LICENSE
MANIFEST.in
README.md
pyproject.toml
rowan/__init__.py
rowan/__main__.py
rowan/artifacts.py
rowan/baseline.py
rowan/cli.py
rowan/cvss4.py
rowan/ignore.py
rowan/install_opengrep.py
rowan/languages.py
rowan/mcp_server.py
rowan/pipeline.py
rowan/project_config.py
rowan/reporters.py
rowan/rules_registry.py
rowan/scan_plan.py
rowan/agents/__init__.py
rowan/agents/doctor.py
rowan/agents/estimate.py
rowan/agents/llm_backend.py
rowan/agents/web_exploit.py
rowan/agents/workflow.py
rowan/analysis/__init__.py
rowan/analysis/ast_sanitizers.py
rowan/analysis/dominance.py
rowan/analysis/guard_clause.py
rowan/analysis/orm_reads.py
rowan/analysis/python_functions.py
rowan/analysis/request_sources.py
rowan/analysis/safe_sink_context.py
rowan/analysis/source_tracer.py
rowan/analysis/stmt_walk.py
rowan/analysis/summary_fixpoint.py
rowan/analysis/test_paths.py
rowan/analysis/trust_flow.py
rowan/analysis/unicode_smuggling.py
rowan/analysis/xml_parser_options.py
rowan/config/__init__.py
rowan/config/thresholds.yaml
rowan/core/__init__.py
rowan/core/advisory_functions.py
rowan/core/agent_privilege.py
rowan/core/authz_predicates.py
rowan/core/confidence.py
rowan/core/finding_clusters.py
rowan/core/findings.py
rowan/core/install_hooks.py
rowan/core/llm_sources.py
rowan/core/mcp_config.py
rowan/core/mcp_tool_metadata.py
rowan/core/paths.py
rowan/core/phantom_deps.py
rowan/core/profiles.py
rowan/core/reachability.py
rowan/core/rule_class.py
rowan/core/rules.py
rowan/core/sanitizers.py
rowan/core/scan_result.py
rowan/core/typosquat.py
rowan/core/version_ranges.py
rowan/core/vuln_functions.py
rowan/passes/__init__.py
rowan/passes/agent_flow.py
rowan/passes/ast_enrichment.py
rowan/passes/authz.py
rowan/passes/base.py
rowan/passes/config_taint.py
rowan/passes/cross_file.py
rowan/passes/dormant_code.py
rowan/passes/enrichment.py
rowan/passes/file_scan.py
rowan/passes/go_cross_file.py
rowan/passes/instruction_smuggling.py
rowan/passes/js_authz.py
rowan/passes/js_cross_file.py
rowan/passes/mcp_config.py
rowan/passes/mcp_network_exposure.py
rowan/passes/mcp_sampling_approval.py
rowan/passes/mcp_stored_content.py
rowan/passes/mcp_tool_metadata.py
rowan/passes/membership_inference.py
rowan/passes/mfv.py
rowan/passes/model_extraction.py
rowan/passes/multiagent.py
rowan/passes/pii_egress.py
rowan/passes/sca.py
rowan/passes/serialization_scope.py
rowan/passes/sibling_gate.py
rowan/passes/sources.py
rowan/passes/taint.py
rowan/passes/training_approval.py
rowan/passes/training_disclosure.py
rowan/passes/web_security.py
rowan/taint/__init__.py
rowan/taint/opengrep_adapter.py
rowan/tools/__init__.py
rowan/tools/lint_rules.py
rowan_sast.egg-info/PKG-INFO
rowan_sast.egg-info/SOURCES.txt
rowan_sast.egg-info/dependency_links.txt
rowan_sast.egg-info/entry_points.txt
rowan_sast.egg-info/requires.txt
rowan_sast.egg-info/top_level.txt
rules/__init__.py
rules/a2a_taint.yaml
rules/agent_taint.yaml
rules/ai_ml_neuroscan.yaml
rules/ai_ml_taint.yaml
rules/ai_security.yaml
rules/cloud_rules.yaml
rules/csharp.yaml
rules/csharp_taint.yaml
rules/dockerfile.yaml
rules/framework_rules.yaml
rules/github_actions.yaml
rules/go.yaml
rules/go_ai_opengrep.yaml
rules/go_ai_taint.yaml
rules/go_taint.yaml
rules/guardrail_opengrep.yaml
rules/inference_plane.yaml
rules/ingest_surface.yaml
rules/java.yaml
rules/java_ai_surface.yaml
rules/java_ai_taint.yaml
rules/java_llm_opengrep.yaml
rules/java_llm_taint.yaml
rules/java_taint.yaml
rules/javascript.yaml
rules/javascript_taint.yaml
rules/kotlin_taint.yaml
rules/langchain_hardening_opengrep.yaml
rules/langchain_hardening_taint.yaml
rules/llm_output_taint.yaml
rules/misc_rules.yaml
rules/ml_taint.yaml
rules/neuroscan.yaml
rules/php.yaml
rules/python_framework_hardening_opengrep.yaml
rules/python_framework_hardening_taint.yaml
rules/python_taint.yaml
rules/python_taint_extended.yaml
rules/python_web_surface.yaml
rules/python_web_surface_taint.yaml
rules/ruby.yaml
rules/rust.yaml
rules/security_surface.yaml
rules/supply_chain_taint.yaml
rules/templates.yaml
rules/terraform.yaml
rules/typescript_agent_taint.yaml
rules/web_taint.yaml
rules/converted/_manifest.json
rules/converted/ai_ml_neuroscan.yaml
rules/converted/ai_security.yaml
rules/converted/cloud_rules.yaml
rules/converted/csharp.yaml
rules/converted/dockerfile.yaml
rules/converted/framework_rules.yaml
rules/converted/github_actions.yaml
rules/converted/go.yaml
rules/converted/inference_plane.yaml
rules/converted/ingest_surface.yaml
rules/converted/java.yaml
rules/converted/java_ai_surface.yaml
rules/converted/javascript.yaml
rules/converted/misc_rules.yaml
rules/converted/neuroscan.yaml
rules/converted/php.yaml
rules/converted/python_web_surface.yaml
rules/converted/ruby.yaml
rules/converted/rust.yaml
rules/converted/security_surface.yaml
rules/converted/templates.yaml
rules/converted/terraform.yaml
tests/test_a2a_rules.py
tests/test_a2a_taint.py
tests/test_action_yml.py
tests/test_adversarial_verify.py
tests/test_advisory_functions.py
tests/test_advisory_reachability.py
tests/test_agent_capability_graph.py
tests/test_agent_flow.py
tests/test_agent_memory_write_taint.py
tests/test_agent_sandbox_config.py
tests/test_agent_taint_reflection_dispatch.py
tests/test_agentic_scenarios.py
tests/test_agents.py
tests/test_aiml_rules.py
tests/test_artifact_inventory.py
tests/test_ascii_smuggling_instruction_files.py
tests/test_ast_analysis.py
tests/test_ast_cache_invalidation.py
tests/test_authz_bola.py
tests/test_authz_lf5.py
tests/test_authz_llm_verify.py
tests/test_authz_pass_dedup.py
tests/test_baseline.py
tests/test_benchmark.py
tests/test_benchmark_ai_apps.py
tests/test_benchmark_ai_cases.py
tests/test_benchmark_degraded.py
tests/test_benchmark_framework_cases.py
tests/test_benchmark_framework_source_cases.py
tests/test_ci_ignore_trust.py
tests/test_cli_authz.py
tests/test_cli_hunt_output.py
tests/test_confidence.py
tests/test_config_taint.py
tests/test_cross_file.py
tests/test_cross_file_annotations.py
tests/test_cross_file_callgraph_gaps.py
tests/test_cross_file_callgraph_precision.py
tests/test_cross_file_claim_quality.py
tests/test_cross_file_llm_source.py
tests/test_cross_file_receiver_types.py
tests/test_cross_file_scenarios.py
tests/test_cross_file_sink_coverage.py
tests/test_cross_file_summaries.py
tests/test_cross_file_vector_channel.py
tests/test_cross_file_worklist.py
tests/test_cross_rule_duplicate_merge.py
tests/test_cvss4.py
tests/test_degraded_scan.py
tests/test_doc_counts.py
tests/test_dormant_code.py
tests/test_end_to_end.py
tests/test_enrichment_dedup_line_anchor.py
tests/test_enrichment_java_go_ai.py
tests/test_enrichment_ordering.py
tests/test_entrypoints.py
tests/test_excludes.py
tests/test_finding_clusters.py
tests/test_fp_fn.py
tests/test_go_ai_rules.py
tests/test_go_cross_file.py
tests/test_guard_clause.py
tests/test_guardrail_enforcement.py
tests/test_hidden_ancestor_paths.py
tests/test_http_route_detection.py
tests/test_hunt_discovery_instruction_files.py
tests/test_hunt_preflight.py
tests/test_implicit_unpickle_receive.py
tests/test_inference_plane_rules.py
tests/test_ingest_surface_rules.py
tests/test_input_and_sink_registries.py
tests/test_install_opengrep.py
tests/test_java_ai_rules.py
tests/test_java_ai_surface_rules.py
tests/test_java_go_guard_enrichment.py
tests/test_java_llm_rules.py
tests/test_jinja_env_ssti_general.py
tests/test_js_authz.py
tests/test_js_cross_file.py
tests/test_json_language_support.py
tests/test_known_defects.py
tests/test_langchain_hardening_rules.py
tests/test_langgraph_checkpoint_sqli.py
tests/test_languages.py
tests/test_lf1_precision.py
tests/test_lf_generalization.py
tests/test_llm_authz_decision.py
tests/test_llm_backend_hardening.py
tests/test_llm_cache_tenancy.py
tests/test_llm_discovery.py
tests/test_llm_output_new_shapes.py
tests/test_llm_output_taint.py
tests/test_llm_reasoning_budget.py
tests/test_llm_telemetry_egress.py
tests/test_log_sensitive_taint.py
tests/test_logprob_extraction_taint.py
tests/test_malware_detection.py
tests/test_mcp_authorization.py
tests/test_mcp_config_scan.py
tests/test_mcp_network_exposure.py
tests/test_mcp_sampling_approval.py
tests/test_mcp_sampling_injection.py
tests/test_mcp_server.py
tests/test_mcp_stored_content.py
tests/test_mcp_tool_metadata_toctou.py
tests/test_mcp_tool_poisoning_confused_deputy.py
tests/test_membership_inference.py
tests/test_memory_poisoning_taint.py
tests/test_mfv_hayward.py
tests/test_misc_hardening.py
tests/test_model_extraction.py
tests/test_msgpack_objecthook_deser.py
tests/test_multiagent_frameworks.py
tests/test_multiagent_handoff.py
tests/test_multimodal_ingest_taint.py
tests/test_multimodal_ssrf_rules.py
tests/test_neuroscan_loader.py
tests/test_ns_aiml_109_markdown_exfil.py
tests/test_ns_aiml_110_reflection_dispatch.py
tests/test_ns_aiml_111_112_memory_write.py
tests/test_ns_aiml_118_119_rag_isolation.py
tests/test_ns_aiml_123_124_extraction_privacy.py
tests/test_ns_aiml_125_128_mcp_attack_classes.py
tests/test_ns_sqli_005_fstring.py
tests/test_opengrep_adapter.py
tests/test_openrowanignore_globstar.py
tests/test_path_safety.py
tests/test_paths.py
tests/test_phantom_deps.py
tests/test_pii_egress_crossfile.py
tests/test_pii_llm_egress_taint.py
tests/test_pipeline.py
tests/test_pipeline_vex_sbom.py
tests/test_pipeline_views.py
tests/test_precision_gate.py
tests/test_presence_generalization.py
tests/test_profiles_reachability.py
tests/test_project_config.py
tests/test_python_django_sources.py
tests/test_python_framework_hardening_rules.py
tests/test_python_mcp_tools.py
tests/test_python_trust_flow.py
tests/test_python_web_surface_rules.py
tests/test_reachability.py
tests/test_reachability_map.py
tests/test_reflective_tool_surface.py
tests/test_registry_language_fragments.py
tests/test_registry_no_drift.py
tests/test_remediation_field.py
tests/test_reporters.py
tests/test_rule_hygiene.py
tests/test_rule_lint.py
tests/test_rule_lookup_fails_loudly.py
tests/test_rules.py
tests/test_sanitizer_correlation.py
tests/test_sanitizer_registry.py
tests/test_sanitizers_java_go.py
tests/test_sast_precision.py
tests/test_sca_affected_filtering.py
tests/test_sca_epss.py
tests/test_sca_parsers.py
tests/test_sca_pom.py
tests/test_sca_requirements_parser.py
tests/test_sca_size_cap.py
tests/test_sca_transitive_deps.py
tests/test_scan_config_validation.py
tests/test_scan_entrypoint_parity.py
tests/test_scan_option_validation.py
tests/test_scan_plan.py
tests/test_scan_regression_gates.py
tests/test_scan_validation_precision.py
tests/test_serialization_scope.py
tests/test_serving_infra_rules.py
tests/test_sibling_gate.py
tests/test_skip_dirs_relative_to_root.py
tests/test_source_inventory.py
tests/test_source_inventory_cross_repository.py
tests/test_source_inventory_mcp.py
tests/test_source_inventory_python_consumers.py
tests/test_source_inventory_web_authz.py
tests/test_source_snapshot.py
tests/test_source_snapshot_remaining_consumers.py
tests/test_source_tracer.py
tests/test_source_tracer_request_origin.py
tests/test_source_tracer_semantics.py
tests/test_sources_iterator.py
tests/test_structural_trust_boundaries.py
tests/test_summary_fixpoint.py
tests/test_symlink_escape.py
tests/test_taint_inventory.py
tests/test_taint_pass_files_scanned.py
tests/test_taint_rules.py
tests/test_taint_sanitizer_soundness.py
tests/test_taint_sink_precision.py
tests/test_template_scanning.py
tests/test_training_approval.py
tests/test_training_disclosure.py
tests/test_training_pipeline.py
tests/test_typescript_agent_rules.py
tests/test_unbounded_consumption.py
tests/test_unicode_smuggling_decode.py
tests/test_unpickler_taint.py
tests/test_unsigned_jwt_taint.py
tests/test_upload_taint.py
tests/test_vector_filter_injection_taint.py
tests/test_vector_query_dsl_injection.py
tests/test_version_ranges.py
tests/test_vex_sbom.py
tests/test_web_exploit_hardening.py
tests/test_web_security_pass.py