gitgalaxy 2.0.2__tar.gz → 2.0.5__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {gitgalaxy-2.0.2/gitgalaxy.egg-info → gitgalaxy-2.0.5}/PKG-INFO +40 -31
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/README.md +37 -28
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/cobol_refractor_controller.py +9 -9
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/cobol_to_java_controller.py +6 -6
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/core/aperture.py +1 -1
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/core/detector.py +86 -57
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/core/network_risk_sensor.py +29 -14
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/core/prism.py +2 -2
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/galaxyscope.py +126 -61
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/physics/signal_processor.py +133 -137
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/physics/spectral_auditor.py +24 -24
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/recorders/audit_recorder.py +95 -98
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/recorders/gpu_recorder.py +67 -64
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/recorders/llm_recorder.py +118 -82
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/recorders/record_keeper.py +85 -77
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/security/security_lens.py +2 -28
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/standards/language_standards.py +167 -178
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/ai_guardrails/ai_appsec_sensor.py +8 -8
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/ai_guardrails/dev_agent_firewall.py +19 -19
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/compliance/sbom_generator.py +68 -1
- gitgalaxy-2.0.5/gitgalaxy/tools/network_auditing/full_api_network_map.py +279 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/supply_chain_security/binary_anomaly_detector.py +40 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/supply_chain_security/supply_chain_firewall.py +25 -2
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/terabyte_log_scanning/terabyte_log_scanner.py +15 -3
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5/gitgalaxy.egg-info}/PKG-INFO +40 -31
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy.egg-info/SOURCES.txt +2 -1
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/pyproject.toml +3 -5
- gitgalaxy-2.0.5/tests/test_galaxyscope.py +61 -0
- gitgalaxy-2.0.2/gitgalaxy/tools/network_auditing/full_api_network_map.py +0 -132
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/LICENSE +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/MANIFEST.in +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/__init__.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/core/__init__.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/core/guidestar_lens.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/core/state_rehydrator.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/physics/__init__.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/physics/chronometer.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/physics/neural_auditor.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/recorders/__init__.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/security/__init__.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/security/security_auditor.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/standards/__init__.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/standards/analysis_lens.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/standards/gitgalaxy_config.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/standards/language_lens.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/__init__.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_agent_task_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_compiler_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_dag_architect.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_etl_unpacker.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_graveyard_finder.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_jcl_auditor.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_jcl_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_lexical_patcher.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_microservice_slicer.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_schema_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_cobol/cobol_system_limits_reporter.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_java/batch_test_harness.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_java/cobol_to_java_agent_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_java/cobol_to_java_api_contract_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_java/cobol_to_java_build_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_java/cobol_to_java_decoder_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_java/cobol_to_java_service_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/cobol_to_java/cobol_to_java_spring_forge.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/supply_chain_security/vault_sentinel.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy/tools/terabyte_log_scanning/pii_leak_hunter.py +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy.egg-info/dependency_links.txt +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy.egg-info/entry_points.txt +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/gitgalaxy.egg-info/top_level.txt +0 -0
- {gitgalaxy-2.0.2 → gitgalaxy-2.0.5}/setup.cfg +0 -0
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: gitgalaxy
|
|
3
|
-
Version: 2.0.
|
|
3
|
+
Version: 2.0.5
|
|
4
4
|
Summary: An AST-free, zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
|
|
5
|
-
Author:
|
|
5
|
+
Author: Joe Esquibel
|
|
6
6
|
Project-URL: Homepage, https://gitgalaxy.io
|
|
7
7
|
Project-URL: Documentation, https://squid-protocol.github.io/gitgalaxy/
|
|
8
8
|
Project-URL: Source, https://github.com/squid-protocol/gitgalaxy
|
|
@@ -16,7 +16,7 @@ Classifier: Topic :: Software Development :: Quality Assurance
|
|
|
16
16
|
Classifier: Topic :: Scientific/Engineering :: Visualization
|
|
17
17
|
Classifier: Intended Audience :: Developers
|
|
18
18
|
Classifier: Intended Audience :: Information Technology
|
|
19
|
-
Requires-Python: >=3.
|
|
19
|
+
Requires-Python: >=3.9
|
|
20
20
|
Description-Content-Type: text/markdown
|
|
21
21
|
License-File: LICENSE
|
|
22
22
|
Dynamic: license-file
|
|
@@ -38,32 +38,36 @@ Dynamic: license-file
|
|
|
38
38
|
[](https://pypi.org/project/gitgalaxy/)
|
|
39
39
|
[](#)
|
|
40
40
|
|
|
41
|
-
### **
|
|
41
|
+
### **AST-Free Static Analysis & Knowledge Graph Engine**
|
|
42
42
|
|
|
43
|
-
The blAST (Bypassing LLMs and ASTs) engine is a custom-made knowledge graph engine that resolves repositories at the function level. It scores each function based on 50 unique metrics, rolls that data up to score the file, and finally summarizes the entire repository.
|
|
43
|
+
The blAST (Bypassing LLMs and ASTs) engine is a custom-made knowledge graph engine that resolves repositories at the function level. It scores each function based on 50 unique metrics, rolls that data up to score the file, and finally summarizes the entire repository.
|
|
44
44
|
|
|
45
|
-
|
|
45
|
+
### Scanning Apollo-11 with the blAST Engine
|
|
46
46
|
|
|
47
|
-
|
|
47
|
+

|
|
48
|
+
|
|
49
|
+
By utilizing a custom engine, we retain full control over the search space. We built it to be exceptionally fast, capable of assessing your entire repository without requiring compilable code—a fundamental limitation of standard Abstract Syntax Trees (ASTs). ASTs are great for finding missing commas and memory overflows, but they miss the forest for the trees when generating knowledge graphs. LLMs, on the other hand, suffer from hallucination during large context windows and yield probabilistic, fluctuating answers.
|
|
50
|
+
|
|
51
|
+
The blAST engine solves this. Because all programming languages utilize keywords and functions, our engine treats code files as text, scanning for these structural anchors to build a deterministic 3D knowledge graph. It seamlessly handles mid-file language switching, assesses the architectural ratio of test files to logic, and extracts invaluable project structure data that ASTs ignore.
|
|
48
52
|
|
|
49
53
|
Every assumption our system makes has been abstracted into over 300 tunable variables. Think of GitGalaxy as a highly calibrated telescope. You can query the number of active API network nodes, isolate unique external imports, or highlight functions exhibiting extreme cognitive load—all adjusted via custom whitelists and blacklists to eliminate false-positive fatigue. Field-tested on over 1,000 repositories spanning 50+ languages and 250+ extensions, the engine comes equipped with smart defaults ready for immediate deployment.
|
|
50
54
|
|
|
51
|
-
**Core Technology**
|
|
55
|
+
**Core Codebase Mapping Technology**
|
|
52
56
|
* Bypasses LLMs and rigid ASTs.
|
|
53
57
|
* Doesn't require code to compile (AST-free).
|
|
54
58
|
* Produces full function-to-function call chains.
|
|
55
59
|
* Deterministically maps code by 60+ keyword regex profiles (Structural markers, I/O intents, state mutations).
|
|
56
|
-
* Regex keyword profiles allow us to classify functions, files, classes, folders and repos.
|
|
60
|
+
* Regex keyword profiles allow us to classify functions, files, classes, folders and repos.
|
|
57
61
|
* Eliminates LLM architectural hallucinations and context window limits.
|
|
58
62
|
* Scans 50+ languages, 250+ extensions, fully folder-aware. **([How to add a language in 1 minute and 1 prompt](gitgalaxy/standards/HOW_TO_ADD_LANGUAGE.md))**
|
|
59
63
|
|
|
60
|
-
**
|
|
64
|
+
**Enterprise Scale & Performance Metrics**
|
|
61
65
|
* 100,000 LOC/sec code analysis.
|
|
62
66
|
* 0.07 GB/sec raw log ingestion.
|
|
63
67
|
* Full-system scans in minutes without data sampling.
|
|
64
68
|
* 100% daily system coverage.
|
|
65
69
|
|
|
66
|
-
**
|
|
70
|
+
**Methodology & Comparative Benchmarks**
|
|
67
71
|
GitGalaxy is backed by an academic-grade thesis detailing the equations powering the blAST engine.
|
|
68
72
|
|
|
69
73
|
* **[Optimum Search Strategies Evolve](https://squid-protocol.github.io/gitgalaxy/03-01-claim-1-search-strategies/):** AST-free mapping. Outperforms rigid parsers and LLM context windows.
|
|
@@ -71,15 +75,14 @@ GitGalaxy is backed by an academic-grade thesis detailing the equations powering
|
|
|
71
75
|
* **[All languages have keywords that roughly do the same thing, these can be grouped to make cross-language keyword maps](https://squid-protocol.github.io/gitgalaxy/03-03-claim-3-taxonomy-map/):** Standardizes 50+ languages into a single universal physical framework.
|
|
72
76
|
* **[Cross-Language Comparisons of over 1000 repos](https://squid-protocol.github.io/gitgalaxy/03-04-claim-4-comparing-languages/):** Deterministic 1:1 benchmarking of distinct syntax architectures.
|
|
73
77
|
* **[Universal File Archetypes by k-means clustering](https://squid-protocol.github.io/gitgalaxy/03-05-claim-5-file-archetypes/):** ML isolation of files into K-means clusters (e.g., "The God Nodes," "Declarative Glue").
|
|
74
|
-
* **[
|
|
75
|
-
* **Mainframe Proven:** Successful from-scratch translation of legacy COBOL monoliths to compiling Spring Boot architectures.
|
|
78
|
+
* **[Mainframe Proven: 100% CI/CD Translation Success Rate](https://github.com/squid-protocol/gitgalaxy/tree/main/examples/ibm_cics_translation):** Flawless architectural translation of 27 distinct legacy COBOL repositories (including IBM CICS benchmark apps) into compiling Java Spring Boot environments.
|
|
76
79
|
|
|
77
|
-
**
|
|
80
|
+
**Data Privacy & On-Premise Deployment**
|
|
78
81
|
* 100% air-gapped execution.
|
|
79
82
|
* On-premise deployment with zero IP exfiltration risk.
|
|
80
83
|
* Zero-trust processing model.
|
|
81
84
|
|
|
82
|
-
**
|
|
85
|
+
**Installation & Usage**
|
|
83
86
|
* Python-based: `pip install gitgalaxy`
|
|
84
87
|
* CLI execution
|
|
85
88
|
* Outputs forensic JSONs (optimized for AI-agent summary reports) and a native SQLite3 database for robust querying and storage.
|
|
@@ -88,7 +91,7 @@ GitGalaxy is backed by an academic-grade thesis detailing the equations powering
|
|
|
88
91
|
|
|
89
92
|
---
|
|
90
93
|
|
|
91
|
-
## Quickstart
|
|
94
|
+
## Quickstart Guide
|
|
92
95
|
|
|
93
96
|
### 1. Install
|
|
94
97
|
|
|
@@ -107,39 +110,45 @@ galaxyscope /path/to/your/local/repo
|
|
|
107
110
|
|
|
108
111
|
---
|
|
109
112
|
|
|
110
|
-
### [
|
|
113
|
+
### [GitGalaxy Core Analysis Engine](docs/wiki/01-project-overview.md)
|
|
111
114
|
The central blAST engine. It bypasses rigid ASTs using mathematical heuristics to map O(N) multi-dimensional relationships across 50+ languages, managing signal processing, spatial layout, and high-speed SQLite telemetry recording.
|
|
112
115
|
|
|
113
116
|
|
|
114
117
|
|
|
115
|
-
##
|
|
118
|
+
## Enterprise Codebase Tools & Use Cases
|
|
116
119
|
|
|
117
|
-
GitGalaxy operates on a modular Hub-and-Spoke architecture. While the core engine provides the overarching physics and cartography, our specialized toolsets leverage that deterministic graph to execute enterprise-grade operations.
|
|
120
|
+
GitGalaxy operates on a modular Hub-and-Spoke architecture. While the core engine provides the overarching physics and cartography, our specialized toolsets leverage that deterministic graph to execute enterprise-grade operations.
|
|
118
121
|
|
|
119
|
-
### [Legacy
|
|
122
|
+
### [Automated Legacy Migration: COBOL to Java Spring Boot](gitgalaxy/tools/cobol_to_java/)
|
|
120
123
|
A deterministic, high-fidelity translation pipeline. It converts legacy COBOL into fully compiling, modern Spring Boot architectures, mapping memory exactly and scaffolding JPA entities, REST controllers, and Maven builds before utilizing AI to translate isolated business logic.
|
|
124
|
+
* **Proven Metric:** Achieved a perfect 27/27 Maven compile success rate across a batch test of distinct legacy repos.
|
|
125
|
+
* **Verify for Yourself:** [Inspect the raw outputs of the IBM CICS Application Translation here.](examples/ibm_cics_translation/)
|
|
121
126
|
|
|
122
|
-
|
|
127
|
+

|
|
128
|
+
|
|
129
|
+
### [Mainframe Refactoring: COBOL & JCL Optimization](gitgalaxy/tools/cobol_to_cobol/)
|
|
123
130
|
A mathematical x-ray suite for sanitizing mainframe monoliths. It safely neutralizes legacy lexical traps, extracts dead "Graveyard" memory, maps topological DAG execution orders, and generates Zero-Trust JCL configurations for modern cloud deployments.
|
|
131
|
+
* **Proven Metric:** The Graveyard Reaper engine extracted over 6,700 lines of dead execution blocks and orphaned variables from the standard IBM CICS benchmark app in seconds.
|
|
124
132
|
|
|
125
|
-
### [Supply Chain Security](gitgalaxy/tools/supply_chain_security/
|
|
133
|
+
### [Software Supply Chain Security & Pre-Commit Firewalls](gitgalaxy/tools/supply_chain_security/)
|
|
126
134
|
Extreme-velocity pre-commit firewalls. Instead of trusting manifest files, it scans physical internals to block steganography, sub-atomic XOR decryption loops, homoglyph typosquatting, and exposed cryptographic vaults before they ever enter your CI/CD pipeline.
|
|
127
135
|
|
|
128
|
-
### [
|
|
136
|
+
### [Zero-Trust SBOM Generation & Dependency Auditing](gitgalaxy/tools/compliance/)
|
|
137
|
+
A Zero-Trust Software Bill of Materials (SBOM) generator. It refuses to blindly trust `package.json` or `requirements.txt` files, instead locating the physical dependencies on disk, mathematically verifying their entropy and linguistic identity, and generating strict CycloneDX 1.4 JSON reports.
|
|
138
|
+
* **Proven Metric:** Successfully mapped and mathematically verified the physical internals of 170 unique Go modules inside the local Kubernetes repository.
|
|
139
|
+
|
|
140
|
+
### [API Security & Shadow API Detection](gitgalaxy/tools/network_auditing/)
|
|
129
141
|
A deterministic mapping tool that hunts undocumented vulnerabilities. It uses structural regex to find active physical routing logic (Express, Spring Boot, FastAPI) and applies set theory against official OpenAPI/Swagger documentation to isolate critical Shadow APIs and outdated Ghost APIs.
|
|
130
142
|
|
|
131
|
-
### [
|
|
143
|
+
### [High-Speed PII Detection & Log Analysis](gitgalaxy/tools/terabyte_log_scanning/)
|
|
132
144
|
Unindexed, tactical log analysis operating at 0.07 GB/sec. It streams massive database dumps to deterministically hunt and mask PII (Credit Cards, SSNs, AWS Keys) and uses static architecture maps to prove exact runtime execution frequencies with ASCII time-series histograms.
|
|
133
145
|
|
|
134
|
-
### [
|
|
135
|
-
A Zero-Trust Software Bill of Materials (SBOM) generator. It refuses to blindly trust `package.json` or `requirements.txt` files, instead locating the physical dependencies on disk, mathematically verifying their entropy and linguistic identity, and generating strict CycloneDX 1.4 JSON reports.
|
|
136
|
-
|
|
137
|
-
### [AI Guardrails](gitgalaxy/tools/ai_guardrails/README.md)
|
|
146
|
+
### [AI Agent Guardrails & Codebase Protection](gitgalaxy/tools/ai_guardrails/)
|
|
138
147
|
Specialized keyword sensors protecting both your application and your codebase. The AppSec Sensor detects weaponized LLM features (RCE funnels, exfiltration risks), while the Dev Agent Firewall evaluates token mass and blast radius to restrict autonomous coding agents from modifying dangerous over context token-draining files. Helps identify which files need to be chunked to reduce context overload.
|
|
139
148
|
|
|
140
|
-
##
|
|
149
|
+
## Local Browser-Based 3D Codebase Visualization
|
|
141
150
|
|
|
142
|
-
If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics.
|
|
151
|
+
If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics.
|
|
143
152
|
|
|
144
153
|
Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip` of your raw repository) directly into [GitGalaxy.io](https://gitgalaxy.io/). All rendering and scanning happens entirely in your browser's local memory.
|
|
145
154
|
|
|
@@ -147,7 +156,7 @@ Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip
|
|
|
147
156
|
|
|
148
157
|

|
|
149
158
|
|
|
150
|
-
## Zero-Trust
|
|
159
|
+
## Zero-Trust Data Security
|
|
151
160
|
|
|
152
161
|
Your code never leaves your machine. GitGalaxy performs 100% of its scanning and vectorization locally.
|
|
153
162
|
|
|
@@ -15,32 +15,36 @@
|
|
|
15
15
|
[](https://pypi.org/project/gitgalaxy/)
|
|
16
16
|
[](#)
|
|
17
17
|
|
|
18
|
-
### **
|
|
18
|
+
### **AST-Free Static Analysis & Knowledge Graph Engine**
|
|
19
19
|
|
|
20
|
-
The blAST (Bypassing LLMs and ASTs) engine is a custom-made knowledge graph engine that resolves repositories at the function level. It scores each function based on 50 unique metrics, rolls that data up to score the file, and finally summarizes the entire repository.
|
|
20
|
+
The blAST (Bypassing LLMs and ASTs) engine is a custom-made knowledge graph engine that resolves repositories at the function level. It scores each function based on 50 unique metrics, rolls that data up to score the file, and finally summarizes the entire repository.
|
|
21
21
|
|
|
22
|
-
|
|
22
|
+
### Scanning Apollo-11 with the blAST Engine
|
|
23
23
|
|
|
24
|
-
|
|
24
|
+

|
|
25
|
+
|
|
26
|
+
By utilizing a custom engine, we retain full control over the search space. We built it to be exceptionally fast, capable of assessing your entire repository without requiring compilable code—a fundamental limitation of standard Abstract Syntax Trees (ASTs). ASTs are great for finding missing commas and memory overflows, but they miss the forest for the trees when generating knowledge graphs. LLMs, on the other hand, suffer from hallucination during large context windows and yield probabilistic, fluctuating answers.
|
|
27
|
+
|
|
28
|
+
The blAST engine solves this. Because all programming languages utilize keywords and functions, our engine treats code files as text, scanning for these structural anchors to build a deterministic 3D knowledge graph. It seamlessly handles mid-file language switching, assesses the architectural ratio of test files to logic, and extracts invaluable project structure data that ASTs ignore.
|
|
25
29
|
|
|
26
30
|
Every assumption our system makes has been abstracted into over 300 tunable variables. Think of GitGalaxy as a highly calibrated telescope. You can query the number of active API network nodes, isolate unique external imports, or highlight functions exhibiting extreme cognitive load—all adjusted via custom whitelists and blacklists to eliminate false-positive fatigue. Field-tested on over 1,000 repositories spanning 50+ languages and 250+ extensions, the engine comes equipped with smart defaults ready for immediate deployment.
|
|
27
31
|
|
|
28
|
-
**Core Technology**
|
|
32
|
+
**Core Codebase Mapping Technology**
|
|
29
33
|
* Bypasses LLMs and rigid ASTs.
|
|
30
34
|
* Doesn't require code to compile (AST-free).
|
|
31
35
|
* Produces full function-to-function call chains.
|
|
32
36
|
* Deterministically maps code by 60+ keyword regex profiles (Structural markers, I/O intents, state mutations).
|
|
33
|
-
* Regex keyword profiles allow us to classify functions, files, classes, folders and repos.
|
|
37
|
+
* Regex keyword profiles allow us to classify functions, files, classes, folders and repos.
|
|
34
38
|
* Eliminates LLM architectural hallucinations and context window limits.
|
|
35
39
|
* Scans 50+ languages, 250+ extensions, fully folder-aware. **([How to add a language in 1 minute and 1 prompt](gitgalaxy/standards/HOW_TO_ADD_LANGUAGE.md))**
|
|
36
40
|
|
|
37
|
-
**
|
|
41
|
+
**Enterprise Scale & Performance Metrics**
|
|
38
42
|
* 100,000 LOC/sec code analysis.
|
|
39
43
|
* 0.07 GB/sec raw log ingestion.
|
|
40
44
|
* Full-system scans in minutes without data sampling.
|
|
41
45
|
* 100% daily system coverage.
|
|
42
46
|
|
|
43
|
-
**
|
|
47
|
+
**Methodology & Comparative Benchmarks**
|
|
44
48
|
GitGalaxy is backed by an academic-grade thesis detailing the equations powering the blAST engine.
|
|
45
49
|
|
|
46
50
|
* **[Optimum Search Strategies Evolve](https://squid-protocol.github.io/gitgalaxy/03-01-claim-1-search-strategies/):** AST-free mapping. Outperforms rigid parsers and LLM context windows.
|
|
@@ -48,15 +52,14 @@ GitGalaxy is backed by an academic-grade thesis detailing the equations powering
|
|
|
48
52
|
* **[All languages have keywords that roughly do the same thing, these can be grouped to make cross-language keyword maps](https://squid-protocol.github.io/gitgalaxy/03-03-claim-3-taxonomy-map/):** Standardizes 50+ languages into a single universal physical framework.
|
|
49
53
|
* **[Cross-Language Comparisons of over 1000 repos](https://squid-protocol.github.io/gitgalaxy/03-04-claim-4-comparing-languages/):** Deterministic 1:1 benchmarking of distinct syntax architectures.
|
|
50
54
|
* **[Universal File Archetypes by k-means clustering](https://squid-protocol.github.io/gitgalaxy/03-05-claim-5-file-archetypes/):** ML isolation of files into K-means clusters (e.g., "The God Nodes," "Declarative Glue").
|
|
51
|
-
* **[
|
|
52
|
-
* **Mainframe Proven:** Successful from-scratch translation of legacy COBOL monoliths to compiling Spring Boot architectures.
|
|
55
|
+
* **[Mainframe Proven: 100% CI/CD Translation Success Rate](https://github.com/squid-protocol/gitgalaxy/tree/main/examples/ibm_cics_translation):** Flawless architectural translation of 27 distinct legacy COBOL repositories (including IBM CICS benchmark apps) into compiling Java Spring Boot environments.
|
|
53
56
|
|
|
54
|
-
**
|
|
57
|
+
**Data Privacy & On-Premise Deployment**
|
|
55
58
|
* 100% air-gapped execution.
|
|
56
59
|
* On-premise deployment with zero IP exfiltration risk.
|
|
57
60
|
* Zero-trust processing model.
|
|
58
61
|
|
|
59
|
-
**
|
|
62
|
+
**Installation & Usage**
|
|
60
63
|
* Python-based: `pip install gitgalaxy`
|
|
61
64
|
* CLI execution
|
|
62
65
|
* Outputs forensic JSONs (optimized for AI-agent summary reports) and a native SQLite3 database for robust querying and storage.
|
|
@@ -65,7 +68,7 @@ GitGalaxy is backed by an academic-grade thesis detailing the equations powering
|
|
|
65
68
|
|
|
66
69
|
---
|
|
67
70
|
|
|
68
|
-
## Quickstart
|
|
71
|
+
## Quickstart Guide
|
|
69
72
|
|
|
70
73
|
### 1. Install
|
|
71
74
|
|
|
@@ -84,39 +87,45 @@ galaxyscope /path/to/your/local/repo
|
|
|
84
87
|
|
|
85
88
|
---
|
|
86
89
|
|
|
87
|
-
### [
|
|
90
|
+
### [GitGalaxy Core Analysis Engine](docs/wiki/01-project-overview.md)
|
|
88
91
|
The central blAST engine. It bypasses rigid ASTs using mathematical heuristics to map O(N) multi-dimensional relationships across 50+ languages, managing signal processing, spatial layout, and high-speed SQLite telemetry recording.
|
|
89
92
|
|
|
90
93
|
|
|
91
94
|
|
|
92
|
-
##
|
|
95
|
+
## Enterprise Codebase Tools & Use Cases
|
|
93
96
|
|
|
94
|
-
GitGalaxy operates on a modular Hub-and-Spoke architecture. While the core engine provides the overarching physics and cartography, our specialized toolsets leverage that deterministic graph to execute enterprise-grade operations.
|
|
97
|
+
GitGalaxy operates on a modular Hub-and-Spoke architecture. While the core engine provides the overarching physics and cartography, our specialized toolsets leverage that deterministic graph to execute enterprise-grade operations.
|
|
95
98
|
|
|
96
|
-
### [Legacy
|
|
99
|
+
### [Automated Legacy Migration: COBOL to Java Spring Boot](gitgalaxy/tools/cobol_to_java/)
|
|
97
100
|
A deterministic, high-fidelity translation pipeline. It converts legacy COBOL into fully compiling, modern Spring Boot architectures, mapping memory exactly and scaffolding JPA entities, REST controllers, and Maven builds before utilizing AI to translate isolated business logic.
|
|
101
|
+
* **Proven Metric:** Achieved a perfect 27/27 Maven compile success rate across a batch test of distinct legacy repos.
|
|
102
|
+
* **Verify for Yourself:** [Inspect the raw outputs of the IBM CICS Application Translation here.](examples/ibm_cics_translation/)
|
|
98
103
|
|
|
99
|
-
|
|
104
|
+

|
|
105
|
+
|
|
106
|
+
### [Mainframe Refactoring: COBOL & JCL Optimization](gitgalaxy/tools/cobol_to_cobol/)
|
|
100
107
|
A mathematical x-ray suite for sanitizing mainframe monoliths. It safely neutralizes legacy lexical traps, extracts dead "Graveyard" memory, maps topological DAG execution orders, and generates Zero-Trust JCL configurations for modern cloud deployments.
|
|
108
|
+
* **Proven Metric:** The Graveyard Reaper engine extracted over 6,700 lines of dead execution blocks and orphaned variables from the standard IBM CICS benchmark app in seconds.
|
|
101
109
|
|
|
102
|
-
### [Supply Chain Security](gitgalaxy/tools/supply_chain_security/
|
|
110
|
+
### [Software Supply Chain Security & Pre-Commit Firewalls](gitgalaxy/tools/supply_chain_security/)
|
|
103
111
|
Extreme-velocity pre-commit firewalls. Instead of trusting manifest files, it scans physical internals to block steganography, sub-atomic XOR decryption loops, homoglyph typosquatting, and exposed cryptographic vaults before they ever enter your CI/CD pipeline.
|
|
104
112
|
|
|
105
|
-
### [
|
|
113
|
+
### [Zero-Trust SBOM Generation & Dependency Auditing](gitgalaxy/tools/compliance/)
|
|
114
|
+
A Zero-Trust Software Bill of Materials (SBOM) generator. It refuses to blindly trust `package.json` or `requirements.txt` files, instead locating the physical dependencies on disk, mathematically verifying their entropy and linguistic identity, and generating strict CycloneDX 1.4 JSON reports.
|
|
115
|
+
* **Proven Metric:** Successfully mapped and mathematically verified the physical internals of 170 unique Go modules inside the local Kubernetes repository.
|
|
116
|
+
|
|
117
|
+
### [API Security & Shadow API Detection](gitgalaxy/tools/network_auditing/)
|
|
106
118
|
A deterministic mapping tool that hunts undocumented vulnerabilities. It uses structural regex to find active physical routing logic (Express, Spring Boot, FastAPI) and applies set theory against official OpenAPI/Swagger documentation to isolate critical Shadow APIs and outdated Ghost APIs.
|
|
107
119
|
|
|
108
|
-
### [
|
|
120
|
+
### [High-Speed PII Detection & Log Analysis](gitgalaxy/tools/terabyte_log_scanning/)
|
|
109
121
|
Unindexed, tactical log analysis operating at 0.07 GB/sec. It streams massive database dumps to deterministically hunt and mask PII (Credit Cards, SSNs, AWS Keys) and uses static architecture maps to prove exact runtime execution frequencies with ASCII time-series histograms.
|
|
110
122
|
|
|
111
|
-
### [
|
|
112
|
-
A Zero-Trust Software Bill of Materials (SBOM) generator. It refuses to blindly trust `package.json` or `requirements.txt` files, instead locating the physical dependencies on disk, mathematically verifying their entropy and linguistic identity, and generating strict CycloneDX 1.4 JSON reports.
|
|
113
|
-
|
|
114
|
-
### [AI Guardrails](gitgalaxy/tools/ai_guardrails/README.md)
|
|
123
|
+
### [AI Agent Guardrails & Codebase Protection](gitgalaxy/tools/ai_guardrails/)
|
|
115
124
|
Specialized keyword sensors protecting both your application and your codebase. The AppSec Sensor detects weaponized LLM features (RCE funnels, exfiltration risks), while the Dev Agent Firewall evaluates token mass and blast radius to restrict autonomous coding agents from modifying dangerous over context token-draining files. Helps identify which files need to be chunked to reduce context overload.
|
|
116
125
|
|
|
117
|
-
##
|
|
126
|
+
## Local Browser-Based 3D Codebase Visualization
|
|
118
127
|
|
|
119
|
-
If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics.
|
|
128
|
+
If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics.
|
|
120
129
|
|
|
121
130
|
Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip` of your raw repository) directly into [GitGalaxy.io](https://gitgalaxy.io/). All rendering and scanning happens entirely in your browser's local memory.
|
|
122
131
|
|
|
@@ -124,7 +133,7 @@ Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip
|
|
|
124
133
|
|
|
125
134
|

|
|
126
135
|
|
|
127
|
-
## Zero-Trust
|
|
136
|
+
## Zero-Trust Data Security
|
|
128
137
|
|
|
129
138
|
Your code never leaves your machine. GitGalaxy performs 100% of its scanning and vectorization locally.
|
|
130
139
|
|
|
@@ -13,15 +13,15 @@ from pathlib import Path
|
|
|
13
13
|
from datetime import datetime
|
|
14
14
|
|
|
15
15
|
# Import the core logic functions directly
|
|
16
|
-
from tools.cobol_jcl_forge import analyze_cobol_intent, generate_zero_trust_jcl
|
|
17
|
-
from tools.cobol_dag_architect import extract_lineage
|
|
18
|
-
from tools.cobol_graveyard_finder import x_ray_dead_code
|
|
19
|
-
from tools.cobol_schema_forge import forge_schemas
|
|
20
|
-
from tools.cobol_microservice_slicer import slice_business_logic
|
|
21
|
-
from tools.cobol_system_limits_reporter import scan_system_limits
|
|
22
|
-
from tools.cobol_lexical_patcher import patch_lexical_traps
|
|
23
|
-
from tools.cobol_jcl_auditor import audit_zero_trust_jcls
|
|
24
|
-
from tools.cobol_agent_task_forge import forge_agent_jobs
|
|
16
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_jcl_forge import analyze_cobol_intent, generate_zero_trust_jcl
|
|
17
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_dag_architect import extract_lineage
|
|
18
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_graveyard_finder import x_ray_dead_code
|
|
19
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_schema_forge import forge_schemas
|
|
20
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_microservice_slicer import slice_business_logic
|
|
21
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_system_limits_reporter import scan_system_limits
|
|
22
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_lexical_patcher import patch_lexical_traps
|
|
23
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_jcl_auditor import audit_zero_trust_jcls
|
|
24
|
+
from gitgalaxy.tools.cobol_to_cobol.cobol_agent_task_forge import forge_agent_jobs
|
|
25
25
|
|
|
26
26
|
# ==============================================================================
|
|
27
27
|
# THE SCALE SENSOR & HYBRID STATE MANAGER
|
|
@@ -13,12 +13,12 @@ import shutil
|
|
|
13
13
|
from pathlib import Path
|
|
14
14
|
|
|
15
15
|
# Current Imports
|
|
16
|
-
from tools.cobol_to_java_spring_forge import generate_java_entity
|
|
17
|
-
from tools.cobol_to_java_api_contract_forge import generate_rest_controller
|
|
18
|
-
from tools.cobol_to_java_agent_forge import generate_java_agent_ticket
|
|
19
|
-
from tools.cobol_to_java_build_forge import generate_pom_xml, generate_application_yml, generate_main_class
|
|
20
|
-
from tools.cobol_to_java_service_forge import generate_service_skeleton
|
|
21
|
-
from tools.cobol_to_java_decoder_forge import generate_decoder_util
|
|
16
|
+
from gitgalaxy.tools.cobol_to_java.cobol_to_java_spring_forge import generate_java_entity
|
|
17
|
+
from gitgalaxy.tools.cobol_to_java.cobol_to_java_api_contract_forge import generate_rest_controller
|
|
18
|
+
from gitgalaxy.tools.cobol_to_java.cobol_to_java_agent_forge import generate_java_agent_ticket
|
|
19
|
+
from gitgalaxy.tools.cobol_to_java.cobol_to_java_build_forge import generate_pom_xml, generate_application_yml, generate_main_class
|
|
20
|
+
from gitgalaxy.tools.cobol_to_java.cobol_to_java_service_forge import generate_service_skeleton
|
|
21
|
+
from gitgalaxy.tools.cobol_to_java.cobol_to_java_decoder_forge import generate_decoder_util
|
|
22
22
|
|
|
23
23
|
def build_spring_boot_scaffold(output_dir: Path, package_name: str) -> dict:
|
|
24
24
|
"""Creates the standard Spring Boot directory architecture."""
|
|
@@ -443,7 +443,7 @@ class ApertureFilter:
|
|
|
443
443
|
|
|
444
444
|
return True
|
|
445
445
|
|
|
446
|
-
def _load_gitignore_patterns(self) ->
|
|
446
|
+
def _load_gitignore_patterns(self) -> List[str]:
|
|
447
447
|
"""Reads local .gitignore files to identify Radio Noise."""
|
|
448
448
|
patterns = []
|
|
449
449
|
ignore_file = self.root / ".gitignore"
|