Kjell Tore Guttormsen 30a179a88e test(llm-security): add red a2 sub-probe for SIG payload literals in test sources ... (a) keeps .mjs/.js out of its denominator, so contiguous payload literals in test sources were ungated. a2 walks tests/**/*.{mjs,js} (tests/golden/** excluded) and matches the webshell/reverse_shell/cryptominer SIG rules on raw text. Measured red: a2=3 (scan-pipeline e2e, signature-scanner, signature-scanner-custom-rules) of 116 test sources. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-09-22 13:00:50 +02:00
..
e2e	test(llm-security): cover TRG/SIG/AST in e2e pipeline + SIG miner/hacktool/rot13 families (#58,#59)	2026-07-18 10:46:19 +02:00
fixtures	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
golden	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
helpers	test(llm-security): add JetBrains fixture tree + build helper	2026-04-18 10:49:49 +02:00
hooks	refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0)	2026-08-13 21:10:14 +02:00
lib	fix(llm-security): compileRules coerces a non-string pattern instead of dropping the rule	2026-08-13 21:51:10 +02:00
scanners	fix(llm-security): sarif-formatter splits comma-separated owasp string into multiple tags	2026-08-18 16:52:52 +02:00
av-surface.test.mjs	test(llm-security): add red a2 sub-probe for SIG payload literals in test sources	2026-09-22 13:00:50 +02:00