mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
| .. | ||
| db.go | ||
| expectations.json | ||
| README.md | ||
| server.go | ||
go_server
Purpose
Realistic Go HTTP server fixture used as a multi-file scan regression.
Expectations
- required:
taint-unsanitised-flow(≥4),go.cmdi.exec_command(≥3),cfg-unguarded-sink(≥1) - forbidden: (none)
- noise_budget: max_total=25, max_high=10
Why noise_budget stays
Realistic apps produce a natural mix of true-positive findings plus minor framework/helper noise. noise_budget is a loose upper bound that guards against precision regressions without requiring an exact per-finding pin. The required_findings list captures the must-fire truth set; anything new within the budget is permitted variance.