@methiu/raigal 0.2.2 → 0.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{AgentApp-CIiRfOun.js → AgentApp-DJYdD1VH.js} +4 -2
- package/dist/adapters/vite.js +2 -1
- package/dist/cli.js +500 -178
- package/dist/{finding-assessment-M5fUTE-C.js → finding-assessment-CGpt5YUR.js} +3 -0
- package/dist/index.d.ts +30 -0
- package/dist/index.js +388 -130
- package/dist/{json-DBoMe4xB.js → json-BflWt4dX.js} +2 -2
- package/dist/mcp.js +301 -105
- package/dist/{mount-DTc8WaIt.js → mount-CHGc3gB6.js} +1 -1
- package/dist/{sarif--DI_2p2r.js → sarif-CdtsAfJ1.js} +1 -1
- package/dist/{sarif-Ba5D8TPH.js → sarif-CpuYM3aK.js} +2 -2
- package/dist/{version-9Cnt1TiK.js → version-B4eYJn3o.js} +1 -1
- package/package.json +1 -1
- package/scripts/release-guard.mjs +2 -2
|
@@ -160,6 +160,9 @@ const RULE_SCORE_IMPACTS = {
|
|
|
160
160
|
"security/shell-injection": strict("Interpolated shell commands can become command execution."),
|
|
161
161
|
"security/unsafe-deserialization": strict("Deserializing untrusted data with a legacy .NET formatter can become remote code execution."),
|
|
162
162
|
"security/unsafe-c-call": strict("Unbounded C string and process calls can become buffer overflows or command execution."),
|
|
163
|
+
"security/prompt-injection": strict("Dynamic user interpolation in system/developer prompts enables prompt injection attacks."),
|
|
164
|
+
"security/unsandboxed-agent-tool": strict("Unsandboxed agent code execution or tool permission bypass allows arbitrary host commands."),
|
|
165
|
+
"security/invisible-unicode-tags": strict("Invisible Unicode Tag characters (U+E0000-U+E007F) hide stealth prompt injection payloads."),
|
|
163
166
|
"security/dependency-audit-skipped": advisory("An unavailable audit is visibility loss, not evidence of a vulnerability."),
|
|
164
167
|
"dotnet/projects-skipped": advisory("Skipping unrestored C# projects is visibility loss, not evidence of a defect."),
|
|
165
168
|
"cppcheck/chunks-skipped": advisory("A skipped cppcheck chunk is visibility loss, not evidence that the skipped files have a defect."),
|
package/dist/index.d.ts
CHANGED
|
@@ -70,6 +70,21 @@ declare const AislopConfigSchema: z.ZodObject<{
|
|
|
70
70
|
telemetry: z.ZodDefault<z.ZodObject<{
|
|
71
71
|
enabled: z.ZodDefault<z.ZodBoolean>;
|
|
72
72
|
}, z.core.$strict>>;
|
|
73
|
+
baseline: z.ZodOptional<z.ZodObject<{
|
|
74
|
+
mode: z.ZodDefault<z.ZodEnum<{
|
|
75
|
+
strict: "strict";
|
|
76
|
+
relaxed: "relaxed";
|
|
77
|
+
}>>;
|
|
78
|
+
}, z.core.$strict>>;
|
|
79
|
+
licensing: z.ZodOptional<z.ZodObject<{
|
|
80
|
+
onLapse: z.ZodDefault<z.ZodEnum<{
|
|
81
|
+
"fail-open": "fail-open";
|
|
82
|
+
"fail-closed": "fail-closed";
|
|
83
|
+
}>>;
|
|
84
|
+
}, z.core.$strict>>;
|
|
85
|
+
workspace: z.ZodOptional<z.ZodObject<{
|
|
86
|
+
minimumFloor: z.ZodDefault<z.ZodNumber>;
|
|
87
|
+
}, z.core.$strict>>;
|
|
73
88
|
rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
|
|
74
89
|
error: "error";
|
|
75
90
|
warning: "warning";
|
|
@@ -162,6 +177,21 @@ declare const RaigalConfigSchema: z.ZodObject<{
|
|
|
162
177
|
telemetry: z.ZodDefault<z.ZodObject<{
|
|
163
178
|
enabled: z.ZodDefault<z.ZodBoolean>;
|
|
164
179
|
}, z.core.$strict>>;
|
|
180
|
+
baseline: z.ZodOptional<z.ZodObject<{
|
|
181
|
+
mode: z.ZodDefault<z.ZodEnum<{
|
|
182
|
+
strict: "strict";
|
|
183
|
+
relaxed: "relaxed";
|
|
184
|
+
}>>;
|
|
185
|
+
}, z.core.$strict>>;
|
|
186
|
+
licensing: z.ZodOptional<z.ZodObject<{
|
|
187
|
+
onLapse: z.ZodDefault<z.ZodEnum<{
|
|
188
|
+
"fail-open": "fail-open";
|
|
189
|
+
"fail-closed": "fail-closed";
|
|
190
|
+
}>>;
|
|
191
|
+
}, z.core.$strict>>;
|
|
192
|
+
workspace: z.ZodOptional<z.ZodObject<{
|
|
193
|
+
minimumFloor: z.ZodDefault<z.ZodNumber>;
|
|
194
|
+
}, z.core.$strict>>;
|
|
165
195
|
rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
|
|
166
196
|
error: "error";
|
|
167
197
|
warning: "warning";
|