open/llm-security
1
0
Fork 0
Code Issues Releases 6 Activity

docs: knowledge-file count from source, no offline claim for the CLI

Browse source 
PLAN § v8.1.3 tillegg b and c.
- b: scanner-reference.md said Knowledge Files (20); knowledge/ holds
  22. Added typosquat-allowlist.json and workflow-injection-patterns.md;
  the test pins header and table to the directory.
- c: ci-cd-guide.md claimed zero network calls, OSV opt-in and "no
  cross-border data transfer". Measured in the code: dep runs npm audit
  (package.json) and pip-audit (requirements.txt, if installed), network
  resolves found domains over DNS, supply-chain queries OSV.dev, none
  with a switch. The guide now says so. scanner-reference.md carried the
  same claim plus a `--online` flag that does not exist (0 hits in
  scanners/); fixed in the same commit because the same gate covers it
  (chosen over leaving a known-false line in a file already edited here).
  That extra check was red on fd7de23's text, verified.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-09-23 11:37:58 +02:00
commit b4d9f83521
Signed by: ktg
SSH key fingerprint: SHA256:JakMjO6FTBBzN0Bhfj9saOoEjaFxlSdYuZQQpM/lF9Q
3 changed files with 33 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/scanner-reference.md
View file

@ -78,9 +78,9 @@ Subcommands: `scan`, `deep-scan`, `posture`, `audit-bom`, `benchmark`. Dispatche
Pipeline templates in `ci/`: `github-action.yml`, `azure-pipelines.yml`, `gitlab-ci.yml`. Documentation: `docs/ci-cd-guide.md`.
All templates use `--fail-on high --format sarif --output-file results.sarif` with SARIF upload per platform.
Standalone CLI makes zero network calls in default mode. Schrems II compatible in default offline mode. Optional OSV.dev enrichment (`supply-chain-recheck --online`) transmits package identifiers to a Google-operated API and is a separate compliance consideration.
The standalone CLI is not offline: `npm audit`/`pip-audit` (dep), DNS lookups (network) and OSV.dev queries (supply-chain) reach the network whenever their input is present, with no switch to turn them off. Source code is not uploaded; package names, versions and domain names are. See `docs/ci-cd-guide.md` § Data Sovereignty.
## Knowledge Files (20)
## Knowledge Files (22)
| File | Content |
|------|---------|
@ -92,6 +92,7 @@ Standalone CLI makes zero network calls in default mode. Schrems II compatible i
| `owasp-skills-top10.md` | OWASP Skills Top 10 (AST01-AST10) — skill-specific threats |
| `mitigation-matrix.md` | Threat-to-control mappings |
| `top-packages.json` | Known package lists for supply chain checks |
| `typosquat-allowlist.json` | Legitimate packages that would otherwise trip typosquat detection, plus official npm scopes |
| `skill-registry.json` | Seed data for skill signature registry |
| `prompt-injection-research-2025-2026.md` | 7 research papers (2025-2026) with implications for hook defenses |
| `deepmind-agent-traps.md` | DeepMind AI Agent Traps — 6 categories, 43 techniques, coverage matrix |
@ -104,6 +105,7 @@ Standalone CLI makes zero network calls in default mode. Schrems II compatible i
| `top-jetbrains-plugins.json` | Top JetBrains plugin IDs (typosquat seed) + blocklist entries (v6.6.0) |
| `marketplace-api-notes.md` | VS Code Marketplace + OpenVSX API endpoints used by `lib/vsix-fetch.mjs` (v6.4.0) |
| `jetbrains-marketplace-api-notes.md` | JetBrains Marketplace API endpoints used by `fetchJetBrainsPlugin` (v6.6.0) |
| `workflow-injection-patterns.md` | GitHub/Forgejo Actions `${{ }}` injection sinks for `workflow-scanner.mjs` (E11) |
## Reports