@clear-capabilities/agentic-security-scanner 0.78.0 → 0.79.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (76) hide show
  1. package/bin/.agentic-security/findings.json +16 -16
  2. package/bin/.agentic-security/last-scan.json +16 -16
  3. package/bin/.agentic-security/last-scan.json.sig +1 -1
  4. package/bin/.agentic-security/scan-history.json +51 -0
  5. package/bin/.agentic-security/streak.json +5 -5
  6. package/bin/agentic-security.js +22 -7
  7. package/dist/178.index.js +1 -1
  8. package/dist/384.index.js +1 -1
  9. package/dist/476.index.js +5 -5
  10. package/dist/637.index.js +1 -1
  11. package/dist/700.index.js +138 -0
  12. package/dist/718.index.js +53 -0
  13. package/dist/838.index.js +1 -1
  14. package/dist/985.index.js +5 -0
  15. package/dist/agentic-security.mjs +1 -1
  16. package/dist/agentic-security.mjs.sha256 +1 -1
  17. package/package.json +2 -2
  18. package/src/dataflow/engine.js +52 -8
  19. package/src/engine.js +107 -6
  20. package/src/integrations/index.js +2 -1
  21. package/src/ir/callgraph.js +27 -7
  22. package/src/llm-validator/index.js +7 -5
  23. package/src/mcp/audit.js +5 -0
  24. package/src/posture/calibration-drift.js +2 -1
  25. package/src/posture/calibration.js +3 -2
  26. package/src/posture/fix-history.js +8 -2
  27. package/src/posture/profile.js +4 -5
  28. package/src/posture/rule-overrides.js +2 -3
  29. package/src/posture/rule-pack-signing.js +2 -3
  30. package/src/posture/rule-synthesis.js +5 -6
  31. package/src/posture/security-trend.js +4 -7
  32. package/src/posture/state-dir.js +124 -0
  33. package/src/posture/streak.js +3 -0
  34. package/src/posture/suppressions.js +5 -8
  35. package/src/posture/triage.js +3 -5
  36. package/src/posture/validator-metrics.js +3 -6
  37. package/src/sast/db-taint.js +24 -0
  38. package/src/sast/rust.js +26 -0
  39. package/src/sca/binary-metadata.js +124 -0
  40. package/src/sca/py-package-functions.js +118 -0
  41. package/src/sca/vendor-detect.js +53 -0
  42. package/src/.agentic-security/findings.json +0 -82642
  43. package/src/.agentic-security/last-scan.json +0 -82642
  44. package/src/.agentic-security/last-scan.json.sig +0 -1
  45. package/src/.agentic-security/scan-history.json +0 -10054
  46. package/src/.agentic-security/streak.json +0 -21
  47. package/src/dataflow/.agentic-security/findings.json +0 -3515
  48. package/src/dataflow/.agentic-security/last-scan.json +0 -3515
  49. package/src/dataflow/.agentic-security/last-scan.json.sig +0 -1
  50. package/src/dataflow/.agentic-security/scan-history.json +0 -702
  51. package/src/dataflow/.agentic-security/streak.json +0 -22
  52. package/src/ir/.agentic-security/findings.json +0 -3777
  53. package/src/ir/.agentic-security/last-scan.json +0 -3777
  54. package/src/ir/.agentic-security/last-scan.json.sig +0 -1
  55. package/src/ir/.agentic-security/scan-history.json +0 -771
  56. package/src/ir/.agentic-security/streak.json +0 -21
  57. package/src/posture/.agentic-security/findings.json +0 -51562
  58. package/src/posture/.agentic-security/last-scan.json +0 -51562
  59. package/src/posture/.agentic-security/last-scan.json.sig +0 -1
  60. package/src/posture/.agentic-security/scan-history.json +0 -650
  61. package/src/posture/.agentic-security/streak.json +0 -20
  62. package/src/report/.agentic-security/findings.json +0 -80
  63. package/src/report/.agentic-security/last-scan.json +0 -80
  64. package/src/report/.agentic-security/last-scan.json.sig +0 -1
  65. package/src/report/.agentic-security/scan-history.json +0 -35
  66. package/src/report/.agentic-security/streak.json +0 -22
  67. package/src/sast/.agentic-security/findings.json +0 -5190
  68. package/src/sast/.agentic-security/last-scan.json +0 -5190
  69. package/src/sast/.agentic-security/last-scan.json.sig +0 -1
  70. package/src/sast/.agentic-security/scan-history.json +0 -408
  71. package/src/sast/.agentic-security/streak.json +0 -20
  72. package/src/sca/.agentic-security/findings.json +0 -1587
  73. package/src/sca/.agentic-security/last-scan.json +0 -1587
  74. package/src/sca/.agentic-security/last-scan.json.sig +0 -1
  75. package/src/sca/.agentic-security/scan-history.json +0 -36
  76. package/src/sca/.agentic-security/streak.json +0 -21
package/src/sast/.agentic-security/last-scan.json.sig DELETED
@@ -1 +0,0 @@
1
- 411dd662c96624bcc85746b90c2d1a487fd15e7da71fe116cb3d8e548071a588
package/src/sast/.agentic-security/scan-history.json DELETED
@@ -1,408 +0,0 @@
1
- [
2
- {
3
- "timestamp": "2026-05-26T16:30:07.351Z",
4
- "label": "scan",
5
- "total": 17,
6
- "critical": 0,
7
- "high": 0,
8
- "medium": 2,
9
- "low": 15,
10
- "kev": 0,
11
- "ids": [
12
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
13
- "client-side:CLIENT_EVAL:client-side.js:135",
14
- "client-side:CLIENT_EVAL:client-side.js:139",
15
- "client-side:CLIENT_EVAL:client-side.js:140",
16
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
17
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
18
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
19
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
20
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
21
- "spec-drift:rate-limit-impl:rate-limit.js:34",
22
- "spec-drift:rate-limit-impl:rate-limit.js:77",
23
- "ssrf-meta-hardcoded:go-extended.js:39",
24
- "ssrf-meta-hardcoded:python-sinks.js:186",
25
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
26
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
27
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
28
- "zip-slip:zip-slip.js:192:node-entry"
29
- ]
30
- },
31
- {
32
- "timestamp": "2026-05-26T16:34:28.797Z",
33
- "label": "scan",
34
- "total": 17,
35
- "critical": 0,
36
- "high": 0,
37
- "medium": 2,
38
- "low": 15,
39
- "kev": 0,
40
- "ids": [
41
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
42
- "client-side:CLIENT_EVAL:client-side.js:135",
43
- "client-side:CLIENT_EVAL:client-side.js:139",
44
- "client-side:CLIENT_EVAL:client-side.js:140",
45
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
46
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
47
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
48
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
49
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
50
- "spec-drift:rate-limit-impl:rate-limit.js:34",
51
- "spec-drift:rate-limit-impl:rate-limit.js:77",
52
- "ssrf-meta-hardcoded:go-extended.js:39",
53
- "ssrf-meta-hardcoded:python-sinks.js:186",
54
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
55
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
56
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
57
- "zip-slip:zip-slip.js:192:node-entry"
58
- ]
59
- },
60
- {
61
- "timestamp": "2026-05-27T01:10:20.082Z",
62
- "label": "scan",
63
- "total": 17,
64
- "critical": 0,
65
- "high": 0,
66
- "medium": 2,
67
- "low": 15,
68
- "kev": 0,
69
- "ids": [
70
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
71
- "client-side:CLIENT_EVAL:client-side.js:135",
72
- "client-side:CLIENT_EVAL:client-side.js:139",
73
- "client-side:CLIENT_EVAL:client-side.js:140",
74
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
75
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
76
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
77
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
78
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
79
- "spec-drift:rate-limit-impl:rate-limit.js:34",
80
- "spec-drift:rate-limit-impl:rate-limit.js:77",
81
- "ssrf-meta-hardcoded:go-extended.js:39",
82
- "ssrf-meta-hardcoded:python-sinks.js:186",
83
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
84
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
85
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
86
- "zip-slip:zip-slip.js:192:node-entry"
87
- ]
88
- },
89
- {
90
- "timestamp": "2026-05-27T03:05:16.971Z",
91
- "label": "scan",
92
- "total": 17,
93
- "critical": 0,
94
- "high": 0,
95
- "medium": 2,
96
- "low": 15,
97
- "kev": 0,
98
- "ids": [
99
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
100
- "client-side:CLIENT_EVAL:client-side.js:135",
101
- "client-side:CLIENT_EVAL:client-side.js:139",
102
- "client-side:CLIENT_EVAL:client-side.js:140",
103
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
104
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
105
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
106
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
107
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
108
- "spec-drift:rate-limit-impl:rate-limit.js:34",
109
- "spec-drift:rate-limit-impl:rate-limit.js:77",
110
- "ssrf-meta-hardcoded:go-extended.js:39",
111
- "ssrf-meta-hardcoded:python-sinks.js:186",
112
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
113
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
114
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
115
- "zip-slip:zip-slip.js:192:node-entry"
116
- ]
117
- },
118
- {
119
- "timestamp": "2026-05-27T03:18:22.550Z",
120
- "label": "scan",
121
- "total": 17,
122
- "critical": 0,
123
- "high": 0,
124
- "medium": 2,
125
- "low": 15,
126
- "kev": 0,
127
- "ids": [
128
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
129
- "client-side:CLIENT_EVAL:client-side.js:135",
130
- "client-side:CLIENT_EVAL:client-side.js:139",
131
- "client-side:CLIENT_EVAL:client-side.js:140",
132
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
133
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
134
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
135
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
136
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
137
- "spec-drift:rate-limit-impl:rate-limit.js:34",
138
- "spec-drift:rate-limit-impl:rate-limit.js:77",
139
- "ssrf-meta-hardcoded:go-extended.js:39",
140
- "ssrf-meta-hardcoded:python-sinks.js:186",
141
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
142
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
143
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
144
- "zip-slip:zip-slip.js:192:node-entry"
145
- ]
146
- },
147
- {
148
- "timestamp": "2026-05-27T09:09:50.637Z",
149
- "label": "scan",
150
- "total": 17,
151
- "critical": 0,
152
- "high": 0,
153
- "medium": 2,
154
- "low": 15,
155
- "kev": 0,
156
- "ids": [
157
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
158
- "client-side:CLIENT_EVAL:client-side.js:135",
159
- "client-side:CLIENT_EVAL:client-side.js:139",
160
- "client-side:CLIENT_EVAL:client-side.js:140",
161
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
162
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
163
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
164
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
165
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
166
- "spec-drift:rate-limit-impl:rate-limit.js:34",
167
- "spec-drift:rate-limit-impl:rate-limit.js:77",
168
- "ssrf-meta-hardcoded:go-extended.js:39",
169
- "ssrf-meta-hardcoded:python-sinks.js:186",
170
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
171
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
172
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
173
- "zip-slip:zip-slip.js:192:node-entry"
174
- ]
175
- },
176
- {
177
- "timestamp": "2026-05-27T09:10:10.121Z",
178
- "label": "scan",
179
- "total": 17,
180
- "critical": 0,
181
- "high": 0,
182
- "medium": 2,
183
- "low": 15,
184
- "kev": 0,
185
- "ids": [
186
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
187
- "client-side:CLIENT_EVAL:client-side.js:135",
188
- "client-side:CLIENT_EVAL:client-side.js:139",
189
- "client-side:CLIENT_EVAL:client-side.js:140",
190
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
191
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
192
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
193
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
194
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
195
- "spec-drift:rate-limit-impl:rate-limit.js:34",
196
- "spec-drift:rate-limit-impl:rate-limit.js:77",
197
- "ssrf-meta-hardcoded:go-extended.js:39",
198
- "ssrf-meta-hardcoded:python-sinks.js:186",
199
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
200
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
201
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
202
- "zip-slip:zip-slip.js:192:node-entry"
203
- ]
204
- },
205
- {
206
- "timestamp": "2026-05-27T09:12:25.348Z",
207
- "label": "scan",
208
- "total": 17,
209
- "critical": 0,
210
- "high": 0,
211
- "medium": 2,
212
- "low": 15,
213
- "kev": 0,
214
- "ids": [
215
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
216
- "client-side:CLIENT_EVAL:client-side.js:135",
217
- "client-side:CLIENT_EVAL:client-side.js:139",
218
- "client-side:CLIENT_EVAL:client-side.js:140",
219
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
220
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
221
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
222
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
223
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
224
- "spec-drift:rate-limit-impl:rate-limit.js:34",
225
- "spec-drift:rate-limit-impl:rate-limit.js:77",
226
- "ssrf-meta-hardcoded:go-extended.js:39",
227
- "ssrf-meta-hardcoded:python-sinks.js:186",
228
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
229
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
230
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
231
- "zip-slip:zip-slip.js:192:node-entry"
232
- ]
233
- },
234
- {
235
- "timestamp": "2026-05-27T09:17:13.165Z",
236
- "label": "scan",
237
- "total": 17,
238
- "critical": 0,
239
- "high": 0,
240
- "medium": 2,
241
- "low": 15,
242
- "kev": 0,
243
- "ids": [
244
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
245
- "client-side:CLIENT_EVAL:client-side.js:135",
246
- "client-side:CLIENT_EVAL:client-side.js:139",
247
- "client-side:CLIENT_EVAL:client-side.js:140",
248
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
249
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
250
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
251
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
252
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
253
- "spec-drift:rate-limit-impl:rate-limit.js:34",
254
- "spec-drift:rate-limit-impl:rate-limit.js:77",
255
- "ssrf-meta-hardcoded:go-extended.js:39",
256
- "ssrf-meta-hardcoded:python-sinks.js:186",
257
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
258
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
259
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
260
- "zip-slip:zip-slip.js:192:node-entry"
261
- ]
262
- },
263
- {
264
- "timestamp": "2026-05-27T09:21:04.965Z",
265
- "label": "scan",
266
- "total": 17,
267
- "critical": 0,
268
- "high": 0,
269
- "medium": 2,
270
- "low": 15,
271
- "kev": 0,
272
- "ids": [
273
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
274
- "client-side:CLIENT_EVAL:client-side.js:135",
275
- "client-side:CLIENT_EVAL:client-side.js:139",
276
- "client-side:CLIENT_EVAL:client-side.js:140",
277
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
278
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
279
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
280
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
281
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
282
- "spec-drift:rate-limit-impl:rate-limit.js:34",
283
- "spec-drift:rate-limit-impl:rate-limit.js:77",
284
- "ssrf-meta-hardcoded:go-extended.js:39",
285
- "ssrf-meta-hardcoded:python-sinks.js:186",
286
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
287
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
288
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
289
- "zip-slip:zip-slip.js:192:node-entry"
290
- ]
291
- },
292
- {
293
- "timestamp": "2026-05-27T09:21:46.189Z",
294
- "label": "scan",
295
- "total": 17,
296
- "critical": 0,
297
- "high": 0,
298
- "medium": 2,
299
- "low": 15,
300
- "kev": 0,
301
- "ids": [
302
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
303
- "client-side:CLIENT_EVAL:client-side.js:135",
304
- "client-side:CLIENT_EVAL:client-side.js:139",
305
- "client-side:CLIENT_EVAL:client-side.js:140",
306
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
307
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
308
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
309
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
310
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
311
- "spec-drift:rate-limit-impl:rate-limit.js:34",
312
- "spec-drift:rate-limit-impl:rate-limit.js:77",
313
- "ssrf-meta-hardcoded:go-extended.js:39",
314
- "ssrf-meta-hardcoded:python-sinks.js:186",
315
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
316
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
317
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
318
- "zip-slip:zip-slip.js:192:node-entry"
319
- ]
320
- },
321
- {
322
- "timestamp": "2026-05-27T09:24:34.687Z",
323
- "label": "scan",
324
- "total": 17,
325
- "critical": 0,
326
- "high": 0,
327
- "medium": 2,
328
- "low": 15,
329
- "kev": 0,
330
- "ids": [
331
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
332
- "client-side:CLIENT_EVAL:client-side.js:135",
333
- "client-side:CLIENT_EVAL:client-side.js:139",
334
- "client-side:CLIENT_EVAL:client-side.js:140",
335
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
336
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
337
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
338
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
339
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
340
- "spec-drift:rate-limit-impl:rate-limit.js:34",
341
- "spec-drift:rate-limit-impl:rate-limit.js:77",
342
- "ssrf-meta-hardcoded:go-extended.js:39",
343
- "ssrf-meta-hardcoded:python-sinks.js:186",
344
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
345
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
346
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
347
- "zip-slip:zip-slip.js:192:node-entry"
348
- ]
349
- },
350
- {
351
- "timestamp": "2026-05-27T09:43:08.807Z",
352
- "label": "scan",
353
- "total": 17,
354
- "critical": 0,
355
- "high": 0,
356
- "medium": 2,
357
- "low": 15,
358
- "kev": 0,
359
- "ids": [
360
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
361
- "client-side:CLIENT_EVAL:client-side.js:135",
362
- "client-side:CLIENT_EVAL:client-side.js:139",
363
- "client-side:CLIENT_EVAL:client-side.js:140",
364
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
365
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
366
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
367
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
368
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
369
- "spec-drift:rate-limit-impl:rate-limit.js:34",
370
- "spec-drift:rate-limit-impl:rate-limit.js:77",
371
- "ssrf-meta-hardcoded:go-extended.js:39",
372
- "ssrf-meta-hardcoded:python-sinks.js:186",
373
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
374
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
375
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
376
- "zip-slip:zip-slip.js:192:node-entry"
377
- ]
378
- },
379
- {
380
- "timestamp": "2026-05-27T09:43:30.205Z",
381
- "label": "scan",
382
- "total": 17,
383
- "critical": 0,
384
- "high": 0,
385
- "medium": 2,
386
- "low": 15,
387
- "kev": 0,
388
- "ids": [
389
- "authz:authz.js:33:AuthZ__jwt_verify_called_without_algorithms_allow_list",
390
- "client-side:CLIENT_EVAL:client-side.js:135",
391
- "client-side:CLIENT_EVAL:client-side.js:139",
392
- "client-side:CLIENT_EVAL:client-side.js:140",
393
- "llm-owasp:llm-owasp.js:180:llm01-dynamic-system:concat",
394
- "llm-owasp:llm-owasp.js:181:llm01-dynamic-system:fstring",
395
- "llm-owasp:llm-owasp.js:182:llm01-dynamic-system:template",
396
- "llm-owasp:llm-owasp.js:183:llm10-no-token-budget",
397
- "prompt-tpl:llm-owasp.js:125:Prompt_Template__user_input_interpolated_into_prompt_string_",
398
- "spec-drift:rate-limit-impl:rate-limit.js:34",
399
- "spec-drift:rate-limit-impl:rate-limit.js:77",
400
- "ssrf-meta-hardcoded:go-extended.js:39",
401
- "ssrf-meta-hardcoded:python-sinks.js:186",
402
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:15",
403
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:48",
404
- "ssrf-meta-hardcoded:ssrf-cloud-metadata.js:73",
405
- "zip-slip:zip-slip.js:192:node-entry"
406
- ]
407
- }
408
- ]
package/src/sast/.agentic-security/streak.json DELETED
@@ -1,20 +0,0 @@
1
- {
2
- "firstScanDate": "2026-05-26T16:30:07.386Z",
3
- "lastScanDate": "2026-05-27T09:43:30.233Z",
4
- "totalScans": 14,
5
- "daysCleanCritical": 2,
6
- "lastCleanDate": "2026-05-27",
7
- "lastCriticalDate": null,
8
- "hasEverHadCritical": false,
9
- "bestDaysCleanCritical": 2,
10
- "totalFindingsAtFirstScan": 27,
11
- "totalFindingsAtLastScan": 28,
12
- "totalFixesInferred": 0,
13
- "lastGrade": "A-",
14
- "bestGrade": "A-",
15
- "launchCheckPassedAt": null,
16
- "achievements": [
17
- "first-scan"
18
- ],
19
- "previousGrade": "A-"
20
- }