open/llm-security
1
0
Fork 0
Code Issues Releases 1 Activity

feat(llm-security): wire SIG scanner into orchestrator and policy

Browse source 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V3s6WnubSSrFjAQTLQdVbG
This commit is contained in:
Kjell Tore Guttormsen 2026-06-20 09:32:23 +02:00
commit e46bf12b86
4 changed files with 64 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scanners/lib/policy-loader.mjs
View file

@ -83,6 +83,12 @@ const DEFAULT_POLICY = Object.freeze({
'run', 'do', 'go', 'help', 'fix', 'use', 'get', 'set', 'all', 'any', 'it', 'this', 'that',
],
},
// SIG — known-bad-identity signature engine. Toggle families or point at a
// custom ruleset via policy.json.
sig: {
enabled_families: ['webshell', 'reverse_shell', 'cryptominer', 'hacktool'],
custom_rules_path: null,
},
});
// Cache loaded policy per project root