CHANGELOG.md
CONTRIBUTING.md
LICENSE
MANIFEST.in
NOTICE
README.md
SECURITY.md
pyproject.toml
requirements-build.txt
action/action.yml
corpus/benign/config/Dockerfile
corpus/benign/config/infra.tf
corpus/benign/config/settings-safe.py
corpus/benign/config/workflow-ci.yml
corpus/benign/container-aware/runtime.py
corpus/benign/gitlab-ordinary/.gitlab-ci.yml
corpus/benign/javascript/api-client.js
corpus/benign/javascript/image-utils.js
corpus/benign/k8s-least-privilege/role.yaml
corpus/benign/keyring-owner/store.py
corpus/benign/minified/vendor.min.js
corpus/benign/npm-native-build/package.json
corpus/benign/ops/deploy.py
corpus/benign/ops/healthcheck.py
corpus/benign/ops/sync.py
corpus/benign/ordinary-gradle/build.gradle
corpus/benign/ordinary-makefile/Makefile
corpus/benign/python/build_helper.py
corpus/benign/python/settings.py
corpus/benign/release-attested/expected.yaml
corpus/benign/release-attested/.github/workflows/release.yml
corpus/benign/release-unattested/expected.yaml
corpus/benign/release-unattested/.github/workflows/release.yml
corpus/benign/retry-backoff/client.py
corpus/benign/scoped-public-deps/package.json
corpus/benign/setup-helper/_version.py
corpus/benign/setup-helper/setup.py
corpus/benign/string-building/paths.py
corpus/benign/submodule-pinned/.gitmodules
corpus/benign/subprocess-git/release.py
corpus/benign/vendored-binary/vendor/libexample.so
corpus/benign/webhook-notifier/notify.py
docs/01-ARCHITECTURE.md
docs/02-THREAT-MODEL.md
docs/03-INTERFACES.md
docs/04-OPERATIONS.md
docs/05-COVERAGE-MATRIX.md
docs/06-SANDBOX.md
docs/07-ECOSYSTEMS.md
docs/08-ACCURACY.md
docs/09-INTEGRATIONS.md
docs/10-CONFIGURATION.md
docs/11-RATIONALE.md
docs/README.md
docs/assets/demo.svg
docs/assets/logo-avatar.svg
docs/assets/logo-dark.svg
docs/assets/logo-light.svg
docs/assets/logo-mark.svg
scripts/build_advisory_db.py
scripts/build_iac_policies.py
scripts/discover_repos.py
scripts/generate_sbom.py
scripts/live_checks.py
scripts/measure_advisory_recall.py
scripts/measure_noise.py
scripts/measure_technique_recall.py
scripts/pin_action_requirements.py
scripts/refresh_movement.py
scripts/refresh_package_intel.py
scripts/render_demo.py
scripts/sign_advisory_bundle.py
src/cordon_sandbox/__init__.py
src/cordon_sandbox/cli.py
src/cordon_sandbox/fetch.py
src/cordon_sandbox/isolation.py
src/cordon_sandbox/observe.py
src/cordon_sandbox/py.typed
src/cordon_scanner/__init__.py
src/cordon_scanner/__main__.py
src/cordon_scanner/py.typed
src/cordon_scanner/version.py
src/cordon_scanner.egg-info/PKG-INFO
src/cordon_scanner.egg-info/SOURCES.txt
src/cordon_scanner.egg-info/dependency_links.txt
src/cordon_scanner.egg-info/entry_points.txt
src/cordon_scanner.egg-info/requires.txt
src/cordon_scanner.egg-info/top_level.txt
src/cordon_scanner/archive/__init__.py
src/cordon_scanner/archive/safe.py
src/cordon_scanner/cli/__init__.py
src/cordon_scanner/cli/__main__.py
src/cordon_scanner/cli/main.py
src/cordon_scanner/cli/progress.py
src/cordon_scanner/core/__init__.py
src/cordon_scanner/core/audit.py
src/cordon_scanner/core/bundle.py
src/cordon_scanner/core/cache.py
src/cordon_scanner/core/closure.py
src/cordon_scanner/core/comments.py
src/cordon_scanner/core/config.py
src/cordon_scanner/core/content.py
src/cordon_scanner/core/distribution.py
src/cordon_scanner/core/engine.py
src/cordon_scanner/core/errors.py
src/cordon_scanner/core/guard.py
src/cordon_scanner/core/limits.py
src/cordon_scanner/core/models.py
src/cordon_scanner/core/parallel.py
src/cordon_scanner/core/paths.py
src/cordon_scanner/core/policy.py
src/cordon_scanner/core/progress.py
src/cordon_scanner/core/prose.py
src/cordon_scanner/core/reachability.py
src/cordon_scanner/core/redact.py
src/cordon_scanner/core/references.py
src/cordon_scanner/core/registry.py
src/cordon_scanner/core/samples.py
src/cordon_scanner/core/scoring.py
src/cordon_scanner/core/taxonomy.py
src/cordon_scanner/core/walker.py
src/cordon_scanner/detect/__init__.py
src/cordon_scanner/detect/advisory.py
src/cordon_scanner/detect/ast_providers.py
src/cordon_scanner/detect/astquery.py
src/cordon_scanner/detect/attestation.py
src/cordon_scanner/detect/base.py
src/cordon_scanner/detect/binary.py
src/cordon_scanner/detect/capability.py
src/cordon_scanner/detect/catalogue.py
src/cordon_scanner/detect/config_files.py
src/cordon_scanner/detect/dependency.py
src/cordon_scanner/detect/embedded.py
src/cordon_scanner/detect/iac.py
src/cordon_scanner/detect/iac_policies.py
src/cordon_scanner/detect/license.py
src/cordon_scanner/detect/lockfile.py
src/cordon_scanner/detect/manifest.py
src/cordon_scanner/detect/obfuscation.py
src/cordon_scanner/detect/provenance.py
src/cordon_scanner/detect/pyast.py
src/cordon_scanner/detect/reachability.py
src/cordon_scanner/detect/registry.py
src/cordon_scanner/detect/sbom.py
src/cordon_scanner/detect/secrets.py
src/cordon_scanner/detect/vcs.py
src/cordon_scanner/detect/data/iac-policies-digests.json
src/cordon_scanner/detect/data/iac-policies-meta.json
src/cordon_scanner/detect/data/iac-policies.json.gz
src/cordon_scanner/ecosystems/base.py
src/cordon_scanner/ecosystems/npm.py
src/cordon_scanner/ecosystems/others.py
src/cordon_scanner/ecosystems/pypi.py
src/cordon_scanner/ecosystems/registry.py
src/cordon_scanner/intel/__init__.py
src/cordon_scanner/intel/_ed25519.py
src/cordon_scanner/intel/advisories.py
src/cordon_scanner/intel/attest.py
src/cordon_scanner/intel/dbsync.py
src/cordon_scanner/intel/hosts.py
src/cordon_scanner/intel/licenses.py
src/cordon_scanner/intel/osv_import.py
src/cordon_scanner/intel/popular.py
src/cordon_scanner/intel/real.py
src/cordon_scanner/intel/registry_client.py
src/cordon_scanner/intel/versions.py
src/cordon_scanner/intel/data/__init__.py
src/cordon_scanner/intel/data/advisories-cargo.json.gz
src/cordon_scanner/intel/data/advisories-composer.json.gz
src/cordon_scanner/intel/data/advisories-digests.json
src/cordon_scanner/intel/data/advisories-gomod.json.gz
src/cordon_scanner/intel/data/advisories-hex.json.gz
src/cordon_scanner/intel/data/advisories-maven.json.gz
src/cordon_scanner/intel/data/advisories-meta.json
src/cordon_scanner/intel/data/advisories-npm.json.gz
src/cordon_scanner/intel/data/advisories-nuget.json.gz
src/cordon_scanner/intel/data/advisories-pub.json.gz
src/cordon_scanner/intel/data/advisories-pypi.json.gz
src/cordon_scanner/intel/data/advisories-rubygems.json.gz
src/cordon_scanner/intel/data/advisories-swift.json.gz
src/cordon_scanner/intel/data/cargo.refused.txt
src/cordon_scanner/intel/data/cargo.txt
src/cordon_scanner/intel/data/composer.refused.txt
src/cordon_scanner/intel/data/composer.txt
src/cordon_scanner/intel/data/npm.refused.txt
src/cordon_scanner/intel/data/npm.txt
src/cordon_scanner/intel/data/nuget.refused.txt
src/cordon_scanner/intel/data/nuget.txt
src/cordon_scanner/intel/data/pub.refused.txt
src/cordon_scanner/intel/data/pub.txt
src/cordon_scanner/intel/data/pypi.refused.txt
src/cordon_scanner/intel/data/pypi.txt
src/cordon_scanner/intel/data/rubygems.refused.txt
src/cordon_scanner/intel/data/rubygems.txt
src/cordon_scanner/langs/__init__.py
src/cordon_scanner/langs/registry.py
src/cordon_scanner/report/__init__.py
src/cordon_scanner/report/base.py
src/cordon_scanner/report/codeclimate.py
src/cordon_scanner/report/github.py
src/cordon_scanner/report/json_.py
src/cordon_scanner/report/junit.py
src/cordon_scanner/report/markdown.py
src/cordon_scanner/report/sarif.py
src/cordon_scanner/report/sbom.py
src/cordon_scanner/report/text.py
src/cordon_scanner/report/vex.py
src/cordon_scanner/rules/__init__.py
src/cordon_scanner/rules/loader.py
src/cordon_scanner/rules/builtin/__init__.py
src/cordon_scanner/rules/builtin/capabilities-build.yaml
src/cordon_scanner/rules/builtin/capabilities-dotnet.yaml
src/cordon_scanner/rules/builtin/capabilities-javascript.yaml
src/cordon_scanner/rules/builtin/capabilities-jvm-go-ruby.yaml
src/cordon_scanner/rules/builtin/capabilities-malware-iocs.yaml
src/cordon_scanner/rules/builtin/capabilities-python.yaml
src/cordon_scanner/rules/builtin/capabilities-shell.yaml
src/cordon_scanner/rules/builtin/composites.yaml
src/cordon_scanner/sources/__init__.py
src/cordon_scanner/sources/base.py
src/cordon_scanner/sources/git.py
tests/conftest.py
tests/ecosystems.py
tests/matrix.py
tests/support.py
tests/e2e/test_cli.py
tests/fuzz/test_parsers.py
tests/integration/test_audit_criticals.py
tests/integration/test_audit_high.py
tests/integration/test_audit_log.py
tests/integration/test_baseline.py
tests/integration/test_blinding.py
tests/integration/test_bundle.py
tests/integration/test_container_images.py
tests/integration/test_corpus.py
tests/integration/test_detector_liveness.py
tests/integration/test_ecosystem_parity.py
tests/integration/test_git_modes.py
tests/integration/test_hostile.py
tests/integration/test_how_a_file_was_written.py
tests/integration/test_leakage.py
tests/integration/test_license_detector.py
tests/integration/test_ordinary_formatting.py
tests/integration/test_policy_distribution.py
tests/integration/test_review_advisories.py
tests/integration/test_review_commands.py
tests/integration/test_review_critical.py
tests/integration/test_review_detection.py
tests/integration/test_review_medium.py
tests/integration/test_review_rules.py
tests/integration/test_rule_baselines.py
tests/perf/test_budgets.py
tests/unit/test_advisory_coverage.py
tests/unit/test_ast_providers.py
tests/unit/test_attest.py
tests/unit/test_attestation.py
tests/unit/test_binary.py
tests/unit/test_build_advisory_db.py
tests/unit/test_cache.py
tests/unit/test_ci_attacks.py
tests/unit/test_comments.py
tests/unit/test_composite_scope.py
tests/unit/test_config.py
tests/unit/test_content_walker.py
tests/unit/test_coverage_matrix.py
tests/unit/test_coverage_notices.py
tests/unit/test_dbsync.py
tests/unit/test_dependency_domain2.py
tests/unit/test_detectors.py
tests/unit/test_documentation.py
tests/unit/test_ecosystem_matrix.py
tests/unit/test_ecosystems.py
tests/unit/test_ed25519.py
tests/unit/test_embedded.py
tests/unit/test_engine.py
tests/unit/test_enterprise_noise.py
tests/unit/test_finding_locations.py
tests/unit/test_git_source.py
tests/unit/test_gitlab_and_vex.py
tests/unit/test_guard.py
tests/unit/test_iac_integrity.py
tests/unit/test_iac_policies.py
tests/unit/test_infrastructure_noise.py
tests/unit/test_licenses.py
tests/unit/test_lockfile_parsers.py
tests/unit/test_models.py
tests/unit/test_new_ecosystems.py
tests/unit/test_osv_import.py
tests/unit/test_package_intel.py
tests/unit/test_parallel.py
tests/unit/test_pattern_safety.py
tests/unit/test_progress.py
tests/unit/test_provenance.py
tests/unit/test_providers.py
tests/unit/test_pyast.py
tests/unit/test_reachability.py
tests/unit/test_real_world_noise.py
tests/unit/test_redact.py
tests/unit/test_refresh_movement.py
tests/unit/test_registry_detector.py
tests/unit/test_release_artefacts.py
tests/unit/test_reporters.py
tests/unit/test_review_defects.py
tests/unit/test_rule_claims.py
tests/unit/test_rule_documentation.py
tests/unit/test_rules.py
tests/unit/test_sandbox.py
tests/unit/test_sbom.py
tests/unit/test_sbom_generate.py
tests/unit/test_scoring_policy.py
tests/unit/test_secrets_assembled.py
tests/unit/test_taxonomy.py
tests/unit/test_tutorials.py
tests/unit/test_unexercised_rules.py
tests/unit/test_vcs.py
tests/unit/test_versions.py