mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
Phase 1 (#33)
* chore: Exclude CLAUDE.md from Cargo.toml * feat: add callgraph module and integrate into main analysis flow * feat: enhance CLI with new severity filtering and analysis modes * feat: update CHANGELOG with recent enhancements and fixes to severity filtering and output handling * feat: implement state-model dataflow analysis for resource lifecycle and auth state * feat: enhance diagnostic output formatting and add evidence structure * feat: implement attack surface ranking for diagnostics with scoring and sorting * feat: add comprehensive documentation for installation, usage, and rules reference * feat: add multiple language support for command execution and evaluation endpoints * feat: implement inline suppression for findings using `nyx:ignore` comments * feat: add confidence levels to AST patterns and update output structure * feat: implement low-noise prioritization system with category filtering, rollup grouping, and configurable budgets * feat: bump version to 0.4.0 and update changelog with new features and improvements * feat: add dead code allowances to various functions in mod.rs and real_world_tests.rs
This commit is contained in:
parent
19b578c5c4
commit
1bbe4b1cfb
456 changed files with 25628 additions and 1228 deletions
|
|
@ -29,6 +29,10 @@ pub static RULES: &[LabelRule] = &[
|
|||
matchers: &["printf", "fprintf"],
|
||||
label: DataLabel::Sink(Cap::FMT_STRING),
|
||||
},
|
||||
LabelRule {
|
||||
matchers: &["fopen", "open"],
|
||||
label: DataLabel::Sink(Cap::FILE_IO),
|
||||
},
|
||||
];
|
||||
|
||||
pub static KINDS: Map<&'static str, Kind> = phf_map! {
|
||||
|
|
@ -38,15 +42,23 @@ pub static KINDS: Map<&'static str, Kind> = phf_map! {
|
|||
"for_statement" => Kind::For,
|
||||
"for_range_loop" => Kind::For,
|
||||
"do_statement" => Kind::While,
|
||||
"switch_statement" => Kind::Block,
|
||||
"case_statement" => Kind::Block,
|
||||
"labeled_statement" => Kind::Block,
|
||||
|
||||
"return_statement" => Kind::Return,
|
||||
"throw_statement" => Kind::Return,
|
||||
"break_statement" => Kind::Break,
|
||||
"continue_statement" => Kind::Continue,
|
||||
|
||||
// structure
|
||||
"translation_unit" => Kind::SourceFile,
|
||||
"compound_statement" => Kind::Block,
|
||||
"else_clause" => Kind::Block,
|
||||
"function_definition" => Kind::Function,
|
||||
"try_statement" => Kind::Block,
|
||||
"catch_clause" => Kind::Block,
|
||||
"lambda_expression" => Kind::Block,
|
||||
|
||||
// data-flow
|
||||
"call_expression" => Kind::CallFn,
|
||||
|
|
@ -63,7 +75,7 @@ pub static KINDS: Map<&'static str, Kind> = phf_map! {
|
|||
"preproc_include" => Kind::Trivia,
|
||||
"preproc_def" => Kind::Trivia,
|
||||
"using_declaration" => Kind::Trivia,
|
||||
"namespace_definition" => Kind::Trivia,
|
||||
"namespace_definition" => Kind::Block,
|
||||
};
|
||||
|
||||
pub static PARAM_CONFIG: ParamConfig = ParamConfig {
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue