llm-security

open/llm-security

Fork 0

Commit graph

342acda5bc docs(llm-security): state the deprecation notice period this repo practices main Kjell Tore Guttormsen 2026-08-21 11:30:14 +02:00
83db634a72 docs(llm-security): add llms.txt as the in-repo agent entry point Kjell Tore Guttormsen 2026-08-21 11:29:51 +02:00
e97c23246e fix(llm-security): sarif-formatter splits comma-separated owasp string into multiple tags Kjell Tore Guttormsen 2026-08-18 16:52:52 +02:00
9ce8821ab4 docs(llm-security): replace 5 placeholder URLs with real self-demo URL or explicit <owner>/<repo> Kjell Tore Guttormsen 2026-08-18 14:30:32 +02:00
23215280be docs(llm-security): add Table of Contents to README Kjell Tore Guttormsen 2026-08-16 16:17:47 +02:00
f926071348 fix(llm-security): compileRules coerces a non-string pattern instead of dropping the rule Kjell Tore Guttormsen 2026-08-13 21:51:10 +02:00
eceb71bbb3 fix(llm-security): SIG self-flagged the vendored commons it detects from Kjell Tore Guttormsen 2026-08-13 21:41:09 +02:00
bbada84e9f refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0) Kjell Tore Guttormsen 2026-08-13 21:28:14 +02:00
c9652a6d3d refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0) Kjell Tore Guttormsen 2026-08-13 21:10:14 +02:00
30dba2a457 docs(llm-security): recover the Windows sandboxing guidance stranded at the split Kjell Tore Guttormsen 2026-08-13 20:38:29 +02:00
909dd581af docs(llm-security): consolidate GOVERNANCE.md to the canonical copy (org-ops D11) Kjell Tore Guttormsen 2026-08-13 20:31:18 +02:00
18bc1dc92e fix(llm-security): the ReDoS gate timed every pattern and reached 8 of 45 Kjell Tore Guttormsen 2026-08-13 20:30:31 +02:00
464825f9bf chore(llm-security): pull commons subtree to v0.4.3 Kjell Tore Guttormsen 2026-08-13 20:08:20 +02:00
bc23b07cf9 Squashed 'scanners/commons/' changes from 4641a7b..7ce0ba7 Kjell Tore Guttormsen 2026-08-13 20:08:20 +02:00
47905dacae feat(llm-security): publish the spec 1.1 conformance declaration as an artifact Kjell Tore Guttormsen 2026-08-11 14:21:09 +02:00
be148671ee feat(llm-security): swap injection tables to vendored commons lexicon Kjell Tore Guttormsen 2026-08-11 14:13:36 +02:00
21a52ac49d chore(llm-security): pull commons subtree to v0.3.0, corpus 89 -> 90 cases Kjell Tore Guttormsen 2026-08-11 14:05:07 +02:00
2689df09a8 Merge commit 'bbd03f9b52' Kjell Tore Guttormsen 2026-08-11 14:03:23 +02:00
bbd03f9b52 Squashed 'scanners/commons/' changes from 532d70d..4641a7b Kjell Tore Guttormsen 2026-08-11 14:03:23 +02:00
088e45836c fix(llm-security): close OpenAI legacy key recall gap in pre-edit-secrets hook Kjell Tore Guttormsen 2026-08-11 13:43:27 +02:00
e1511f91aa feat(llm-security): v8 Phase 5 - implement conformance spec 1.1 (not-applicable) Kjell Tore Guttormsen 2026-08-11 13:10:57 +02:00
b3c5143c68 Merge commit '9b95fc607e' Kjell Tore Guttormsen 2026-08-11 13:02:33 +02:00
9b95fc607e Squashed 'scanners/commons/' changes from 0ffee85..532d70d Kjell Tore Guttormsen 2026-08-11 13:02:33 +02:00
359066a3f7 refactor(llm-security): v8 Phase 5 step 4 - swap OWASP_MAP to commons Kjell Tore Guttormsen 2026-08-11 12:53:48 +02:00
b1ba1fbdc6 refactor(llm-security): v8 Phase 5 step 4 - swap codepoint tables to commons Kjell Tore Guttormsen 2026-08-10 21:28:09 +02:00
c67bad3752 test(llm-security): v8 Phase 5 step 3 - run the 83-case commons corpus Kjell Tore Guttormsen 2026-08-10 21:00:59 +02:00
44e5e39f67 test(llm-security): v8 Phase 5 step 3 - invert the unvendored-commons test Kjell Tore Guttormsen 2026-08-10 20:52:04 +02:00
3b919f39b4 Merge commit 'a640f43d73' as 'scanners/commons' Kjell Tore Guttormsen 2026-08-10 20:40:16 +02:00
a640f43d73 Squashed 'scanners/commons/' content from commit 0ffee85 Kjell Tore Guttormsen 2026-08-10 20:40:16 +02:00
90f576f056 fix(llm-security): v8.x-A - close <script> recall hole, add whole-table ReDoS gate Kjell Tore Guttormsen 2026-08-10 14:53:29 +02:00
b0de0ca6d8 fix(llm-security): commons-loader - drop policy-driven root, ship path, fix cache [skip-docs] Kjell Tore Guttormsen 2026-08-09 14:11:56 +02:00
69cad7c973 feat(llm-security): v8 Phase 5 step 2 - commons-loader.mjs [skip-docs] Kjell Tore Guttormsen 2026-08-09 14:06:37 +02:00
2fe29152b3 fix(llm-security): golden gate - coverage block measured something else Kjell Tore Guttormsen 2026-08-09 13:06:45 +02:00
8d990e06d3 test(llm-security): v8 Phase 5 step 1 - golden baseline before any table swap Kjell Tore Guttormsen 2026-08-09 12:57:51 +02:00
fdec4b36ad feat(llm-security)!: v8 Phase 3 complete - riskScoreV1, posture heuristic, docs Kjell Tore Guttormsen 2026-08-09 10:25:03 +02:00
b6af9b46df feat(llm-security)!: v8 Phase 3 step 1 - remove the deprecated mode env-vars Kjell Tore Guttormsen 2026-08-09 10:17:47 +02:00
7336250c60 docs(llm-security): D12 disclosure + last dead pre-split reference Kjell Tore Guttormsen 2026-08-09 10:04:33 +02:00
c4dfee5762 docs(llm-security): trim README badge row 8 -> 4 (repo-standard BADGE-COUNT) Kjell Tore Guttormsen 2026-08-04 11:50:12 +02:00
9a51e832b9 docs(llm-security): repo-standard gate to 0 ERROR Kjell Tore Guttormsen 2026-08-03 22:02:29 +02:00
0f1be986d0 docs(llm-security): v8 Phase 2 — B10 docs consistency, counts pinned by test Kjell Tore Guttormsen 2026-08-02 21:22:20 +02:00
ff4d8e8a31 fix(llm-security): v8 Phase 1 — Berry lockfile, nested-v1 recursion, per-occurrence strip attribution Kjell Tore Guttormsen 2026-08-02 21:10:47 +02:00
b929ddc2bb chore(llm-security): untrack STATE.md — public remote requires LOCAL-ONLY Kjell Tore Guttormsen 2026-08-01 20:24:20 +02:00
46b4c1b48d chore(llm-security): STATE — v8.0.0 plan approved; next = Phase 1 (supply-chain-recheck Berry TDD) Kjell Tore Guttormsen 2026-07-20 07:26:10 +02:00
0e2601ff55 chore(llm-security): STATE — v8 planning unparked; strategy docs moved to *.local.md Kjell Tore Guttormsen 2026-07-18 11:17:27 +02:00
887691490d chore(llm-security): STATE — v7.8.3 shipped; next = v8.0.0 planning (parked) Kjell Tore Guttormsen 2026-07-18 11:03:32 +02:00
32199965f2 fix(llm-security): post-mcp-verify reads live PostToolUse tool_response field v7.8.3 Kjell Tore Guttormsen 2026-07-18 11:00:34 +02:00
d2648931ef chore(llm-security): STATE — v7.8.3 code-complete locally, held for release decision Kjell Tore Guttormsen 2026-07-18 10:54:03 +02:00
4cffa30725 chore(llm-security): v7.8.3 — docs consistency + version bump (#8,#44,#45,#46,#47) Kjell Tore Guttormsen 2026-07-18 10:50:50 +02:00
14070160ba test(llm-security): cover TRG/SIG/AST in e2e pipeline + SIG miner/hacktool/rot13 families (#58,#59) Kjell Tore Guttormsen 2026-07-18 10:46:19 +02:00
66e8ce2740 fix(llm-security): misc scanner correctness — reflog FP, diff exact-pass, hex dedupe, SARIF version (#20,#22,#50,#54,#56) Kjell Tore Guttormsen 2026-07-18 10:36:51 +02:00
8a59d616fb fix(llm-security): hook coverage — pathguard on Edit, trifecta window, pipe-to-shell, provider keys (#9,#10,#12,#13,#11-doc) Kjell Tore Guttormsen 2026-07-18 10:36:39 +02:00
21c6c2b534 fix(llm-security): normalization/discovery evasion + SIG embedded-base64 & custom rules (#21,#23,#30,#36,#42,#52,#55) Kjell Tore Guttormsen 2026-07-18 10:35:56 +02:00
b224e18b42 fix(llm-security): YAML/workflow parser divergence — block scalars + bare if: (#32,#33,#43) Kjell Tore Guttormsen 2026-07-18 10:35:56 +02:00
207385fbbe fix(llm-security): scanner robustness — ReDoS, MCP-stdout DoS, redirect loop, atomic writes (#24,#53,#31,#25,#51) Kjell Tore Guttormsen 2026-07-18 10:15:11 +02:00
f3aaf5479f fix(llm-security): scanner false-positives/negatives — trigger, toxic-flow, policy-loader (#38-#41,#57,#26) Kjell Tore Guttormsen 2026-07-18 10:15:10 +02:00
196517f38a fix(llm-security): supply-chain gate bypasses — npm/yarn blocklist + pip-audit (#14-#19,#48) Kjell Tore Guttormsen 2026-07-18 10:14:51 +02:00
76f190cf78 fix(llm-security): AST-taint clears taint on reassignment (#29) + sink test coverage (#28) Kjell Tore Guttormsen 2026-07-18 10:14:51 +02:00
629a5e6e8c chore(llm-security): STATE — v7.8.2 shipped; next = the 52 MEDIUM Kjell Tore Guttormsen 2026-07-18 09:35:21 +02:00
f4c65070ff chore(llm-security): v7.8.2 — security patch release v7.8.2 Kjell Tore Guttormsen 2026-07-18 09:33:40 +02:00
566c281b56 chore(llm-security): remove leftover debug probe from tests/ Kjell Tore Guttormsen 2026-07-18 09:24:45 +02:00
a035455979 fix(llm-security): out-of-range char-ref silently emptied a plugin.xml field Kjell Tore Guttormsen 2026-07-18 09:21:56 +02:00
4f21374e8c fix(llm-security): HIGH — obfuscated injections were reported but not stripped Kjell Tore Guttormsen 2026-07-18 09:18:56 +02:00
4e16ea0e72 fix(llm-security): HIGH — one unparseable JetBrains plugin crashed ide-scan Kjell Tore Guttormsen 2026-07-18 09:14:12 +02:00
f031dd496f fix(llm-security): HIGH — entropy suppression keyed off the absolute path Kjell Tore Guttormsen 2026-07-18 09:11:04 +02:00
a92b3c5962 fix(llm-security): HIGH — bare root/home targets bypassed the rm block Kjell Tore Guttormsen 2026-07-18 09:08:12 +02:00
24949860f5 chore(llm-security): STATE — v7.8.1 shipped; next = the ~6 HIGH (v7.8.2) Kjell Tore Guttormsen 2026-07-18 09:02:02 +02:00
55d01d1656 chore(llm-security): v7.8.1 — security patch release v7.8.1 Kjell Tore Guttormsen 2026-07-18 09:00:18 +02:00
f083cdad2e fix(llm-security): CRITICAL — command injection in auto-cleaner (v7.8.1) Kjell Tore Guttormsen 2026-07-18 08:48:09 +02:00
0dd46da2f7 chore(llm-security): STATE — v7.8.0 tagged + catalog ref synced Kjell Tore Guttormsen 2026-06-20 11:59:03 +02:00
731d61f801 chore(llm-security): STATE — codename scrub complete (history rewritten + force-pushed) Kjell Tore Guttormsen 2026-06-20 11:40:27 +02:00
a19e9eb8b2 docs(llm-security): drop internal codename from v7.8.0 notes Kjell Tore Guttormsen 2026-06-20 11:37:28 +02:00
405874c0c4 chore(llm-security): STATE — v7.8.0 released (Session C); only F-4 (optional) left Kjell Tore Guttormsen 2026-06-20 11:23:42 +02:00
6d3c4b5052 chore(llm-security): v7.8.0 — TRG/SIG/AST scanners v7.8.0 Kjell Tore Guttormsen 2026-06-20 11:23:11 +02:00
614971c71a chore(llm-security): STATE — Session B (F-2 + F-3) done; next = Session C (release) Kjell Tore Guttormsen 2026-06-20 11:10:24 +02:00
dfb663fa61 fix(llm-security): F-2/F-3 — contain path traversal + kill npm-view shell injection Kjell Tore Guttormsen 2026-06-20 11:09:13 +02:00
f5988f9500 chore(llm-security): STATE — Session A (F-1 + F-5/F-6) done; next = Session B Kjell Tore Guttormsen 2026-06-20 10:19:20 +02:00
e46b5a3256 fix(llm-security): F-1 — eliminate shell-injection RCE in git-forensics scanner Kjell Tore Guttormsen 2026-06-20 10:18:41 +02:00
a96e3b947f chore(llm-security): STATE — security-fix track plan (F-1/F-2/F-3 must-fix) over multiple sessions Kjell Tore Guttormsen 2026-06-20 10:09:11 +02:00
089623af89 chore(llm-security): STATE — TRG/SIG/AST done; v7.8.0 deferred behind security-fix brief Kjell Tore Guttormsen 2026-06-20 09:51:28 +02:00
fc7cf57da6 docs(llm-security): document TRG/SIG/AST scanners and package knowledge/ Kjell Tore Guttormsen 2026-06-20 09:46:14 +02:00
b0314418f4 feat(llm-security): wire AST scanner into orchestrator and policy Kjell Tore Guttormsen 2026-06-20 09:41:32 +02:00
40a1e34ee9 feat(llm-security): add AST Python-taint scanner with python3 fallback Kjell Tore Guttormsen 2026-06-20 09:38:36 +02:00
e46bf12b86 feat(llm-security): wire SIG scanner into orchestrator and policy Kjell Tore Guttormsen 2026-06-20 09:32:23 +02:00
9e0a09ab1f feat(llm-security): add SIG signature scanner with decode-pipeline matching Kjell Tore Guttormsen 2026-06-20 09:28:52 +02:00
9f1156866c feat(llm-security): wire TRG scanner into orchestrator and policy Kjell Tore Guttormsen 2026-06-20 09:24:23 +02:00
92bd99f2a8 docs: security fix brief for next session — F-1 RCE + F-2/F-3 sinks Kjell Tore Guttormsen 2026-06-20 09:23:19 +02:00
616e7ff18c feat(llm-security): add TRG trigger-abuse scanner Kjell Tore Guttormsen 2026-06-20 09:19:54 +02:00
ff9bd13c6f docs: add full-depth plugin review (2026-06-20) Kjell Tore Guttormsen 2026-06-20 09:14:11 +02:00
7736c0bde2 docs(llm-security): TRG/SIG/AST gap analysis + reviewed execution plan Kjell Tore Guttormsen 2026-06-20 09:00:24 +02:00
0ef780fd69 chore(gitignore): add session/local-state baseline (polyrepo split) Kjell Tore Guttormsen 2026-06-18 10:21:13 +02:00
3db6b65aba chore(llm-security): v7.7.2 — language consistency pass v7.7.2 Kjell Tore Guttormsen 2026-05-19 06:47:44 +02:00
b626ba0c5e chore(llm-security): v7.7.1 release — formaliser playground UX-strip-fixes Kjell Tore Guttormsen 2026-05-18 21:38:27 +02:00
02a66f3c77 fix(llm-security): playground topbar — fjern orgName fra breadcrumb Kjell Tore Guttormsen 2026-05-18 21:09:02 +02:00
52afd12cc1 feat(llm-security): playground v7.7.1 — katalog som eneste levende overflate Kjell Tore Guttormsen 2026-05-18 21:01:18 +02:00
adffb60908 fix(llm-security): playground hardkodet versjon v7.6.1 → v7.7.0 Kjell Tore Guttormsen 2026-05-18 20:49:05 +02:00
7f9e57bb37 feat(llm-security): v7.7.0 — HTML-rapport for alle 18 skill-kommandoer Kjell Tore Guttormsen 2026-05-18 13:12:21 +02:00
c7748d56ba feat(llm-security): playground v7.6.2-dev — render-report CLI + wire 4 skills (scan, audit, posture, deep-scan) [skip-docs] Kjell Tore Guttormsen 2026-05-18 12:56:03 +02:00
01a894701e refactor(llm-security): playground v7.6.2-dev — extract 18 renderers til scripts/lib/report-renderers.mjs [skip-docs] Kjell Tore Guttormsen 2026-05-18 12:42:28 +02:00
ea8da55ee0 feat(llm-security): playground v7.6.2-dev — prosjekt-surface opprydding + topbar-splitt [skip-docs] Kjell Tore Guttormsen 2026-05-18 12:23:57 +02:00
ef1f8d97e9 chore: WIP marketplace doc adjustments across plugins Kjell Tore Guttormsen 2026-05-18 12:04:02 +02:00