mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-06 19:35:13 +02:00
82f18184b1
* feat: Add const_bound_vars tracking to prevent false positives in ownership checks
* feat: Introduce field interner and typed bounded vars for enhanced type tracking
* feat: Add typed_call_receivers and typed_bounded_dto_fields for enhanced type tracking
* feat: Centralize method name extraction with bare_method_name helper
* feat: Implement Phase-6 hierarchy fan-out for runtime virtual dispatch
* feat: Enhance C++ taint tracking with additional container operations and inline method resolution
* feat: Introduce field-sensitive points-to analysis for enhanced resource tracking
* feat: Implement Pointer-Phase 6 subscript handling for enhanced container analysis
* test: Add comprehensive tests for JavaScript control flow constructs and lattice operations
* docs: Update advanced analysis documentation with field-sensitive points-to and hierarchy fan-out details
* test: Add comprehensive tests for lattice algebra laws and SSA edge cases
* feat: Add destructured session user handling and safe user ID access patterns
* feat: Implement row-population reverse-walk for enhanced authorization checks
* feat: Enhance authorization checks with local alias chain for self-actor types
* feat: Introduce ActiveRecord query safety checks and enhance snippet extraction
* feat: Implement chained method call inner-gate rebinding for SSRF prevention
* feat: Add observability and error modules, enhance debug functionality, and implement theme context
* feat: Remove Auth Analysis page and update navigation to redirect to Explorer
* feat: Optimize SSA lowering by sharing results between taint engine and artifact extractor
* feat: Optimize SSA lowering by sharing results between taint engine and artifact extractor
* feat: Reset path-safe-suppressed spans before lowering to maintain analysis integrity
* fix(ssa): ungate debug_assert_bfs_ordering for release-tests build
The helper at src/ssa/lower.rs was gated `#[cfg(debug_assertions)]` while
the unit test at the bottom of the file was gated only `#[cfg(test)]`.
Since `cfg(test)` is set in release builds with `--tests` but
`cfg(debug_assertions)` is not, `cargo build --release --tests` failed
with E0425. Removing the gate fixes the build; the body is `debug_assert!`
only, so the helper is free in release. Also drop the gate at the call
site to avoid a `dead_code` warning when the lib is built without
`--tests`.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* test(closure-capture): flip JS/TS fixtures to required-finding
The JS and TS closure-capture fixtures pinned the old broken behaviour
via `forbidden_findings: [{ "id_prefix": "taint-" }]`. The engine now
correctly traces taint through the closure boundary (env source captured
by an arrow function, sunk via `child_process.exec` inside the body), so
the formerly-forbidden finding is a true positive.
Match the Python sibling's shape — `required_findings` with
`id_prefix` + `min_count` plus a small `noise_budget` — and rewrite the
companion READMEs and the phase8_fragility_tests doc-comments from
"known gap" to "regression guard".
Verified:
- cargo test --release --test phase8_fragility_tests → 8/8 pass
- cargo test --release --lib bfs_assertion → pass
- corpus benchmark F1 = 0.9976 (TP=205, FP=1, FN=0) — unchanged
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* feat: Add OWASP mapping and baseline mutation hooks for enhanced security analysis
* feat: Introduce health module and enhance health score computation with calibration tests
* feat: Add expectations configuration and cleanup .gitignore for log files
* feat: Implement theme selection and enhance settings panel for triage sync
* feat: Suppress false positives for strcpy calls with literal sources in AST
* feat: Update analyse_function_ssa to return body CFG for accurate analysis
* feat: Add bug report and feature request templates for improved issue tracking
* feat: removed dev scripts
* feat: update README.md for clarity and consistency in fixture descriptions
* feat: removed dev docs
* feat: clean up error handling and UI elements for improved user experience
* feat: adjust button sizes in HeaderBar for better UI consistency
* feat: enhance taint analysis with additional context for sanitizer and taint findings
* cargo fmt
* prettier
* refactor: simplify conditional checks and improve code readability in AST and screenshot capture scripts
* feat: add script to frame PNG screenshots with brand gradient
* feat: add fuzzing support with new targets and CI workflows
* refactor: streamline match expressions and improve formatting in CLI and output handling
* feat: enhance configuration display with detailed output options
* feat: stage demo configuration for improved CLI screenshot output
* feat: expose merge_configs function for user-configurable settings
* refactor: simplify code structure and improve readability in config handling
* refactor: improve descriptions for vulnerability patterns in various languages
* feat: update MIT License section with additional usage details and copyright information
* feat: update screenshots
* refactor: update build process and paths for frontend assets
* feat: add cross-file taint fuzzing target and supporting dictionary
* refactor: clean up formatting and comments in fuzz configuration and example files
* refactor: remove outdated comments and clean up CI configuration files
* chore: update changelog dates and improve formatting in documentation
* refactor: update Cargo.toml and CI configuration for improved packaging and build process
* refactor: enhance quote-stripping logic to prevent panics and add regression tests
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
120 lines
3.4 KiB
TOML
120 lines
3.4 KiB
TOML
[package]
|
|
name = "nyx-scanner"
|
|
version = "0.5.0"
|
|
edition = "2024"
|
|
rust-version = "1.88"
|
|
description = "A multi-language static analysis tool for detecting security vulnerabilities"
|
|
license = "GPL-3.0-or-later"
|
|
authors = ["Eli Peter <elicpeter@example.com>"]
|
|
homepage = "https://github.com/elicpeter/nyx"
|
|
repository = "https://github.com/elicpeter/nyx"
|
|
documentation = "https://elicpeter.github.io/nyx/"
|
|
keywords = ["security", "vulnerability", "scanner", "static-analysis", "cli"]
|
|
categories = ["security", "command-line-utilities", "development-tools", "parser-implementations", "text-processing"]
|
|
readme = "README.md"
|
|
default-run = "nyx"
|
|
include = [
|
|
"/src/**",
|
|
"/tools/**",
|
|
"/build.rs",
|
|
"/Cargo.toml",
|
|
"/Cargo.lock",
|
|
"/README.md",
|
|
"/LICENSE",
|
|
"/THIRDPARTY-LICENSES.html",
|
|
"/default-nyx.conf",
|
|
]
|
|
|
|
autoexamples = false
|
|
|
|
|
|
[package.metadata.binstall]
|
|
pkg-url = "{ repo }/releases/download/v{ version }/nyx-{ target }{ archive-suffix }"
|
|
pkg-fmt = "zip"
|
|
bin-dir = "target/{ target }/release/{ bin }{ binary-ext }"
|
|
|
|
[features]
|
|
default = ["serve"]
|
|
serve = ["dep:axum", "dep:tokio", "dep:tokio-stream", "dep:tower-http"]
|
|
smt = ["dep:z3", "z3/bundled"]
|
|
smt-system-z3 = ["dep:z3"]
|
|
docgen = []
|
|
|
|
[lib]
|
|
name = "nyx_scanner"
|
|
path = "src/lib.rs"
|
|
|
|
[[bin]]
|
|
name = "nyx"
|
|
path = "src/main.rs"
|
|
|
|
[[bin]]
|
|
name = "nyx-docgen"
|
|
path = "tools/docgen/main.rs"
|
|
required-features = ["docgen"]
|
|
|
|
[[bench]]
|
|
name = "scan_bench"
|
|
harness = false
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3.26.0"
|
|
criterion = { version = "0.8", features = ["html_reports"] }
|
|
assert_cmd = "2"
|
|
predicates = "3"
|
|
glob = "0.3"
|
|
tower = { version = "0.5", features = ["util"] }
|
|
|
|
[dependencies]
|
|
directories = "6.0.0"
|
|
clap = { version = "4.5.60", features = ["derive"] }
|
|
serde = { version = "1.0.228", features = ["derive"] }
|
|
serde_json = "1.0"
|
|
rmp-serde = "1.3"
|
|
toml = "1.0.3"
|
|
tracing-subscriber = { version = "0.3.22", features = ["env-filter", "json", "ansi","time"] }
|
|
tracing = "0.1.44"
|
|
num_cpus = "1.17.0"
|
|
rusqlite = { version = "0.39.0", features = ["bundled"] }
|
|
r2d2_sqlite = { version = "0.33.0", features = ["bundled"] }
|
|
ignore = "0.4.25"
|
|
tree-sitter = "0.26.6"
|
|
tree-sitter-rust = "0.24.0"
|
|
tree-sitter-c = "0.24.1"
|
|
tree-sitter-cpp = "0.23.4"
|
|
tree-sitter-java = "0.23.5"
|
|
tree-sitter-typescript = "0.23.2"
|
|
tree-sitter-javascript = "0.25.0"
|
|
tree-sitter-go = "0.25.0"
|
|
tree-sitter-php = "0.24.2"
|
|
tree-sitter-python = "0.25.0"
|
|
tree-sitter-ruby = "0.23.1"
|
|
crossbeam-channel = "0.5.15"
|
|
blake3 = "1.8.3"
|
|
once_cell = "1.21.3"
|
|
console = "0.16.2"
|
|
terminal_size = "0.4"
|
|
rayon = "1.11.0"
|
|
r2d2 = "0.8.10"
|
|
bytesize = "2.3.1"
|
|
chrono = { version = "0.4.44", default-features = false, features = ["std", "clock", "serde"] }
|
|
thiserror = "2.0.18"
|
|
dashmap = "6.1.0"
|
|
parking_lot = "0.12"
|
|
petgraph = { version = "0.8.3", features = ["serde-1"] }
|
|
bitflags = "2.11.0"
|
|
phf = { version = "0.13.1", features = ["macros"] }
|
|
indicatif = "0.18.4"
|
|
smallvec = { version = "1.15", features = ["serde"] }
|
|
uuid = { version = "1", features = ["v4"] }
|
|
axum = { version = "0.8", optional = true }
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "signal", "sync"], optional = true }
|
|
tokio-stream = { version = "0.1", features = ["sync"], optional = true }
|
|
tower-http = { version = "0.6", features = ["cors", "compression-gzip", "trace", "set-header", "limit"], optional = true }
|
|
z3 = { version = "0.20.0", optional = true}
|
|
|
|
[profile.release]
|
|
lto = true
|
|
codegen-units = 1
|
|
debug = 1
|
|
strip = "none"
|