LICENSE
README.md
pyproject.toml
src/security_review.egg-info/PKG-INFO
src/security_review.egg-info/SOURCES.txt
src/security_review.egg-info/dependency_links.txt
src/security_review.egg-info/entry_points.txt
src/security_review.egg-info/requires.txt
src/security_review.egg-info/top_level.txt
src/security_review_mcp/__init__.py
src/security_review_mcp/__main__.py
src/security_review_mcp/app_settings.py
src/security_review_mcp/ci_client.py
src/security_review_mcp/cli.py
src/security_review_mcp/config.py
src/security_review_mcp/controller.py
src/security_review_mcp/favicon.svg
src/security_review_mcp/healthcheck.py
src/security_review_mcp/http_server.py
src/security_review_mcp/prompts.py
src/security_review_mcp/proxy.py
src/security_review_mcp/server.py
src/security_review_mcp/standards.py
src/security_review_mcp/update_check.py
src/security_review_mcp/auth/__init__.py
src/security_review_mcp/auth/access_control.py
src/security_review_mcp/auth/oauth_server.py
src/security_review_mcp/auth/oidc.py
src/security_review_mcp/auth/rate_limit.py
src/security_review_mcp/auth/token_store.py
src/security_review_mcp/auth/web_users.py
src/security_review_mcp/clients/__init__.py
src/security_review_mcp/clients/ci_wheel.py
src/security_review_mcp/connectors/__init__.py
src/security_review_mcp/connectors/api.py
src/security_review_mcp/connectors/connections.py
src/security_review_mcp/connectors/core.py
src/security_review_mcp/connectors/jira.py
src/security_review_mcp/connectors/registry.py
src/security_review_mcp/connectors/servicenow.py
src/security_review_mcp/connectors/transport.py
src/security_review_mcp/deps/__init__.py
src/security_review_mcp/deps/advisories.py
src/security_review_mcp/deps/advisory_sync.py
src/security_review_mcp/deps/dependencies.py
src/security_review_mcp/deps/depscan.py
src/security_review_mcp/deps/versions.py
src/security_review_mcp/engines/__init__.py
src/security_review_mcp/engines/opengrep.py
src/security_review_mcp/observability/__init__.py
src/security_review_mcp/observability/audit.py
src/security_review_mcp/observability/audit_syslog.py
src/security_review_mcp/observability/metrics.py
src/security_review_mcp/reports/__init__.py
src/security_review_mcp/reports/coverage.py
src/security_review_mcp/reports/sarif.py
src/security_review_mcp/reports/services.py
src/security_review_mcp/reports/trends.py
src/security_review_mcp/rules/__init__.py
src/security_review_mcp/rules/checklists.py
src/security_review_mcp/rules/codescan.py
src/security_review_mcp/rules/default_rules.toml
src/security_review_mcp/rules/opengrep_proposals.py
src/security_review_mcp/rules/opengrep_rule_store.py
src/security_review_mcp/rules/registry.py
src/security_review_mcp/rules/rule_store.py
src/security_review_mcp/rules/rules_loader.py
src/security_review_mcp/rules/scanner.py
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.certificate-validation-disabled.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.cors-any-origin-credentials.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.html-encoding-bypassed.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.jwt-validation-disabled.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.taint-command.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.taint-open-redirect.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.taint-path-traversal.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.taint-sql.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.taint-ssrf.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.unsafe-deserialization.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.weak-crypto.yaml
src/security_review_mcp/rules/opengrep/csharp/secreview.csharp.xml-dtd-enabled.yaml
src/security_review_mcp/rules/opengrep/dockerfile/secreview.dockerfile.runs-as-root.yaml
src/security_review_mcp/rules/opengrep/dockerfile/secreview.dockerfile.user-root.yaml
src/security_review_mcp/rules/opengrep/github-actions/secreview.github-actions.action-not-pinned.yaml
src/security_review_mcp/rules/opengrep/github-actions/secreview.github-actions.pr-target-checkout.yaml
src/security_review_mcp/rules/opengrep/github-actions/secreview.github-actions.script-injection.yaml
src/security_review_mcp/rules/opengrep/github-actions/secreview.github-actions.write-all-permissions.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.http-server-without-timeouts.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.math-rand-for-secret.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.taint-command.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.taint-open-redirect.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.taint-path-traversal.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.taint-sql.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.taint-ssrf.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.taint-xss.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.tls-insecure-skip-verify.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.weak-crypto.yaml
src/security_review_mcp/rules/opengrep/go/secreview.go.zip-slip.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.cookie-insecure.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.hostname-verification-disabled.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.jackson-default-typing.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.object-deserialization.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.spring-csrf-disabled.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-command.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-expression-injection.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-jndi-ldap-injection.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-open-redirect.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-path-traversal.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-sql.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-ssrf.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.taint-xss-response.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.trust-all-certificates.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.weak-cipher.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.weak-hash.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.xxe-stax-parser.yaml
src/security_review_mcp/rules/opengrep/java/secreview.java.xxe-xml-parser.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.angular.bypass-security-trust-dynamic.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.cookie-insecure.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.cors-reflects-any-origin.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.jwt-insecure-options.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.message-origin-unchecked.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-code-eval.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-command.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-dom-xss.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-open-redirect.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-path-traversal.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-regex-injection.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-sql.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-ssrf.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.taint-xss-response.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.tls-verification-disabled.yaml
src/security_review_mcp/rules/opengrep/javascript/secreview.js.weak-crypto.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.archive-extract-unfiltered.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.cookie-insecure.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.cors-wildcard-credentials.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.flask-debug-enabled.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.jwt-signature-not-verified.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.subprocess-shell-dynamic.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-code-eval.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-command.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-deserialization.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-open-redirect.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-path-traversal.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-sql.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-ssrf.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-template-injection.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.taint-xss-markup.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.tls-verify-disabled.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.weak-hash-for-security.yaml
src/security_review_mcp/rules/opengrep/python/secreview.python.yaml-unsafe-load.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.command-through-shell.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.cookie-insecure.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.cors-permissive.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.html-built-with-format.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.jwt-validation-disabled.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.sql-built-with-format.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.taint-sql.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.tls-verification-disabled.yaml
src/security_review_mcp/rules/opengrep/rust/secreview.rust.weak-crypto.yaml
src/security_review_mcp/storage/__init__.py
src/security_review_mcp/storage/database.py
src/security_review_mcp/storage/models.py
src/security_review_mcp/storage/project_names.py
src/security_review_mcp/storage/projects.py
src/security_review_mcp/storage/retention.py
src/security_review_mcp/storage/migrations/__init__.py
src/security_review_mcp/storage/migrations/env.py
src/security_review_mcp/storage/migrations/script.py.mako
src/security_review_mcp/storage/migrations/versions/0001_baseline.py
src/security_review_mcp/storage/migrations/versions/0002_settings_and_advisory_updates.py
src/security_review_mcp/storage/migrations/versions/0003_oidc_role_mappings.py
src/security_review_mcp/storage/migrations/versions/0004_oidc_user_grants.py
src/security_review_mcp/storage/migrations/versions/0005_web_users.py
src/security_review_mcp/storage/migrations/versions/0006_sso_web_users.py
src/security_review_mcp/storage/migrations/versions/0007_dev_standards.py
src/security_review_mcp/storage/migrations/versions/0008_general_proxy.py
src/security_review_mcp/storage/migrations/versions/0009_report_review_type.py
src/security_review_mcp/storage/migrations/versions/0010_finding_triage_decision.py
src/security_review_mcp/storage/migrations/versions/0011_report_author.py
src/security_review_mcp/storage/migrations/versions/0012_audit_and_token_expiry.py
src/security_review_mcp/storage/migrations/versions/0013_access_control.py
src/security_review_mcp/storage/migrations/versions/0014_user_roles.py
src/security_review_mcp/storage/migrations/versions/0015_oidc_issuer.py
src/security_review_mcp/storage/migrations/versions/0016_rate_limits.py
src/security_review_mcp/storage/migrations/versions/0017_must_change_password.py
src/security_review_mcp/storage/migrations/versions/0018_no_direct_roles.py
src/security_review_mcp/storage/migrations/versions/0019_setting_names.py
src/security_review_mcp/storage/migrations/versions/0020_user_theme.py
src/security_review_mcp/storage/migrations/versions/0021_machine_tokens.py
src/security_review_mcp/storage/migrations/versions/0022_api_tokens.py
src/security_review_mcp/storage/migrations/versions/0023_oidc_identity.py
src/security_review_mcp/storage/migrations/versions/0024_mcp_user_role.py
src/security_review_mcp/storage/migrations/versions/0025_finding_comments.py
src/security_review_mcp/storage/migrations/versions/0026_acceptance_reason_comments.py
src/security_review_mcp/storage/migrations/versions/0027_enrollment_projects.py
src/security_review_mcp/storage/migrations/versions/0028_review_coverage.py
src/security_review_mcp/storage/migrations/versions/0029_finding_severity_escalation.py
src/security_review_mcp/storage/migrations/versions/0030_ticketing.py
src/security_review_mcp/storage/migrations/versions/0031_finding_occurrences.py
src/security_review_mcp/storage/migrations/versions/0032_connectors.py
src/security_review_mcp/storage/migrations/versions/0033_enrollment_requester.py
src/security_review_mcp/storage/migrations/versions/0034_project_access_requests.py
src/security_review_mcp/storage/migrations/versions/0035_mcp_oauth.py
src/security_review_mcp/storage/migrations/versions/0036_drop_mcp_tokens_create.py
src/security_review_mcp/storage/migrations/versions/0037_project_autojoin_block.py
src/security_review_mcp/storage/migrations/versions/0038_project.py
src/security_review_mcp/storage/migrations/versions/0039_user_roles.py
src/security_review_mcp/storage/migrations/versions/0040_reports_write.py
src/security_review_mcp/storage/migrations/versions/0041_dependency_fingerprints.py
src/security_review_mcp/storage/migrations/versions/0042_opengrep_rule_proposals.py
src/security_review_mcp/storage/migrations/versions/__init__.py
src/security_review_mcp/web_api/__init__.py
src/security_review_mcp/web_api/access_routes.py
src/security_review_mcp/web_api/account_routes.py
src/security_review_mcp/web_api/admin_routes.py
src/security_review_mcp/web_api/auth_routes.py
src/security_review_mcp/web_api/body_limit.py
src/security_review_mcp/web_api/ci_client_routes.py
src/security_review_mcp/web_api/ci_routes.py
src/security_review_mcp/web_api/connector_routes.py
src/security_review_mcp/web_api/deps.py
src/security_review_mcp/web_api/oauth_routes.py
src/security_review_mcp/web_api/opengrep_routes.py
src/security_review_mcp/web_api/report_routes.py
src/security_review_mcp/web_api/rule_routes.py
src/security_review_mcp/web_api/schemas.py
src/security_review_mcp/web_api/token_routes.py
src/security_review_mcp/webui/3rdpartylicenses.txt
src/security_review_mcp/webui/chunk-16D-WPwp.js
src/security_review_mcp/webui/chunk-B2XHw_PY.js
src/security_review_mcp/webui/chunk-B5H8XleW.js
src/security_review_mcp/webui/chunk-B7MW0UP1.js
src/security_review_mcp/webui/chunk-B8vauaPM.js
src/security_review_mcp/webui/chunk-BNFJ1TRU.js
src/security_review_mcp/webui/chunk-BRQMg44c.js
src/security_review_mcp/webui/chunk-BRvfpmQY.js
src/security_review_mcp/webui/chunk-BZ7V7YGh.js
src/security_review_mcp/webui/chunk-BjiHnsrD.js
src/security_review_mcp/webui/chunk-Bmzz7WN4.js
src/security_review_mcp/webui/chunk-Bu_yk-2v.js
src/security_review_mcp/webui/chunk-BxNBHHFZ.js
src/security_review_mcp/webui/chunk-C5eYrL_6.js
src/security_review_mcp/webui/chunk-C6eILqWX.js
src/security_review_mcp/webui/chunk-CCEmN_GU.js
src/security_review_mcp/webui/chunk-CEbipvsR.js
src/security_review_mcp/webui/chunk-CIioz1-w.js
src/security_review_mcp/webui/chunk-CLAQJgMh.js
src/security_review_mcp/webui/chunk-CTJMiZH0.js
src/security_review_mcp/webui/chunk-CbG3QcNe.js
src/security_review_mcp/webui/chunk-Ck8chEXA.js
src/security_review_mcp/webui/chunk-CyZmqUW7.js
src/security_review_mcp/webui/chunk-D3RPcKnp.js
src/security_review_mcp/webui/chunk-D9MRJOZ1.js
src/security_review_mcp/webui/chunk-DC6uLa7f.js
src/security_review_mcp/webui/chunk-DRce-RZS.js
src/security_review_mcp/webui/chunk-DV4aMeZk.js
src/security_review_mcp/webui/chunk-DXpShWx8.js
src/security_review_mcp/webui/chunk-DYePLUyx.js
src/security_review_mcp/webui/chunk-DdrCP8II.js
src/security_review_mcp/webui/chunk-DnolOX8Z.js
src/security_review_mcp/webui/chunk-Dpsl_nPy.js
src/security_review_mcp/webui/chunk-DpzfKHcQ.js
src/security_review_mcp/webui/chunk-DrusGFPm.js
src/security_review_mcp/webui/chunk-IC-elCQ7.js
src/security_review_mcp/webui/chunk-QJvnTz3s.js
src/security_review_mcp/webui/chunk-UJ2SaKm3.js
src/security_review_mcp/webui/chunk-ZRwhNxKy.js
src/security_review_mcp/webui/chunk-ZWUp19tv.js
src/security_review_mcp/webui/chunk-b20GzfnE.js
src/security_review_mcp/webui/chunk-dWRynjK_.js
src/security_review_mcp/webui/chunk-gHKwzoIA.js
src/security_review_mcp/webui/chunk-naGT7xoH.js
src/security_review_mcp/webui/chunk-o-eYI7K_.js
src/security_review_mcp/webui/chunk-pDGBk0RH.js
src/security_review_mcp/webui/chunk-tQLGS_pw.js
src/security_review_mcp/webui/index.html
src/security_review_mcp/webui/main-FMTNBQD4.js
src/security_review_mcp/webui/styles-4D4QP7Y2.css
src/security_review_mcp/webui/media/bootstrap-icons-4CTG3PFR.woff2
src/security_review_mcp/webui/media/bootstrap-icons-536GFMIH.woff
src/security_review_mcp/webui/swagger/LICENSE
src/security_review_mcp/webui/swagger/swagger-ui-bundle.js
src/security_review_mcp/webui/swagger/swagger-ui.css
tests/test_access_control.py
tests/test_advisories.py
tests/test_advisory_sync.py
tests/test_app_settings.py
tests/test_audit.py
tests/test_audit_syslog.py
tests/test_ci_client.py
tests/test_ci_wheel.py
tests/test_cli_and_tools.py
tests/test_codescan.py
tests/test_config.py
tests/test_connectors.py
tests/test_controller.py
tests/test_database.py
tests/test_dependencies.py
tests/test_depscan.py
tests/test_gate.py
tests/test_healthcheck.py
tests/test_http_server.py
tests/test_metrics.py
tests/test_mkdocs_hooks.py
tests/test_oauth_server.py
tests/test_oidc.py
tests/test_opengrep.py
tests/test_opengrep_proposals.py
tests/test_opengrep_rules.py
tests/test_project_names.py
tests/test_proxy.py
tests/test_rate_limit.py
tests/test_retention.py
tests/test_rule_store.py
tests/test_rules.py
tests/test_sarif.py
tests/test_scanner.py
tests/test_server.py
tests/test_services.py
tests/test_standards.py
tests/test_token_store.py
tests/test_trends.py
tests/test_update_check.py
tests/test_web_api.py
tests/test_web_users.py