T3MP3ST v1 — hardened launch (AGPL, verify-claims 24/24, leak-scrubbed)

This commit is contained in:
faber committed 2026-07-04 21:11:05 -04:00
1 parent c7a356bde0
commit 6c57e09023
242 files changed
+1761 -51038

No files matched your search

+5 -4
View File
@@ -281,7 +281,7 @@ export function parseFindings(text) {
}
// ---- scoring against real patch ------------------------------------------
const CWE_FAMILY = {
export const CWE_FAMILY = {
'CWE-22': 'path', 'CWE-23': 'path', 'CWE-36': 'path', 'CWE-35': 'path',
'CWE-918': 'ssrf', 'CWE-441': 'ssrf',
'CWE-78': 'cmdi', 'CWE-77': 'cmdi',
@@ -290,16 +290,17 @@ const CWE_FAMILY = {
'CWE-79': 'xss',
'CWE-862': 'authz', 'CWE-863': 'authz', 'CWE-285': 'authz', 'CWE-639': 'authz', 'CWE-306': 'authz', 'CWE-287': 'authz',
'CWE-200': 'info', 'CWE-209': 'info', 'CWE-538': 'info',
'CWE-502': 'deser',
'CWE-502': 'deser', 'CWE-436': 'deser',
'CWE-829': 'supply',
'CWE-611': 'xxe',
'CWE-835': 'dos', 'CWE-400': 'dos', 'CWE-770': 'dos',
'CWE-787': 'mem', 'CWE-125': 'mem', 'CWE-119': 'mem', 'CWE-122': 'mem', 'CWE-121': 'mem',
'CWE-352': 'csrf',
'CWE-295': 'tls', 'CWE-322': 'tls',
};
function fam(cwe) { return CWE_FAMILY[(cwe||'').toUpperCase().trim()] || (cwe||'').toUpperCase().trim(); }
export function fam(cwe) { return CWE_FAMILY[(cwe||'').toUpperCase().trim()] || (cwe||'').toUpperCase().trim(); }
function scoreFinding(f, gt) {
export function scoreFinding(f, gt) {
const rptFile = (f.file || '').replace(/^\.?\//, '');
const rptBase = path.basename(rptFile);
// file_match: basename matches any vuln file (path prefixes vary by how agent refers to it)