nyx/tests/fixtures/go_server
2026-05-03 13:51:46 -04:00
..
db.go Feat/full cfg (#30) 2026-02-24 23:44:07 -05:00
expectations.json Precision pass on auth and resource analysis (#63) 2026-05-03 13:51:46 -04:00
README.md Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
server.go Feat/full cfg (#30) 2026-02-24 23:44:07 -05:00

go_server

Purpose

Realistic Go HTTP server fixture used as a multi-file scan regression.

Expectations

  • required: taint-unsanitised-flow (≥4), go.cmdi.exec_command (≥3), cfg-unguarded-sink (≥1)
  • forbidden: (none)
  • noise_budget: max_total=25, max_high=10

Why noise_budget stays

Realistic apps produce a natural mix of true-positive findings plus minor framework/helper noise. noise_budget is a loose upper bound that guards against precision regressions without requiring an exact per-finding pin. The required_findings list captures the must-fire truth set; anything new within the budget is permitted variance.