llm-security/tests
Kjell Tore Guttormsen 58d2e8ad8d
fix(av-surface): no runnable base64-to-shell line on disk
PLAN § v8.1.3 tillegg a. The bash-evasion gallery's T8 comment held a
complete base64-decode-into-shell line whose 16-char blob decodes to a
home-directory deletion, under probe (b)'s 24-char floor. Probe (b2)
found two more of the same shape, fixed here too: the gallery README's
T8 row and tests/e2e/attack-chain.test.mjs (an /etc deletion). Chosen
over an exception list because the gate should have none.

The gallery and the e2e test now encode the blob at runtime from the
same fragments; the README shows a placeholder. Gallery: 10/10 blocked.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-23 11:35:50 +02:00
..
e2e fix(av-surface): no runnable base64-to-shell line on disk 2026-09-23 11:35:50 +02:00
fixtures test(ast-taint): materialize the ast-scan fixtures at test time 2026-09-22 14:11:27 +02:00
golden refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0) 2026-08-13 21:28:14 +02:00
helpers fix(policy): read policy.json only from the caller's own working tree 2026-09-22 20:15:17 +02:00
hooks refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0) 2026-08-13 21:10:14 +02:00
lib test(v8.1.3): red tests for plan points 1, 2, 3, 5 and addenda a-c 2026-09-23 11:29:22 +02:00
scanners fix(watch): run the orchestrator with the watched project as cwd 2026-09-23 11:34:55 +02:00
av-surface.test.mjs test(v8.1.3): red tests for plan points 1, 2, 3, 5 and addenda a-c 2026-09-23 11:29:22 +02:00