@clear-capabilities/agentic-security-scanner 0.75.0 → 0.77.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (68) hide show
  1. package/CHANGELOG.md +57 -0
  2. package/bin/agentic-security.js +2 -2
  3. package/dist/838.index.js +152 -0
  4. package/dist/{634.index.js → 985.index.js} +21 -144
  5. package/dist/agentic-security.mjs +8 -8
  6. package/dist/agentic-security.mjs.sha256 +1 -1
  7. package/package.json +6 -6
  8. package/src/mcp/tools.js +17 -2
  9. package/src/sca/base-images.json +1 -1
  10. package/bin/.agentic-security/findings.json +0 -1596
  11. package/bin/.agentic-security/last-scan.json +0 -1596
  12. package/bin/.agentic-security/last-scan.json.sig +0 -1
  13. package/bin/.agentic-security/scan-history.json +0 -470
  14. package/bin/.agentic-security/streak.json +0 -25
  15. package/dist/218.index.js +0 -793
  16. package/dist/601.index.js +0 -1038
  17. package/src/.agentic-security/findings.json +0 -80844
  18. package/src/.agentic-security/last-scan.json +0 -80844
  19. package/src/.agentic-security/last-scan.json.sig +0 -1
  20. package/src/.agentic-security/scan-history.json +0 -8408
  21. package/src/.agentic-security/streak.json +0 -26
  22. package/src/dataflow/.agentic-security/findings.json +0 -3487
  23. package/src/dataflow/.agentic-security/last-scan.json +0 -3487
  24. package/src/dataflow/.agentic-security/last-scan.json.sig +0 -1
  25. package/src/dataflow/.agentic-security/scan-history.json +0 -735
  26. package/src/dataflow/.agentic-security/streak.json +0 -24
  27. package/src/integrations/.agentic-security/findings.json +0 -1504
  28. package/src/integrations/.agentic-security/last-scan.json +0 -1504
  29. package/src/integrations/.agentic-security/scan-history.json +0 -40
  30. package/src/integrations/.agentic-security/streak.json +0 -21
  31. package/src/ir/.agentic-security/findings.json +0 -3036
  32. package/src/ir/.agentic-security/last-scan.json +0 -3036
  33. package/src/ir/.agentic-security/last-scan.json.sig +0 -1
  34. package/src/ir/.agentic-security/scan-history.json +0 -364
  35. package/src/ir/.agentic-security/streak.json +0 -23
  36. package/src/llm-validator/.agentic-security/findings.json +0 -1891
  37. package/src/llm-validator/.agentic-security/last-scan.json +0 -1891
  38. package/src/llm-validator/.agentic-security/last-scan.json.sig +0 -1
  39. package/src/llm-validator/.agentic-security/scan-history.json +0 -168
  40. package/src/llm-validator/.agentic-security/streak.json +0 -20
  41. package/src/lsp/.agentic-security/findings.json +0 -28
  42. package/src/lsp/.agentic-security/last-scan.json +0 -28
  43. package/src/lsp/.agentic-security/scan-history.json +0 -79
  44. package/src/lsp/.agentic-security/streak.json +0 -22
  45. package/src/mcp/.agentic-security/findings.json +0 -8358
  46. package/src/mcp/.agentic-security/last-scan.json +0 -8358
  47. package/src/mcp/.agentic-security/last-scan.json.sig +0 -1
  48. package/src/mcp/.agentic-security/scan-history.json +0 -1125
  49. package/src/mcp/.agentic-security/streak.json +0 -22
  50. package/src/posture/.agentic-security/findings.json +0 -51239
  51. package/src/posture/.agentic-security/last-scan.json +0 -51239
  52. package/src/posture/.agentic-security/last-scan.json.sig +0 -1
  53. package/src/posture/.agentic-security/scan-history.json +0 -5557
  54. package/src/posture/.agentic-security/streak.json +0 -24
  55. package/src/report/.agentic-security/findings.json +0 -79
  56. package/src/report/.agentic-security/last-scan.json +0 -79
  57. package/src/report/.agentic-security/last-scan.json.sig +0 -1
  58. package/src/report/.agentic-security/scan-history.json +0 -332
  59. package/src/report/.agentic-security/streak.json +0 -23
  60. package/src/sast/.agentic-security/findings.json +0 -5051
  61. package/src/sast/.agentic-security/last-scan.json +0 -5051
  62. package/src/sast/.agentic-security/last-scan.json.sig +0 -1
  63. package/src/sast/.agentic-security/scan-history.json +0 -788
  64. package/src/sast/.agentic-security/streak.json +0 -23
  65. package/src/sast/bench-shape/.agentic-security/findings.json +0 -28
  66. package/src/sast/bench-shape/.agentic-security/last-scan.json +0 -28
  67. package/src/sast/bench-shape/.agentic-security/scan-history.json +0 -24
  68. package/src/sast/bench-shape/.agentic-security/streak.json +0 -22
package/bin/.agentic-security/last-scan.json.sig DELETED
@@ -1 +0,0 @@
1
- db7c9e1d0d4480b37a981b7b3c87f70306042f6e8838cb6ea2bfafdd12ab20d2
package/bin/.agentic-security/scan-history.json DELETED
@@ -1,470 +0,0 @@
1
- [
2
- {
3
- "timestamp": "2026-05-19T16:01:41.762Z",
4
- "label": "scan",
5
- "total": 0,
6
- "critical": 0,
7
- "high": 0,
8
- "medium": 0,
9
- "low": 0,
10
- "kev": 0,
11
- "ids": []
12
- },
13
- {
14
- "timestamp": "2026-05-19T18:33:22.830Z",
15
- "label": "scan",
16
- "total": 1,
17
- "critical": 0,
18
- "high": 0,
19
- "medium": 1,
20
- "low": 0,
21
- "kev": 0,
22
- "ids": [
23
- "toctou-fs:agentic-security.js:1105"
24
- ]
25
- },
26
- {
27
- "timestamp": "2026-05-19T18:33:28.315Z",
28
- "label": "scan",
29
- "total": 1,
30
- "critical": 0,
31
- "high": 0,
32
- "medium": 1,
33
- "low": 0,
34
- "kev": 0,
35
- "ids": [
36
- "toctou-fs:agentic-security.js:1105"
37
- ]
38
- },
39
- {
40
- "timestamp": "2026-05-19T22:20:41.048Z",
41
- "label": "scan",
42
- "total": 3,
43
- "critical": 0,
44
- "high": 0,
45
- "medium": 3,
46
- "low": 0,
47
- "kev": 0,
48
- "ids": [
49
- "toctou-fs:agentic-security-consistency.js:44",
50
- "toctou-fs:agentic-security-consistency.js:66",
51
- "toctou-fs:agentic-security.js:1105"
52
- ]
53
- },
54
- {
55
- "timestamp": "2026-05-19T22:27:05.052Z",
56
- "label": "scan",
57
- "total": 4,
58
- "critical": 0,
59
- "high": 0,
60
- "medium": 4,
61
- "low": 0,
62
- "kev": 0,
63
- "ids": [
64
- "toctou-fs:agentic-security-audit.js:53",
65
- "toctou-fs:agentic-security-consistency.js:44",
66
- "toctou-fs:agentic-security-consistency.js:66",
67
- "toctou-fs:agentic-security.js:1105"
68
- ]
69
- },
70
- {
71
- "timestamp": "2026-05-19T22:59:58.518Z",
72
- "label": "scan",
73
- "total": 4,
74
- "critical": 0,
75
- "high": 0,
76
- "medium": 4,
77
- "low": 0,
78
- "kev": 0,
79
- "ids": [
80
- "toctou-fs:agentic-security-audit.js:55",
81
- "toctou-fs:agentic-security-consistency.js:44",
82
- "toctou-fs:agentic-security-consistency.js:66",
83
- "toctou-fs:agentic-security.js:1105"
84
- ]
85
- },
86
- {
87
- "timestamp": "2026-05-19T23:00:22.780Z",
88
- "label": "scan",
89
- "total": 4,
90
- "critical": 0,
91
- "high": 0,
92
- "medium": 4,
93
- "low": 0,
94
- "kev": 0,
95
- "ids": [
96
- "toctou-fs:agentic-security-audit.js:55",
97
- "toctou-fs:agentic-security-consistency.js:44",
98
- "toctou-fs:agentic-security-consistency.js:66",
99
- "toctou-fs:agentic-security.js:1105"
100
- ]
101
- },
102
- {
103
- "timestamp": "2026-05-19T23:44:16.929Z",
104
- "label": "scan",
105
- "total": 4,
106
- "critical": 0,
107
- "high": 0,
108
- "medium": 4,
109
- "low": 0,
110
- "kev": 0,
111
- "ids": [
112
- "toctou-fs:agentic-security-audit.js:55",
113
- "toctou-fs:agentic-security-consistency.js:44",
114
- "toctou-fs:agentic-security-consistency.js:66",
115
- "toctou-fs:agentic-security.js:1105"
116
- ]
117
- },
118
- {
119
- "timestamp": "2026-05-19T23:44:23.410Z",
120
- "label": "scan",
121
- "total": 4,
122
- "critical": 0,
123
- "high": 0,
124
- "medium": 4,
125
- "low": 0,
126
- "kev": 0,
127
- "ids": [
128
- "toctou-fs:agentic-security-audit.js:55",
129
- "toctou-fs:agentic-security-consistency.js:44",
130
- "toctou-fs:agentic-security-consistency.js:66",
131
- "toctou-fs:agentic-security.js:1105"
132
- ]
133
- },
134
- {
135
- "timestamp": "2026-05-20T03:55:11.940Z",
136
- "label": "scan",
137
- "total": 4,
138
- "critical": 0,
139
- "high": 0,
140
- "medium": 4,
141
- "low": 0,
142
- "kev": 0,
143
- "ids": [
144
- "toctou-fs:agentic-security-audit.js:55",
145
- "toctou-fs:agentic-security-consistency.js:44",
146
- "toctou-fs:agentic-security-consistency.js:66",
147
- "toctou-fs:agentic-security.js:1105"
148
- ]
149
- },
150
- {
151
- "timestamp": "2026-05-20T03:55:17.682Z",
152
- "label": "scan",
153
- "total": 4,
154
- "critical": 0,
155
- "high": 0,
156
- "medium": 4,
157
- "low": 0,
158
- "kev": 0,
159
- "ids": [
160
- "toctou-fs:agentic-security-audit.js:55",
161
- "toctou-fs:agentic-security-consistency.js:44",
162
- "toctou-fs:agentic-security-consistency.js:66",
163
- "toctou-fs:agentic-security.js:1105"
164
- ]
165
- },
166
- {
167
- "timestamp": "2026-05-20T04:58:44.060Z",
168
- "label": "scan",
169
- "total": 4,
170
- "critical": 0,
171
- "high": 0,
172
- "medium": 4,
173
- "low": 0,
174
- "kev": 0,
175
- "ids": [
176
- "toctou-fs:agentic-security-audit.js:55",
177
- "toctou-fs:agentic-security-consistency.js:44",
178
- "toctou-fs:agentic-security-consistency.js:66",
179
- "toctou-fs:agentic-security.js:1105"
180
- ]
181
- },
182
- {
183
- "timestamp": "2026-05-20T04:58:56.341Z",
184
- "label": "scan",
185
- "total": 4,
186
- "critical": 0,
187
- "high": 0,
188
- "medium": 4,
189
- "low": 0,
190
- "kev": 0,
191
- "ids": [
192
- "toctou-fs:agentic-security-audit.js:55",
193
- "toctou-fs:agentic-security-consistency.js:44",
194
- "toctou-fs:agentic-security-consistency.js:66",
195
- "toctou-fs:agentic-security.js:1105"
196
- ]
197
- },
198
- {
199
- "timestamp": "2026-05-20T05:13:43.297Z",
200
- "label": "scan",
201
- "total": 4,
202
- "critical": 0,
203
- "high": 0,
204
- "medium": 4,
205
- "low": 0,
206
- "kev": 0,
207
- "ids": [
208
- "toctou-fs:agentic-security-audit.js:55",
209
- "toctou-fs:agentic-security-consistency.js:44",
210
- "toctou-fs:agentic-security-consistency.js:66",
211
- "toctou-fs:agentic-security.js:1105"
212
- ]
213
- },
214
- {
215
- "timestamp": "2026-05-20T05:34:26.018Z",
216
- "label": "scan",
217
- "total": 4,
218
- "critical": 0,
219
- "high": 0,
220
- "medium": 4,
221
- "low": 0,
222
- "kev": 0,
223
- "ids": [
224
- "toctou-fs:agentic-security-audit.js:55",
225
- "toctou-fs:agentic-security-consistency.js:44",
226
- "toctou-fs:agentic-security-consistency.js:66",
227
- "toctou-fs:agentic-security.js:1105"
228
- ]
229
- },
230
- {
231
- "timestamp": "2026-05-20T05:34:33.300Z",
232
- "label": "scan",
233
- "total": 4,
234
- "critical": 0,
235
- "high": 0,
236
- "medium": 4,
237
- "low": 0,
238
- "kev": 0,
239
- "ids": [
240
- "toctou-fs:agentic-security-audit.js:55",
241
- "toctou-fs:agentic-security-consistency.js:44",
242
- "toctou-fs:agentic-security-consistency.js:66",
243
- "toctou-fs:agentic-security.js:1105"
244
- ]
245
- },
246
- {
247
- "timestamp": "2026-05-20T12:41:04.981Z",
248
- "label": "scan",
249
- "total": 4,
250
- "critical": 0,
251
- "high": 0,
252
- "medium": 4,
253
- "low": 0,
254
- "kev": 0,
255
- "ids": [
256
- "toctou-fs:agentic-security-audit.js:55",
257
- "toctou-fs:agentic-security-consistency.js:44",
258
- "toctou-fs:agentic-security-consistency.js:66",
259
- "toctou-fs:agentic-security.js:1105"
260
- ]
261
- },
262
- {
263
- "timestamp": "2026-05-20T12:41:11.169Z",
264
- "label": "scan",
265
- "total": 4,
266
- "critical": 0,
267
- "high": 0,
268
- "medium": 4,
269
- "low": 0,
270
- "kev": 0,
271
- "ids": [
272
- "toctou-fs:agentic-security-audit.js:55",
273
- "toctou-fs:agentic-security-consistency.js:44",
274
- "toctou-fs:agentic-security-consistency.js:66",
275
- "toctou-fs:agentic-security.js:1105"
276
- ]
277
- },
278
- {
279
- "timestamp": "2026-05-20T12:55:32.034Z",
280
- "label": "scan",
281
- "total": 4,
282
- "critical": 0,
283
- "high": 0,
284
- "medium": 4,
285
- "low": 0,
286
- "kev": 0,
287
- "ids": [
288
- "toctou-fs:agentic-security-audit.js:55",
289
- "toctou-fs:agentic-security-consistency.js:44",
290
- "toctou-fs:agentic-security-consistency.js:66",
291
- "toctou-fs:agentic-security.js:1105"
292
- ]
293
- },
294
- {
295
- "timestamp": "2026-05-20T15:38:53.724Z",
296
- "label": "scan",
297
- "total": 4,
298
- "critical": 0,
299
- "high": 0,
300
- "medium": 4,
301
- "low": 0,
302
- "kev": 0,
303
- "ids": [
304
- "toctou-fs:agentic-security-audit.js:55",
305
- "toctou-fs:agentic-security-consistency.js:44",
306
- "toctou-fs:agentic-security-consistency.js:66",
307
- "toctou-fs:agentic-security.js:1105"
308
- ]
309
- },
310
- {
311
- "timestamp": "2026-05-20T16:34:56.575Z",
312
- "label": "scan",
313
- "total": 4,
314
- "critical": 0,
315
- "high": 0,
316
- "medium": 4,
317
- "low": 0,
318
- "kev": 0,
319
- "ids": [
320
- "toctou-fs:agentic-security-audit.js:55",
321
- "toctou-fs:agentic-security-consistency.js:44",
322
- "toctou-fs:agentic-security-consistency.js:66",
323
- "toctou-fs:agentic-security.js:1105"
324
- ]
325
- },
326
- {
327
- "timestamp": "2026-05-20T17:09:07.083Z",
328
- "label": "scan",
329
- "total": 4,
330
- "critical": 0,
331
- "high": 0,
332
- "medium": 4,
333
- "low": 0,
334
- "kev": 0,
335
- "ids": [
336
- "toctou-fs:agentic-security-audit.js:55",
337
- "toctou-fs:agentic-security-consistency.js:44",
338
- "toctou-fs:agentic-security-consistency.js:66",
339
- "toctou-fs:agentic-security.js:1105"
340
- ]
341
- },
342
- {
343
- "timestamp": "2026-05-20T17:16:51.009Z",
344
- "label": "scan",
345
- "total": 4,
346
- "critical": 0,
347
- "high": 0,
348
- "medium": 4,
349
- "low": 0,
350
- "kev": 0,
351
- "ids": [
352
- "toctou-fs:agentic-security-audit.js:55",
353
- "toctou-fs:agentic-security-consistency.js:44",
354
- "toctou-fs:agentic-security-consistency.js:66",
355
- "toctou-fs:agentic-security.js:1105"
356
- ]
357
- },
358
- {
359
- "timestamp": "2026-05-20T17:30:57.470Z",
360
- "label": "scan",
361
- "total": 4,
362
- "critical": 0,
363
- "high": 0,
364
- "medium": 4,
365
- "low": 0,
366
- "kev": 0,
367
- "ids": [
368
- "toctou-fs:agentic-security-audit.js:55",
369
- "toctou-fs:agentic-security-consistency.js:44",
370
- "toctou-fs:agentic-security-consistency.js:66",
371
- "toctou-fs:agentic-security.js:1105"
372
- ]
373
- },
374
- {
375
- "timestamp": "2026-05-20T19:30:22.196Z",
376
- "label": "scan",
377
- "total": 4,
378
- "critical": 0,
379
- "high": 0,
380
- "medium": 4,
381
- "low": 0,
382
- "kev": 0,
383
- "ids": [
384
- "toctou-fs:agentic-security-audit.js:55",
385
- "toctou-fs:agentic-security-consistency.js:44",
386
- "toctou-fs:agentic-security-consistency.js:66",
387
- "toctou-fs:agentic-security.js:1105"
388
- ]
389
- },
390
- {
391
- "timestamp": "2026-05-20T19:32:44.938Z",
392
- "label": "scan",
393
- "total": 4,
394
- "critical": 0,
395
- "high": 0,
396
- "medium": 4,
397
- "low": 0,
398
- "kev": 0,
399
- "ids": [
400
- "toctou-fs:agentic-security-audit.js:55",
401
- "toctou-fs:agentic-security-consistency.js:44",
402
- "toctou-fs:agentic-security-consistency.js:66",
403
- "toctou-fs:agentic-security.js:1105"
404
- ]
405
- },
406
- {
407
- "timestamp": "2026-05-20T20:02:44.607Z",
408
- "label": "scan",
409
- "total": 4,
410
- "critical": 0,
411
- "high": 0,
412
- "medium": 4,
413
- "low": 0,
414
- "kev": 0,
415
- "ids": [
416
- "toctou-fs:agentic-security-audit.js:55",
417
- "toctou-fs:agentic-security-consistency.js:44",
418
- "toctou-fs:agentic-security-consistency.js:66",
419
- "toctou-fs:agentic-security.js:1105"
420
- ]
421
- },
422
- {
423
- "timestamp": "2026-05-20T21:21:28.677Z",
424
- "label": "scan",
425
- "total": 4,
426
- "critical": 0,
427
- "high": 0,
428
- "medium": 4,
429
- "low": 0,
430
- "kev": 0,
431
- "ids": [
432
- "toctou-fs:agentic-security-audit.js:55",
433
- "toctou-fs:agentic-security-consistency.js:44",
434
- "toctou-fs:agentic-security-consistency.js:66",
435
- "toctou-fs:agentic-security.js:1105"
436
- ]
437
- },
438
- {
439
- "timestamp": "2026-05-20T21:28:34.802Z",
440
- "label": "scan",
441
- "total": 4,
442
- "critical": 0,
443
- "high": 0,
444
- "medium": 4,
445
- "low": 0,
446
- "kev": 0,
447
- "ids": [
448
- "toctou-fs:agentic-security-audit.js:55",
449
- "toctou-fs:agentic-security-consistency.js:44",
450
- "toctou-fs:agentic-security-consistency.js:66",
451
- "toctou-fs:agentic-security.js:1105"
452
- ]
453
- },
454
- {
455
- "timestamp": "2026-05-21T15:57:04.808Z",
456
- "label": "scan",
457
- "total": 4,
458
- "critical": 0,
459
- "high": 0,
460
- "medium": 4,
461
- "low": 0,
462
- "kev": 0,
463
- "ids": [
464
- "toctou-fs:agentic-security-audit.js:55",
465
- "toctou-fs:agentic-security-consistency.js:44",
466
- "toctou-fs:agentic-security-consistency.js:66",
467
- "toctou-fs:agentic-security.js:1105"
468
- ]
469
- }
470
- ]
package/bin/.agentic-security/streak.json DELETED
@@ -1,25 +0,0 @@
1
- {
2
- "firstScanDate": "2026-05-15T12:24:29.316Z",
3
- "lastScanDate": "2026-05-21T15:57:04.828Z",
4
- "totalScans": 122,
5
- "daysCleanCritical": 4,
6
- "lastCleanDate": "2026-05-21",
7
- "lastCriticalDate": null,
8
- "hasEverHadCritical": false,
9
- "bestDaysCleanCritical": 4,
10
- "totalFindingsAtFirstScan": 0,
11
- "totalFindingsAtLastScan": 11,
12
- "totalFixesInferred": 1,
13
- "lastGrade": "A-",
14
- "bestGrade": "A+",
15
- "launchCheckPassedAt": null,
16
- "achievements": [
17
- "first-fix",
18
- "first-scan",
19
- "grade-a",
20
- "grade-a-plus",
21
- "scan-veteran-100",
22
- "scan-veteran-25"
23
- ],
24
- "previousGrade": "A-"
25
- }