apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-09 19:45:13 +02:00
Code Issues Projects Releases Packages Wiki Activity
134 commits 4 branches 10 tags 272 MiB
Commit graph

134 commits

This branch
This branch
All branches
Author SHA1 Message Date
pitboss
118cafa535 [pitboss] phase 08: M6.5 — Patch-validation / fix-validation CI mode 2026-05-12 14:14:13 -04:00
pitboss
25e8b0eb0e [pitboss] sweep after phase 07: 6 deferred items resolved 2026-05-12 13:47:11 -04:00
pitboss
bfdfcb9d1a [pitboss] phase 07: M6 — Evidence consumers: formatters, ranking, UI 2026-05-12 13:26:52 -04:00
pitboss
6f8a645077 [pitboss] phase 06: M5.5 — Coverage-feedback payload generation + OOB listener finalized 2026-05-12 12:51:04 -04:00
pitboss
86613f5279 [pitboss] sweep after phase 05: 1 deferred items resolved 2026-05-12 03:41:22 -04:00
pitboss
6d147d334e [pitboss] sweep after phase 05: 2 deferred items resolved 2026-05-12 03:18:19 -04:00
elipeter
09553f5b4c Add native binary Docker backend for Rust/Go and enhance sandboxing 2026-05-12 02:56:51 -04:00
pitboss
62bd480db3 [pitboss] sweep after phase 05: 2 deferred items resolved 2026-05-12 02:35:58 -04:00
pitboss
345b44d3cc [pitboss] phase 05: M5 — JS/TS, Go, Java, PHP harness emitters 2026-05-12 02:20:55 -04:00
pitboss
84638e7d57 [pitboss] sweep after phase 04: 3 deferred items resolved 2026-05-12 01:20:51 -04:00
pitboss
3ffe480660 [pitboss] phase 04: M4 — Rust harness (second-language validation) 2026-05-12 00:57:45 -04:00
pitboss
e875aa1208 [pitboss] sweep after phase 03: 7 deferred items resolved 2026-05-12 00:20:00 -04:00
pitboss
a8b9dcd72b [pitboss] phase 03: M3 — Docker backend + sandbox-escape regression suite 2026-05-12 00:05:11 -04:00
pitboss
3a4f1b177b [pitboss] sweep after phase 02: 3 deferred items resolved 2026-05-11 23:24:37 -04:00
pitboss
0bf39047b9 [pitboss] phase 02: M2 — Python end-to-end excellence with all hardening baked in 2026-05-11 22:56:43 -04:00
pitboss
894f587b60 [pitboss] sweep after phase 01: 5 deferred items resolved 2026-05-11 21:38:09 -04:00
pitboss
a10aba5d1f [pitboss] phase 01: M1 — Spec extraction + --verify plumbing (no sandbox) 2026-05-11 21:19:03 -04:00
elipeter
cb8688219a Merge branch 'master' into dynamic 2026-05-11 12:48:46 -04:00
elipeter
7e0e19a7f0 Merge branch 'master' into dynamic 2026-05-11 12:44:12 -04:00
Eli Peter
55247b7fcd
Critical bug fixes and recall improvements (#68) 2026-05-11 12:42:39 -04:00
Eli Peter
7d0e7320e2
new capacity bits (#67) 2026-05-07 01:29:31 -04:00
elipeter
afaffc0df6 updated third party licenses 2026-05-06 05:03:00 -04:00
elipeter
c6f4c3e1cf chore: Update CHANGELOG with recent UI refresh, layout improvements, and screenshot enhancements 2026-05-06 05:01:43 -04:00
elipeter
6c607634da style: Improve code formatting for better readability in CSS and JSX files 2026-05-06 04:49:13 -04:00
elipeter
b51ae4f89d feat: Increase screenshot resolution to 1600x992 for improved quality 2026-05-06 04:45:50 -04:00
elipeter
77be7f10d9 refactor: Update UI components for consistency and improve layout 2026-05-06 04:38:04 -04:00
elipeter
da619171cf chore: Update package versions in Cargo.lock and package.json 2026-05-05 19:53:40 -04:00
elipeter
e8f1c64dc9 feat: Add asset mirroring for nyxscan.dev landing site and update favicon 2026-05-05 19:21:11 -04:00
elipeter
e830fd0a7e fix: Correct image paths in documentation for consistency 2026-05-05 19:08:51 -04:00
elipeter
c6baa4d5dc feat: Update brand color to mint-cyan across screenshots and UI elements 2026-05-05 19:02:47 -04:00
elipeter
bbf6f91c56 feat: Enhance CLI screenshot capture with raw file saving and GIF generation 2026-05-05 18:17:53 -04:00
elipeter
56e934656c feat: Implement dynamic verification layer with harness generation and payload orchestration 2026-05-05 03:43:45 -04:00
Eli Peter
fb698d2c27
Performance and precision pass (#64) 2026-05-04 19:58:04 -04:00
Eli Peter
c7c5e0f3a1
Precision pass on auth and resource analysis (#63) 2026-05-03 13:51:46 -04:00
elipeter
064801a3a4 feat: Simplify inner-call release detection logic in resource filtering 2026-05-02 21:49:01 -04:00
elipeter
ebe4a15a72 feat: Enhance resource leak detection by recognizing inner-call release patterns and err-companion guards 2026-05-02 21:47:03 -04:00
elipeter
48bc43e1a6 feat: Add SSA summaries support for validated parameter propagation and enhance loop body error handling 2026-05-02 21:02:47 -04:00
elipeter
92aaa36ed6 chore: Update version placeholders and changelog for release 0.6.0 2026-05-02 18:06:50 -04:00
elipeter
215dd02eff docs: Update CVE list in README to include recent vulnerabilities and their details 2026-05-02 17:51:42 -04:00
Eli Peter
1f2bfe76c1
docs: Enhance module documentation across various files for clarity a… (#62) 
* docs: Enhance module documentation across various files for clarity and completeness

* fix: Remove unnecessary blank line in build.rs for cleaner code

* docs: Update documentation to improve clarity and consistency in code comments
 2026-05-02 17:46:45 -04:00
Eli Peter
40995e45e7
Authorization analysis logic improvements (#61) 2026-05-02 16:44:49 -04:00
Eli Peter
3c89bddbf2
Improved path traversal detection and enhanced sink classification logic 2026-05-02 03:36:14 -04:00
Eli Peter
58f1794a4e
Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 
* feat: Enhance data exfiltration detection with source sensitivity gating for cookies and headers

* feat: Implement cross-file data exfiltration detection with parameter-specific gate filters

* feat: Add calibration tests and refine DATA_EXFIL severity scoring logic

* feat: Introduce per-detector configuration for data exfiltration suppression

* feat: Enhance DATA_EXFIL findings with destination field tracking in diagnostics and SARIF output

* feat: Add tainted body and URL handling for data exfiltration detection

* feat: Add integration tests and fixtures for DATA_EXFIL and SSRF detection in Go

* feat: Add Java integration tests and fixtures for DATA_EXFIL detection across multiple HTTP clients

* feat: Add synthetic externals handling for closure-captured variables in SSA

* feat: Implement closure-based suppression for resource leak findings

* feat: Add regression guards for shell-injection and taint propagation in for-of destructure patterns

* feat: Implement constructor cap narrowing for data exfiltration detection in HTTP request builders

* feat: Add gated sinks for data exfiltration detection in C and C++ using curl_easy_setopt

* feat: Implement DATA_EXFIL cap parity for backwards analysis and add integration tests

* feat: Add data exfiltration sinks for various languages and enhance documentation

* refactor: Simplify formatting and improve readability in various files

* refactor: Improve readability by simplifying conditional statements and adding clippy linting

* docs: Update CHANGELOG and comments for data exfiltration features and configuration

* docs: Clarify configuration instructions for data exfiltration trusted destinations

* docs: Enhance comments for evidence routing logic in data exfiltration
 2026-05-01 10:59:52 -04:00
Eli Peter
a438886217
Python fp and docs updtes (#58) 
* refactor: Update comments for clarity and add expectations.json files for performance metrics

* feat: Implement FP guard for JS/TS local-collection receivers to suppress missing ownership checks

* feat: Enhance Rust parameter handling to classify local collections and prevent false ownership checks

* refactor: Simplify code formatting for better readability in multiple files

* refactor: Improve UTF-8 sequence length handling and enhance clarity in loop iteration

* feat: Update Java and Python patterns to include new security rules

* refactor: Improve comment clarity and consistency across multiple Rust files

* refactor: Simplify code formatting for improved readability in integration tests and module files

* refactor: Improve comment formatting and enhance clarity in assertions across multiple files
 2026-04-29 19:53:34 -04:00
elipeter
4db0805de6 ci: Enhance release workflow to support manual tag input and ensure consistent artifact naming 2026-04-29 11:59:50 -04:00
elipeter
65add619a0 ci: Update cosign signing commands to use bundle output format 2026-04-29 11:53:55 -04:00
Eli Peter
832533a8cd
Fix fn and bump frontend packages (#57) 
* chore(deps): update frontend dependencies to latest versions

* fix: update reconnectTimer type and adjust tsconfig paths for consistency

* fix: add toast to dependencies in FindingsPage component

* fix: add toast to dependencies in FindingsPage component

* fix: update language maturity metrics and improve Go validation handling

* fix: update CHANGELOG with recent enhancements and dependency bumps

* fix: format reconnectTimer initialization for improved readability
 2026-04-29 02:57:57 -04:00
dependabot[bot]
281699faae
chore(deps): bump react-router-dom from 6.30.3 to 7.14.2 in /frontend (#49) 
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 6.30.3 to 7.14.2.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.14.2/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: react-router-dom
  dependency-version: 7.14.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-29 01:07:22 -04:00
dependabot[bot]
d08c835ea3
chore(deps): bump blake3 in the cargo-minor-and-patch group (#47) 
Bumps the cargo-minor-and-patch group with 1 update: [blake3](https://github.com/BLAKE3-team/BLAKE3).


Updates `blake3` from 1.8.4 to 1.8.5
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](https://github.com/BLAKE3-team/BLAKE3/compare/1.8.4...1.8.5)

---
updated-dependencies:
- dependency-name: blake3
  dependency-version: 1.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-29 01:06:51 -04:00
dependabot[bot]
f4b1ab8a34
chore(deps): bump the frontend-minor-and-patch group (#48) 
Bumps the frontend-minor-and-patch group in /frontend with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.95.2` | `5.100.6` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.1` | `4.1.5` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `7.0.1` | `7.1.1` |
| [globals](https://github.com/sindresorhus/globals) | `17.4.0` | `17.5.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.0.1` | `29.1.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.57.2` | `8.59.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.1` | `4.1.5` |


Updates `@tanstack/react-query` from 5.95.2 to 5.100.6
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.100.6/packages/react-query)

Updates `@vitest/coverage-v8` from 4.1.1 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8)

Updates `eslint-plugin-react-hooks` from 7.0.1 to 7.1.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/eslint-plugin-react-hooks@7.1.1/packages/eslint-plugin-react-hooks)

Updates `globals` from 17.4.0 to 17.5.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.4.0...v17.5.0)

Updates `jsdom` from 29.0.1 to 29.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](https://github.com/jsdom/jsdom/compare/v29.0.1...v29.1.0)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.8.1...3.8.3)

Updates `typescript-eslint` from 8.57.2 to 8.59.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.1/packages/typescript-eslint)

Updates `vitest` from 4.1.1 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.100.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-and-patch
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-and-patch
- dependency-name: globals
  dependency-version: 17.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-and-patch
- dependency-name: jsdom
  dependency-version: 29.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-29 01:05:33 -04:00