praxis-sec 1.1.0 → 1.2.1

package/cli/agents/abom-generator.js

@@ -13,7 +13,7 @@
 
 import fs from 'fs';
 import path from 'path';
-import fg from 'fast-glob';
+import fg from '../core/glob.js';
 
 // Agent config files to discover (from AgentConfigScanner)
 const AGENT_CONFIG_FILES = [

package/cli/agents/agent-attestation-agent.js

@@ -22,7 +22,7 @@
 import fs from 'fs';
 import path from 'path';
 import { createHash } from 'crypto';
-import { BaseAgent, createFinding } from './base-agent.js';
+import { BaseAgent, createFinding, ruleTableLineMask } from './base-agent.js';
 
 // =============================================================================
 // PATTERNS — detected in source files
@@ -284,9 +284,23 @@ export class AgentAttestationAgent extends BaseAgent {
 
       // Pattern-based checks
       const lines = content.split('\n');
+      // This lane bypasses scanFileWithPatterns, so honour the documented
+      // suppression comment here too — it was silently ignored before.
+      const ruleTable = ruleTableLineMask(lines);
+      // In a package manifest every `"url"` is npm metadata — bugs, repository,
+      // homepage, funding — pointing at a human, never fetched at runtime, and
+      // npm has no `integrity` field that would pin one. Applying ASI-10 there
+      // reported a high on essentially every published package that declares
+      // `bugs.url`. The rule still applies to agent/manifest configs, which is
+      // where a remote resource is actually loaded.
+      const patterns = isPackageJson
+        ? PATTERNS.filter(p => p.rule !== 'AGENT_NO_INTEGRITY_HASH')
+        : PATTERNS;
       for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
-        for (const pattern of PATTERNS) {
+        if (ruleTable && ruleTable.has(i)) continue;
+        if (this.isSuppressed(line)) continue;
+        for (const pattern of patterns) {
           pattern.regex.lastIndex = 0;
           if (pattern.regex.test(line)) {
             findings.push(createFinding({

package/cli/agents/agent-config-scanner.js

@@ -22,7 +22,7 @@
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
-import fg from 'fast-glob';
+import fg from '../core/glob.js';
 import { BaseAgent, createFinding } from './base-agent.js';
 
 // =============================================================================

package/cli/agents/agent-telemetry-agent.js

@@ -23,7 +23,7 @@
  */
 
 import fs from 'fs';
-import { BaseAgent, createFinding } from './base-agent.js';
+import { BaseAgent, createFinding, ruleTableLineMask } from './base-agent.js';
 
 // =============================================================================
 // PATTERNS & REGEXES
@@ -291,9 +291,16 @@ export class AgentTelemetryAgent extends BaseAgent {
       };
 
       // ── Pass 1: line-scoped regex patterns ───────────────────────────────
+      // A rule table's own prose/patterns would otherwise match the very rules
+      // looking for them; `ruleTable` is null for anything that is not a table.
+      const ruleTable = ruleTableLineMask(lines);
       for (const group of [SECRET_PATTERNS, HAZARDOUS_CMD_PATTERNS, PROMPT_INJECTION_PATTERNS, EXFIL_PATTERNS]) {
         for (const pattern of group) {
           for (let i = 0; i < lines.length; i++) {
+            if (ruleTable && ruleTable.has(i)) continue;
+            // This lane bypassed scanFileWithPatterns, so honour the documented
+            // suppression comment here too — it was silently ignored before.
+            if (this.isSuppressed(lines[i])) continue;
             pattern.regex.lastIndex = 0;
             let match;
             while ((match = pattern.regex.exec(lines[i])) !== null) {