.editorconfig
.gitattributes
.gitignore
CHANGELOG.md
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE
MANIFEST.in
Makefile
NOTICE
README.md
SECURITY.md
THIRD_PARTY_NOTICES.md
install.py
pyproject.toml
requirements-dev.lock
.github/PULL_REQUEST_TEMPLATE.md
.github/ISSUE_TEMPLATE/bug_report.yml
.github/workflows/container.yml
.github/workflows/lint.yml
.github/workflows/platform-capabilities.yml
.github/workflows/publish-pypi.yml
.github/workflows/security.yml
.github/workflows/test.yml
.github/workflows/windows-docker.yml
adapters/claude-code/README.md
adapters/claude-code/agents/lab-ai_security.md
adapters/claude-code/agents/lab-api.md
adapters/claude-code/agents/lab-authentication.md
adapters/claude-code/agents/lab-authorization.md
adapters/claude-code/agents/lab-business_logic.md
adapters/claude-code/agents/lab-coordinator.md
adapters/claude-code/agents/lab-data_flow.md
adapters/claude-code/agents/lab-frontend.md
adapters/claude-code/agents/lab-infrastructure.md
adapters/claude-code/agents/lab-remediation.md
adapters/claude-code/agents/lab-sensitive_data.md
adapters/claude-code/agents/lab-supply_chain.md
adapters/claude-code/agents/lab-verifier.md
adapters/codex/README.md
adapters/codex/agents/lab-ai_security.toml
adapters/codex/agents/lab-api.toml
adapters/codex/agents/lab-authentication.toml
adapters/codex/agents/lab-authorization.toml
adapters/codex/agents/lab-business_logic.toml
adapters/codex/agents/lab-coordinator.toml
adapters/codex/agents/lab-data_flow.toml
adapters/codex/agents/lab-frontend.toml
adapters/codex/agents/lab-infrastructure.toml
adapters/codex/agents/lab-remediation.toml
adapters/codex/agents/lab-sensitive_data.toml
adapters/codex/agents/lab-supply_chain.toml
adapters/codex/agents/lab-verifier.toml
adapters/cursor/README.md
adapters/gemini-cli/README.md
adapters/generic/README.md
benchmarks/evaluator.py
benchmarks/manifest.json
benchmarks/expected-results/latest.json
docs/advanced-usage.md
docs/architecture.md
docs/configuration.md
docs/faq.md
docs/installation.md
docs/integrations.md
docs/releasing.md
docs/report-format.md
docs/requirements-status.md
docs/security-model.md
docs/supported-frameworks.md
docs/troubleshooting.md
docs/usage.md
docs/validation-0.1.md
docs/validation.md
examples/compatibility-results.json
examples/container-test-results.xml
examples/extended-validation.json
examples/publication-validation.json
examples/pypi-release-0.2.0.json
examples/test-results.xml
examples/validation-summary.json
examples/verification-results.json
examples/command-examples/local.sh
examples/configuration/active-synthetic.yaml
examples/configuration/docker-synthetic.yaml
examples/configuration/model.yaml
examples/configuration/source-only.yaml
examples/sample-reports/README.md
examples/sample-reports/0.2-compose/report.html
examples/sample-reports/0.2-compose/report.json
examples/sample-reports/0.2-compose/report.md
examples/sample-reports/0.2-compose/report.sarif
examples/sample-reports/javascript-api/report.html
examples/sample-reports/javascript-api/report.json
examples/sample-reports/javascript-api/report.md
examples/sample-reports/javascript-api/report.sarif
examples/sample-reports/python-api/report.html
examples/sample-reports/python-api/report.json
examples/sample-reports/python-api/report.md
examples/sample-reports/python-api/report.sarif
installers/install.ps1
installers/install.py
installers/install.sh
installers/uninstall.py
schemas/check.schema.json
schemas/config.schema.json
schemas/finding.schema.json
schemas/report.schema.json
schemas/run.schema.json
schemas/sarif-2.1.0.schema.json
schemas/scope.schema.json
schemas/test.schema.json
scripts/release_automation.py
scripts/sync_resources.py
scripts/validate_distribution.py
scripts/verify_pypi_release.py
skill/local-appsec-lab/SKILL.md
skill/local-appsec-lab/assets/adapters/claude-code/README.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-ai_security.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-api.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-authentication.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-authorization.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-business_logic.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-coordinator.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-data_flow.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-frontend.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-infrastructure.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-remediation.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-sensitive_data.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-supply_chain.md
skill/local-appsec-lab/assets/adapters/claude-code/agents/lab-verifier.md
skill/local-appsec-lab/assets/adapters/codex/README.md
skill/local-appsec-lab/assets/adapters/codex/agents/lab-ai_security.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-api.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-authentication.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-authorization.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-business_logic.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-coordinator.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-data_flow.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-frontend.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-infrastructure.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-remediation.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-sensitive_data.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-supply_chain.toml
skill/local-appsec-lab/assets/adapters/codex/agents/lab-verifier.toml
skill/local-appsec-lab/assets/adapters/cursor/README.md
skill/local-appsec-lab/assets/adapters/gemini-cli/README.md
skill/local-appsec-lab/assets/adapters/generic/README.md
skill/local-appsec-lab/assets/schemas/check.schema.json
skill/local-appsec-lab/assets/schemas/config.schema.json
skill/local-appsec-lab/assets/schemas/finding.schema.json
skill/local-appsec-lab/assets/schemas/report.schema.json
skill/local-appsec-lab/assets/schemas/run.schema.json
skill/local-appsec-lab/assets/schemas/sarif-2.1.0.schema.json
skill/local-appsec-lab/assets/schemas/scope.schema.json
skill/local-appsec-lab/assets/schemas/test.schema.json
skill/local-appsec-lab/assets/templates/scenario.yaml
skill/local-appsec-lab/references/agent-roles.md
skill/local-appsec-lab/references/architecture.md
skill/local-appsec-lab/references/authorization.md
skill/local-appsec-lab/references/evidence-verification.md
skill/local-appsec-lab/references/framework-support.md
skill/local-appsec-lab/references/methodology.md
skill/local-appsec-lab/references/reporting.md
skill/local-appsec-lab/references/runtime-management.md
skill/local-appsec-lab/references/test-catalog.md
skill/local-appsec-lab/references/troubleshooting.md
skill/local-appsec-lab/scripts/appsec_lab.py
src/local_appsec_lab/__init__.py
src/local_appsec_lab/__main__.py
src/local_appsec_lab/cli.py
src/local_appsec_lab/engine.py
src/local_appsec_lab/errors.py
src/local_appsec_lab/install.py
src/local_appsec_lab/models.py
src/local_appsec_lab.egg-info/PKG-INFO
src/local_appsec_lab.egg-info/SOURCES.txt
src/local_appsec_lab.egg-info/dependency_links.txt
src/local_appsec_lab.egg-info/entry_points.txt
src/local_appsec_lab.egg-info/requires.txt
src/local_appsec_lab.egg-info/top_level.txt
src/local_appsec_lab/agents/__init__.py
src/local_appsec_lab/agents/knowledge.py
src/local_appsec_lab/agents/native.py
src/local_appsec_lab/authorization/__init__.py
src/local_appsec_lab/configuration/__init__.py
src/local_appsec_lab/data/browser-seccomp.json
src/local_appsec_lab/data/semgrep.yaml
src/local_appsec_lab/data/test-catalog.json
src/local_appsec_lab/data/skill/SKILL.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/README.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-ai_security.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-api.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-authentication.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-authorization.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-business_logic.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-coordinator.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-data_flow.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-frontend.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-infrastructure.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-remediation.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-sensitive_data.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-supply_chain.md
src/local_appsec_lab/data/skill/assets/adapters/claude-code/agents/lab-verifier.md
src/local_appsec_lab/data/skill/assets/adapters/codex/README.md
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-ai_security.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-api.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-authentication.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-authorization.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-business_logic.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-coordinator.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-data_flow.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-frontend.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-infrastructure.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-remediation.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-sensitive_data.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-supply_chain.toml
src/local_appsec_lab/data/skill/assets/adapters/codex/agents/lab-verifier.toml
src/local_appsec_lab/data/skill/assets/adapters/cursor/README.md
src/local_appsec_lab/data/skill/assets/adapters/gemini-cli/README.md
src/local_appsec_lab/data/skill/assets/adapters/generic/README.md
src/local_appsec_lab/data/skill/assets/schemas/check.schema.json
src/local_appsec_lab/data/skill/assets/schemas/config.schema.json
src/local_appsec_lab/data/skill/assets/schemas/finding.schema.json
src/local_appsec_lab/data/skill/assets/schemas/report.schema.json
src/local_appsec_lab/data/skill/assets/schemas/run.schema.json
src/local_appsec_lab/data/skill/assets/schemas/sarif-2.1.0.schema.json
src/local_appsec_lab/data/skill/assets/schemas/scope.schema.json
src/local_appsec_lab/data/skill/assets/schemas/test.schema.json
src/local_appsec_lab/data/skill/assets/templates/scenario.yaml
src/local_appsec_lab/data/skill/references/agent-roles.md
src/local_appsec_lab/data/skill/references/architecture.md
src/local_appsec_lab/data/skill/references/authorization.md
src/local_appsec_lab/data/skill/references/evidence-verification.md
src/local_appsec_lab/data/skill/references/framework-support.md
src/local_appsec_lab/data/skill/references/methodology.md
src/local_appsec_lab/data/skill/references/reporting.md
src/local_appsec_lab/data/skill/references/runtime-management.md
src/local_appsec_lab/data/skill/references/test-catalog.md
src/local_appsec_lab/data/skill/references/troubleshooting.md
src/local_appsec_lab/data/skill/scripts/appsec_lab.py
src/local_appsec_lab/discovery/__init__.py
src/local_appsec_lab/discovery/context.py
src/local_appsec_lab/discovery/source_links.py
src/local_appsec_lab/dynamic_tests/__init__.py
src/local_appsec_lab/dynamic_tests/adaptive.py
src/local_appsec_lab/dynamic_tests/browser.py
src/local_appsec_lab/dynamic_tests/catalog.py
src/local_appsec_lab/dynamic_tests/fuzz.py
src/local_appsec_lab/dynamic_tests/workflows.py
src/local_appsec_lab/findings/__init__.py
src/local_appsec_lab/integrations/__init__.py
src/local_appsec_lab/integrations/provision.py
src/local_appsec_lab/intelligence/__init__.py
src/local_appsec_lab/intelligence/cache.py
src/local_appsec_lab/intelligence/cache_key.py
src/local_appsec_lab/intelligence/dataflow.py
src/local_appsec_lab/intelligence/severity.py
src/local_appsec_lab/isolation/__init__.py
src/local_appsec_lab/network/__init__.py
src/local_appsec_lab/remediation/__init__.py
src/local_appsec_lab/remediation/patches.py
src/local_appsec_lab/reporting/__init__.py
src/local_appsec_lab/runtime/__init__.py
src/local_appsec_lab/runtime/bridge.py
src/local_appsec_lab/runtime/browser_worker.py
src/local_appsec_lab/runtime/compose.py
src/local_appsec_lab/runtime/leases.py
src/local_appsec_lab/runtime/limits_exec.py
src/local_appsec_lab/runtime/setup.py
src/local_appsec_lab/scanners/__init__.py
src/local_appsec_lab/scheduling/__init__.py
src/local_appsec_lab/utilities/__init__.py
src/local_appsec_lab/utilities/files.py
src/local_appsec_lab/utilities/process_budget.py
src/local_appsec_lab/utilities/redaction.py
src/local_appsec_lab/utilities/tls.py
src/local_appsec_lab/utilities/windows_files.py
src/local_appsec_lab/utilities/yaml.py
src/local_appsec_lab/verification/__init__.py
tests/conftest.py
tests/authorization/test_approval.py
tests/compatibility/browser.Dockerfile
tests/compatibility/runtime.Dockerfile
tests/compatibility/test_browser_assessment.py
tests/compatibility/test_bubblewrap.py
tests/compatibility/test_compose_assessment.py
tests/compatibility/test_docker_assessment.py
tests/end_to_end/test_live_assessment.py
tests/fixtures/database-api/appsec-lab.yaml
tests/fixtures/database-api/compose.yaml
tests/fixtures/database-api/seed.sql
tests/fixtures/database-api/server.py
tests/fixtures/frontend/appsec-lab.yaml
tests/fixtures/frontend/openapi.json
tests/fixtures/frontend/package.json
tests/fixtures/frontend/server.js
tests/fixtures/javascript-api/README.md
tests/fixtures/javascript-api/appsec-lab.yaml
tests/fixtures/javascript-api/openapi.json
tests/fixtures/javascript-api/package.json
tests/fixtures/javascript-api/server.js
tests/fixtures/malicious-instructions/README.md
tests/fixtures/malicious-instructions/package.json
tests/fixtures/multi-service/Dockerfile
tests/fixtures/multi-service/README.md
tests/fixtures/multi-service/compose.yaml
tests/fixtures/multi-service/seed.sql
tests/fixtures/multi-service/server.py
tests/fixtures/negative-controls/safe.py
tests/fixtures/network-boundary/README.md
tests/fixtures/python-api/app.py
tests/fixtures/python-api/appsec-lab.yaml
tests/fixtures/python-api/requirements.txt
tests/fixtures/stateful-api/server.py
tests/fixtures/unsupported/Main.kt
tests/fixtures/unsupported/unsafe.py
tests/installation/test_installer.py
tests/integration/test_dataflow.py
tests/integration/test_fix_and_severity.py
tests/integration/test_intelligence.py
tests/integration/test_scheduler_and_ai.py
tests/integration/test_setup_contract.py
tests/integration/test_shared_knowledge.py
tests/integration/test_workflows.py
tests/isolation/test_runtime_boundaries.py
tests/regression/test_cli.py
tests/release/test_release_automation.py
tests/security/test_extended_boundaries.py
tests/security/test_hardening_regressions.py
tests/security/test_review_regressions.py
tests/security/test_scope.py
tests/unit/test_config_and_discovery.py
tests/unit/test_findings_and_reports.py
tests/unit/test_static_discovery.py