Kjell Tore Guttormsen e97c23246e fix(llm-security): sarif-formatter splits comma-separated owasp string into multiple tags ... buildRules() and toSARIF() wrapped a multi-mapping f.owasp string (e.g. 'MCP03, MCP06', emitted by mcp-live-inspect.mjs and ide-extension-scanner.mjs) as a single-element tags array instead of splitting it, silently dropping the second OWASP mapping in SARIF output. Added owaspTags() helper; test asserts a multi-entry tags array for both rule and result properties. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WbQmoLxcAAsJAkFxBeCx6z		2026-08-18 16:52:52 +02:00
..
e2e	test(llm-security): cover TRG/SIG/AST in e2e pipeline + SIG miner/hacktool/rot13 families (#58,#59)	2026-07-18 10:46:19 +02:00
fixtures	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
golden	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
helpers	test(llm-security): add JetBrains fixture tree + build helper	2026-04-18 10:49:49 +02:00
hooks	refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0)	2026-08-13 21:10:14 +02:00
lib	fix(llm-security): compileRules coerces a non-string pattern instead of dropping the rule	2026-08-13 21:51:10 +02:00
scanners	fix(llm-security): sarif-formatter splits comma-separated owasp string into multiple tags	2026-08-18 16:52:52 +02:00