SafeAI-Static-Analyzer 2.3.0__tar.gz → 2.5.0__tar.gz

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 2.3.0
+Version: 2.5.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -31,17 +31,29 @@ Provides-Extra: standalone
 Requires-Dist: pyinstaller>=6.0; extra == "standalone"
 Dynamic: license-file
 
-# SafeAI — Static AI Capability & Risk Analyzer
+# SafeAI — Agent Authority Security for the Software Supply Chain
 
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
 [![Website](https://img.shields.io/badge/web-safeai--analyzer.ikaruscareer.com-0f766e)](https://safeai-analyzer.ikaruscareer.com)
-[![Latest Release](https://img.shields.io/badge/latest-v2.3.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.3.0)
+[![Latest Release](https://img.shields.io/badge/latest-v2.4.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.4.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
 
-**SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+**Know what your AI agent can do before you deploy it.**
+
+**SafeAI** statically maps agent capabilities, tools, MCP integrations, and authority changes, then turns material changes into explainable CI/CD security decisions and portable evidence. Technically, SafeAI is a *Static AI Capability & Risk Analyzer*: it scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+
+**Three pillars — DISCOVER / COMPARE / GOVERN:**
+
+| Pillar | Question | What SafeAI does |
+|---|---|---|
+| **DISCOVER** | What can the agent access? | Builds an evidence-backed model of agent authority: tools, MCP servers, filesystem, shell, databases, APIs, destinations, memory, delegation, autonomy, approval controls |
+| **COMPARE** | What changed? | Diffs authority against the approved baseline: new tools, `read → write` widening, new destinations, removed approval gates |
+| **GOVERN** | Should that change be allowed? | Deterministic CI/CD decisions — `pass`, `review-required`, `block`, `accepted-exception` — with evidence, never an opaque score |
+
+> SafeAI is not a runtime guardrail and does not certify an agent as safe. It provides source-first, evidence-backed visibility into agent authority and meaningful changes *before deployment*.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
 
@@ -75,6 +87,65 @@ Designed to be lightweight, explainable, and community-driven, SafeAI aims to be
 
 SafeAI sits before runtime guardrails and red-teaming tools in the security lifecycle. It scans agent source code at commit time — detecting framework-specific capabilities, MCP misconfigurations, and prompt injection patterns — before you ever deploy an agent to staging. It does not replace runtime tools (Microsoft AGT), evaluation frameworks (LangSmith, DeepEval), or red-teaming scanners (Promptfoo, Garak). It complements them: find the risk in code first, then validate at runtime.
 
+---
+
+## Example: authority-change report
+
+*SafeAI's most important security event is not simply that a finding exists. It is that an agent's effective authority materially changes.*
+
+```
+Agent: customer-support-agent            Baseline: release v2.4.0 (approved)
+
+AUTHORITY CHANGE (material)
++ tool:        crm_update
++ capability:  database write
++ destination: production CRM
++ access:      read → write
+- human approval gate (GOV_APPROVAL_MISSING)
+
+Policy decision: BLOCK
+Reason: production write authority was added without an approved
+        exception or required approval control.
+Evidence: source files · tool definition · baseline manifest ·
+          current manifest · policy profile · SafeAI version ·
+          ruleset version · commit SHA
+```
+
+The reviewer learns *what the agent can now do that it could not do
+before* — and the decision cites evidence, not a score.
+
+---
+
+## Agent Authority Model
+
+SafeAI builds an analytical model — not an observation of runtime
+permissions — of what an agent is empowered to do:
+
+```
+Agent
+  → Tool / MCP Server / Skill / Workflow Node
+    → Capability
+      → Access Mode (none < read < write < mutate < execute)
+        → Data / Destination / Resource
+          → Authority
+```
+
+Every authority statement carries a class: **declared** (config says so),
+**detected** (code shows it), **inferred** (heuristic, confidence-labelled),
+**repository/IaC-observed** (in-repo infrastructure grants), or
+**unknown**. Runtime-granted authority (live IAM, deployed network policy,
+runtime identity) is explicitly **unknown** to the static scanner —
+*unknown is an evidence state, not evidence of safety*, and SafeAI never
+converts it into a pass.
+
+**What decisions mean.** `pass` means no configured deterministic gate
+triggered — never "the agent is safe." `unknown` means unattributable
+evidence — never "no risk detected." Organizations can govern unknown
+authority explicitly (`authority.unknown` policy, `--unknown-authority`),
+but the default leaves it visible and unfailed.
+
+---
+
 <img width="1024" height="1024" alt="SafeAI_Concept" src="https://github.com/user-attachments/assets/c07999b2-79d5-4200-9eec-ce1ab4e63cc8" />
 
 
@@ -101,7 +172,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 | **Baseline & Escalation Gating** | `--fail-on-new` for new/regressed findings, `--fail-on-escalation` for authority changes, `--pr-comment` PR summaries |
 | **Policy-as-Code & Suppressions** | `allow`/`warn`/`require_review`/`deny` policy with selectors; required-reason suppressions |
 | **Assurance Boundary** | Every scan states exactly what it did and could not verify — never a fixed disclaimer |
-| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; `--scorecard`, `--scorecard-json`, `--scorecard-summary`, and `--scorecard-fail-under` to gate CI on a minimum score |
+| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; informational unless you opt into `--scorecard-fail-under` gating — evidence and policy decide, the score does not |
 | **CI/CD Integration** | SARIF 2.1.0 output, exit codes, GitHub Actions **Marketplace action** and workflow included |
 | **Community Scan** | Governed private-pilot workflow for scanning public third-party agent frameworks with responsible disclosure (`community-scans/`) — private by default, human-reviewed before any publication |
 | **Multi-Format Reports** | Terminal, JSON, SARIF 2.1.0, HTML, canonical KYA manifest, PR comment, Security Scorecard |
@@ -530,6 +601,13 @@ contributors who have helped make AI safer:
 | [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
 | [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
 | [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
+| [@Teachmeplaycode](https://github.com/Teachmeplaycode) | Benchmark corpus expansion, static subprocess precision gap documentation (PR #174) |
+| [@nikitajos7](https://github.com/nikitajos7) | Policy profile display in terminal and HTML reports (PR #175) |
+| [@be-student](https://github.com/be-student) | Portable registry import, MCP tool-pattern golden fixtures, canonical release checklist (PRs #123, #124, #125) |
+| [@Karthik9849309055](https://github.com/Karthik9849309055) | Multi-framework scan automation script (PR #161) |
+| [@chenzeyan54-commits](https://github.com/chenzeyan54-commits) | Terminal output sanitization against ANSI/OSC injection (PR #203) |
+| [@HarshRajSinghania](https://github.com/HarshRajSinghania) | PR comment markdown injection sanitization (PR #204) |
+| [@thadidaniel-ctrl](https://github.com/thadidaniel-ctrl) | Release workflow supply-chain posture tests (PR #206) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.5.0}/README.md

@@ -1,14 +1,26 @@
-# SafeAI — Static AI Capability & Risk Analyzer
+# SafeAI — Agent Authority Security for the Software Supply Chain
 
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
 [![Website](https://img.shields.io/badge/web-safeai--analyzer.ikaruscareer.com-0f766e)](https://safeai-analyzer.ikaruscareer.com)
-[![Latest Release](https://img.shields.io/badge/latest-v2.3.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.3.0)
+[![Latest Release](https://img.shields.io/badge/latest-v2.4.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.4.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
 
-**SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+**Know what your AI agent can do before you deploy it.**
+
+**SafeAI** statically maps agent capabilities, tools, MCP integrations, and authority changes, then turns material changes into explainable CI/CD security decisions and portable evidence. Technically, SafeAI is a *Static AI Capability & Risk Analyzer*: it scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+
+**Three pillars — DISCOVER / COMPARE / GOVERN:**
+
+| Pillar | Question | What SafeAI does |
+|---|---|---|
+| **DISCOVER** | What can the agent access? | Builds an evidence-backed model of agent authority: tools, MCP servers, filesystem, shell, databases, APIs, destinations, memory, delegation, autonomy, approval controls |
+| **COMPARE** | What changed? | Diffs authority against the approved baseline: new tools, `read → write` widening, new destinations, removed approval gates |
+| **GOVERN** | Should that change be allowed? | Deterministic CI/CD decisions — `pass`, `review-required`, `block`, `accepted-exception` — with evidence, never an opaque score |
+
+> SafeAI is not a runtime guardrail and does not certify an agent as safe. It provides source-first, evidence-backed visibility into agent authority and meaningful changes *before deployment*.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
 
@@ -42,6 +54,65 @@ Designed to be lightweight, explainable, and community-driven, SafeAI aims to be
 
 SafeAI sits before runtime guardrails and red-teaming tools in the security lifecycle. It scans agent source code at commit time — detecting framework-specific capabilities, MCP misconfigurations, and prompt injection patterns — before you ever deploy an agent to staging. It does not replace runtime tools (Microsoft AGT), evaluation frameworks (LangSmith, DeepEval), or red-teaming scanners (Promptfoo, Garak). It complements them: find the risk in code first, then validate at runtime.
 
+---
+
+## Example: authority-change report
+
+*SafeAI's most important security event is not simply that a finding exists. It is that an agent's effective authority materially changes.*
+
+```
+Agent: customer-support-agent            Baseline: release v2.4.0 (approved)
+
+AUTHORITY CHANGE (material)
++ tool:        crm_update
++ capability:  database write
++ destination: production CRM
++ access:      read → write
+- human approval gate (GOV_APPROVAL_MISSING)
+
+Policy decision: BLOCK
+Reason: production write authority was added without an approved
+        exception or required approval control.
+Evidence: source files · tool definition · baseline manifest ·
+          current manifest · policy profile · SafeAI version ·
+          ruleset version · commit SHA
+```
+
+The reviewer learns *what the agent can now do that it could not do
+before* — and the decision cites evidence, not a score.
+
+---
+
+## Agent Authority Model
+
+SafeAI builds an analytical model — not an observation of runtime
+permissions — of what an agent is empowered to do:
+
+```
+Agent
+  → Tool / MCP Server / Skill / Workflow Node
+    → Capability
+      → Access Mode (none < read < write < mutate < execute)
+        → Data / Destination / Resource
+          → Authority
+```
+
+Every authority statement carries a class: **declared** (config says so),
+**detected** (code shows it), **inferred** (heuristic, confidence-labelled),
+**repository/IaC-observed** (in-repo infrastructure grants), or
+**unknown**. Runtime-granted authority (live IAM, deployed network policy,
+runtime identity) is explicitly **unknown** to the static scanner —
+*unknown is an evidence state, not evidence of safety*, and SafeAI never
+converts it into a pass.
+
+**What decisions mean.** `pass` means no configured deterministic gate
+triggered — never "the agent is safe." `unknown` means unattributable
+evidence — never "no risk detected." Organizations can govern unknown
+authority explicitly (`authority.unknown` policy, `--unknown-authority`),
+but the default leaves it visible and unfailed.
+
+---
+
 <img width="1024" height="1024" alt="SafeAI_Concept" src="https://github.com/user-attachments/assets/c07999b2-79d5-4200-9eec-ce1ab4e63cc8" />
 
 
@@ -68,7 +139,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 | **Baseline & Escalation Gating** | `--fail-on-new` for new/regressed findings, `--fail-on-escalation` for authority changes, `--pr-comment` PR summaries |
 | **Policy-as-Code & Suppressions** | `allow`/`warn`/`require_review`/`deny` policy with selectors; required-reason suppressions |
 | **Assurance Boundary** | Every scan states exactly what it did and could not verify — never a fixed disclaimer |
-| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; `--scorecard`, `--scorecard-json`, `--scorecard-summary`, and `--scorecard-fail-under` to gate CI on a minimum score |
+| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; informational unless you opt into `--scorecard-fail-under` gating — evidence and policy decide, the score does not |
 | **CI/CD Integration** | SARIF 2.1.0 output, exit codes, GitHub Actions **Marketplace action** and workflow included |
 | **Community Scan** | Governed private-pilot workflow for scanning public third-party agent frameworks with responsible disclosure (`community-scans/`) — private by default, human-reviewed before any publication |
 | **Multi-Format Reports** | Terminal, JSON, SARIF 2.1.0, HTML, canonical KYA manifest, PR comment, Security Scorecard |
@@ -497,6 +568,13 @@ contributors who have helped make AI safer:
 | [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
 | [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
 | [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
+| [@Teachmeplaycode](https://github.com/Teachmeplaycode) | Benchmark corpus expansion, static subprocess precision gap documentation (PR #174) |
+| [@nikitajos7](https://github.com/nikitajos7) | Policy profile display in terminal and HTML reports (PR #175) |
+| [@be-student](https://github.com/be-student) | Portable registry import, MCP tool-pattern golden fixtures, canonical release checklist (PRs #123, #124, #125) |
+| [@Karthik9849309055](https://github.com/Karthik9849309055) | Multi-framework scan automation script (PR #161) |
+| [@chenzeyan54-commits](https://github.com/chenzeyan54-commits) | Terminal output sanitization against ANSI/OSC injection (PR #203) |
+| [@HarshRajSinghania](https://github.com/HarshRajSinghania) | PR comment markdown injection sanitization (PR #204) |
+| [@thadidaniel-ctrl](https://github.com/thadidaniel-ctrl) | Release workflow supply-chain posture tests (PR #206) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.5.0}/SafeAI_Static_Analyzer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 2.3.0
+Version: 2.5.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -31,17 +31,29 @@ Provides-Extra: standalone
 Requires-Dist: pyinstaller>=6.0; extra == "standalone"
 Dynamic: license-file
 
-# SafeAI — Static AI Capability & Risk Analyzer
+# SafeAI — Agent Authority Security for the Software Supply Chain
 
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
 [![Website](https://img.shields.io/badge/web-safeai--analyzer.ikaruscareer.com-0f766e)](https://safeai-analyzer.ikaruscareer.com)
-[![Latest Release](https://img.shields.io/badge/latest-v2.3.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.3.0)
+[![Latest Release](https://img.shields.io/badge/latest-v2.4.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.4.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
 
-**SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+**Know what your AI agent can do before you deploy it.**
+
+**SafeAI** statically maps agent capabilities, tools, MCP integrations, and authority changes, then turns material changes into explainable CI/CD security decisions and portable evidence. Technically, SafeAI is a *Static AI Capability & Risk Analyzer*: it scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only `--pr-comment-post`). It integrates into CI/CD pipelines.
+
+**Three pillars — DISCOVER / COMPARE / GOVERN:**
+
+| Pillar | Question | What SafeAI does |
+|---|---|---|
+| **DISCOVER** | What can the agent access? | Builds an evidence-backed model of agent authority: tools, MCP servers, filesystem, shell, databases, APIs, destinations, memory, delegation, autonomy, approval controls |
+| **COMPARE** | What changed? | Diffs authority against the approved baseline: new tools, `read → write` widening, new destinations, removed approval gates |
+| **GOVERN** | Should that change be allowed? | Deterministic CI/CD decisions — `pass`, `review-required`, `block`, `accepted-exception` — with evidence, never an opaque score |
+
+> SafeAI is not a runtime guardrail and does not certify an agent as safe. It provides source-first, evidence-backed visibility into agent authority and meaningful changes *before deployment*.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
 
@@ -75,6 +87,65 @@ Designed to be lightweight, explainable, and community-driven, SafeAI aims to be
 
 SafeAI sits before runtime guardrails and red-teaming tools in the security lifecycle. It scans agent source code at commit time — detecting framework-specific capabilities, MCP misconfigurations, and prompt injection patterns — before you ever deploy an agent to staging. It does not replace runtime tools (Microsoft AGT), evaluation frameworks (LangSmith, DeepEval), or red-teaming scanners (Promptfoo, Garak). It complements them: find the risk in code first, then validate at runtime.
 
+---
+
+## Example: authority-change report
+
+*SafeAI's most important security event is not simply that a finding exists. It is that an agent's effective authority materially changes.*
+
+```
+Agent: customer-support-agent            Baseline: release v2.4.0 (approved)
+
+AUTHORITY CHANGE (material)
++ tool:        crm_update
++ capability:  database write
++ destination: production CRM
++ access:      read → write
+- human approval gate (GOV_APPROVAL_MISSING)
+
+Policy decision: BLOCK
+Reason: production write authority was added without an approved
+        exception or required approval control.
+Evidence: source files · tool definition · baseline manifest ·
+          current manifest · policy profile · SafeAI version ·
+          ruleset version · commit SHA
+```
+
+The reviewer learns *what the agent can now do that it could not do
+before* — and the decision cites evidence, not a score.
+
+---
+
+## Agent Authority Model
+
+SafeAI builds an analytical model — not an observation of runtime
+permissions — of what an agent is empowered to do:
+
+```
+Agent
+  → Tool / MCP Server / Skill / Workflow Node
+    → Capability
+      → Access Mode (none < read < write < mutate < execute)
+        → Data / Destination / Resource
+          → Authority
+```
+
+Every authority statement carries a class: **declared** (config says so),
+**detected** (code shows it), **inferred** (heuristic, confidence-labelled),
+**repository/IaC-observed** (in-repo infrastructure grants), or
+**unknown**. Runtime-granted authority (live IAM, deployed network policy,
+runtime identity) is explicitly **unknown** to the static scanner —
+*unknown is an evidence state, not evidence of safety*, and SafeAI never
+converts it into a pass.
+
+**What decisions mean.** `pass` means no configured deterministic gate
+triggered — never "the agent is safe." `unknown` means unattributable
+evidence — never "no risk detected." Organizations can govern unknown
+authority explicitly (`authority.unknown` policy, `--unknown-authority`),
+but the default leaves it visible and unfailed.
+
+---
+
 <img width="1024" height="1024" alt="SafeAI_Concept" src="https://github.com/user-attachments/assets/c07999b2-79d5-4200-9eec-ce1ab4e63cc8" />
 
 
@@ -101,7 +172,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 | **Baseline & Escalation Gating** | `--fail-on-new` for new/regressed findings, `--fail-on-escalation` for authority changes, `--pr-comment` PR summaries |
 | **Policy-as-Code & Suppressions** | `allow`/`warn`/`require_review`/`deny` policy with selectors; required-reason suppressions |
 | **Assurance Boundary** | Every scan states exactly what it did and could not verify — never a fixed disclaimer |
-| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; `--scorecard`, `--scorecard-json`, `--scorecard-summary`, and `--scorecard-fail-under` to gate CI on a minimum score |
+| **Security Scorecard** | Deterministic 0–10 score with per-category breakdown and `pass`/`warn`/`fail` outcome; informational unless you opt into `--scorecard-fail-under` gating — evidence and policy decide, the score does not |
 | **CI/CD Integration** | SARIF 2.1.0 output, exit codes, GitHub Actions **Marketplace action** and workflow included |
 | **Community Scan** | Governed private-pilot workflow for scanning public third-party agent frameworks with responsible disclosure (`community-scans/`) — private by default, human-reviewed before any publication |
 | **Multi-Format Reports** | Terminal, JSON, SARIF 2.1.0, HTML, canonical KYA manifest, PR comment, Security Scorecard |
@@ -530,6 +601,13 @@ contributors who have helped make AI safer:
 | [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
 | [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
 | [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
+| [@Teachmeplaycode](https://github.com/Teachmeplaycode) | Benchmark corpus expansion, static subprocess precision gap documentation (PR #174) |
+| [@nikitajos7](https://github.com/nikitajos7) | Policy profile display in terminal and HTML reports (PR #175) |
+| [@be-student](https://github.com/be-student) | Portable registry import, MCP tool-pattern golden fixtures, canonical release checklist (PRs #123, #124, #125) |
+| [@Karthik9849309055](https://github.com/Karthik9849309055) | Multi-framework scan automation script (PR #161) |
+| [@chenzeyan54-commits](https://github.com/chenzeyan54-commits) | Terminal output sanitization against ANSI/OSC injection (PR #203) |
+| [@HarshRajSinghania](https://github.com/HarshRajSinghania) | PR comment markdown injection sanitization (PR #204) |
+| [@thadidaniel-ctrl](https://github.com/thadidaniel-ctrl) | Release workflow supply-chain posture tests (PR #206) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-2.3.0 → safeai_static_analyzer-2.5.0}/SafeAI_Static_Analyzer.egg-info/SOURCES.txt

@@ -22,6 +22,7 @@ safeai/analysis/components.py
 safeai/analysis/dependency_correlation.py
 safeai/analysis/escalation.py
 safeai/analysis/escalation_remediation.py
+safeai/analysis/iac_correlation.py
 safeai/analysis/import_graph.py
 safeai/analysis/project_graph.py
 safeai/analysis/semantic.py
@@ -115,12 +116,19 @@ safeai/frameworks/semantic_kernel/__init__.py
 safeai/frameworks/semantic_kernel/parser.py
 safeai/frameworks/windsurf/__init__.py
 safeai/frameworks/windsurf/parser.py
+safeai/iac/__init__.py
+safeai/iac/k8s.py
+safeai/iac/linking.py
+safeai/iac/model.py
+safeai/iac/semantics.py
+safeai/iac/terraform.py
 safeai/kya/__init__.py
 safeai/kya/assurance.py
 safeai/kya/baseline.py
 safeai/kya/ci_context.py
 safeai/kya/contract.py
 safeai/kya/enrich.py
+safeai/kya/exceptions.py
 safeai/kya/exporter.py
 safeai/kya/fingerprints.py
 safeai/kya/identity.py
@@ -156,8 +164,12 @@ safeai/telemetry/client.py
 safeai/telemetry/config.py
 safeai/telemetry/schema.py
 tests/test_adapter_dataflow.py
+tests/test_architectural_invariants.py
+tests/test_architecture_diagram.py
 tests/test_assurance.py
+tests/test_authority_change.py
 tests/test_baseline.py
+tests/test_baseline_compat.py
 tests/test_benchmarks.py
 tests/test_capability_detection.py
 tests/test_capability_diff_v2.py
@@ -175,11 +187,20 @@ tests/test_dco.py
 tests/test_env_dependency.py
 tests/test_escalation.py
 tests/test_escalation_remediation.py
+tests/test_evidence_contract_v7.py
 tests/test_evidence_type.py
+tests/test_exceptions.py
 tests/test_fingerprints.py
 tests/test_github_action.py
 tests/test_governance_analyzer.py
 tests/test_html_report.py
+tests/test_iac_adversarial.py
+tests/test_iac_benchmark.py
+tests/test_iac_correlation.py
+tests/test_iac_k8s.py
+tests/test_iac_linking.py
+tests/test_iac_semantics.py
+tests/test_iac_terraform.py
 tests/test_init_and_rules.py
 tests/test_kya_integration.py
 tests/test_kya_manifest.py
@@ -196,6 +217,7 @@ tests/test_plugin_sdk.py
 tests/test_policy.py
 tests/test_pr_comment.py
 tests/test_pr_comment_cli.py
+tests/test_pr_paths.py
 tests/test_quality_gates.py
 tests/test_registry.py
 tests/test_registry_cli.py
@@ -204,6 +226,7 @@ tests/test_regression_fixtures.py
 tests/test_release_assets.py
 tests/test_release_fixes.py
 tests/test_release_validation.py
+tests/test_release_workflow.py
 tests/test_rules_loader_determinism.py
 tests/test_sarif.py
 tests/test_scan_framework.py
@@ -215,7 +238,9 @@ tests/test_severity.py
 tests/test_suppressions.py
 tests/test_target_taxonomy_engine.py
 tests/test_telemetry.py
+tests/test_terminal_report.py
 tests/test_tool_identity.py
 tests/test_tool_implementation.py
+tests/test_unknown_authority.py
 tests/test_version.py
 tests/test_windsurf_framework.py