Documentation
¶
Overview ¶
Package security is the universal security sensor. It orchestrates the filtering pyramid — a language-agnostic regex layer for obvious secrets and the active provider's AST analysis (deterministic findings plus mapped surface) — and adjusts each finding's severity by the file's path criticality (RF-11). codefit runs no LLM layer: the surface is returned to the agent, which reasons over it with its own model.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Sensor ¶
type Sensor struct {
// contains filtered or unexported fields
}
Sensor runs the security dimension against a project, driven by a language provider for the AST layer.
func New ¶
func New(p providers.LanguageProvider) *Sensor
New builds a security sensor backed by a language provider.
func (*Sensor) OwnedCategories ¶ added in v0.2.0
OwnedCategories are the baseline Item categories the security sensor produces: its finding dimension ("security") plus its surface categories (idor/authz/ overfetch/nplus1). They scope the unified baseline (ADR 0019). CategoryNPlus1 is included even though its agent-confirmed finding is stamped DimensionDB (dimensionFor) — this sensor is what ENUMERATES the surface item, so it must own the category for baseline tracking/pruning, regardless of which dimension a later confirmation lands in.
func (*Sensor) Run ¶
func (s *Sensor) Run(ctx auditctx.AuditContext) (findings.SensorResult, error)
Run walks the project's source files and returns the security findings.
Source Files