suvoro 0.1.0__tar.gz

suvoro-0.1.0/.dockerignore

@@ -0,0 +1,27 @@
+.git
+.github
+.vscode
+.idea
+
+.env
+.env.*
+.venv
+env/
+venv/
+
+__pycache__/
+*.py[cod]
+*.so
+.pytest_cache/
+.ruff_cache/
+.coverage
+.coverage.*
+htmlcov/
+
+.suvoro/
+# Keep pre-Suvoro local scan data out of Docker build contexts.
+.provepatch/
+tests/
+
+PRD.md
+USAGE.md

suvoro-0.1.0/.env.example

@@ -0,0 +1,88 @@
+# ==============================================================================
+# Suvoro Model Provider API Keys & Endpoints (BYOK)
+# ==============================================================================
+# Copy this file to .env and fill in the keys for the providers you want to use.
+# LiteLLM automatically picks up these environment variables.
+# ==============================================================================
+
+# ==============================================================================
+# FREE TIER PROVIDERS (Zero Cost / No Credit Card Required)
+# ==============================================================================
+
+# 1. Google AI Studio — Gemini 3.7 Flash & 3.5 Flash (15 RPM, 1.5M tokens/day)
+#    Get your free key at: https://aistudio.google.com → "Get API key"
+GEMINI_API_KEY=AIzaSy...
+
+# 2. Groq Cloud — Llama 3.3 70B & Llama 3.1 8B (30 RPM, 500 tok/s speed)
+#    Get your free key at: https://console.groq.com → "API Keys"
+GROQ_API_KEY=gsk_...
+
+# 3. DeepSeek Platform — DeepSeek V3 (deepseek-chat) & R1 (deepseek-reasoner)
+#    Get 5M free tokens on signup at: https://platform.deepseek.com → "API keys"
+DEEPSEEK_API_KEY=sk-...
+
+# 4. SiliconFlow (SiliconCloud) — Qwen3, DeepSeek R1 Distill (Free tier models)
+#    Get your free key at: https://cloud.siliconflow.com (or .cn) → "API Keys"
+SILICONFLOW_API_KEY=sk-...
+
+# 5. Z.ai (Zhipu AI) — GLM-5.3-Flash (New hybrid MoE flash model, free tier)
+#    Get your free key at: https://open.bigmodel.cn → API Keys
+ZHIPUAI_API_KEY=...
+
+# 6. OpenRouter — Access 300+ models, free auto-router (20 RPM, 50-1000 req/day)
+#    Get your free key at: https://openrouter.ai → "Keys" tab
+OPENROUTER_API_KEY=sk-or-v1-...
+
+# ==============================================================================
+# PAID PROVIDERS (Credit Card Required)
+# ==============================================================================
+
+# OpenAI (GPT-4o, GPT-4o-mini, o1, o3-mini)
+# OPENAI_API_KEY=sk-...
+
+# Anthropic (Claude 3.5 Sonnet, Claude 3.5 Haiku)
+# ANTHROPIC_API_KEY=sk-ant-...
+
+# Mistral AI (Mistral Large, Codestral)
+# MISTRAL_API_KEY=...
+
+# HuggingFace Inference API
+# HUGGINGFACE_API_KEY=hf_...
+
+# NVIDIA NIM
+# NVIDIA_NIM_API_KEY=nvapi-...
+
+# Cohere
+# COHERE_API_KEY=...
+
+# Together AI
+# TOGETHERAI_API_KEY=...
+
+# ==============================================================================
+# ENTERPRISE & CLOUD INFRASTRUCTURE
+# ==============================================================================
+
+# Azure OpenAI
+# AZURE_API_KEY=...
+# AZURE_API_BASE=https://your-resource-name.openai.azure.com/
+# AZURE_API_VERSION=2024-02-01
+
+# AWS Bedrock
+# AWS_ACCESS_KEY_ID=...
+# AWS_SECRET_ACCESS_KEY=...
+# AWS_REGION_NAME=us-east-1
+
+# ==============================================================================
+# LOCAL & SELF-HOSTED MODELS (Ollama / vLLM / LM Studio)
+# ==============================================================================
+
+# Ollama (default: http://localhost:11434)
+# OLLAMA_API_BASE=http://localhost:11434
+
+# vLLM / LM Studio / Any OpenAI-compatible local server
+# OPENAI_API_BASE=http://localhost:8000/v1
+
+# ==============================================================================
+# Model assignments per pipeline task (Triage, Patch, Red Team, QA, Detection)
+# are configured in `.suvoro/config.yaml`.
+# ==============================================================================

suvoro-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+name: CI
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: pip install "ruff>=0.5"
+      - run: ruff check src tests
+
+  test:
+    needs: lint
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+        python-version: ["3.10", "3.11", "3.12"]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+      - run: python -m pip install -e ".[dev]"
+      - run: python -m pytest -q --cov=suvoro --cov-report=term --cov-report=xml
+      - name: pip check (our install must not break dependencies)
+        run: python -m pip check
+
+  build:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install build twine
+      - run: python -m build
+      - run: python -m twine check dist/*
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/

suvoro-0.1.0/.github/workflows/docker-publish.yml

@@ -0,0 +1,69 @@
+name: Build and Push Docker Image
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - 'v*.*.*'
+  pull_request:
+    branches:
+      - main
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    
+    # Permissions required for pushing to GHCR
+    permissions:
+      contents: read
+      packages: write
+    
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      
+      - name: Log in to Container Registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=sha,prefix={{branch}}-
+            type=raw,value=latest,enable={{is_default_branch}}
+      
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:buildcache,mode=max
+      
+      - name: Generate image digest
+        if: github.event_name != 'pull_request'
+        run: |
+          echo "Image pushed successfully:"
+          echo "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest"
+          echo "Digest: ${{ steps.build.outputs.digest }}"

suvoro-0.1.0/.github/workflows/multi-project-scan.yml

@@ -0,0 +1,133 @@
+name: Suvoro Security Scan (Example Multi-Project)
+
+# This is an EXAMPLE workflow showing how to scan multiple repositories.
+# Customize for your needs by adjusting the matrix projects list.
+
+on:
+  # Scheduled daily scan (disabled by default for example workflow; uncomment to enable):
+  # schedule:
+  #   - cron: '0 2 * * *'
+  workflow_dispatch:
+    inputs:
+      projects:
+        description: 'Comma-separated list of project paths to scan'
+        required: false
+        default: 'src/'
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    
+    strategy:
+      # Scan multiple projects in parallel
+      matrix:
+        project:
+          - 'my-backend'       # Replace with your project
+          - 'my-frontend'      # Replace with your project
+          - 'my-infra'         # Replace with your project
+      fail-fast: false  # Continue scanning even if one project fails
+    
+    steps:
+      - name: Checkout Suvoro repository
+        uses: actions/checkout@v4
+        with:
+          repository: iamvictorok/suvoro
+          path: suvoro
+      
+      - name: Checkout project to scan
+        uses: actions/checkout@v4
+        with:
+          repository: ${{ github.repository }}  # Your own repository
+          path: workspace/${{ matrix.project }}
+      
+      - name: Build Suvoro Docker image
+        working-directory: suvoro
+        run: docker build -t suvoro:latest .
+      
+      - name: Run Suvoro audit
+        working-directory: suvoro
+        run: |
+          docker run --rm \
+            -v "$(pwd)/../workspace/${{ matrix.project }}:/workspace:ro" \
+            -v suvoro-data:/home/suvoro/.local/share/suvoro \
+            suvoro:latest \
+            audit /workspace -f json > findings.json
+      
+      - name: Generate markdown report
+        working-directory: suvoro
+        run: |
+          docker run --rm \
+            -v "$(pwd)/../workspace/${{ matrix.project }}:/workspace:ro" \
+            -v suvoro-data:/home/suvoro/.local/share/suvoro \
+            suvoro:latest \
+            report -f markdown -o report.md
+      
+      - name: Upload results
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: ${{ matrix.project }}-findings
+          path: suvoro/findings.json
+      
+      - name: Upload report
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: ${{ matrix.project }}-report
+          path: suvoro/report.md
+      
+      - name: Comment PR with findings summary
+        if: github.event_name == 'pull_request'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('fs');
+            const findings = JSON.parse(fs.readFileSync('suvoro/findings.json', 'utf8'));
+            const severities = {};
+            
+            findings.findings?.forEach(f => {
+              severities[f.severity] = (severities[f.severity] || 0) + 1;
+            });
+            
+            const summary = Object.entries(severities)
+              .map(([s, c]) => `${c} ${s}`)
+              .join(', ') || 'No findings';
+            
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: `## Suvoro Security Scan - ${{ matrix.project }}\n\n${summary}`
+            });
+      
+      - name: Fail on critical findings
+        run: |
+          critical=$(jq '[.findings[] | select(.severity == "CRITICAL")] | length' suvoro/findings.json)
+          if [ "$critical" -gt 0 ]; then
+            echo "Found $critical critical issues!"
+            exit 1
+          fi
+
+  summary:
+    runs-on: ubuntu-latest
+    needs: scan
+    if: always()
+    
+    steps:
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+      
+      - name: Generate summary
+        run: |
+          echo "# Security Scan Summary" > summary.md
+          echo "" >> summary.md
+          
+          for findings in *-findings/findings.json; do
+            [ -f "$findings" ] || continue
+            project=$(basename "$(dirname "$findings")" | sed 's/-findings//')
+            total=$(jq '.findings | length' "$findings" 2>/dev/null || echo 0)
+            echo "- **$project**: $total findings" >> summary.md
+          done
+      
+      - name: Display summary
+        run: cat summary.md

suvoro-0.1.0/.gitignore

@@ -0,0 +1,99 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# suvoro runtime, ledger, and log outputs
+.suvoro/*
+!.suvoro/config.yaml
+!.suvoro/config.yml
+.suvoro/logs/
+.suvoro/reports/
+.suvoro/scanners/
+.suvoro/worktrees/
+.suvoro/suvoro.db*
+# Preserve and ignore local data from the previous state directory.
+.provepatch/
+/reports/
+
+# suvoro generated reports and scan artifacts
+suvoro-report.*
+report.json
+report.md
+report.sarif
+results.json
+results.md
+results.sarif
+audit-report*
+audit_report*
+zap-report*
+nuclei-report*
+rawscan*
+*.sarif
+*.patch
+.suvoro_fix.patch
+
+# IDEs / Editors
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.DS_Store

suvoro-0.1.0/.suvoro/config.yaml

@@ -0,0 +1,105 @@
+project_root: "."
+
+scanners:
+  semgrep: true
+  bandit: true
+  checkov: true
+  osv: true
+  gitleaks: true
+  syft: true
+  trivy: false
+  nuclei: false
+  zap: false
+
+vulndb:
+  mode: online
+
+# ---------------------------------------------------------------------------
+# Multi-Provider Free LLM Configuration (Zero-Cost E2E)
+# ---------------------------------------------------------------------------
+# Provider 1: Google AI Studio   → GEMINI_API_KEY      (free, no card)
+# Provider 2: Groq Cloud         → GROQ_API_KEY        (free, no card)
+# Provider 3: DeepSeek Platform  → DEEPSEEK_API_KEY    (free 5M tokens)
+# Provider 4: SiliconFlow        → SILICONFLOW_API_KEY (free credits + free models)
+# Provider 5: Z.ai (Zhipu AI)    → ZHIPUAI_API_KEY     (free Flash models, no card)
+# Provider 6: OpenRouter          → OPENROUTER_API_KEY  (free rotating models)
+# ---------------------------------------------------------------------------
+#
+# Load distribution (5 providers, 7 roles):
+#   Groq       → 2 roles (triage, detection)   — speed-critical real-time tasks
+#   DeepSeek   → 1 role  (remediation)          — top-tier code diffs (V3)
+#   SiliconFlow→ 1 role  (red team reviewer)    — free Qwen3-8B, fast inference
+#   Z.ai       → 1 role  (qa)                   — free GLM-4.5-Flash
+#   Gemini     → 1 role  (prover)               — multi-step bash/Python exploit gen
+#   DeepSeek   → 1 role  (red team planner)     — R1 chain-of-thought reasoning
+# ---------------------------------------------------------------------------
+models:
+  # 1. Triage: Classify & explain scanner findings in plain English.
+  #    Groq Llama 3.3 70B — 30 RPM free, blazing inference (~500 tok/s).
+  triage:
+    provider: groq
+    model: llama-3.3-70b-versatile
+
+  # 2. Remediation: Generate verified unified diffs & regression tests.
+  #    DeepSeek V3 (deepseek-chat) — exceptional code intelligence, 5M free tokens.
+  remediation:
+    provider: deepseek
+    model: deepseek-chat
+
+  # 3. Sandbox Prover: Write bash exploit validation scripts.
+  #    Gemini 3.7 Flash — strong multi-step bash/Python, 1M context window.
+  prover:
+    provider: gemini
+    model: gemini-3.7-flash
+
+  # 4. Multi-Agent Red Team:
+  redteam:
+    planner:
+      # DeepSeek R1 — purpose-built chain-of-thought reasoning for adversarial
+      # exploit planning. Arguably the strongest free reasoning model available.
+      provider: deepseek
+      model: deepseek-reasoner
+    reviewer:
+      # SiliconFlow Qwen3-8B — free tier, fast tactical telemetry extraction.
+      # Uses OpenAI-compatible endpoint at https://api.siliconflow.com/v1
+      provider: openai
+      model: Qwen/Qwen3-8B
+      api_key: ${SILICONFLOW_API_KEY}
+      api_base: https://api.siliconflow.com/v1
+    max_iterations: 3
+
+  # 5. Senior QA Code Vetter: Static code quality review.
+  #    Z.ai GLM-5.3-Flash — brand new native multimodal MoE (320B/18B active).
+  #    Uses OpenAI-compatible endpoint at https://open.bigmodel.cn/api/paas/v4
+  qa:
+    provider: openai
+    model: GLM-5.3-Flash
+    api_key: ${ZHIPUAI_API_KEY}
+    api_base: https://open.bigmodel.cn/api/paas/v4
+
+  # 6. Runtime Live Attack Detection (Phase 3): Stage 2 AI classifier.
+  #    Groq Llama 3.1 8B — sub-second response for real-time log telemetry.
+  detection:
+    provider: groq
+    model: llama-3.1-8b-instant
+
+  # Budget protection — stops spending tokens if limits are hit.
+  budgets:
+    max_calls_per_scan: 50
+    max_tokens_per_scan: 250000
+    on_budget_exceeded: stop_and_report
+
+storage:
+  backend: sqlite
+  sqlite_path: .suvoro/suvoro.db
+
+data_policy:
+  raw_logs: network_allowed
+  secrets: never_send
+
+runtime:
+  enabled: true
+  log_format: auto
+  severity_threshold: medium
+
+auto_install_scanners: true

suvoro-0.1.0/.vibesec/logs/vibesec.log

@@ -0,0 +1,47 @@
+{"timestamp": "2026-09-01T21:25:36.884076+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Starting vibesec scan on ."}
+{"timestamp": "2026-09-01T21:25:36.885979+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Starting full scan pipeline..."}
+{"timestamp": "2026-09-01T21:25:36.900670+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Starting project discovery..."}
+{"timestamp": "2026-09-01T21:25:36.911903+00:00", "level": "INFO", "name": "vibesec.discovery", "message": "Discovered project profile: {'languages': ['python'], 'package_managers': ['pip'], 'test_frameworks': ['pytest'], 'env_files': ['.env', '.env.example'], 'databases': ['postgresql', 'sqlite']}"}
+{"timestamp": "2026-09-01T21:25:36.912860+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Finished project discovery in 0.01s"}
+{"timestamp": "2026-09-01T21:25:36.913656+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Starting scanning phase..."}
+{"timestamp": "2026-09-01T21:25:36.914676+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'semgrep' not found. Attempting auto-install..."}
+{"timestamp": "2026-09-01T21:25:36.915260+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Installing semgrep via pip..."}
+{"timestamp": "2026-09-01T21:28:01.159840+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Semgrep installed successfully."}
+{"timestamp": "2026-09-01T21:28:01.161947+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'osv-scanner' not found. Attempting auto-install..."}
+{"timestamp": "2026-09-01T21:28:01.162661+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Fetching release v2.5.1 from google/osv-scanner"}
+{"timestamp": "2026-09-01T21:28:02.160491+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Downloading https://github.com/google/osv-scanner/releases/download/v2.5.1/osv-scanner_darwin_arm64"}
+{"timestamp": "2026-09-01T21:36:12.922072+00:00", "level": "INFO", "name": "vibesec.installer", "message": "osv-scanner installed to /Library/Frameworks/Python.framework/Versions/3.13/bin/osv-scanner"}
+{"timestamp": "2026-09-01T21:36:12.926995+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'gitleaks' not found. Attempting auto-install..."}
+{"timestamp": "2026-09-01T21:36:12.927810+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Fetching release v8.30.1 from gitleaks/gitleaks"}
+{"timestamp": "2026-09-01T21:36:13.726566+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Downloading https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_darwin_arm64.tar.gz"}
+{"timestamp": "2026-09-01T21:36:59.168851+00:00", "level": "INFO", "name": "vibesec.installer", "message": "gitleaks installed to /Library/Frameworks/Python.framework/Versions/3.13/bin/gitleaks"}
+{"timestamp": "2026-09-01T21:36:59.171892+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'bandit' not found. Attempting auto-install..."}
+{"timestamp": "2026-09-01T21:36:59.172531+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Installing bandit via pip..."}
+{"timestamp": "2026-09-01T21:37:02.864494+00:00", "level": "INFO", "name": "vibesec.installer", "message": "bandit installed successfully."}
+{"timestamp": "2026-09-01T21:37:02.866708+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'checkov' not found. Attempting auto-install..."}
+{"timestamp": "2026-09-01T21:37:02.867353+00:00", "level": "INFO", "name": "vibesec.installer", "message": "Installing checkov via pip..."}
+{"timestamp": "2026-09-01T21:42:02.887012+00:00", "level": "ERROR", "name": "vibesec.installer", "message": "Failed to install checkov: Command '['/Library/Frameworks/Python.framework/Versions/3.13/bin/python3', '-m', 'pip', 'install', 'checkov', '--quiet']' timed out after 300 seconds"}
+{"timestamp": "2026-09-01T21:42:02.891174+00:00", "level": "ERROR", "name": "vibesec.scanners", "message": "Auto-install failed for 'checkov'. Skipping."}
+{"timestamp": "2026-09-01T21:42:02.892025+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Starting all parallel scanners..."}
+{"timestamp": "2026-09-01T21:42:03.679746+00:00", "level": "ERROR", "name": "vibesec.osv", "message": "OSV-Scanner failed (exit 128): Scanning dir .\nStarting filesystem walk for root: /\nEnd status: 6 dirs visited, 13 inodes visited, 0 Extract calls, 245.75\u00b5s elapsed, 245\u00b5s wall time\nNo package sources found, --help for usage information.\n"}
+{"timestamp": "2026-09-01T21:42:03.681812+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'osv-scanner' completed in 0.8s with 0 finding(s)."}
+{"timestamp": "2026-09-01T21:42:03.747495+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'gitleaks' completed in 0.9s with 5 finding(s)."}
+{"timestamp": "2026-09-01T21:42:03.861112+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'bandit' completed in 1.0s with 158 finding(s)."}
+{"timestamp": "2026-09-01T21:42:06.231207+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'syft' completed in 3.3s with 0 finding(s)."}
+{"timestamp": "2026-09-01T21:42:13.343903+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Scanner 'semgrep' completed in 10.4s with 2 finding(s)."}
+{"timestamp": "2026-09-01T21:42:13.344773+00:00", "level": "INFO", "name": "vibesec.scanners", "message": "Finished all parallel scanners in 10.45s"}
+{"timestamp": "2026-09-01T21:42:13.345538+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Finished scanning phase in 996.31s"}
+{"timestamp": "2026-09-01T21:42:13.346625+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Starting normalization phase..."}
+{"timestamp": "2026-09-01T21:42:13.348626+00:00", "level": "INFO", "name": "vibesec.normalizer", "message": "Filtered out 5 findings located in excluded environment/build directories."}
+{"timestamp": "2026-09-01T21:42:13.349119+00:00", "level": "INFO", "name": "vibesec.normalizer", "message": "Normalizing 160 raw findings..."}
+{"timestamp": "2026-09-01T21:42:13.349746+00:00", "level": "INFO", "name": "vibesec.normalizer", "message": "Normalization complete. Reduced to 118 unique findings."}
+{"timestamp": "2026-09-01T21:42:13.350149+00:00", "level": "INFO", "name": "vibesec.prioritizer", "message": "Prioritizing 118 findings..."}
+{"timestamp": "2026-09-01T21:42:13.351096+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Normalization complete: 118 findings remaining"}
+{"timestamp": "2026-09-01T21:42:13.351415+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Finished normalization phase in 0.00s"}
+{"timestamp": "2026-09-01T21:42:13.352027+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Starting triage phase..."}
+{"timestamp": "2026-09-01T21:42:17.948023+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Estimation complete: {'calls': 39, 'tokens': 22581, 'status': 'within_budget', 'max_calls': 50, 'max_tokens': 200000}"}
+{"timestamp": "2026-09-01T21:42:17.949324+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Finished triage phase in 4.60s"}
+{"timestamp": "2026-09-01T21:42:17.950750+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Starting report phase..."}
+{"timestamp": "2026-09-01T21:42:17.996426+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Scan pipeline finished with 118 findings."}
+{"timestamp": "2026-09-01T21:42:17.996931+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Finished report phase in 0.05s"}
+{"timestamp": "2026-09-01T21:42:17.997538+00:00", "level": "INFO", "name": "vibesec.pipeline", "message": "Finished full scan pipeline in 1000.99s"}