babb81af52
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Added Deno analyzer with comprehensive metadata and evidence structure. - Created a detailed implementation plan for Sprint 130 focusing on Deno analyzer. - Introduced AdvisoryAiGuardrailOptions for managing guardrail configurations. - Developed GuardrailPhraseLoader for loading blocked phrases from JSON files. - Implemented tests for AdvisoryGuardrailOptions binding and phrase loading. - Enhanced telemetry for Advisory AI with metrics tracking. - Added VexObservationProjectionService for querying VEX observations. - Created extensive tests for VexObservationProjectionService functionality. - Introduced Ruby language analyzer with tests for simple and complex workspaces. - Added Ruby application fixtures for testing purposes.
1.4 KiB
1.4 KiB
Deno Analyzer Tasks (Sprint 130)
| Order | Task ID | State | Summary |
|---|---|---|---|
| 1 | SCANNER-ANALYZERS-DENO-26-001 |
DONE | Deterministic input normalizer + VFS merger for deno.json(c), import maps, lockfiles, vendor trees, $DENO_DIR, and OCI layers. |
| 2 | SCANNER-ANALYZERS-DENO-26-002 |
DONE | Module graph resolver covering static/dynamic imports, npm bridge, cache lookups, built-ins, WASM/JSON assertions with provenance. |
| 3 | SCANNER-ANALYZERS-DENO-26-003 |
DONE | npm/node compatibility adapter for npm: specifiers, exports evaluation, and builtin usage logging. |
| 4 | SCANNER-ANALYZERS-DENO-26-004 |
DONE | Permission/capability analyzer for FS/net/env/process/crypto/FFI/workers plus dynamic import heuristics with reason codes. |
| 5 | SCANNER-ANALYZERS-DENO-26-005 |
DONE | Bundle/binary inspectors for eszip and deno compile executables to recover graphs/config/resources/snapshots. |
| 6 | SCANNER-ANALYZERS-DENO-26-006 |
DONE | OCI/container adapter that stitches per-layer Deno caches, vendor trees, and compiled binaries into provenance-aware inputs. |
| 7 | SCANNER-ANALYZERS-DENO-26-007 |
DONE | AOC-compliant observation writers (entrypoints, modules, capability edges, workers, warnings, binaries) with deterministic reason codes. |
| 8 | SCANNER-ANALYZERS-DENO-26-008 |
DONE | Fixture and benchmark suite for vendor/npm/FFI/worker/dynamic import/bundle/cache/container cases. |