Python fp and docs updtes (#58)

* refactor: Update comments for clarity and add expectations.json files for performance metrics

* feat: Implement FP guard for JS/TS local-collection receivers to suppress missing ownership checks

* feat: Enhance Rust parameter handling to classify local collections and prevent false ownership checks

* refactor: Simplify code formatting for better readability in multiple files

* refactor: Improve UTF-8 sequence length handling and enhance clarity in loop iteration

* feat: Update Java and Python patterns to include new security rules

* refactor: Improve comment clarity and consistency across multiple Rust files

* refactor: Simplify code formatting for improved readability in integration tests and module files

* refactor: Improve comment formatting and enhance clarity in assertions across multiple files
This commit is contained in:
Eli Peter 2026-04-29 19:53:34 -04:00 committed by GitHub
parent 4db0805de6
commit a438886217
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
291 changed files with 9485 additions and 3851 deletions

View file

@ -191,7 +191,7 @@ struct BenchmarkResults {
// ── Scanning ─────────────────────────────────────────────────────────
fn scan_corpus_file(corpus_root: &Path, relative_path: &str) -> Vec<Diag> {
// `cve_corpus/*` cases live in a sibling of `corpus/` see
// `cve_corpus/*` cases live in a sibling of `corpus/`, see
// `tests/benchmark/cve_corpus/`.
let source = if relative_path.starts_with("cve_corpus/") {
corpus_root
@ -679,7 +679,7 @@ fn benchmark_evaluation() {
// on this corpus, so 5pp is generous enough to absorb honest
// FP↔TN trades while still catching a real regression in a
// vulnerability class. When you land a durable, measurable
// improvement, tighten these floors do not relax them to paper
// improvement, tighten these floors, do not relax them to paper
// over a regression.
let rule = &results.aggregate_rule_level;
assert!(
@ -790,7 +790,7 @@ fn score_rule_level_with_diags(
fn sha256_hex(data: &[u8]) -> String {
use std::io::Write;
// Simple SHA-256 via command avoids adding a crypto dependency.
// Simple SHA-256 via command, avoids adding a crypto dependency.
let mut child = std::process::Command::new("shasum")
.args(["-a", "256"])
.stdin(std::process::Stdio::piped())