open/llm-security
1
0
Fork 0
Code Issues Releases 1 Activity

feat(llm-security): wire AST scanner into orchestrator and policy

Browse source 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V3s6WnubSSrFjAQTLQdVbG
This commit is contained in:
Kjell Tore Guttormsen 2026-06-20 09:41:32 +02:00
commit b50313e461
4 changed files with 62 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scanners/lib/policy-loader.mjs
View file

@ -89,6 +89,12 @@ const DEFAULT_POLICY = Object.freeze({
enabled_families: ['webshell', 'reverse_shell', 'cryptominer', 'hacktool'],
custom_rules_path: null,
},
// AST — Python AST taint scanner (shells out to a parse-only python3 helper).
ast: {
enabled: true,
python_path: 'python3',
timeout_ms: 5000,
},
});
// Cache loaded policy per project root