dastrunner

package
v0.1.4 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jul 23, 2026 License: Apache-2.0 Imports: 20 Imported by: 0

Documentation

Overview

Package dastrunner executes narrowly-scoped, approved runtime verification probes.

This is not an autonomous exploit engine. The service only accepts a safety.AdmittedAction, which can be produced by safety.Gate after scope/window/RoE and HITL approval. It then runs a bounded, argv-only, safe HTTP probe, seals a compact result summary, and hands the typed proof class to dastverifier.Service / analysis.Verify for custody and score movement.

Index

Constants

View Source 
const (
	ToolRunDASTVerifier = "run_dast_verifier"
	ActionSafeHTTPProbe = "dast.safe_http_probe"
)

Variables

This section is empty.

Functions

This section is empty.

Types

type Probe 

type Probe struct {
	JudgmentID           shared.ID
	URL                  string
	Method               string
	ExpectedStatus       int
	ExpectedBodyContains string
	ScoreIfConfirmed     int
	ScoreIfRefuted       int
	ExpectedVersion      int
	Rationale            string
}

type Result 

type Result struct {
	Judgment judgment.Judgment
	Proof    dastverifier.ProofClass
	Status   int
	Evidence shared.ID
}

type Service 

type Service struct {
	// contains filtered or unexported fields
}

func NewService 

func NewService(runner ports.ToolRunner, ev *evidence.Service, applier resultApplier, curlBin string, timeout time.Duration, maxOut int) (*Service, error)

func (*Service) Execute 

func (s *Service) Execute(ctx context.Context, admitted safety.AdmittedAction, probe Probe) (Result, error)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.