        "family:authz",
+        "family:iam-overpermissive",
+        "family:k8s-rbac-cluster-admin"
+      ]
     },
     {
       "id": "PR.DS",
       "function": "PROTECT",
       "category": "Data Security",
       "summary": "Data is managed consistent with the organization's risk strategy.",
-      "evidence": ["No critical/high crypto findings.", "DPIA artifact present (.agentic-security/dpia.md) when handling PII."],
-      "mapsTo": ["family:crypto-tls-version", "family:crypto-tls-no-verify", "family:crypto-weak-cipher", "family:pii-exposure"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No critical/high crypto findings.",
+        "DPIA artifact present (.agentic-security/dpia.md) when handling PII."
+      ],
+      "mapsTo": [
+        "family:crypto-tls-version",
+        "family:crypto-tls-no-verify",
+        "family:crypto-weak-cipher",
+        "family:pii-exposure"
+      ]
     },
     {
       "id": "DE.CM",
       "function": "DETECT",
       "category": "Continuous Monitoring",
       "summary": "Anomalous activity, indicators of compromise are monitored.",
-      "evidence": ["Watch mode artifacts at .agentic-security/watch-status.{md,json}.", "CVE-alert daemon configured."],
-      "mapsTo": ["module:watch-mode", "module:cve-alert-daemon"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Watch mode artifacts at .agentic-security/watch-status.{md,json}.",
+        "CVE-alert daemon configured."
+      ],
+      "mapsTo": [
+        "module:watch-mode",
+        "module:cve-alert-daemon"
+      ]
     },
     {
       "id": "RS.AN",
       "function": "RESPOND",
       "category": "Analysis",
       "summary": "Notifications from detection systems are investigated.",
-      "evidence": ["Triage transitions logged in triage.json.", "Triage-memory entries with reasons."],
-      "mapsTo": ["module:triage", "module:triage-memory"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Triage transitions logged in triage.json.",
+        "Triage-memory entries with reasons."
+      ],
+      "mapsTo": [
+        "module:triage",
+        "module:triage-memory"
+      ]
     },
     {
       "id": "RC.RP",
       "function": "RECOVER",
       "category": "Recovery Planning",
       "summary": "Recovery plans are executed and improved after an incident.",
-      "evidence": ["Fix history under .agentic-security/fix-history/log.json.", "Verifier outcomes recorded."],
-      "mapsTo": ["module:fix-history", "module:verifier"]
+      "codeTestable": "partial",
+      "evidence": [
+        "Fix history under .agentic-security/fix-history/log.json.",
+        "Verifier outcomes recorded."
+      ],
+      "mapsTo": [
+        "module:fix-history",
+        "module:verifier"
+      ]
     }
   ]
 }

package/src/posture/compliance-frameworks/nist-privacy-1-1.json

@@ -5,6 +5,9 @@
   "license": "public-domain (US Federal publication)",
   "url": "https://www.nist.gov/privacy-framework",
   "note": "Each control carries NIST's own `codeTestable` rating (yes/partial/no). That rating says whether a control COULD be assessed from source code — it does not say this engine assesses it. `mapsTo` is present only where this engine produces a real signal; a control that NIST rates testable but which this engine cannot see is reported as an ENGINE GAP rather than silently passed.",
+  "scope": "FULL CATALOGUE, partially assessable. All 104 controls are present and each carries `codeTestable`. 48 are governance controls no scanner can assess; those report `manual`, never `satisfied`. See posture/privacy-framework.js.",
+  "controlsDigest": "447154af306c58d3",
+  "controlCount": 104,
   "controls": [
     {
       "id": "ID.IM-P1",

package/src/posture/compliance-frameworks/owasp-asvs-5.json

@@ -4,76 +4,147 @@
   "publisher": "OWASP Foundation",
   "license": "Creative Commons Attribution-ShareAlike 4.0",
   "url": "https://owasp.org/www-project-application-security-verification-standard/",
+  "scope": "SELECTIVE SUBSET. 10 verification requirements with a direct detector behind them. ASVS 5.0 has several hundred requirements across 17 chapters; the remainder are NOT represented here.",
+  "controlsDigest": "6c4371a08f010f91",
+  "controlCount": 10,
   "controls": [
     {
       "id": "V2.1",
       "category": "Authentication",
       "summary": "Verify that authentication is performed for protected functions.",
-      "evidence": ["Zero open critical findings in family auth-missing on the current scan."],
-      "mapsTo": ["family:auth-missing"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in family auth-missing on the current scan."
+      ],
+      "mapsTo": [
+        "family:auth-missing"
+      ]
     },
     {
       "id": "V2.7",
       "category": "Authentication",
       "summary": "Verify that MFA / secondary authentication is used for high-value operations.",
-      "evidence": ["aws-no-mfa-condition zero findings (if AWS in scope)."],
-      "mapsTo": ["family:aws-no-mfa"]
+      "codeTestable": "yes",
+      "evidence": [
+        "aws-no-mfa-condition zero findings (if AWS in scope)."
+      ],
+      "mapsTo": [
+        "family:aws-no-mfa"
+      ]
     },
     {
       "id": "V4.1",
       "category": "Access Control",
       "summary": "Verify that authorization is enforced for every resource access.",
-      "evidence": ["Zero idor / authz findings."],
-      "mapsTo": ["family:idor", "family:authz"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero idor / authz findings."
+      ],
+      "mapsTo": [
+        "family:idor",
+        "family:authz"
+      ]
     },
     {
       "id": "V5.1",
       "category": "Input Validation",
       "summary": "Verify input validation for type, length, and content.",
-      "evidence": ["Zero open critical findings in sqli/xss/command-injection/ldap-injection/xpath-injection."],
-      "mapsTo": ["family:sqli", "family:xss", "family:command-injection", "family:ldap-injection", "family:xpath-injection", "family:nosql-injection"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open critical findings in sqli/xss/command-injection/ldap-injection/xpath-injection."
+      ],
+      "mapsTo": [
+        "family:sqli",
+        "family:xss",
+        "family:command-injection",
+        "family:ldap-injection",
+        "family:xpath-injection",
+        "family:nosql-injection"
+      ]
     },
     {
       "id": "V6.1",
       "category": "Cryptography",
       "summary": "Verify use of strong cryptography per a documented policy.",
-      "evidence": ["Zero open findings in crypto-weak-cipher / crypto-weak-hash / crypto-ecb / crypto-static-iv."],
-      "mapsTo": ["family:crypto-weak-cipher", "family:crypto-weak-hash", "family:crypto-ecb", "family:crypto-static-iv", "family:crypto-kdf-weak"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero open findings in crypto-weak-cipher / crypto-weak-hash / crypto-ecb / crypto-static-iv."
+      ],
+      "mapsTo": [
+        "family:crypto-weak-cipher",
+        "family:crypto-weak-hash",
+        "family:crypto-ecb",
+        "family:crypto-static-iv",
+        "family:crypto-kdf-weak"
+      ]
     },
     {
       "id": "V6.2",
       "category": "Cryptography",
       "summary": "Verify all transit data uses TLS ≥ 1.2.",
-      "evidence": ["Zero findings in crypto-tls-version / crypto-tls-no-verify."],
-      "mapsTo": ["family:crypto-tls-version", "family:crypto-tls-no-verify"]
+      "codeTestable": "yes",
+      "evidence": [
+        "Zero findings in crypto-tls-version / crypto-tls-no-verify."
+      ],
+      "mapsTo": [
+        "family:crypto-tls-version",
+        "family:crypto-tls-no-verify"
+      ]
     },
     {
       "id": "V7.1",
       "category": "Error Handling & Logging",
       "summary": "Verify that error handling does not disclose sensitive information.",
-      "evidence": ["No findings in family data-exposure."],
-      "mapsTo": ["family:data-exposure"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No findings in family data-exposure."
+      ],
+      "mapsTo": [
+        "family:data-exposure"
+      ]
     },
     {
       "id": "V8.1",
       "category": "Data Protection",
       "summary": "Verify that personal data is protected at rest and in transit.",
-      "evidence": ["DPIA artifact at .agentic-security/dpia.md.", "Zero pii-exposure findings."],
-      "mapsTo": ["family:pii-exposure", "family:training-data-pii"]
+      "codeTestable": "yes",
+      "evidence": [
+        "DPIA artifact at .agentic-security/dpia.md.",
+        "Zero pii-exposure findings."
+      ],
+      "mapsTo": [
+        "family:pii-exposure",
+        "family:training-data-pii"
+      ]
     },
     {
       "id": "V10.1",
       "category": "Malicious Code",
       "summary": "Verify the application does not include known-malicious or compromised dependencies.",
-      "evidence": [".agentic-security/sbom-history snapshots clean.", "No dependency-confusion or dependency-drift findings."],
-      "mapsTo": ["family:vulnerable-dep", "family:dependency-confusion", "family:dependency-drift"]
+      "codeTestable": "yes",
+      "evidence": [
+        ".agentic-security/sbom-history snapshots clean.",
+        "No dependency-confusion or dependency-drift findings."
+      ],
+      "mapsTo": [
+        "family:vulnerable-dep",
+        "family:dependency-confusion",
+        "family:dependency-drift"
+      ]
     },
     {
       "id": "V14.1",
       "category": "Configuration",
       "summary": "Verify that build, deployment, and configuration are secure.",
-      "evidence": ["No findings in family iam-overpermissive / k8s-rbac-cluster-admin / k8s-pod-security-privileged."],
-      "mapsTo": ["family:iam-overpermissive", "family:k8s-rbac-cluster-admin", "family:k8s-pod-security-privileged"]
+      "codeTestable": "yes",
+      "evidence": [
+        "No findings in family iam-overpermissive / k8s-rbac-cluster-admin / k8s-pod-security-privileged."
+      ],
+      "mapsTo": [
+        "family:iam-overpermissive",
+        "family:k8s-rbac-cluster-admin",
+        "family:k8s-pod-security-privileged"
+      ]
     }
   ]
 }