CHANGELOG.md
CONTRIBUTING.md
LICENSE
MANIFEST.in
NOTICE
README.md
SECURITY.md
pyproject.toml
requirements-build.txt
action/action.yml
corpus/benign/config/Dockerfile
corpus/benign/config/infra.tf
corpus/benign/config/settings-safe.py
corpus/benign/config/workflow-ci.yml
corpus/benign/container-aware/runtime.py
corpus/benign/gitlab-ordinary/.gitlab-ci.yml
corpus/benign/javascript/api-client.js
corpus/benign/javascript/image-utils.js
corpus/benign/k8s-least-privilege/role.yaml
corpus/benign/keyring-owner/store.py
corpus/benign/minified/vendor.min.js
corpus/benign/npm-native-build/package.json
corpus/benign/ops/deploy.py
corpus/benign/ops/healthcheck.py
corpus/benign/ops/sync.py
corpus/benign/ordinary-gradle/build.gradle
corpus/benign/ordinary-makefile/Makefile
corpus/benign/python/build_helper.py
corpus/benign/python/settings.py
corpus/benign/release-attested/expected.yaml
corpus/benign/release-attested/.github/workflows/release.yml
corpus/benign/release-unattested/expected.yaml
corpus/benign/release-unattested/.github/workflows/release.yml
corpus/benign/retry-backoff/client.py
corpus/benign/scoped-public-deps/package.json
corpus/benign/setup-helper/_version.py
corpus/benign/setup-helper/setup.py
corpus/benign/string-building/paths.py
corpus/benign/submodule-pinned/.gitmodules
corpus/benign/subprocess-git/release.py
corpus/benign/vendored-binary/vendor/libexample.so
corpus/benign/webhook-notifier/notify.py
docs/01-ARCHITECTURE.md
docs/02-THREAT-MODEL.md
docs/03-INTERFACES.md
docs/04-OPERATIONS.md
docs/05-COVERAGE-MATRIX.md
docs/06-SANDBOX.md
docs/assets/demo.svg
scripts/generate_sbom.py
scripts/pin_action_requirements.py
scripts/render_demo.py
src/cordon_sandbox/__init__.py
src/cordon_sandbox/cli.py
src/cordon_sandbox/fetch.py
src/cordon_sandbox/isolation.py
src/cordon_sandbox/observe.py
src/cordon_sandbox/py.typed
src/cordon_scanner/__init__.py
src/cordon_scanner/__main__.py
src/cordon_scanner/py.typed
src/cordon_scanner/version.py
src/cordon_scanner.egg-info/PKG-INFO
src/cordon_scanner.egg-info/SOURCES.txt
src/cordon_scanner.egg-info/dependency_links.txt
src/cordon_scanner.egg-info/entry_points.txt
src/cordon_scanner.egg-info/requires.txt
src/cordon_scanner.egg-info/top_level.txt
src/cordon_scanner/archive/__init__.py
src/cordon_scanner/archive/safe.py
src/cordon_scanner/cli/__init__.py
src/cordon_scanner/cli/__main__.py
src/cordon_scanner/cli/main.py
src/cordon_scanner/cli/progress.py
src/cordon_scanner/core/__init__.py
src/cordon_scanner/core/audit.py
src/cordon_scanner/core/bundle.py
src/cordon_scanner/core/cache.py
src/cordon_scanner/core/closure.py
src/cordon_scanner/core/config.py
src/cordon_scanner/core/content.py
src/cordon_scanner/core/distribution.py
src/cordon_scanner/core/engine.py
src/cordon_scanner/core/errors.py
src/cordon_scanner/core/guard.py
src/cordon_scanner/core/limits.py
src/cordon_scanner/core/models.py
src/cordon_scanner/core/parallel.py
src/cordon_scanner/core/paths.py
src/cordon_scanner/core/policy.py
src/cordon_scanner/core/progress.py
src/cordon_scanner/core/prose.py
src/cordon_scanner/core/redact.py
src/cordon_scanner/core/registry.py
src/cordon_scanner/core/scoring.py
src/cordon_scanner/core/taxonomy.py
src/cordon_scanner/core/walker.py
src/cordon_scanner/detect/__init__.py
src/cordon_scanner/detect/advisory.py
src/cordon_scanner/detect/attestation.py
src/cordon_scanner/detect/base.py
src/cordon_scanner/detect/binary.py
src/cordon_scanner/detect/capability.py
src/cordon_scanner/detect/catalogue.py
src/cordon_scanner/detect/config_files.py
src/cordon_scanner/detect/dependency.py
src/cordon_scanner/detect/embedded.py
src/cordon_scanner/detect/lockfile.py
src/cordon_scanner/detect/manifest.py
src/cordon_scanner/detect/obfuscation.py
src/cordon_scanner/detect/pyast.py
src/cordon_scanner/detect/registry.py
src/cordon_scanner/detect/sbom.py
src/cordon_scanner/detect/secrets.py
src/cordon_scanner/detect/vcs.py
src/cordon_scanner/ecosystems/base.py
src/cordon_scanner/ecosystems/npm.py
src/cordon_scanner/ecosystems/others.py
src/cordon_scanner/ecosystems/pypi.py
src/cordon_scanner/ecosystems/registry.py
src/cordon_scanner/intel/__init__.py
src/cordon_scanner/intel/advisories.py
src/cordon_scanner/intel/hosts.py
src/cordon_scanner/intel/popular.py
src/cordon_scanner/intel/registry_client.py
src/cordon_scanner/langs/__init__.py
src/cordon_scanner/langs/registry.py
src/cordon_scanner/report/__init__.py
src/cordon_scanner/report/base.py
src/cordon_scanner/report/github.py
src/cordon_scanner/report/json_.py
src/cordon_scanner/report/junit.py
src/cordon_scanner/report/markdown.py
src/cordon_scanner/report/sarif.py
src/cordon_scanner/report/text.py
src/cordon_scanner/rules/__init__.py
src/cordon_scanner/rules/loader.py
src/cordon_scanner/rules/builtin/__init__.py
src/cordon_scanner/rules/builtin/capabilities-build.yaml
src/cordon_scanner/rules/builtin/capabilities-dotnet.yaml
src/cordon_scanner/rules/builtin/capabilities-javascript.yaml
src/cordon_scanner/rules/builtin/capabilities-jvm-go-ruby.yaml
src/cordon_scanner/rules/builtin/capabilities-malware-iocs.yaml
src/cordon_scanner/rules/builtin/capabilities-python.yaml
src/cordon_scanner/rules/builtin/capabilities-shell.yaml
src/cordon_scanner/rules/builtin/composites.yaml
src/cordon_scanner/sources/__init__.py
src/cordon_scanner/sources/base.py
src/cordon_scanner/sources/git.py
tests/conftest.py
tests/matrix.py
tests/support.py
tests/e2e/test_cli.py
tests/fuzz/test_parsers.py
tests/integration/test_audit_criticals.py
tests/integration/test_audit_high.py
tests/integration/test_audit_log.py
tests/integration/test_baseline.py
tests/integration/test_blinding.py
tests/integration/test_bundle.py
tests/integration/test_container_images.py
tests/integration/test_corpus.py
tests/integration/test_detector_liveness.py
tests/integration/test_ecosystem_parity.py
tests/integration/test_git_modes.py
tests/integration/test_hostile.py
tests/integration/test_leakage.py
tests/integration/test_ordinary_formatting.py
tests/integration/test_policy_distribution.py
tests/integration/test_review_advisories.py
tests/integration/test_review_commands.py
tests/integration/test_review_critical.py
tests/integration/test_review_detection.py
tests/integration/test_review_medium.py
tests/integration/test_review_rules.py
tests/integration/test_rule_baselines.py
tests/perf/test_budgets.py
tests/unit/test_attestation.py
tests/unit/test_binary.py
tests/unit/test_cache.py
tests/unit/test_composite_scope.py
tests/unit/test_config.py
tests/unit/test_content_walker.py
tests/unit/test_coverage_matrix.py
tests/unit/test_dependency_domain2.py
tests/unit/test_detectors.py
tests/unit/test_documentation.py
tests/unit/test_ecosystems.py
tests/unit/test_embedded.py
tests/unit/test_engine.py
tests/unit/test_enterprise_noise.py
tests/unit/test_git_source.py
tests/unit/test_guard.py
tests/unit/test_lockfile_parsers.py
tests/unit/test_models.py
tests/unit/test_parallel.py
tests/unit/test_pattern_safety.py
tests/unit/test_progress.py
tests/unit/test_pyast.py
tests/unit/test_real_world_noise.py
tests/unit/test_redact.py
tests/unit/test_registry_detector.py
tests/unit/test_release_artefacts.py
tests/unit/test_reporters.py
tests/unit/test_review_defects.py
tests/unit/test_rules.py
tests/unit/test_sandbox.py
tests/unit/test_sbom.py
tests/unit/test_scoring_policy.py
tests/unit/test_secrets_assembled.py
tests/unit/test_taxonomy.py
tests/unit/test_vcs.py