Files
git.stella-ops.org/src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md
master c377229931 Add scripts for resolving and verifying Chromium binary paths
- Implemented `chrome-path.js` to define functions for locating Chromium binaries across different platforms and nested directories.
- Added `verify-chromium.js` to check for the presence of the Chromium binary and log the results, including candidate paths checked.
- The scripts support Linux, Windows, and macOS environments, enhancing the flexibility of Chromium binary detection.
2025-10-22 09:14:36 +03:00

1.8 KiB
Raw Blame History

Go Analyzer Task Flow

Seq ID Status Depends on Description Exit Criteria
1 SCANNER-ANALYZERS-LANG-10-304A DONE (2025-10-22) SCANNER-ANALYZERS-LANG-10-307 Parse Go build info blob (runtime/debug format) and .note.go.buildid; map to module/version and evidence. Build info extracted across Go 1.181.23 fixtures; evidence includes VCS, module path, and build settings.
2 SCANNER-ANALYZERS-LANG-10-304B DONE (2025-10-22) SCANNER-ANALYZERS-LANG-10-304A Implement DWARF-lite reader for VCS metadata + dirty flag; add cache to avoid re-reading identical binaries. DWARF reader supplies commit hash for ≥95% fixtures; cache reduces duplicated IO by ≥70%.
3 SCANNER-ANALYZERS-LANG-10-304C TODO SCANNER-ANALYZERS-LANG-10-304B Fallback heuristics for stripped binaries with deterministic bin:{sha256} labeling and quiet provenance. Heuristic labels clearly separated; tests ensure no false “observed” provenance; documentation updated.
4 SCANNER-ANALYZERS-LANG-10-307G TODO SCANNER-ANALYZERS-LANG-10-304C Wire shared helpers (license mapping, usage flags) and ensure concurrency-safe buffer reuse. Analyzer reuses shared infrastructure; concurrency tests with parallel scans pass; no data races.
5 SCANNER-ANALYZERS-LANG-10-308G TODO SCANNER-ANALYZERS-LANG-10-307G Determinism fixtures + benchmark harness (Vs competitor). Fixtures under Fixtures/lang/go/; CI determinism check; benchmark runs showing ≥20% speed advantage.
6 SCANNER-ANALYZERS-LANG-10-309G TODO SCANNER-ANALYZERS-LANG-10-308G Package plug-in manifest + Offline Kit notes; ensure Worker DI registration. Manifest copied; Worker loads analyzer; Offline Kit docs updated with Go analyzer presence.