LICENSE
README.md
pyproject.toml
codejury/__init__.py
codejury/assembly.py
codejury/baseline.py
codejury/cli.py
codejury/evaluation.py
codejury/reporting.py
codejury/resources.py
codejury/sandbox.py
codejury/selection.py
codejury/suppression.py
codejury.egg-info/PKG-INFO
codejury.egg-info/SOURCES.txt
codejury.egg-info/dependency_links.txt
codejury.egg-info/entry_points.txt
codejury.egg-info/requires.txt
codejury.egg-info/top_level.txt
codejury/agents/__init__.py
codejury/agents/base.py
codejury/agents/debate.py
codejury/agents/mock.py
codejury/agents/parsing.py
codejury/agents/refuter.py
codejury/agents/skill_runner.py
codejury/analysis/__init__.py
codejury/analysis/attack_path.py
codejury/analysis/provenance.py
codejury/analysis/repo_model.py
codejury/analysis/taint.py
codejury/data/entrypoints.yaml
codejury/data/suppressions.yaml
codejury/data/taint.yaml
codejury/data/golden/ag_allowlist_safe.yaml
codejury/data/golden/ag_arbitrary_tool_vuln.yaml
codejury/data/golden/ag_destructive_no_confirm_vuln.yaml
codejury/data/golden/ag_fixed_enum_safe.yaml
codejury/data/golden/ag_human_approval_safe.yaml
codejury/data/golden/ag_model_confirmed_vuln.yaml
codejury/data/golden/api_design_authz_inconsistent_vuln.yaml
codejury/data/golden/api_design_authz_uniform_safe.yaml
codejury/data/golden/api_design_cors_allowlist_safe.yaml
codejury/data/golden/api_design_cors_reflect_origin_vuln.yaml
codejury/data/golden/api_design_cors_wildcard_credentials_vuln.yaml
codejury/data/golden/api_design_mass_assignment_allowlist_safe.yaml
codejury/data/golden/api_design_mass_assignment_vuln.yaml
codejury/data/golden/api_design_single_missing_auth_not_ours_safe.yaml
codejury/data/golden/architecture_clean_surface_safe.yaml
codejury/data/golden/architecture_debug_route_exposed_vuln.yaml
codejury/data/golden/architecture_internal_route_exposed_vuln.yaml
codejury/data/golden/architecture_legit_admin_route_safe.yaml
codejury/data/golden/architecture_minimal_surface_safe.yaml
codejury/data/golden/architecture_test_echo_route_vuln.yaml
codejury/data/golden/authn_bcrypt_password.yaml
codejury/data/golden/authn_jwt_noverify_vuln.yaml
codejury/data/golden/authn_jwt_verified_safe.yaml
codejury/data/golden/authn_sha256_checksum_safe.yaml
codejury/data/golden/authn_sha256_password.yaml
codejury/data/golden/authn_weak_hash_indirect_vuln.yaml
codejury/data/golden/authz_idor_vuln.yaml
codejury/data/golden/authz_owner_safe.yaml
codejury/data/golden/business_logic_atomic_safe.yaml
codejury/data/golden/business_logic_price_tamper_vuln.yaml
codejury/data/golden/business_logic_server_checked_safe.yaml
codejury/data/golden/business_logic_toctou_vuln.yaml
codejury/data/golden/cmdi_fixed_argv_safe.yaml
codejury/data/golden/cmdi_ossystem_vuln.yaml
codejury/data/golden/cmdi_subprocess_safe.yaml
codejury/data/golden/crypto_aesgcm_nonce_safe.yaml
codejury/data/golden/crypto_aesgcm_safe.yaml
codejury/data/golden/crypto_ecb_vuln.yaml
codejury/data/golden/crypto_static_iv_vuln.yaml
codejury/data/golden/data_protection_cleartext_http_vuln.yaml
codejury/data/golden/data_protection_encrypted_at_rest_safe.yaml
codejury/data/golden/data_protection_plaintext_pii_vuln.yaml
codejury/data/golden/data_protection_tokenized_safe.yaml
codejury/data/golden/dependency_config_debug_off_safe.yaml
codejury/data/golden/dependency_config_debug_true_vuln.yaml
codejury/data/golden/dependency_config_tls_verify_off_vuln.yaml
codejury/data/golden/dependency_config_tls_verify_on_safe.yaml
codejury/data/golden/deserialize_json_safe.yaml
codejury/data/golden/deserialize_pickle_vuln.yaml
codejury/data/golden/error_logging_redacted_safe.yaml
codejury/data/golden/error_logging_reraise_safe.yaml
codejury/data/golden/error_logging_secret_leak_vuln.yaml
codejury/data/golden/error_logging_swallow_vuln.yaml
codejury/data/golden/ioh_escaped_output_safe.yaml
codejury/data/golden/ioh_exec_output_vuln.yaml
codejury/data/golden/ioh_innerhtml_output_vuln.yaml
codejury/data/golden/ioh_json_response_safe.yaml
codejury/data/golden/ioh_output_to_sql_vuln.yaml
codejury/data/golden/ioh_schema_validated_safe.yaml
codejury/data/golden/literal_eval_safe.yaml
codejury/data/golden/output_encoding_header_injection_vuln.yaml
codejury/data/golden/path_basename_safe.yaml
codejury/data/golden/path_contained_safe.yaml
codejury/data/golden/path_traversal_vuln.yaml
codejury/data/golden/pi_delimited_data_safe.yaml
codejury/data/golden/pi_format_role_vuln.yaml
codejury/data/golden/pi_indirect_rag_vuln.yaml
codejury/data/golden/pi_system_concat_vuln.yaml
codejury/data/golden/pi_user_content_concat_safe.yaml
codejury/data/golden/pi_user_role_safe.yaml
codejury/data/golden/sc_pinned_safe.yaml
codejury/data/golden/sc_safetensors_safe.yaml
codejury/data/golden/sc_torch_load_vuln.yaml
codejury/data/golden/sc_trust_remote_code_vuln.yaml
codejury/data/golden/secrets_env_safe.yaml
codejury/data/golden/secrets_from_config_safe.yaml
codejury/data/golden/secrets_hardcoded_token_vuln.yaml
codejury/data/golden/secrets_hardcoded_vuln.yaml
codejury/data/golden/session_cookie_flags_safe.yaml
codejury/data/golden/session_fixation_vuln.yaml
codejury/data/golden/session_insecure_cookie_vuln.yaml
codejury/data/golden/session_secure_cookie_safe.yaml
codejury/data/golden/sql_constant_concat_safe.yaml
codejury/data/golden/sqli_format_vuln.yaml
codejury/data/golden/sqli_fstring_query.yaml
codejury/data/golden/sqli_indirect_var_vuln.yaml
codejury/data/golden/sqli_parameterized_query.yaml
codejury/data/golden/ssrf_allowlist_safe.yaml
codejury/data/golden/ssrf_constant_url_safe.yaml
codejury/data/golden/ssrf_substring_allowlist_bypass_vuln.yaml
codejury/data/golden/ssrf_user_url_vuln.yaml
codejury/data/golden/xfile_idor_no_check_vuln.yaml
codejury/data/golden/xfile_idor_owner_checked_safe.yaml
codejury/data/golden/xfile_path_sanitized_safe.yaml
codejury/data/golden/xfile_path_tainted_vuln.yaml
codejury/data/golden/xss_innerhtml_constant_safe.yaml
codejury/data/golden/xss_innerhtml_vuln.yaml
codejury/data/golden/xss_textcontent_safe.yaml
codejury/data/poc/cmdi.yaml
codejury/data/poc/path.yaml
codejury/data/poc/sqli.yaml
codejury/data/poc/ssrf.yaml
codejury/data/skills/api_design/SKILL.md
codejury/data/skills/api_design/skill.yaml
codejury/data/skills/architecture/SKILL.md
codejury/data/skills/architecture/skill.yaml
codejury/data/skills/authn/SKILL.md
codejury/data/skills/authn/skill.yaml
codejury/data/skills/authz/SKILL.md
codejury/data/skills/authz/skill.yaml
codejury/data/skills/business_logic/SKILL.md
codejury/data/skills/business_logic/skill.yaml
codejury/data/skills/crypto/SKILL.md
codejury/data/skills/crypto/skill.yaml
codejury/data/skills/data_protection/SKILL.md
codejury/data/skills/data_protection/skill.yaml
codejury/data/skills/dependency_config/SKILL.md
codejury/data/skills/dependency_config/skill.yaml
codejury/data/skills/error_logging/SKILL.md
codejury/data/skills/error_logging/skill.yaml
codejury/data/skills/excessive_agency/SKILL.md
codejury/data/skills/excessive_agency/skill.yaml
codejury/data/skills/input_validation/SKILL.md
codejury/data/skills/input_validation/skill.yaml
codejury/data/skills/insecure_output_handling/SKILL.md
codejury/data/skills/insecure_output_handling/skill.yaml
codejury/data/skills/model_supply_chain/SKILL.md
codejury/data/skills/model_supply_chain/skill.yaml
codejury/data/skills/output_encoding/SKILL.md
codejury/data/skills/output_encoding/skill.yaml
codejury/data/skills/prompt_injection/SKILL.md
codejury/data/skills/prompt_injection/skill.yaml
codejury/data/skills/secrets/SKILL.md
codejury/data/skills/secrets/skill.yaml
codejury/data/skills/session/SKILL.md
codejury/data/skills/session/skill.yaml
codejury/data/tasks/audit_diff_debate.yaml
codejury/data/tasks/quick_scan_single.yaml
codejury/domain/__init__.py
codejury/domain/artifact.py
codejury/domain/context.py
codejury/domain/observation.py
codejury/domain/result.py
codejury/domain/skill.py
codejury/infrastructure/__init__.py
codejury/infrastructure/cache.py
codejury/infrastructure/json_parse.py
codejury/integrations/__init__.py
codejury/integrations/github.py
codejury/orchestrators/__init__.py
codejury/orchestrators/adaptive.py
codejury/orchestrators/base.py
codejury/orchestrators/challenge.py
codejury/orchestrators/debate.py
codejury/orchestrators/reflexion.py
codejury/orchestrators/single.py
codejury/orchestrators/skill_pipeline.py
codejury/orchestrators/taint_gate.py
codejury/providers/__init__.py
codejury/providers/anthropic.py
codejury/providers/base.py
codejury/providers/litellm.py
codejury/providers/mock.py
codejury/providers/openai.py
codejury/providers/openai_format.py
codejury/providers/retry.py
codejury/sources/__init__.py
codejury/sources/api_surface.py
codejury/sources/base.py
codejury/sources/callers.py
codejury/sources/chunker.py
codejury/sources/diff.py
codejury/sources/function.py
codejury/sources/mock.py
codejury/sources/repo.py
codejury/tasks/__init__.py
codejury/tasks/base.py
codejury/tasks/registry.py
tests/test_adaptive.py
tests/test_anthropic_provider.py
tests/test_api_surface.py
tests/test_assembly.py
tests/test_attack_path.py
tests/test_baseline.py
tests/test_cache.py
tests/test_callers.py
tests/test_challenge.py
tests/test_cli_audit.py
tests/test_context.py
tests/test_debate_agents.py
tests/test_debate_orchestrator.py
tests/test_diff_source.py
tests/test_evaluation.py
tests/test_full_review.py
tests/test_function_source.py
tests/test_integrations.py
tests/test_json_parse.py
tests/test_litellm_provider.py
tests/test_openai_format.py
tests/test_openai_provider.py
tests/test_orchestrator.py
tests/test_parsing.py
tests/test_provenance.py
tests/test_reflexion_orchestrator.py
tests/test_repo_model.py
tests/test_repo_source.py
tests/test_reporting.py
tests/test_retry_provider.py
tests/test_review_fixes.py
tests/test_sandbox.py
tests/test_sarif.py
tests/test_selection.py
tests/test_skill.py
tests/test_skill_runner.py
tests/test_suppression.py
tests/test_taint.py
tests/test_taint_crossfile.py
tests/test_taint_gate.py
tests/test_tasks.py