T3MP3ST v1 — hardened launch (AGPL, verify-claims 24/24, leak-scrubbed)
This commit is contained in:
1 parent
c7a356bde0
commit
6c57e09023
242 files changed
+1761
-51038
No files matched your search
@@ -281,7 +281,7 @@ export function parseFindings(text) {
|
||||
}
|
||||
|
||||
// ---- scoring against real patch ------------------------------------------
|
||||
const CWE_FAMILY = {
|
||||
export const CWE_FAMILY = {
|
||||
'CWE-22': 'path', 'CWE-23': 'path', 'CWE-36': 'path', 'CWE-35': 'path',
|
||||
'CWE-918': 'ssrf', 'CWE-441': 'ssrf',
|
||||
'CWE-78': 'cmdi', 'CWE-77': 'cmdi',
|
||||
@@ -290,16 +290,17 @@ const CWE_FAMILY = {
|
||||
'CWE-79': 'xss',
|
||||
'CWE-862': 'authz', 'CWE-863': 'authz', 'CWE-285': 'authz', 'CWE-639': 'authz', 'CWE-306': 'authz', 'CWE-287': 'authz',
|
||||
'CWE-200': 'info', 'CWE-209': 'info', 'CWE-538': 'info',
|
||||
'CWE-502': 'deser',
|
||||
'CWE-502': 'deser', 'CWE-436': 'deser',
|
||||
'CWE-829': 'supply',
|
||||
'CWE-611': 'xxe',
|
||||
'CWE-835': 'dos', 'CWE-400': 'dos', 'CWE-770': 'dos',
|
||||
'CWE-787': 'mem', 'CWE-125': 'mem', 'CWE-119': 'mem', 'CWE-122': 'mem', 'CWE-121': 'mem',
|
||||
'CWE-352': 'csrf',
|
||||
'CWE-295': 'tls', 'CWE-322': 'tls',
|
||||
};
|
||||
function fam(cwe) { return CWE_FAMILY[(cwe||'').toUpperCase().trim()] || (cwe||'').toUpperCase().trim(); }
|
||||
export function fam(cwe) { return CWE_FAMILY[(cwe||'').toUpperCase().trim()] || (cwe||'').toUpperCase().trim(); }
|
||||
|
||||
function scoreFinding(f, gt) {
|
||||
export function scoreFinding(f, gt) {
|
||||
const rptFile = (f.file || '').replace(/^\.?\//, '');
|
||||
const rptBase = path.basename(rptFile);
|
||||
// file_match: basename matches any vuln file (path prefixes vary by how agent refers to it)
|
||||
|
||||
Reference in new issue
Block a user