agenticvulhunter 0.7.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- agenticvulhunter-0.7.0/PKG-INFO +53 -0
- agenticvulhunter-0.7.0/README.md +45 -0
- agenticvulhunter-0.7.0/pyproject.toml +27 -0
- agenticvulhunter-0.7.0/setup.cfg +4 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/__init__.py +3 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/bm25/__init__.py +15 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/bm25/files/stage2_5_model/cwe_knowledge.json +2687 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/bm25/files/stage2_5_model/documents.json +316 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/bm25/files/stage2_5_model/metadata.json +16 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/bm25/files/stage2_5_model/rules.json +5141 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/bm25/stage2_5_retriever_core.py +309 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/cli.py +128 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/config.py +398 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/diff.py +168 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/git.py +166 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/llm/__init__.py +26 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/llm/agent.py +290 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/llm/client.py +153 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/llm/protocol.py +98 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/llm/providers.py +178 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/llm/tools.py +57 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/llm/types.py +31 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/models.py +78 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/pipeline.py +431 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/prompts/stage1_candidates_research.md +121 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/prompts/stage2_context.md +86 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/prompts/stage3_hypotheses.md +54 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/prompts/stage3_hypotheses_no_bm25.md +48 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/prompts/stage4_judge.md +221 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/research_diff.py +60 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/resources.py +29 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/runlog.py +90 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/__init__.py +13 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/base.py +34 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/scoring.py +45 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/stage1_candidates.py +317 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/stage2_context.py +92 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/stage3_hypotheses.py +206 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/stage4_judge.py +263 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/stages/stage5_filter.py +82 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/tools/__init__.py +4 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/tools/bm25.py +172 -0
- agenticvulhunter-0.7.0/src/agenticbughunter/tools/repo.py +245 -0
- agenticvulhunter-0.7.0/src/agenticvulhunter.egg-info/PKG-INFO +53 -0
- agenticvulhunter-0.7.0/src/agenticvulhunter.egg-info/SOURCES.txt +46 -0
- agenticvulhunter-0.7.0/src/agenticvulhunter.egg-info/dependency_links.txt +1 -0
- agenticvulhunter-0.7.0/src/agenticvulhunter.egg-info/entry_points.txt +3 -0
- agenticvulhunter-0.7.0/src/agenticvulhunter.egg-info/top_level.txt +1 -0
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: agenticvulhunter
|
|
3
|
+
Version: 0.7.0
|
|
4
|
+
Summary: Project-local agentic secure-code-review Git gate with integrated BM25 retrieval
|
|
5
|
+
Author: AgenticVulHunter
|
|
6
|
+
Requires-Python: >=3.11
|
|
7
|
+
Description-Content-Type: text/markdown
|
|
8
|
+
|
|
9
|
+
# AgenticVulHunter
|
|
10
|
+
|
|
11
|
+
AgenticVulHunter is an agentic secure code review research tool for vulnerability analysis with open-weight and API-hosted language models.
|
|
12
|
+
|
|
13
|
+
## Install
|
|
14
|
+
|
|
15
|
+
Requires Python 3.11+ and Git.
|
|
16
|
+
|
|
17
|
+
For a local checkout:
|
|
18
|
+
|
|
19
|
+
```bash
|
|
20
|
+
pipx install .
|
|
21
|
+
```
|
|
22
|
+
|
|
23
|
+
After the package is published to PyPI:
|
|
24
|
+
|
|
25
|
+
```bash
|
|
26
|
+
pipx install agenticvulhunter
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
Check the installation:
|
|
30
|
+
|
|
31
|
+
```bash
|
|
32
|
+
agenticvulhunter --help
|
|
33
|
+
agenticvulhunter --version
|
|
34
|
+
```
|
|
35
|
+
|
|
36
|
+
## Research CLI
|
|
37
|
+
|
|
38
|
+
The portable package in this repository exposes the SCRBench research commands:
|
|
39
|
+
|
|
40
|
+
```bash
|
|
41
|
+
agenticvulhunter diffs
|
|
42
|
+
agenticvulhunter experiment --repo /path/to/repository --diff-id <SCRBENCH_COMMIT_ID>
|
|
43
|
+
```
|
|
44
|
+
|
|
45
|
+
Use `agenticvulhunter experiment --help` for the complete set of experiment options.
|
|
46
|
+
|
|
47
|
+
## Pipeline
|
|
48
|
+
|
|
49
|
+
AgenticVulHunter evaluates vulnerability candidates through staged candidate selection, repository knowledge building, CWE retrieval, validation, and filtering.
|
|
50
|
+
|
|
51
|
+
The research configuration and pipeline parameters are intentionally kept unchanged by the AgenticVulHunter branding update.
|
|
52
|
+
|
|
53
|
+
AgenticVulHunter is a research-derived review tool. Its findings should support human review and should not be treated as proof that a repository is secure.
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
# AgenticVulHunter
|
|
2
|
+
|
|
3
|
+
AgenticVulHunter is an agentic secure code review research tool for vulnerability analysis with open-weight and API-hosted language models.
|
|
4
|
+
|
|
5
|
+
## Install
|
|
6
|
+
|
|
7
|
+
Requires Python 3.11+ and Git.
|
|
8
|
+
|
|
9
|
+
For a local checkout:
|
|
10
|
+
|
|
11
|
+
```bash
|
|
12
|
+
pipx install .
|
|
13
|
+
```
|
|
14
|
+
|
|
15
|
+
After the package is published to PyPI:
|
|
16
|
+
|
|
17
|
+
```bash
|
|
18
|
+
pipx install agenticvulhunter
|
|
19
|
+
```
|
|
20
|
+
|
|
21
|
+
Check the installation:
|
|
22
|
+
|
|
23
|
+
```bash
|
|
24
|
+
agenticvulhunter --help
|
|
25
|
+
agenticvulhunter --version
|
|
26
|
+
```
|
|
27
|
+
|
|
28
|
+
## Research CLI
|
|
29
|
+
|
|
30
|
+
The portable package in this repository exposes the SCRBench research commands:
|
|
31
|
+
|
|
32
|
+
```bash
|
|
33
|
+
agenticvulhunter diffs
|
|
34
|
+
agenticvulhunter experiment --repo /path/to/repository --diff-id <SCRBENCH_COMMIT_ID>
|
|
35
|
+
```
|
|
36
|
+
|
|
37
|
+
Use `agenticvulhunter experiment --help` for the complete set of experiment options.
|
|
38
|
+
|
|
39
|
+
## Pipeline
|
|
40
|
+
|
|
41
|
+
AgenticVulHunter evaluates vulnerability candidates through staged candidate selection, repository knowledge building, CWE retrieval, validation, and filtering.
|
|
42
|
+
|
|
43
|
+
The research configuration and pipeline parameters are intentionally kept unchanged by the AgenticVulHunter branding update.
|
|
44
|
+
|
|
45
|
+
AgenticVulHunter is a research-derived review tool. Its findings should support human review and should not be treated as proof that a repository is secure.
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
[build-system]
|
|
2
|
+
requires = ["setuptools>=69"]
|
|
3
|
+
build-backend = "setuptools.build_meta"
|
|
4
|
+
|
|
5
|
+
[project]
|
|
6
|
+
name = "agenticvulhunter"
|
|
7
|
+
version = "0.7.0"
|
|
8
|
+
description = "Project-local agentic secure-code-review Git gate with integrated BM25 retrieval"
|
|
9
|
+
readme = "README.md"
|
|
10
|
+
requires-python = ">=3.11"
|
|
11
|
+
authors = [{name = "AgenticVulHunter"}]
|
|
12
|
+
dependencies = []
|
|
13
|
+
|
|
14
|
+
[project.scripts]
|
|
15
|
+
agenticvulhunter = "agenticbughunter.cli:main"
|
|
16
|
+
avh = "agenticbughunter.cli:main"
|
|
17
|
+
|
|
18
|
+
[tool.setuptools]
|
|
19
|
+
package-dir = {"" = "src"}
|
|
20
|
+
include-package-data = true
|
|
21
|
+
|
|
22
|
+
[tool.setuptools.packages.find]
|
|
23
|
+
where = ["src"]
|
|
24
|
+
include = ["agenticbughunter*"]
|
|
25
|
+
|
|
26
|
+
[tool.setuptools.package-data]
|
|
27
|
+
agenticbughunter = ["prompts/*.md", "bm25/files/stage2_5_model/*.json"]
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
"""Bundled in-process BM25 retrieval runtime."""
|
|
2
|
+
|
|
3
|
+
from .stage2_5_retriever_core import (
|
|
4
|
+
DEFAULT_MODEL_DIR,
|
|
5
|
+
SASTRetriever,
|
|
6
|
+
item_language,
|
|
7
|
+
model_exists,
|
|
8
|
+
)
|
|
9
|
+
|
|
10
|
+
__all__ = [
|
|
11
|
+
"DEFAULT_MODEL_DIR",
|
|
12
|
+
"SASTRetriever",
|
|
13
|
+
"item_language",
|
|
14
|
+
"model_exists",
|
|
15
|
+
]
|