@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/security-runtime/artifact-manifest.json

@@ -0,0 +1,960 @@
+{
+  "format": "lattice-security-artifact-v1",
+  "sourceCommit": "47c52629f5ca1dfa15547db9d261e65a05ab823a",
+  "identity": {
+    "vsgVersion": "1.0.2",
+    "profileId": "lattice-security-commercial",
+    "profileVersion": "1.0.0",
+    "rulesDigest": "4f1bf21c465d4b4c2da8b14dd60c5ebfbf69a88425b1b7a8b4f8228bd3ceab67",
+    "registryDigest": "f2e6374bb3bd8870b91bbbbae9bfd77fef83af74ba7840aaa6b354f23812dd3d",
+    "commercialManifestDigest": "c369ec24b9cb811245c62e4c4bcb130a65c48b215af064c938c4ccea4a0798e8",
+    "evaluatorDigest": "800a0dc0ee1d14c2dfc9c25f49b3b554edeb27a19f342829fd76d4d5a69d91c2",
+    "catalogDigest": "fc812c855deb870f930489b84fb6def65cae8f1576cd5eaaeb5353aab6054117"
+  },
+  "entryPoint": "bin/vsg.mjs",
+  "exporterPath": "src/lattice/export.mjs",
+  "transportPath": "src/lattice/transport.mjs",
+  "evaluatorPath": "lattice-runtime.mjs",
+  "releaseEligibility": {
+    "status": "approved",
+    "blockers": [],
+    "approval": {
+      "owner": "M2 AI, LLC",
+      "decidedOn": "2026-10-21",
+      "record": {
+        "path": "licensing/candidates/commercial-runtime-release.json",
+        "sha256": "f8129ba3a36b5a542a4d435bd8bc1c0f1f48067a46b257690f6a0e168c34dd4d",
+        "bytes": 19702
+      }
+    },
+    "checkoutEnabled": false,
+    "paidPublicationEnabled": false
+  },
+  "files": [
+    {
+      "path": "LICENSE",
+      "sha256": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30",
+      "bytes": 11358
+    },
+    {
+      "path": "NOTICE",
+      "sha256": "06a027ba9963b3072640edc7950477ef5fa6dc44c182fc5476e944cd0a64e06c",
+      "bytes": 729
+    },
+    {
+      "path": "bin/vsg.mjs",
+      "sha256": "c72b165dc223b78acae6847efb909fc3edecd39ea70bdcab083fb92ea02e470b",
+      "bytes": 229
+    },
+    {
+      "path": "lattice-catalog.json",
+      "sha256": "251dfe3fe0c21f06d17cd2a5e5dc82ac8285cd547f571f7d5130aa41730f27c5",
+      "bytes": 10354194
+    },
+    {
+      "path": "lattice-runtime.mjs",
+      "sha256": "00c58991a7fd47fd30fc8a3a9ac6b2281949c2a4adbc9078325643bf6fc7750e",
+      "bytes": 8618978
+    },
+    {
+      "path": "licensing/candidates/apache-source-license-evidence.json",
+      "sha256": "ab29e41e05a2c2dc333b2fbf05790c7497ba34a6aec125ed9a33f27756124350",
+      "bytes": 38800
+    },
+    {
+      "path": "licensing/candidates/betterleaks-generic-api-key.json",
+      "sha256": "fa88c2b065ef0876b59eb488814983efe23c24eff90dac1a272aeb30e955096c",
+      "bytes": 4262
+    },
+    {
+      "path": "licensing/candidates/betterleaks-jwt.json",
+      "sha256": "b0f411643bcc491ebb572b18387456bfe9ccf77c5a050b0a59d05d5a60e3c44f",
+      "bytes": 4112
+    },
+    {
+      "path": "licensing/candidates/blackberry-additional-source-declaration-evidence.json",
+      "sha256": "db922d1ab580eb09a01de5db83741f134a4446610a0762a4c91a0c298099de2f",
+      "bytes": 18753
+    },
+    {
+      "path": "licensing/candidates/blackberry-source-declaration-evidence.json",
+      "sha256": "662602c01d6cc755ace812570591d8257de3462562e0ca4b57fa33c3a1ff7e8e",
+      "bytes": 22826
+    },
+    {
+      "path": "licensing/candidates/cado-source-declaration-evidence.json",
+      "sha256": "810cadb12983588a7001fee92a328fb6ac66e9e766eb90ed06d4f083ad341e36",
+      "bytes": 14070
+    },
+    {
+      "path": "licensing/candidates/commercial-rule-candidate.json",
+      "sha256": "2b305facf86c308dee3131dbc9854abf5291e29546d4fd641bace4bb1b920a9c",
+      "bytes": 11427
+    },
+    {
+      "path": "licensing/candidates/commercial-runtime-release.json",
+      "sha256": "f8129ba3a36b5a542a4d435bd8bc1c0f1f48067a46b257690f6a0e168c34dd4d",
+      "bytes": 19702
+    },
+    {
+      "path": "licensing/candidates/data-feed-evidence.json",
+      "sha256": "014af19a07a02e36063bdb140fcea627d09ef8c7bc90ea12c365bd3736a91042",
+      "bytes": 12071
+    },
+    {
+      "path": "licensing/candidates/gitlab-sast-rule-identities.json",
+      "sha256": "533f9211267df50f004cbb38deb49abbb210a23d6acbe7a6f11379fbbb24b1b2",
+      "bytes": 9192
+    },
+    {
+      "path": "licensing/candidates/gitlab-sast-source-evidence.json",
+      "sha256": "662c47108fe1acfd6ce3db5508fcfe81bb851f666bb5d4091e80d1f35ace0e91",
+      "bytes": 97468
+    },
+    {
+      "path": "licensing/candidates/gitlab-sast-source-notice-bundle.json",
+      "sha256": "95494e6442be48932743220de45124fb51dc578eddb8d72174f1038c6a2e4011",
+      "bytes": 1958
+    },
+    {
+      "path": "licensing/candidates/malpedia-source-license-evidence.json",
+      "sha256": "4729a9374e28fd1ac463860efa7b596269cb323b97488de4d27af53506940e50",
+      "bytes": 2157
+    },
+    {
+      "path": "licensing/candidates/rule-license-evidence.json",
+      "sha256": "436466392799976cd3dd7788e3f28700b9c7828ac0586adc2979c57c7f239572",
+      "bytes": 21099
+    },
+    {
+      "path": "licensing/candidates/runner-image-composition.json",
+      "sha256": "2bbb1193ab1e1a92a68f90e0e5fef1759da4030990392c819a4eb05d31fdeddd",
+      "bytes": 53783
+    },
+    {
+      "path": "licensing/candidates/selected-runtime-coverage.json",
+      "sha256": "92daa13869cd402c64da9d2e6e6fd6198ffd58587d4d2080804c821514f46a2d",
+      "bytes": 4330
+    },
+    {
+      "path": "licensing/candidates/yara-forge-20260927.json",
+      "sha256": "4a1eb672e488b99d3381979a9eb1de4890edee79cfbcded9502683d48dbc7d54",
+      "bytes": 3027640
+    },
+    {
+      "path": "licensing/commercial-components.json",
+      "sha256": "c369ec24b9cb811245c62e4c4bcb130a65c48b215af064c938c4ccea4a0798e8",
+      "bytes": 18254
+    },
+    {
+      "path": "licensing/notices/betterleaks-1.9.0-MIT.txt",
+      "sha256": "caea114592a8f8e5e05a116d63a99e0ccd79a3ff74f4ddf270bcf4c929eb021e",
+      "bytes": 1069
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/28a9529c7d0bb4dc51f4bf5c116a3d16ef247a052f7591466768ddf563fd1cf5.txt",
+      "sha256": "28a9529c7d0bb4dc51f4bf5c116a3d16ef247a052f7591466768ddf563fd1cf5",
+      "bytes": 20138
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/33acf42afdd03163d75fe856cb431e70710e0b5deede3362e6d1c4697cfe1c6a.txt",
+      "sha256": "33acf42afdd03163d75fe856cb431e70710e0b5deede3362e6d1c4697cfe1c6a",
+      "bytes": 2000
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986.txt",
+      "sha256": "3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986",
+      "bytes": 35149
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/4fecb8fcaf80fd9a6315bca5225ee43377015b46a0459c2925495be885cab19a.txt",
+      "sha256": "4fecb8fcaf80fd9a6315bca5225ee43377015b46a0459c2925495be885cab19a",
+      "bytes": 1073
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/811515f8723aa4007de2fbb75a364127fdec51cda534b87a7ea8f2fef2f96dd7.txt",
+      "sha256": "811515f8723aa4007de2fbb75a364127fdec51cda534b87a7ea8f2fef2f96dd7",
+      "bytes": 1306
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/814442c3987a2c0411171ad8ad43118e8c08f85c9c5d1dcdecc9787c7ca8689b.txt",
+      "sha256": "814442c3987a2c0411171ad8ad43118e8c08f85c9c5d1dcdecc9787c7ca8689b",
+      "bytes": 34748
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/8a959b2413d0c83ca1b3ce9153076c649abf2e4bbfebbb493fb24c2074a1eb8a.txt",
+      "sha256": "8a959b2413d0c83ca1b3ce9153076c649abf2e4bbfebbb493fb24c2074a1eb8a",
+      "bytes": 1939
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/995182e185856186fbbe49f150409ae026aa4cda7e94f83c6ed737cbb77fa9c7.txt",
+      "sha256": "995182e185856186fbbe49f150409ae026aa4cda7e94f83c6ed737cbb77fa9c7",
+      "bytes": 1300
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/9b8e1305e46d1dd4011b6ed933c9f6223e08c9c4625001c5fd75a34fa930f616.txt",
+      "sha256": "9b8e1305e46d1dd4011b6ed933c9f6223e08c9c4625001c5fd75a34fa930f616",
+      "bytes": 11337
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/a01f1a28424bfe7f49a23d339a01847cfa9ace3864d5e7295051772a4bae2271.txt",
+      "sha256": "a01f1a28424bfe7f49a23d339a01847cfa9ace3864d5e7295051772a4bae2271",
+      "bytes": 1940
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/a5681bf9b05db14d86776930017c647ad9e6e56ff6bbcfdf21e5848288dfaf1b.txt",
+      "sha256": "a5681bf9b05db14d86776930017c647ad9e6e56ff6bbcfdf21e5848288dfaf1b",
+      "bytes": 7651
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/a5b8bd9ae96c630bbf229d61c5c5def20274e00be39abfd2fab4d7879ceab462.txt",
+      "sha256": "a5b8bd9ae96c630bbf229d61c5c5def20274e00be39abfd2fab4d7879ceab462",
+      "bytes": 1297
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/ada32b3747ce108d5e8bab7918af94abbd03f2fe2a46304f74c6333bbfd914ed.txt",
+      "sha256": "ada32b3747ce108d5e8bab7918af94abbd03f2fe2a46304f74c6333bbfd914ed",
+      "bytes": 1293
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4.txt",
+      "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4",
+      "bytes": 11357
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/c738ae413cf561f174e34f6961f8ca458aae2369a73640dda6234c629b98bcc4.txt",
+      "sha256": "c738ae413cf561f174e34f6961f8ca458aae2369a73640dda6234c629b98bcc4",
+      "bytes": 145485
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/ce41c9a2c986277f7f9ab146a2195c1888a5d8da062e22d7c9c88666bb7c38cd.txt",
+      "sha256": "ce41c9a2c986277f7f9ab146a2195c1888a5d8da062e22d7c9c88666bb7c38cd",
+      "bytes": 1897
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/d5f4c36a0528e01cfdd9e4fc60879201d3af49b41c520200643d321fe53da5f9.txt",
+      "sha256": "d5f4c36a0528e01cfdd9e4fc60879201d3af49b41c520200643d321fe53da5f9",
+      "bytes": 1896
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/e08c368ccd455f85c7fb9e04830e730f26e9dbb5c0f77bc88e09a5b0cb37df5b.txt",
+      "sha256": "e08c368ccd455f85c7fb9e04830e730f26e9dbb5c0f77bc88e09a5b0cb37df5b",
+      "bytes": 1938
+    },
+    {
+      "path": "licensing/notices/candidate-sources/sha256/e9efb2f7daf11bb6379c06c16b870dddcecc4a10f8704bb8aad807529c8b3c97.txt",
+      "sha256": "e9efb2f7daf11bb6379c06c16b870dddcecc4a10f8704bb8aad807529c8b3c97",
+      "bytes": 1330
+    },
+    {
+      "path": "licensing/notices/gitleaks-generic-origin-782f3104-MIT.txt",
+      "sha256": "e3884b252b3bfc045e55be43a34d1e80da070bc6f804ac95bf4660e97d62ebc6",
+      "bytes": 1069
+    },
+    {
+      "path": "package.json",
+      "sha256": "ee628e81de5d265ca09eccad1289a84b6e4811055feec25b3c46da4695fc8bb2",
+      "bytes": 411
+    },
+    {
+      "path": "playbook/README.md",
+      "sha256": "18a8e0ec9a574fc2200b8b09c50b77462086aae3ecdb65e6c64ed3c5acbeb20f",
+      "bytes": 6326
+    },
+    {
+      "path": "playbook/access-control.md",
+      "sha256": "428913d28af3eac63fd38229f870818f453a01b18683e28f4e806ed20aec99e6",
+      "bytes": 4848
+    },
+    {
+      "path": "playbook/ai-features.md",
+      "sha256": "5dbe6529425e036868a10f13cd33f0db78cfcc307cbf6e474f6326d552b00cdb",
+      "bytes": 5312
+    },
+    {
+      "path": "playbook/desktop-python.md",
+      "sha256": "b3817ff7ff459d706472b0b60aa1be1222bde04804e311df89e4479ad44645f6",
+      "bytes": 5162
+    },
+    {
+      "path": "playbook/input-handling.md",
+      "sha256": "e96b4116dc2961507cd7f623c6151bdb8306e38f90c7e250480e44567e365a5a",
+      "bytes": 5523
+    },
+    {
+      "path": "playbook/mobile-expo.md",
+      "sha256": "3d73d2c320ba84422813bc5e70e30f55a635270dc50c9b6b3e64490d94fcb939",
+      "bytes": 5172
+    },
+    {
+      "path": "playbook/payments.md",
+      "sha256": "bb5418832e755d0cd2e6406de88c1ee585e9246bed0077dab6db5527325ab866",
+      "bytes": 4680
+    },
+    {
+      "path": "playbook/privacy-account-recovery.md",
+      "sha256": "fcff6213f51bcfe7cf5d80e597908b07b2211a4e88836f976d927fbdda91f78b",
+      "bytes": 4940
+    },
+    {
+      "path": "playbook/secrets-config.md",
+      "sha256": "c3c514c68f8e156be2fb332faa37b688215603b4118b374f3e29441da3b82f19",
+      "bytes": 5077
+    },
+    {
+      "path": "playbook/supabase.md",
+      "sha256": "9b4e0259ea5f9f0e03f3bbfd9ffaa6b20b8beade53001945179db00be462adae",
+      "bytes": 5031
+    },
+    {
+      "path": "playbook/supply-chain.md",
+      "sha256": "a3b83ef5ca6bdf932e686b94fc5c8f3e82b1b968bdef453600cbc33485a7942e",
+      "bytes": 5619
+    },
+    {
+      "path": "playbook/webhooks-integrations.md",
+      "sha256": "e9d17e67cb8e52a00b21a41f640fb1123cef6fd59fd45b0c474a79d0b28d22c6",
+      "bytes": 4678
+    },
+    {
+      "path": "rules/vsg-ai-key-in-client.yaml",
+      "sha256": "1c611e4597d41381fbbb94393dfb255490412c0b37d2099788bcc6f35abc97ee",
+      "bytes": 2608
+    },
+    {
+      "path": "rules/vsg-ai-output-raw-html.yaml",
+      "sha256": "3f28a2e4ed23b82414163defdccd90233eda063cdb9fd3b6edaa99d5ae24678d",
+      "bytes": 1730
+    },
+    {
+      "path": "rules/vsg-angular-sanitizer-bypass.yaml",
+      "sha256": "f194cc72095ff16aaa1fd94e5bd154f07d75cdf994630e466ddea7e9bae0c682",
+      "bytes": 1497
+    },
+    {
+      "path": "rules/vsg-expo-token-in-asyncstorage.yaml",
+      "sha256": "26a4533f412aa9918c8b7e858b9eb7f693302bf28f2bb4adba227c6e8affe136",
+      "bytes": 1191
+    },
+    {
+      "path": "rules/vsg-flask-public-bind.yaml",
+      "sha256": "5746fa7b879582d9bff37a2ddab41660585589167f200805a2391777e0715be2",
+      "bytes": 1691
+    },
+    {
+      "path": "rules/vsg-nextjs-action-write-no-auth.yaml",
+      "sha256": "1953c6c8aed0896b0c19ccf6d7cb618e748e25fb55931d75be54a4cb68bd1800",
+      "bytes": 6082
+    },
+    {
+      "path": "rules/vsg-nextjs-inline-action-write-no-auth.yaml",
+      "sha256": "320e4b0db710cf4457ac06fd54639c5a24e28e2752cc6688e83b72f687f8d2ed",
+      "bytes": 6509
+    },
+    {
+      "path": "rules/vsg-nextjs-route-write-no-auth.yaml",
+      "sha256": "2d11b94dc789a979ce208608624fa0ab42d1c49ef4f09191627c156c8b7152c0",
+      "bytes": 7811
+    },
+    {
+      "path": "rules/vsg-nosql-where-injection.yaml",
+      "sha256": "d01a9a091d936f9f1d9ab17b15682a007d2de48d506367277d3adeec7162a34f",
+      "bytes": 1758
+    },
+    {
+      "path": "rules/vsg-python-pickle-load.yaml",
+      "sha256": "a04ba295068b74ad903a431ee6bec4295518e3a62c9140c9010ded28e0f97f68",
+      "bytes": 1339
+    },
+    {
+      "path": "rules/vsg-python-requests-verify-false.yaml",
+      "sha256": "19ab204e3dfb81bf6408146ff02826e2c4de0485c396417f9c8fe1b3b98a99d5",
+      "bytes": 1549
+    },
+    {
+      "path": "rules/vsg-python-subprocess-shell.yaml",
+      "sha256": "af63cc4c81ed7b50d6866ffb581716395ebaf17880565627e4bc99cde2189d66",
+      "bytes": 1410
+    },
+    {
+      "path": "rules/vsg-stripe-client-price.yaml",
+      "sha256": "7f5178252a4f2f178e2518520472cca54f37c71d3babdca5b151e0a67cc8f69b",
+      "bytes": 2272
+    },
+    {
+      "path": "rules/vsg-stripe-webhook-no-signature.yaml",
+      "sha256": "d6a10863d0bdeddf7f4b21c7f16c31cc2befd7fb5744d0d7fa873a1d7ec528a9",
+      "bytes": 1897
+    },
+    {
+      "path": "rules/vsg-stripe-webhook-pages-no-signature.yaml",
+      "sha256": "19dfd7539d265a3608655bf979b74695e38089c8f845163763cc193a2e9ada77",
+      "bytes": 3098
+    },
+    {
+      "path": "rules/vsg-supabase-service-role-in-client.yaml",
+      "sha256": "70c34a6a8efc4263e840d3004c63346867a39497c847f367fa26690822a94500",
+      "bytes": 1420
+    },
+    {
+      "path": "rules/vsg-supabase-service-role-public-env.yaml",
+      "sha256": "483c8844010a627dc9fd9face077108faab2d7722894819739bca75fd2ee9383",
+      "bytes": 1455
+    },
+    {
+      "path": "rules/vsg-xml-external-entities.yaml",
+      "sha256": "bb1eb0efa6001ea35915370d3465d4deb071edc1b00559caa1369085d2c2edac",
+      "bytes": 1319
+    },
+    {
+      "path": "src/agent/brief.mjs",
+      "sha256": "4f68362e98be204c85e75dcf3989efc8cae8feea02677554bab5f73dd5af7e20",
+      "bytes": 7997
+    },
+    {
+      "path": "src/agent/discover.mjs",
+      "sha256": "cff3c11f3efdc677ffec1334f7c9a13fe99dc229a230153e097d94bd45e9f7a0",
+      "bytes": 7364
+    },
+    {
+      "path": "src/agent/exec.mjs",
+      "sha256": "07c94ed57e5770faee0934ce934dae8c7c3d61488d979fe6b358bd8a86226fcf",
+      "bytes": 3878
+    },
+    {
+      "path": "src/agent/ingest.mjs",
+      "sha256": "26aff497a350cec4b5855418c8a459ff3f3e33982d1746eac7040d2d9653a51e",
+      "bytes": 12882
+    },
+    {
+      "path": "src/agent/report.mjs",
+      "sha256": "57c25d6ae9c0182fa158eb847f096ee31a4011482c57bea0aa5354200e2d25ff",
+      "bytes": 5564
+    },
+    {
+      "path": "src/agent/schema.mjs",
+      "sha256": "be879d54435c978e52566a0569f9adca32995cf20401d1313b9e6285e3defad9",
+      "bytes": 4586
+    },
+    {
+      "path": "src/agent/tokenize.mjs",
+      "sha256": "61bca8257e2507c19a0f797d706eaa42efae325d90d8670c60b75ec37c05af75",
+      "bytes": 1890
+    },
+    {
+      "path": "src/checks/README.md",
+      "sha256": "89e39b2f49da43e1706f9b3d44d5b7841d3815e009aa7790010f830d2882f4d5",
+      "bytes": 517
+    },
+    {
+      "path": "src/checks/_lib/gitfiles.mjs",
+      "sha256": "072c83a2b5f456a2a7b5748ea483e62400a05e14b99f33ca8e48af96ac84523f",
+      "bytes": 2394
+    },
+    {
+      "path": "src/checks/_lib/lockfiles.mjs",
+      "sha256": "834f95ad22f9af549049d4e4f142bc381fde54086f4146928aecfdfd140a3185",
+      "bytes": 6468
+    },
+    {
+      "path": "src/checks/_lib/osv.mjs",
+      "sha256": "01f6016074babdd707f459c041f6dbaaaf43b3a51b0c0e93e9893254c3e05c86",
+      "bytes": 623
+    },
+    {
+      "path": "src/checks/_lib/secrets.mjs",
+      "sha256": "5078b169b367982489e691d6313dabb0f7696e403678f6ad0a5b1338e1363052",
+      "bytes": 23377
+    },
+    {
+      "path": "src/checks/_lib/targets.mjs",
+      "sha256": "551444586ea671b00e72f00c087f6a05fbb7161891c7c1f630402dcc94c89317",
+      "bytes": 4478
+    },
+    {
+      "path": "src/checks/agent-review/index.mjs",
+      "sha256": "b4a82f22c99a007f3e6af2dbeda0dfc61a098e9bdae4fc794f303d8e7c3a8480",
+      "bytes": 3557
+    },
+    {
+      "path": "src/checks/agent-surface/config.mjs",
+      "sha256": "ac4836bab7484d082873dbac65e7ec67a18b4b93bf979cb0deb037f288494615",
+      "bytes": 12825
+    },
+    {
+      "path": "src/checks/agent-surface/index.mjs",
+      "sha256": "765eabe28a6ff311e6675e3c5bca30ac9a4b56440ede1a6792619f97cb1a0cab",
+      "bytes": 6517
+    },
+    {
+      "path": "src/checks/agent-surface/instructions.mjs",
+      "sha256": "5fd5202d66901fe7506160cdfcfb915ed995593461c743b10b7db7f6e644762f",
+      "bytes": 6105
+    },
+    {
+      "path": "src/checks/agent-surface/patterns.mjs",
+      "sha256": "492c907a522bfbe18c7a8f3ce0b9f7e027692054b80d901efaa1b65a6cf03245",
+      "bytes": 2759
+    },
+    {
+      "path": "src/checks/agent-surface/unicode.mjs",
+      "sha256": "c7763971721034f69434b25fe805ed11c1e04e66bae67838b19eecdee92e0974",
+      "bytes": 4565
+    },
+    {
+      "path": "src/checks/code/auth-helpers.mjs",
+      "sha256": "91cc05f705eea206c3d984db25d9d9b6375ba7d13e52df24a42ebbc6cc0106a7",
+      "bytes": 34701
+    },
+    {
+      "path": "src/checks/code/index.mjs",
+      "sha256": "5e865c9ae02ea8183326d8efc1933e3d17b2f6046daf8725ec8b34d374888e47",
+      "bytes": 35620
+    },
+    {
+      "path": "src/checks/code/opengrep-container.mjs",
+      "sha256": "49108e2153db9148b10aad636d9d733bd93db0832b4d74293a3ab0f7a28e8eb5",
+      "bytes": 5634
+    },
+    {
+      "path": "src/checks/code/opengrep-runner.mjs",
+      "sha256": "96fe25f78af4abc0bdbf9016d8a72b4047b68f56d6e2dab7b99655a8d7174dba",
+      "bytes": 4163
+    },
+    {
+      "path": "src/checks/code/selected-opengrep-runner.mjs",
+      "sha256": "ce5f2e748a5e74a1cd44ea6c92344d679c8d4a1a115fee2d96504ae697a3d9f6",
+      "bytes": 6071
+    },
+    {
+      "path": "src/checks/dep-change/guarddog.mjs",
+      "sha256": "33d1817746d3fbc113959d73ac077ef8fcad852fc123aecd3d935e33de54f3f6",
+      "bytes": 8803
+    },
+    {
+      "path": "src/checks/dep-change/index.mjs",
+      "sha256": "aee6f651747d7487bdcb4364f485ad1fe9bce000e4e332373bd72d35eb7c97a8",
+      "bytes": 20903
+    },
+    {
+      "path": "src/checks/dep-change/registries.mjs",
+      "sha256": "97392f1f272bab6f529577028e479ae08f91d0781a496cdbbe84a58f66c681a8",
+      "bytes": 11830
+    },
+    {
+      "path": "src/checks/deps-vuln/index.mjs",
+      "sha256": "7411d2d1e07805ec8f931f700763c2af1d6dd140f29bf0dcefe67ebd88432710",
+      "bytes": 17566
+    },
+    {
+      "path": "src/checks/desktop-config/index.mjs",
+      "sha256": "e38bfbf25ede42295b0fe75c7c7dac0d815963b8e55611a1b6392f08199e38b7",
+      "bytes": 7642
+    },
+    {
+      "path": "src/checks/dns-mail/index.mjs",
+      "sha256": "b9a2a0da3ceeecf01874c65786a2964bc2e06e09f19fb564e22d30be06483baf",
+      "bytes": 4755
+    },
+    {
+      "path": "src/checks/iac/index.mjs",
+      "sha256": "bc96b55aae14317dbc646aede89ed7c67c43e36785c73a17be509e2ce3cdd1f7",
+      "bytes": 4288
+    },
+    {
+      "path": "src/checks/install-posture/index.mjs",
+      "sha256": "ad16e7fa6f8403ba35b504a6057614a18764aef2411482c5f88dc2ecf0a56d1a",
+      "bytes": 8514
+    },
+    {
+      "path": "src/checks/licenses/index.mjs",
+      "sha256": "1e30b7715df064c5d7945ae7fc3f8da18dfb544f0b579d0c5a54c150afef155e",
+      "bytes": 7679
+    },
+    {
+      "path": "src/checks/live-basic/index.mjs",
+      "sha256": "45e8e6206511190cb3b71b922361402f7262b0c8d657d2cb3b38ca3ecc3fe0dc",
+      "bytes": 4870
+    },
+    {
+      "path": "src/checks/live-js-secrets/index.mjs",
+      "sha256": "20436d6612ccad04a2f35f110c46b57e28595e0ccd0bce9d8172e5a45e517e94",
+      "bytes": 6010
+    },
+    {
+      "path": "src/checks/malware/clamav.mjs",
+      "sha256": "9ddcdbe2c3ec0ec8b4b87e101dabeb79e29a135ace51d8c659cf7ce089f5df1e",
+      "bytes": 1116
+    },
+    {
+      "path": "src/checks/malware/defender.mjs",
+      "sha256": "70158aa5a8ed8bd4f9fd7ddc6c9f613e276bc3b455ef0547375f4eb46fc2e116",
+      "bytes": 2833
+    },
+    {
+      "path": "src/checks/malware/index.mjs",
+      "sha256": "5e7d2e735f3a18839b4250682f8b5f04e2a966288fe5fe8c41f6072385f8d6f1",
+      "bytes": 13085
+    },
+    {
+      "path": "src/checks/malware/targets.mjs",
+      "sha256": "b392cd92e55890d4d2b087097c560680889377db06b84acc1e40a79ca587d05b",
+      "bytes": 7305
+    },
+    {
+      "path": "src/checks/malware/yara-runner.mjs",
+      "sha256": "1d878442430c3c33a1df296940aecba4915a74a25ac4e7f9821642831ca1f8e8",
+      "bytes": 11500
+    },
+    {
+      "path": "src/checks/malware/yara.mjs",
+      "sha256": "73fe5705c59d1c3be6b299095c0295af972b6341a435db9a1959582ed2802d1c",
+      "bytes": 9106
+    },
+    {
+      "path": "src/checks/mobile-config/index.mjs",
+      "sha256": "91d0af94ca5af6cedec775bfbb51bdb5ec033fcdd1ea066eaad87767ab742190",
+      "bytes": 10949
+    },
+    {
+      "path": "src/checks/mobile-config/mobsf.mjs",
+      "sha256": "cb24ab379d507cd50ffcba963e4d6cdb94c9510211d164f51ca445f91ba2fde6",
+      "bytes": 7300
+    },
+    {
+      "path": "src/checks/posture/index.mjs",
+      "sha256": "519123cbe911997a1b5c4b9adc68beb1fe4252a0216f15ffa2cfb4d27de8b0ec",
+      "bytes": 7535
+    },
+    {
+      "path": "src/checks/project-scripts/index.mjs",
+      "sha256": "4e19f55fcdaf32529fde0f445c58bd0c5db0791c3029604b14de704e9b96776b",
+      "bytes": 10969
+    },
+    {
+      "path": "src/checks/sbom/index.mjs",
+      "sha256": "df437f21e9851a0e7ffb5709c2dd7f7884e1a08436c977ed6d0a0e2f1a4fd7d3",
+      "bytes": 5267
+    },
+    {
+      "path": "src/checks/secrets-build/index.mjs",
+      "sha256": "37aaa09e9dc14b73396e6d2f2584730baf08477df3574236c0a2dfe78c1dfe6d",
+      "bytes": 3454
+    },
+    {
+      "path": "src/checks/secrets-history/index.mjs",
+      "sha256": "22326e3165ca3511856f6b515bbb3d06632f9439e2d267ae8f4b54531a366f2c",
+      "bytes": 6694
+    },
+    {
+      "path": "src/checks/secrets-tree/env.mjs",
+      "sha256": "3caea715c9bd7331e8b7b8001bcba7dbdd16b6a320c4a586dbf68aba9affaf8e",
+      "bytes": 7700
+    },
+    {
+      "path": "src/checks/secrets-tree/index.mjs",
+      "sha256": "0c0ad023c5e5a1bac44efcf46b71d973666559759de2bcf4cbfd8f4adccbed3d",
+      "bytes": 3768
+    },
+    {
+      "path": "src/checks/supabase-static/index.mjs",
+      "sha256": "a5d8f0c2da643f01225d9afabb2c0420fd96fc544ebb80576a434d5afcc31708",
+      "bytes": 15943
+    },
+    {
+      "path": "src/checks/supabase-static/sql.mjs",
+      "sha256": "e7b0ae1d8835740d5268af941d365045c919e600e06b174094c130d9f0730533",
+      "bytes": 26286
+    },
+    {
+      "path": "src/checks/workflows/index.mjs",
+      "sha256": "20d5a322bfbc78a7f9405c841c2d3fd0fc070a7a55a8af9c564af0c6c54cbf22",
+      "bytes": 5703
+    },
+    {
+      "path": "src/cli/deep.mjs",
+      "sha256": "1e10450bba6d02b29a8cabdad4c7ff1c4781be7c5a192408d148ec03c6439d56",
+      "bytes": 779
+    },
+    {
+      "path": "src/cli/doctor.mjs",
+      "sha256": "021462bafa7943a350f879468e2d61e9cc5fcbce197dd3a95a1965b73447a6e6",
+      "bytes": 5326
+    },
+    {
+      "path": "src/cli/index.mjs",
+      "sha256": "db5bcdb996eaacb109d3ddfa999abb0fb57c48af2658d38e662fbd06950f317b",
+      "bytes": 2835
+    },
+    {
+      "path": "src/cli/live-common.mjs",
+      "sha256": "c4d3569b2f7407f25946ea9599d1c6adcdac0155c0c7ff3b2531ac3249411d82",
+      "bytes": 1665
+    },
+    {
+      "path": "src/cli/parse.mjs",
+      "sha256": "48356c5a7d2ecb10c4ce59e4c7c54752b35209995f38309871e34f86d7c1d0ac",
+      "bytes": 2321
+    },
+    {
+      "path": "src/cli/portfolio.mjs",
+      "sha256": "d710cf7096b1c1e663b5e7c6f7aa6877213fbce925400db3b8b39681449017e3",
+      "bytes": 2301
+    },
+    {
+      "path": "src/cli/release.mjs",
+      "sha256": "c094b22486d39dda90fe0c66e8865eec6d546f5a0e48c5662e47d2792e6f4db5",
+      "bytes": 1619
+    },
+    {
+      "path": "src/cli/report.mjs",
+      "sha256": "c5be6d623ae147b22a5db33e6efae148aac1085369268857d8b62160558c5286",
+      "bytes": 1119
+    },
+    {
+      "path": "src/cli/run-common.mjs",
+      "sha256": "d60c69d73c8562c802d430ea5289e0fffeaef5f635e25a0b945ad8a81a9ba535",
+      "bytes": 3333
+    },
+    {
+      "path": "src/cli/scan.mjs",
+      "sha256": "0577015aeee9f96401e67a0810aa6dba5e77673df2196c88a87db17da8d1f29a",
+      "bytes": 622
+    },
+    {
+      "path": "src/cli/setup.mjs",
+      "sha256": "87b2cd48c0f9a3a43e90a4d56f6f3fb6a381a675275fa8345122d2f0c391dec6",
+      "bytes": 3437
+    },
+    {
+      "path": "src/cli/url.mjs",
+      "sha256": "b77c3557ed0026b2b02e0c19ba188f82d5fee3bf3f65fcefd63d5614c334a54d",
+      "bytes": 2433
+    },
+    {
+      "path": "src/core/accept.mjs",
+      "sha256": "3647c395984139059f237b62b9138fa3b00f7607fab12f77a89a804990b8bd2b",
+      "bytes": 7723
+    },
+    {
+      "path": "src/core/archive.mjs",
+      "sha256": "103ce9c20957b4ea8cca2f2b0e02db91b1d75014c77924ff4ed0f11b77d89ebc",
+      "bytes": 5535
+    },
+    {
+      "path": "src/core/base-ref.mjs",
+      "sha256": "4e3f1f6f4d9b4f6cb675717536069403c96353f75a04239e8506139a7df6bb94",
+      "bytes": 2336
+    },
+    {
+      "path": "src/core/checks.mjs",
+      "sha256": "4de62a8d67345d34fa82cd0e9ee62b6449591704166e16b3157ff25a7f2362c1",
+      "bytes": 2305
+    },
+    {
+      "path": "src/core/detect.mjs",
+      "sha256": "a7c8e29b13bb22f408a9c7924a515a8a297992ce6a8d1a8e33a32eb99c5bc045",
+      "bytes": 5447
+    },
+    {
+      "path": "src/core/errors.mjs",
+      "sha256": "ce1e898dc308dec90be3db7abcf12e1666ecf11bbc57b5a3987401c52fb8897b",
+      "bytes": 270
+    },
+    {
+      "path": "src/core/fetch.mjs",
+      "sha256": "0f663da179d51eb6d1247611ac3e4b45a5a5f6b4c070c861494e50c236430621",
+      "bytes": 7560
+    },
+    {
+      "path": "src/core/findings.mjs",
+      "sha256": "1ed10d4acc4ca589053fac6a512cf677b34424977f1b2308581d1da37d259b9c",
+      "bytes": 8864
+    },
+    {
+      "path": "src/core/gate.mjs",
+      "sha256": "9f0f6e15fc311d06be1de06354dc4bf01b9887ea6e630bc6779c1340047d33c7",
+      "bytes": 6832
+    },
+    {
+      "path": "src/core/installer.mjs",
+      "sha256": "b6bc9a67d4c05df8c30dda38bacd81a487d61c91c32f1699477c2011fe2ff01e",
+      "bytes": 13460
+    },
+    {
+      "path": "src/core/lock.mjs",
+      "sha256": "a464491122608aeb1630d5060cef6df9d895b3d9046c45f9dd8dd33fe66653df",
+      "bytes": 1633
+    },
+    {
+      "path": "src/core/nested.mjs",
+      "sha256": "03585068934ce82dd70956be06ace11241ef099aceeaeb484c6652c3ee3d8010",
+      "bytes": 6206
+    },
+    {
+      "path": "src/core/paths.mjs",
+      "sha256": "9ddaf4da909fa7c935f4907684aef98311ac2fca708f842482c6d0cf6a728375",
+      "bytes": 850
+    },
+    {
+      "path": "src/core/pipeline.mjs",
+      "sha256": "ca60bb84b2463ab570b6fbb95d91f8770c9d4682b1aa01f0689a227b0050060e",
+      "bytes": 11574
+    },
+    {
+      "path": "src/core/registry.mjs",
+      "sha256": "8111c944d28863cacb0b8099a8eb3acd4f77664115e119d23abec33aaf439f7a",
+      "bytes": 4314
+    },
+    {
+      "path": "src/core/report.mjs",
+      "sha256": "fdca82a5b013511818cc9c5b4163d04466c5e0e84e9084a3030da211cfb38a5a",
+      "bytes": 8492
+    },
+    {
+      "path": "src/core/runner.mjs",
+      "sha256": "c72a77f4f004475e411bed145cf3969506e8e115e9323e99b253473f71635879",
+      "bytes": 4615
+    },
+    {
+      "path": "src/core/sarif.mjs",
+      "sha256": "1f2b47ac9e7d9b5e8058f86698f71a4cdf53d9e7332cd828c1ae27bbd79cd7dc",
+      "bytes": 6879
+    },
+    {
+      "path": "src/lattice/artifact.mjs",
+      "sha256": "07e505624a27191e12ef44347cb8d3a1aee8c2c54f5391da56e148069fa6e349",
+      "bytes": 87384
+    },
+    {
+      "path": "src/lattice/execution.mjs",
+      "sha256": "cc522aa4a397550977f0d942fb5068012da09c63c66bdaf442abbac3aaaac50c",
+      "bytes": 1902
+    },
+    {
+      "path": "src/lattice/export.mjs",
+      "sha256": "a19048f912157443f75dbbcf758c95eb267a09b15a34b2594ee2d050ec2a1357",
+      "bytes": 12691
+    },
+    {
+      "path": "src/lattice/provenance.mjs",
+      "sha256": "0b061b2b65ffaa37380fd95866b1c619110bd8c1c5a3a6032bf274be54f38c46",
+      "bytes": 3179
+    },
+    {
+      "path": "src/lattice/runtime.mjs",
+      "sha256": "5ab67dfa615f44c3059e1b62da0da61d3049285b7b170269bd970e0ff3997c9f",
+      "bytes": 7651
+    },
+    {
+      "path": "src/lattice/selected-runtime.mjs",
+      "sha256": "3b25dfd70d314d1c4054cde4883537dfb66bb0ad2c02bec4a0ce3dd2cb669536",
+      "bytes": 11401
+    },
+    {
+      "path": "src/lattice/source-acquirer.mjs",
+      "sha256": "25522bcef5c34d5ab911cbbeff8ca4d08a34271396927ea85fd7d3e98361389b",
+      "bytes": 3087
+    },
+    {
+      "path": "src/lattice/source-fetcher.mjs",
+      "sha256": "9fcc466b236d792ace293b3c3cceca4cb54b6854ad2052418d2fe99ceaaf1de0",
+      "bytes": 4584
+    },
+    {
+      "path": "src/lattice/transport.mjs",
+      "sha256": "85443c6206181ff62eb8893e8d22e9e66d44f79ceeead4cdc4bf4296c0112efe",
+      "bytes": 12430
+    },
+    {
+      "path": "src/live/analyze.mjs",
+      "sha256": "7700c41fc2b34cde0e93dd28654fb1d10b5f96041dd2799cd0e1cdb093fd57b2",
+      "bytes": 8339
+    },
+    {
+      "path": "src/live/exposure.mjs",
+      "sha256": "f7ee3ac84ddd24d7bcbf8c4a21f18ab30e877b90a2a86c28db0118ca82151e2d",
+      "bytes": 6377
+    },
+    {
+      "path": "src/live/secrets.mjs",
+      "sha256": "7a0d174e63fe42857818e07947dfd52e7362f499ef969b5bafbe4defe1332386",
+      "bytes": 1603
+    },
+    {
+      "path": "src/live/session.mjs",
+      "sha256": "98a446639601a268710caa03b9ab898edba26456b51cbba0fec0428d7dfefe38",
+      "bytes": 5079
+    },
+    {
+      "path": "src/live/targets.mjs",
+      "sha256": "10fc9d28f74576a6c2770d447d030ba0b5bb85e825cdaed258bf6d35645477ec",
+      "bytes": 5192
+    },
+    {
+      "path": "src/portfolio/index.mjs",
+      "sha256": "d2b9a6f720c6f316f3f030e765106bcf74a593faece74fa770cc90ba596d8a75",
+      "bytes": 6851
+    },
+    {
+      "path": "tools/registry/betterleaks.json",
+      "sha256": "502e6635125c26a2c895cbcf05b45f50424da771d559db01aa9125c9004a27eb",
+      "bytes": 1001
+    },
+    {
+      "path": "tools/registry/guarddog.json",
+      "sha256": "dfd8ed596e271d8bc1d703655a19b9d8691451d8d84d5937a51a63e54d6f0f49",
+      "bytes": 341
+    },
+    {
+      "path": "tools/registry/mobsf.json",
+      "sha256": "daf077729e7a772cfaef42fbf03782ee67e6210b061b54092f0573d9b4acb8bc",
+      "bytes": 750
+    },
+    {
+      "path": "tools/registry/opengrep.json",
+      "sha256": "fae29e7df4ff2625b1668dab43f5e05e1df997909139be955231b3c0faf2b9b6",
+      "bytes": 855
+    },
+    {
+      "path": "tools/registry/osv-scanner.json",
+      "sha256": "6a3a60bb42b53515df5f00a6ef68ba4d1e1ead2b98eb97d70aa545ed17e142bd",
+      "bytes": 900
+    },
+    {
+      "path": "tools/registry/semgrep-rules.json",
+      "sha256": "f485c1c61c70492f37c924d8ffd05d2777c916e19a623a19977be41fcf56427f",
+      "bytes": 992
+    },
+    {
+      "path": "tools/registry/trivy.json",
+      "sha256": "a37084d7848fe33387def278fb01bb1444bf87c281b1853bcdc0f44d68f95333",
+      "bytes": 1347
+    },
+    {
+      "path": "tools/registry/yara-forge-exclusions.json",
+      "sha256": "afc31466821b7ec1a37aa78b937a78b65e49752b1bdca89c90485ba2de964659",
+      "bytes": 550
+    },
+    {
+      "path": "tools/registry/yara-forge.json",
+      "sha256": "debeda212d2da2198d1cfc9fa285a59a16d17c992a47c3d636750aee6e62809b",
+      "bytes": 902
+    },
+    {
+      "path": "tools/registry/yara-runner.json",
+      "sha256": "c73e108dedc3739df35c6d7a85ccd4fd54f042788a17a2a04beb8c6959b5c52c",
+      "bytes": 519
+    },
+    {
+      "path": "tools/registry/yara-x.json",
+      "sha256": "634827f673df7031e35733b80f13458249d40c180db0735f3efce4e1257fbe2b",
+      "bytes": 965
+    },
+    {
+      "path": "tools/registry/zizmor.json",
+      "sha256": "e4bb3ca3201ecc720049804f756c6724328ec7299f84367816e152d89ea6f711",
+      "bytes": 1067
+    }
+  ]
+}