CHANGELOG.md
CONTRIBUTING.md
LICENSE
MANIFEST.in
NOTICE
README.md
SECURITY.md
pyproject.toml
requirements-build.txt
action/action.yml
corpus/benign/agents/.mcp.json
corpus/benign/agents/CLAUDE.md
corpus/benign/agents-lookalike/CLAUDE.md
corpus/benign/agents-lookalike/.claude/settings.json
corpus/benign/agents-lookalike/.cursor/mcp.json
corpus/benign/agents-lookalike/.github/copilot-instructions.md
corpus/benign/agents/.claude/settings.json
corpus/benign/agents/.github/workflows/review.yml
corpus/benign/agents/.vscode/extensions.json
corpus/benign/config/Dockerfile
corpus/benign/config/infra.tf
corpus/benign/config/settings-safe.py
corpus/benign/config/workflow-ci.yml
corpus/benign/container-aware/runtime.py
corpus/benign/formats/classifier.pt
corpus/benign/formats/guide.docx
corpus/benign/formats/logo.png
corpus/benign/formats/manual.pdf
corpus/benign/formats/photo-exif.png
corpus/benign/formats/vocab.pkl
corpus/benign/gitlab-ordinary/.gitlab-ci.yml
corpus/benign/javascript/api-client.js
corpus/benign/javascript/image-utils.js
corpus/benign/k8s-least-privilege/role.yaml
corpus/benign/keyring-owner/store.py
corpus/benign/minified/vendor.min.js
corpus/benign/npm-native-build/package.json
corpus/benign/ops/deploy.py
corpus/benign/ops/healthcheck.py
corpus/benign/ops/sync.py
corpus/benign/ordinary-gradle/build.gradle
corpus/benign/ordinary-makefile/Makefile
corpus/benign/python/build_helper.py
corpus/benign/python/settings.py
corpus/benign/python-startup/site-packages/distutils-precedence.pth
corpus/benign/python-startup/site-packages/project.pth
corpus/benign/python-startup/tools/fetch_tool.py
corpus/benign/release-attested/expected.yaml
corpus/benign/release-attested/.github/workflows/release.yml
corpus/benign/release-unattested/expected.yaml
corpus/benign/release-unattested/.github/workflows/release.yml
corpus/benign/retry-backoff/client.py
corpus/benign/scoped-public-deps/package.json
corpus/benign/setup-helper/_version.py
corpus/benign/setup-helper/setup.py
corpus/benign/string-building/paths.py
corpus/benign/submodule-pinned/.gitmodules
corpus/benign/subprocess-git/release.py
corpus/benign/vendored-binary/vendor/libexample.so
corpus/benign/webhook-notifier/notify.py
docs/01-ARCHITECTURE.md
docs/02-THREAT-MODEL.md
docs/03-INTERFACES.md
docs/04-OPERATIONS.md
docs/05-COVERAGE-MATRIX.md
docs/06-SANDBOX.md
docs/07-ECOSYSTEMS.md
docs/08-ACCURACY.md
docs/09-INTEGRATIONS.md
docs/10-CONFIGURATION.md
docs/11-RATIONALE.md
docs/12-SIGNING-KEYS.md
docs/README.md
docs/assets/demo.svg
docs/assets/logo-avatar.svg
docs/assets/logo-dark.svg
docs/assets/logo-light.svg
docs/assets/logo-mark.svg
docs/releases/0.5.0.md
docs/releases/0.5.1.md
docs/releases/0.5.2.md
docs/releases/0.6.0.md
scripts/build_advisory_db.py
scripts/build_iac_policies.py
scripts/bump_cordon_pins.py
scripts/discover_repos.py
scripts/generate_sbom.py
scripts/import_atr.py
scripts/key_ceremony.py
scripts/live_checks.py
scripts/lock_attest_requirements.py
scripts/measure_advisory_recall.py
scripts/measure_noise.py
scripts/measure_technique_recall.py
scripts/pin_action_requirements.py
scripts/pin_doc_links.py
scripts/refresh_extension_intel.py
scripts/refresh_movement.py
scripts/refresh_package_intel.py
scripts/render_demo.py
scripts/sign_advisory_bundle.py
src/cordon_sandbox/__init__.py
src/cordon_sandbox/canaries.py
src/cordon_sandbox/cli.py
src/cordon_sandbox/dns_recorder.py
src/cordon_sandbox/fetch.py
src/cordon_sandbox/isolation.py
src/cordon_sandbox/observe.py
src/cordon_sandbox/py.typed
src/cordon_scanner/__init__.py
src/cordon_scanner/__main__.py
src/cordon_scanner/notify.py
src/cordon_scanner/py.typed
src/cordon_scanner/version.py
src/cordon_scanner.egg-info/PKG-INFO
src/cordon_scanner.egg-info/SOURCES.txt
src/cordon_scanner.egg-info/dependency_links.txt
src/cordon_scanner.egg-info/entry_points.txt
src/cordon_scanner.egg-info/requires.txt
src/cordon_scanner.egg-info/top_level.txt
src/cordon_scanner/archive/__init__.py
src/cordon_scanner/archive/safe.py
src/cordon_scanner/cli/__init__.py
src/cordon_scanner/cli/__main__.py
src/cordon_scanner/cli/completion.py
src/cordon_scanner/cli/deps.py
src/cordon_scanner/cli/help.py
src/cordon_scanner/cli/incoming.py
src/cordon_scanner/cli/main.py
src/cordon_scanner/cli/progress.py
src/cordon_scanner/cli/review.py
src/cordon_scanner/cli/suppressions.py
src/cordon_scanner/cloud/__init__.py
src/cordon_scanner/cloud/auth.py
src/cordon_scanner/cloud/device.py
src/cordon_scanner/cloud/fixer.py
src/cordon_scanner/cloud/policy.py
src/cordon_scanner/cloud/results.py
src/cordon_scanner/cloud/runner.py
src/cordon_scanner/cloud/transport.py
src/cordon_scanner/core/__init__.py
src/cordon_scanner/core/audit.py
src/cordon_scanner/core/bundle.py
src/cordon_scanner/core/cache.py
src/cordon_scanner/core/closure.py
src/cordon_scanner/core/comments.py
src/cordon_scanner/core/composer_plugins.py
src/cordon_scanner/core/config.py
src/cordon_scanner/core/content.py
src/cordon_scanner/core/datayaml.py
src/cordon_scanner/core/distribution.py
src/cordon_scanner/core/engine.py
src/cordon_scanner/core/errors.py
src/cordon_scanner/core/evidence_key.py
src/cordon_scanner/core/guard.py
src/cordon_scanner/core/incoming.py
src/cordon_scanner/core/inventory.py
src/cordon_scanner/core/limits.py
src/cordon_scanner/core/local_seal.py
src/cordon_scanner/core/manifest_confusion.py
src/cordon_scanner/core/models.py
src/cordon_scanner/core/parallel.py
src/cordon_scanner/core/paths.py
src/cordon_scanner/core/policy.py
src/cordon_scanner/core/progress.py
src/cordon_scanner/core/prose.py
src/cordon_scanner/core/reachability.py
src/cordon_scanner/core/redact.py
src/cordon_scanner/core/references.py
src/cordon_scanner/core/registry.py
src/cordon_scanner/core/release_diff.py
src/cordon_scanner/core/safexml.py
src/cordon_scanner/core/samples.py
src/cordon_scanner/core/sbom_ingest.py
src/cordon_scanner/core/scoring.py
src/cordon_scanner/core/submodules.py
src/cordon_scanner/core/taxonomy.py
src/cordon_scanner/core/trees.py
src/cordon_scanner/core/vex.py
src/cordon_scanner/core/walker.py
src/cordon_scanner/detect/__init__.py
src/cordon_scanner/detect/advisory.py
src/cordon_scanner/detect/agent_config.py
src/cordon_scanner/detect/agent_intent.py
src/cordon_scanner/detect/agent_judge.py
src/cordon_scanner/detect/agents.py
src/cordon_scanner/detect/ast_providers.py
src/cordon_scanner/detect/astquery.py
src/cordon_scanner/detect/attestation.py
src/cordon_scanner/detect/base.py
src/cordon_scanner/detect/binary.py
src/cordon_scanner/detect/binary_imports.py
src/cordon_scanner/detect/capability.py
src/cordon_scanner/detect/catalogue.py
src/cordon_scanner/detect/clamav.py
src/cordon_scanner/detect/config_files.py
src/cordon_scanner/detect/dependency.py
src/cordon_scanner/detect/embedded.py
src/cordon_scanner/detect/formats.py
src/cordon_scanner/detect/iac.py
src/cordon_scanner/detect/iac_policies.py
src/cordon_scanner/detect/license.py
src/cordon_scanner/detect/live_mcp.py
src/cordon_scanner/detect/lockfile.py
src/cordon_scanner/detect/manifest.py
src/cordon_scanner/detect/obfuscation.py
src/cordon_scanner/detect/ospackages.py
src/cordon_scanner/detect/package_policy.py
src/cordon_scanner/detect/provenance.py
src/cordon_scanner/detect/pyast.py
src/cordon_scanner/detect/reachability.py
src/cordon_scanner/detect/registry.py
src/cordon_scanner/detect/sbom.py
src/cordon_scanner/detect/secret_history.py
src/cordon_scanner/detect/secretflow.py
src/cordon_scanner/detect/secrets.py
src/cordon_scanner/detect/slopsquat.py
src/cordon_scanner/detect/vcs.py
src/cordon_scanner/detect/yara_rules.py
src/cordon_scanner/detect/data/iac-policies-digests.json
src/cordon_scanner/detect/data/iac-policies-meta.json
src/cordon_scanner/detect/data/iac-policies.json.gz
src/cordon_scanner/detect/data/imports-antidebug.json
src/cordon_scanner/detect/data/imports-credential.json
src/cordon_scanner/detect/data/imports-download_execute.json
src/cordon_scanner/detect/data/imports-dynload.json
src/cordon_scanner/detect/data/imports-execute.json
src/cordon_scanner/detect/data/imports-inject.json
src/cordon_scanner/detect/data/imports-keylog.json
src/cordon_scanner/detect/data/imports-network.json
src/cordon_scanner/detect/data/imports-persist.json
src/cordon_scanner/ecosystems/actions.py
src/cordon_scanner/ecosystems/ansible.py
src/cordon_scanner/ecosystems/base.py
src/cordon_scanner/ecosystems/bazel.py
src/cordon_scanner/ecosystems/cocoapods.py
src/cordon_scanner/ecosystems/composer.py
src/cordon_scanner/ecosystems/conan.py
src/cordon_scanner/ecosystems/conda.py
src/cordon_scanner/ecosystems/contract.py
src/cordon_scanner/ecosystems/cran.py
src/cordon_scanner/ecosystems/gradle.py
src/cordon_scanner/ecosystems/hackage.py
src/cordon_scanner/ecosystems/helm.py
src/cordon_scanner/ecosystems/hex.py
src/cordon_scanner/ecosystems/homebrew.py
src/cordon_scanner/ecosystems/image.py
src/cordon_scanner/ecosystems/infra.py
src/cordon_scanner/ecosystems/julia.py
src/cordon_scanner/ecosystems/nix.py
src/cordon_scanner/ecosystems/npm.py
src/cordon_scanner/ecosystems/nuget.py
src/cordon_scanner/ecosystems/opam.py
src/cordon_scanner/ecosystems/others.py
src/cordon_scanner/ecosystems/pub.py
src/cordon_scanner/ecosystems/pypi.py
src/cordon_scanner/ecosystems/registry.py
src/cordon_scanner/ecosystems/rubygems.py
src/cordon_scanner/ecosystems/swift.py
src/cordon_scanner/ecosystems/terraform.py
src/cordon_scanner/ecosystems/vcpkg.py
src/cordon_scanner/formats/__init__.py
src/cordon_scanner/formats/documents.py
src/cordon_scanner/formats/media.py
src/cordon_scanner/formats/ole.py
src/cordon_scanner/formats/pickles.py
src/cordon_scanner/images/__init__.py
src/cordon_scanner/images/alas.py
src/cordon_scanner/images/binmeta.py
src/cordon_scanner/images/distrodb.py
src/cordon_scanner/images/host.py
src/cordon_scanner/images/langpkgs.py
src/cordon_scanner/images/oci.py
src/cordon_scanner/images/osv.py
src/cordon_scanner/images/packages.py
src/cordon_scanner/intel/__init__.py
src/cordon_scanner/intel/_ed25519.py
src/cordon_scanner/intel/advisories.py
src/cordon_scanner/intel/advisory_text.py
src/cordon_scanner/intel/atr.py
src/cordon_scanner/intel/attest.py
src/cordon_scanner/intel/cvss.py
src/cordon_scanner/intel/datafile.py
src/cordon_scanner/intel/dbsync.py
src/cordon_scanner/intel/exploited.py
src/cordon_scanner/intel/feed.py
src/cordon_scanner/intel/hallucinated.py
src/cordon_scanner/intel/hosts.py
src/cordon_scanner/intel/installers.py
src/cordon_scanner/intel/licenses.py
src/cordon_scanner/intel/live_mcp.py
src/cordon_scanner/intel/more_registries.py
src/cordon_scanner/intel/osv_delta.py
src/cordon_scanner/intel/osv_import.py
src/cordon_scanner/intel/popular.py
src/cordon_scanner/intel/private_registries.py
src/cordon_scanner/intel/ranges.py
src/cordon_scanner/intel/real.py
src/cordon_scanner/intel/registry_client.py
src/cordon_scanner/intel/rubysec.py
src/cordon_scanner/intel/versions.py
src/cordon_scanner/intel/data/__init__.py
src/cordon_scanner/intel/data/advisories-actions.json.gz
src/cordon_scanner/intel/data/advisories-cargo.json.gz
src/cordon_scanner/intel/data/advisories-composer.json.gz
src/cordon_scanner/intel/data/advisories-cran.json.gz
src/cordon_scanner/intel/data/advisories-digests.json
src/cordon_scanner/intel/data/advisories-git.json.gz
src/cordon_scanner/intel/data/advisories-gomod.json.gz
src/cordon_scanner/intel/data/advisories-hackage.json.gz
src/cordon_scanner/intel/data/advisories-hex.json.gz
src/cordon_scanner/intel/data/advisories-julia.json.gz
src/cordon_scanner/intel/data/advisories-maven.json.gz
src/cordon_scanner/intel/data/advisories-meta.json
src/cordon_scanner/intel/data/advisories-npm.json.gz
src/cordon_scanner/intel/data/advisories-nuget.json.gz
src/cordon_scanner/intel/data/advisories-opam.json.gz
src/cordon_scanner/intel/data/advisories-pub.json.gz
src/cordon_scanner/intel/data/advisories-pypi.json.gz
src/cordon_scanner/intel/data/advisories-rubygems.json.gz
src/cordon_scanner/intel/data/advisories-swift.json.gz
src/cordon_scanner/intel/data/advisories-vscode.json.gz
src/cordon_scanner/intel/data/agent-actions.json
src/cordon_scanner/intel/data/atr-rules.json.gz
src/cordon_scanner/intel/data/cargo.refused.txt
src/cordon_scanner/intel/data/cargo.txt
src/cordon_scanner/intel/data/composer.refused.txt
src/cordon_scanner/intel/data/composer.txt
src/cordon_scanner/intel/data/exploited.json
src/cordon_scanner/intel/data/hallucinated.json
src/cordon_scanner/intel/data/npm.refused.txt
src/cordon_scanner/intel/data/npm.txt
src/cordon_scanner/intel/data/nuget.refused.txt
src/cordon_scanner/intel/data/nuget.txt
src/cordon_scanner/intel/data/pub.refused.txt
src/cordon_scanner/intel/data/pub.txt
src/cordon_scanner/intel/data/pypi.refused.txt
src/cordon_scanner/intel/data/pypi.txt
src/cordon_scanner/intel/data/rubygems.refused.txt
src/cordon_scanner/intel/data/rubygems.txt
src/cordon_scanner/intel/data/vscode-extensions.json
src/cordon_scanner/judge/__init__.py
src/cordon_scanner/judge/providers.py
src/cordon_scanner/judge/review.py
src/cordon_scanner/langs/__init__.py
src/cordon_scanner/langs/registry.py
src/cordon_scanner/report/__init__.py
src/cordon_scanner/report/aibom.py
src/cordon_scanner/report/base.py
src/cordon_scanner/report/codeclimate.py
src/cordon_scanner/report/github.py
src/cordon_scanner/report/json_.py
src/cordon_scanner/report/junit.py
src/cordon_scanner/report/markdown.py
src/cordon_scanner/report/sarif.py
src/cordon_scanner/report/sbom.py
src/cordon_scanner/report/text.py
src/cordon_scanner/report/vex.py
src/cordon_scanner/rules/__init__.py
src/cordon_scanner/rules/loader.py
src/cordon_scanner/rules/builtin/__init__.py
src/cordon_scanner/rules/builtin/capabilities-build.yaml
src/cordon_scanner/rules/builtin/capabilities-dotnet.yaml
src/cordon_scanner/rules/builtin/capabilities-javascript.yaml
src/cordon_scanner/rules/builtin/capabilities-jvm-go-ruby.yaml
src/cordon_scanner/rules/builtin/capabilities-malware-iocs.yaml
src/cordon_scanner/rules/builtin/capabilities-perl-lua-dart-elixir-r.yaml
src/cordon_scanner/rules/builtin/capabilities-python.yaml
src/cordon_scanner/rules/builtin/capabilities-shell.yaml
src/cordon_scanner/rules/builtin/capabilities-swift-objc-haskell-julia-zig-nim-ocaml-clojure.yaml
src/cordon_scanner/rules/builtin/composites.yaml
src/cordon_scanner/sources/__init__.py
src/cordon_scanner/sources/base.py
src/cordon_scanner/sources/git.py
src/cordon_scanner/sources/history.py
src/cordon_scanner/sources/package.py
src/cordon_scanner/sources/previous.py
tests/conformancebuilders.py
tests/conformancekit.py
tests/conftest.py
tests/ecosystems.py
tests/feedkit.py
tests/formatkit.py
tests/imagekit.py
tests/matrix.py
tests/signing_keys.py
tests/support.py
tests/tutorial_reference.py
tests/conformance/test_cases.py
tests/conformance/test_contract.py
tests/conformance/test_universal.py
tests/conformance/cases/actions/edge-reusable-local-container/expect.yaml
tests/conformance/cases/actions/edge-reusable-local-container/.github/actions/setup/action.yml
tests/conformance/cases/actions/edge-reusable-local-container/.github/workflows/ci.yaml
tests/conformance/cases/actions/edge-reusable-local-container/container/action.yaml
tests/conformance/cases/actions/edge-reusable-local-container/nested/action.yml
tests/conformance/cases/actions/real-workflows/action.yml
tests/conformance/cases/actions/real-workflows/authoritative.json
tests/conformance/cases/actions/real-workflows/expect.yaml
tests/conformance/cases/actions/real-workflows/.github/workflows/copilot-setup-steps.yml
tests/conformance/cases/actions/real-workflows/.github/workflows/release.yml
tests/conformance/cases/actions/real-workflows/.github/workflows/test.yml
tests/conformance/cases/actions/real-workflows/.github/workflows/update-dependencies.yml
tests/conformance/cases/actions/real-workflows/.github/workflows/update-major-minor-tag.yml
tests/conformance/cases/actions/real-workflows/.github/workflows/zizmor.yml
tests/conformance/cases/actions/regression-uses-in-scripts/expect.yaml
tests/conformance/cases/actions/regression-uses-in-scripts/.github/workflows/scaffold.yml
tests/conformance/cases/ansible/edge-collection-role-playbooks/expect.yaml
tests/conformance/cases/ansible/edge-collection-role-playbooks/acme_collection/galaxy.yml
tests/conformance/cases/ansible/edge-collection-role-playbooks/acme_role/meta/main.yml
tests/conformance/cases/ansible/edge-collection-role-playbooks/collections/requirements.yml
tests/conformance/cases/ansible/edge-collection-role-playbooks/legacy/requirements.yaml
tests/conformance/cases/ansible/edge-collection-role-playbooks/playbooks/site.yml
tests/conformance/cases/ansible/edge-collection-role-playbooks/roles/requirements.yml
tests/conformance/cases/ansible/real-project/authoritative.json
tests/conformance/cases/ansible/real-project/expect.yaml
tests/conformance/cases/ansible/real-project/requirements.yml
tests/conformance/cases/ansible/real-project/collections/ansible_collections/ansible/posix/MANIFEST.json
tests/conformance/cases/ansible/real-project/collections/ansible_collections/community/crypto/MANIFEST.json
tests/conformance/cases/ansible/real-project/collections/ansible_collections/community/docker/MANIFEST.json
tests/conformance/cases/ansible/real-project/collections/ansible_collections/community/general/MANIFEST.json
tests/conformance/cases/ansible/real-project/collections/ansible_collections/community/library_inventory_filtering_v1/MANIFEST.json
tests/conformance/cases/ansible/real-project/roles/geerlingguy.docker/meta/main.yml
tests/conformance/cases/ansible/real-project/roles/geerlingguy.pip/meta/main.yml
tests/conformance/cases/ansible/regression-installed-transitive/expect.yaml
tests/conformance/cases/ansible/regression-installed-transitive/requirements.yml
tests/conformance/cases/ansible/regression-installed-transitive/collections/ansible_collections/community/docker/MANIFEST.json
tests/conformance/cases/ansible/regression-installed-transitive/collections/ansible_collections/community/library_inventory_filtering_v1/MANIFEST.json
tests/conformance/cases/bazel/edge-workspace-extensions-old-lock/expect.yaml
tests/conformance/cases/bazel/real-bzlmod/authoritative.json
tests/conformance/cases/bazel/real-bzlmod/expect.yaml
tests/conformance/cases/bazel/regression-argument-order-and-new-lock/expect.yaml
tests/conformance/cases/cargo/edge-build-script/Cargo.toml
tests/conformance/cases/cargo/edge-build-script/expect.yaml
tests/conformance/cases/cargo/edge-cargo-config/Cargo.toml
tests/conformance/cases/cargo/edge-cargo-config/expect.yaml
tests/conformance/cases/cargo/edge-cargo-config/.cargo/config.toml
tests/conformance/cases/cargo/edge-lock-v1/Cargo.toml
tests/conformance/cases/cargo/edge-lock-v1/expect.yaml
tests/conformance/cases/cargo/real-lock-v4/Cargo.toml
tests/conformance/cases/cargo/real-lock-v4/expect.yaml
tests/conformance/cases/cargo/real-workspace/Cargo.toml
tests/conformance/cases/cargo/real-workspace/authoritative.json
tests/conformance/cases/cargo/real-workspace/expect.yaml
tests/conformance/cases/cargo/real-workspace/crates/app/Cargo.toml
tests/conformance/cases/cargo/real-workspace/crates/util/Cargo.toml
tests/conformance/cases/cocoapods/edge-private-repo-and-spm/expect.yaml
tests/conformance/cases/cocoapods/edge-workspace-projects/expect.yaml
tests/conformance/cases/cocoapods/real-podfile/authoritative.json
tests/conformance/cases/cocoapods/real-podfile/expect.yaml
tests/conformance/cases/cocoapods/regression-subspecs-one-pod/expect.yaml
tests/conformance/cases/composer/edge-monorepo-path-wildcard/composer.json
tests/conformance/cases/composer/edge-monorepo-path-wildcard/expect.yaml
tests/conformance/cases/composer/edge-monorepo-path-wildcard/packages/orders/composer.json
tests/conformance/cases/composer/edge-monorepo-path-wildcard/packages/shared/composer.json
tests/conformance/cases/composer/edge-private-repositories/auth.json
tests/conformance/cases/composer/edge-private-repositories/composer.json
tests/conformance/cases/composer/edge-private-repositories/expect.yaml
tests/conformance/cases/composer/real-application/authoritative.json
tests/conformance/cases/composer/real-application/composer.json
tests/conformance/cases/composer/real-application/expect.yaml
tests/conformance/cases/composer/real-application/packages/acme-util/composer.json
tests/conformance/cases/composer/regression-php-prefixed-names/composer.json
tests/conformance/cases/composer/regression-php-prefixed-names/expect.yaml
tests/conformance/cases/conan/edge-conan1-profiles-remotes/expect.yaml
tests/conformance/cases/conan/edge-conan1-profiles-remotes/remotes.json
tests/conformance/cases/conan/edge-conan1-profiles-remotes/legacy/conanfile.py
tests/conformance/cases/conan/edge-workspace/conanws.yml
tests/conformance/cases/conan/edge-workspace/expect.yaml
tests/conformance/cases/conan/edge-workspace/liba/conanfile.py
tests/conformance/cases/conan/edge-workspace/libb/conanfile.py
tests/conformance/cases/conan/real-conan2/authoritative.json
tests/conformance/cases/conan/real-conan2/conanfile.py
tests/conformance/cases/conan/real-conan2/expect.yaml
tests/conformance/cases/conan/regression-comments-and-cci-versions/conanfile.py
tests/conformance/cases/conan/regression-comments-and-cci-versions/expect.yaml
tests/conformance/cases/conda/edge-recipe-and-partial/expect.yaml
tests/conformance/cases/conda/edge-recipe-and-partial/env/environment.yaml
tests/conformance/cases/conda/edge-recipe-and-partial/recipe/meta.yaml
tests/conformance/cases/conda/edge-yaml-lock-and-sha256-export/conda-lock.yaml
tests/conformance/cases/conda/edge-yaml-lock-and-sha256-export/environment.yml
tests/conformance/cases/conda/edge-yaml-lock-and-sha256-export/expect.yaml
tests/conformance/cases/conda/real-environment/authoritative.json
tests/conformance/cases/conda/real-environment/conda-lock.yml
tests/conformance/cases/conda/real-environment/environment.yml
tests/conformance/cases/conda/real-environment/expect.yaml
tests/conformance/cases/conda/regression-pip-in-lock/conda-lock.yml
tests/conformance/cases/conda/regression-pip-in-lock/environment.yml
tests/conformance/cases/conda/regression-pip-in-lock/expect.yaml
tests/conformance/cases/cran/edge-old-renv-drat-and-local/expect.yaml
tests/conformance/cases/cran/real-renv/authoritative.json
tests/conformance/cases/cran/real-renv/expect.yaml
tests/conformance/cases/cran/real-renv/renv/settings.json
tests/conformance/cases/cran/regression-base-packages/expect.yaml
tests/conformance/cases/gomod/edge-identity/advisories.json
tests/conformance/cases/gomod/edge-identity/expect.yaml
tests/conformance/cases/gomod/edge-pseudo-private/cordon.yaml
tests/conformance/cases/gomod/edge-pseudo-private/expect.yaml
tests/conformance/cases/gomod/real-module/authoritative.json
tests/conformance/cases/gomod/real-module/expect.yaml
tests/conformance/cases/gomod/real-vendored/authoritative.json
tests/conformance/cases/gomod/real-vendored/expect.yaml
tests/conformance/cases/gomod/real-workspace/expect.yaml
tests/conformance/cases/gradle/edge-groovy-forms/expect.yaml
tests/conformance/cases/gradle/real-multiproject/authoritative.json
tests/conformance/cases/gradle/real-multiproject/expect.yaml
tests/conformance/cases/gradle/real-multiproject/gradle/libs.versions.toml
tests/conformance/cases/gradle/regression-comments-and-strings/expect.yaml
tests/conformance/cases/gradle/regression-comments-and-strings/gradle/libs.versions.toml
tests/conformance/cases/hackage/edge-multi-package-project/expect.yaml
tests/conformance/cases/hackage/real-cabal/authoritative.json
tests/conformance/cases/hackage/real-cabal/expect.yaml
tests/conformance/cases/hackage/real-stack/authoritative.json
tests/conformance/cases/hackage/real-stack/expect.yaml
tests/conformance/cases/hackage/real-stack/package.yaml
tests/conformance/cases/hackage/real-stack/stack.yaml
tests/conformance/cases/hackage/regression-old-freeze-and-comments/expect.yaml
tests/conformance/cases/hackage/regression-old-freeze-and-comments/stacked/stack.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/expect.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/legacy/Chart.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/legacy/requirements.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/legacy/charts/audit-agent/Chart.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/legacy/templates/pod.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/umbrella/Chart.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/umbrella/charts/api/Chart.yaml
tests/conformance/cases/helm/edge-v1-named-repo-nested/umbrella/charts/worker/Chart.yaml
tests/conformance/cases/helm/real-chart/authoritative.json
tests/conformance/cases/helm/real-chart/expect.yaml
tests/conformance/cases/helm/real-chart/app/Chart.yaml
tests/conformance/cases/helm/real-chart/app/values.yaml
tests/conformance/cases/helm/real-chart/app/templates/deployment.yaml
tests/conformance/cases/helm/real-chart/common/Chart.yaml
tests/conformance/cases/helm/regression-version-before-repository/Chart.yaml
tests/conformance/cases/helm/regression-version-before-repository/expect.yaml
tests/conformance/cases/hex/edge-private-org-and-old-rebar/expect.yaml
tests/conformance/cases/hex/real-rebar/authoritative.json
tests/conformance/cases/hex/real-rebar/expect.yaml
tests/conformance/cases/hex/real-umbrella/authoritative.json
tests/conformance/cases/hex/real-umbrella/expect.yaml
tests/conformance/cases/hex/regression-aliases-and-git/expect.yaml
tests/conformance/cases/homebrew/edge-bundle-tap-and-lock/Brewfile.lock.json
tests/conformance/cases/homebrew/edge-bundle-tap-and-lock/expect.yaml
tests/conformance/cases/homebrew/real-installed/authoritative.json
tests/conformance/cases/homebrew/real-installed/expect.yaml
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/binutils/2.47/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/ca-certificates/2026-09-25/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/gcc/16.2.0/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/glibc/2.39_1/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/gmp/6.3.0/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/isl/0.28/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/jq/1.8.2/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/libidn2/2.3.8/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/libmpc/1.4.1/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/libpsl/0.23.3/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/libunistring/1.4.2/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/libxcrypt/4.5.2/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/linux-headers@6.8/6.8.12_1/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/lz4/1.10.0/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/mpfr/4.2.2/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/ncurses/6.6/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/oniguruma/6.9.10/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/openssl@4/4.0.3/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/readline/8.3.6/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/sqlite/3.53.4/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/util-linux/2.42.4/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/wget/1.25.0_2/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/xz/5.8.4/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/zlib-ng-compat/2.3.3_1/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-installed/linuxbrew/Cellar/zstd/1.5.7_1/INSTALL_RECEIPT.json
tests/conformance/cases/homebrew/real-taps/expect.yaml
tests/conformance/cases/homebrew/regression-quotes-remotes-and-formulae/expect.yaml
tests/conformance/cases/image/edge-build-sources/compose.yaml
tests/conformance/cases/image/edge-build-sources/expect.yaml
tests/conformance/cases/image/edge-build-sources/observability/compose.yaml
tests/conformance/cases/image/edge-layers-and-history/expect.yaml
tests/conformance/cases/image/real-compose-samples/expect.yaml
tests/conformance/cases/image/real-compose-samples/nginx-golang-mysql/compose.yaml
tests/conformance/cases/image/real-compose-samples/prometheus-grafana/compose.yaml
tests/conformance/cases/image/real-compose-samples/react-express-mongodb/compose.yaml
tests/conformance/cases/image/real-compose-samples/wordpress-mysql/compose.yaml
tests/conformance/cases/image/real-saved-image/expect.yaml
tests/conformance/cases/image/real-sbom-cyclonedx/expect.yaml
tests/conformance/cases/image/real-sbom-cyclonedx/sbom.cdx.json
tests/conformance/cases/image/real-sbom-spdx/expect.yaml
tests/conformance/cases/image/real-sbom-spdx/sbom.spdx.json
tests/conformance/cases/image/regression-stages-arguments-and-pins/compose.yaml
tests/conformance/cases/image/regression-stages-arguments-and-pins/expect.yaml
tests/conformance/cases/julia/edge-workspace-and-format-1/JuliaManifest.toml
tests/conformance/cases/julia/edge-workspace-and-format-1/Project.toml
tests/conformance/cases/julia/edge-workspace-and-format-1/expect.yaml
tests/conformance/cases/julia/edge-workspace-and-format-1/docs/Project.toml
tests/conformance/cases/julia/edge-workspace-and-format-1/legacy/Manifest.toml
tests/conformance/cases/julia/edge-workspace-and-format-1/legacy/Project.toml
tests/conformance/cases/julia/edge-workspace-and-format-1/test/Project.toml
tests/conformance/cases/julia/real-project/Artifacts.toml
tests/conformance/cases/julia/real-project/Manifest.toml
tests/conformance/cases/julia/real-project/Project.toml
tests/conformance/cases/julia/real-project/authoritative.json
tests/conformance/cases/julia/real-project/expect.yaml
tests/conformance/cases/julia/real-project/LocalUtils/Project.toml
tests/conformance/cases/julia/regression-same-name-two-uuids/Manifest.toml
tests/conformance/cases/julia/regression-same-name-two-uuids/Project.toml
tests/conformance/cases/julia/regression-same-name-two-uuids/expect.yaml
tests/conformance/cases/maven/adversarial-doctype/expect.yaml
tests/conformance/cases/maven/edge-snapshots-repositories/expect.yaml
tests/conformance/cases/maven/real-effective-graph/authoritative.json
tests/conformance/cases/maven/real-effective-graph/expect.yaml
tests/conformance/cases/maven/real-multimodule/authoritative.json
tests/conformance/cases/maven/real-multimodule/expect.yaml
tests/conformance/cases/maven/regression-exclusion-coordinates/expect.yaml
tests/conformance/cases/nix/edge-fetchers-channels-and-forms/expect.yaml
tests/conformance/cases/nix/real-flake/authoritative.json
tests/conformance/cases/nix/real-flake/expect.yaml
tests/conformance/cases/nix/regression-follows-and-duplicate-nixpkgs/expect.yaml
tests/conformance/cases/npm/edge-bun-lockb/expect.yaml
tests/conformance/cases/npm/edge-bun-lockb/package.json
tests/conformance/cases/npm/edge-bundled-peer/expect.yaml
tests/conformance/cases/npm/edge-bundled-peer/package-lock.json
tests/conformance/cases/npm/edge-bundled-peer/package.json
tests/conformance/cases/npm/edge-deno-jsonc/expect.yaml
tests/conformance/cases/npm/real-bun/expect.yaml
tests/conformance/cases/npm/real-bun/package.json
tests/conformance/cases/npm/real-bun/packages/util/package.json
tests/conformance/cases/npm/real-deno/deno.json
tests/conformance/cases/npm/real-deno/expect.yaml
tests/conformance/cases/npm/real-npm-nested/advisories.json
tests/conformance/cases/npm/real-npm-nested/authoritative.json
tests/conformance/cases/npm/real-npm-nested/expect.yaml
tests/conformance/cases/npm/real-npm-nested/package-lock.json
tests/conformance/cases/npm/real-npm-nested/package.json
tests/conformance/cases/npm/real-npm-shrinkwrap/authoritative.json
tests/conformance/cases/npm/real-npm-shrinkwrap/expect.yaml
tests/conformance/cases/npm/real-npm-shrinkwrap/npm-shrinkwrap.json
tests/conformance/cases/npm/real-npm-shrinkwrap/package.json
tests/conformance/cases/npm/real-npm-shrinkwrap/packages/util/package.json
tests/conformance/cases/npm/real-npm-v1/authoritative.json
tests/conformance/cases/npm/real-npm-v1/expect.yaml
tests/conformance/cases/npm/real-npm-v1/package-lock.json
tests/conformance/cases/npm/real-npm-v1/package.json
tests/conformance/cases/npm/real-npm-v2/authoritative.json
tests/conformance/cases/npm/real-npm-v2/expect.yaml
tests/conformance/cases/npm/real-npm-v2/package-lock.json
tests/conformance/cases/npm/real-npm-v2/package.json
tests/conformance/cases/npm/real-npm-v3/authoritative.json
tests/conformance/cases/npm/real-npm-v3/expect.yaml
tests/conformance/cases/npm/real-npm-v3/package-lock.json
tests/conformance/cases/npm/real-npm-v3/package.json
tests/conformance/cases/npm/real-npm-v3/packages/util/package.json
tests/conformance/cases/npm/real-pnpm-v9/authoritative.json
tests/conformance/cases/npm/real-pnpm-v9/expect.yaml
tests/conformance/cases/npm/real-pnpm-v9/package.json
tests/conformance/cases/npm/real-pnpm-v9/pnpm-lock.yaml
tests/conformance/cases/npm/real-pnpm-v9/pnpm-workspace.yaml
tests/conformance/cases/npm/real-pnpm-v9/packages/util/package.json
tests/conformance/cases/npm/real-yarn-berry/authoritative.json
tests/conformance/cases/npm/real-yarn-berry/expect.yaml
tests/conformance/cases/npm/real-yarn-berry/package.json
tests/conformance/cases/npm/real-yarn-berry/packages/util/package.json
tests/conformance/cases/npm/real-yarn-classic/authoritative.json
tests/conformance/cases/npm/real-yarn-classic/expect.yaml
tests/conformance/cases/npm/real-yarn-classic/package.json
tests/conformance/cases/npm/real-yarn-classic/packages/util/package.json
tests/conformance/cases/nuget/adversarial-entity-project/expect.yaml
tests/conformance/cases/nuget/edge-legacy-and-options/expect.yaml
tests/conformance/cases/nuget/real-central-management/authoritative.json
tests/conformance/cases/nuget/real-central-management/expect.yaml
tests/conformance/cases/nuget/real-central-management/src/App/packages.lock.json
tests/conformance/cases/nuget/real-central-management/src/App/obj/project.assets.json
tests/conformance/cases/nuget/real-central-management/src/Core/packages.lock.json
tests/conformance/cases/nuget/regression-commented-references/expect.yaml
tests/conformance/cases/opam/edge-dune-lock-and-legacy/expect.yaml
tests/conformance/cases/opam/edge-dune-workspace/expect.yaml
tests/conformance/cases/opam/real-dune-project/authoritative.json
tests/conformance/cases/opam/real-dune-project/expect.yaml
tests/conformance/cases/opam/regression-jane-street-versions/expect.yaml
tests/conformance/cases/pub/edge-flutter-sdk-and-hosted/expect.yaml
tests/conformance/cases/pub/edge-flutter-sdk-and-hosted/pubspec.yaml
tests/conformance/cases/pub/real-workspace/authoritative.json
tests/conformance/cases/pub/real-workspace/expect.yaml
tests/conformance/cases/pub/real-workspace/pubspec.yaml
tests/conformance/cases/pub/real-workspace/.dart_tool/package_config.json
tests/conformance/cases/pub/real-workspace/packages/app/pubspec.yaml
tests/conformance/cases/pub/real-workspace/packages/core/pubspec.yaml
tests/conformance/cases/pub/regression-overrides/expect.yaml
tests/conformance/cases/pub/regression-overrides/pubspec.yaml
tests/conformance/cases/pypi/edge-git-sources-and-submodules/expect.yaml
tests/conformance/cases/pypi/edge-identity/advisories.json
tests/conformance/cases/pypi/edge-identity/expect.yaml
tests/conformance/cases/pypi/edge-pep440/advisories.json
tests/conformance/cases/pypi/edge-pep440/expect.yaml
tests/conformance/cases/pypi/edge-requirements-options/expect.yaml
tests/conformance/cases/pypi/edge-requirements-options/libs/internal-tool/pyproject.toml
tests/conformance/cases/pypi/edge-setup-files/expect.yaml
tests/conformance/cases/pypi/edge-setup-files/setup.py
tests/conformance/cases/pypi/real-pdm/authoritative.json
tests/conformance/cases/pypi/real-pdm/expect.yaml
tests/conformance/cases/pypi/real-pdm/pyproject.toml
tests/conformance/cases/pypi/real-pip-tools/authoritative.json
tests/conformance/cases/pypi/real-pip-tools/expect.yaml
tests/conformance/cases/pypi/real-pipenv/authoritative.json
tests/conformance/cases/pypi/real-pipenv/expect.yaml
tests/conformance/cases/pypi/real-poetry/authoritative.json
tests/conformance/cases/pypi/real-poetry/expect.yaml
tests/conformance/cases/pypi/real-poetry/pyproject.toml
tests/conformance/cases/pypi/real-uv/authoritative.json
tests/conformance/cases/pypi/real-uv/expect.yaml
tests/conformance/cases/pypi/real-uv/pyproject.toml
tests/conformance/cases/pypi/real-uv-workspace/authoritative.json
tests/conformance/cases/pypi/real-uv-workspace/expect.yaml
tests/conformance/cases/pypi/real-uv-workspace/pyproject.toml
tests/conformance/cases/pypi/real-uv-workspace/packages/api/pyproject.toml
tests/conformance/cases/pypi/real-uv-workspace/packages/core/pyproject.toml
tests/conformance/cases/pypi/regression-requirements-dir/authoritative.json
tests/conformance/cases/pypi/regression-requirements-dir/expect.yaml
tests/conformance/cases/rubygems/edge-gems-rb-and-sources/expect.yaml
tests/conformance/cases/rubygems/edge-monorepo-engines/expect.yaml
tests/conformance/cases/rubygems/real-bundler/authoritative.json
tests/conformance/cases/rubygems/real-bundler/expect.yaml
tests/conformance/cases/rubygems/regression-platform-versions/expect.yaml
tests/conformance/cases/swift/edge-binaries-registry-and-formats/expect.yaml
tests/conformance/cases/swift/real-package/authoritative.json
tests/conformance/cases/swift/real-package/expect.yaml
tests/conformance/cases/swift/regression-commented-and-identity/expect.yaml
tests/conformance/cases/terraform/edge-sources-json-and-iac/expect.yaml
tests/conformance/cases/terraform/edge-sources-json-and-iac/main.tf.json
tests/conformance/cases/terraform/real-root-module/authoritative.json
tests/conformance/cases/terraform/real-root-module/expect.yaml
tests/conformance/cases/terraform/regression-configuration-without-lock/expect.yaml
tests/conformance/cases/vcpkg/edge-registries-lock-and-projects/expect.yaml
tests/conformance/cases/vcpkg/edge-registries-lock-and-projects/vcpkg-lock.json
tests/conformance/cases/vcpkg/edge-registries-lock-and-projects/vcpkg.json
tests/conformance/cases/vcpkg/edge-registries-lock-and-projects/tools/vcpkg.json
tests/conformance/cases/vcpkg/real-manifest/authoritative.json
tests/conformance/cases/vcpkg/real-manifest/expect.yaml
tests/conformance/cases/vcpkg/real-manifest/vcpkg-configuration.json
tests/conformance/cases/vcpkg/real-manifest/vcpkg.json
tests/conformance/cases/vcpkg/real-manifest/ports/acme-utils/vcpkg.json
tests/conformance/cases/vcpkg/regression-feature-dependencies/expect.yaml
tests/conformance/cases/vcpkg/regression-feature-dependencies/vcpkg.json
tests/conformance/generate/bazel_inventory.py
tests/conformance/generate/hackage_inventory.py
tests/conformance/generate/homebrew_inventory.py
tests/conformance/generate/image_edge.py
tests/conformance/generate/nix_inventory.py
tests/conformance/generate/terraform_inventory.py
tests/conformance/generate/yara_evaluate.py
tests/conformance/generate/yara_select.py
tests/conformance/generate/.homebrew-reference/firefox.json
tests/conformance/generate/.homebrew-reference/jq.json
tests/conformance/generate/.homebrew-reference/wget.json
tests/e2e/test_cli.py
tests/fuzz/test_parsers.py
tests/integration/test_archives_in_directories.py
tests/integration/test_audit_criticals.py
tests/integration/test_audit_high.py
tests/integration/test_audit_log.py
tests/integration/test_baseline.py
tests/integration/test_blinding.py
tests/integration/test_bundle.py
tests/integration/test_container_images.py
tests/integration/test_corpus.py
tests/integration/test_detector_liveness.py
tests/integration/test_ecosystem_parity.py
tests/integration/test_git_modes.py
tests/integration/test_hostile.py
tests/integration/test_how_a_file_was_written.py
tests/integration/test_leakage.py
tests/integration/test_license_detector.py
tests/integration/test_ordinary_formatting.py
tests/integration/test_policy_distribution.py
tests/integration/test_review_advisories.py
tests/integration/test_review_commands.py
tests/integration/test_review_critical.py
tests/integration/test_review_detection.py
tests/integration/test_review_medium.py
tests/integration/test_review_rules.py
tests/integration/test_rule_baselines.py
tests/perf/test_budgets.py
tests/unit/test_adversarial_package.py
tests/unit/test_advisory_coverage.py
tests/unit/test_agent_config.py
tests/unit/test_agent_intent.py
tests/unit/test_agent_judge.py
tests/unit/test_agents.py
tests/unit/test_aibom.py
tests/unit/test_archive_bombs_are_refused_while_streaming.py
tests/unit/test_ast_providers.py
tests/unit/test_attest.py
tests/unit/test_attestation.py
tests/unit/test_binary.py
tests/unit/test_binary_facts.py
tests/unit/test_binary_imports.py
tests/unit/test_binmeta.py
tests/unit/test_build_advisory_db.py
tests/unit/test_bun_and_deno_locks.py
tests/unit/test_cache.py
tests/unit/test_ci_attacks.py
tests/unit/test_ci_signing_identity.py
tests/unit/test_ci_templates.py
tests/unit/test_clamav.py
tests/unit/test_class_based_architecture.py
tests/unit/test_cloud.py
tests/unit/test_comments.py
tests/unit/test_commercial_bench.py
tests/unit/test_composite_scope.py
tests/unit/test_config.py
tests/unit/test_content_walker.py
tests/unit/test_coverage_matrix.py
tests/unit/test_coverage_notices.py
tests/unit/test_cvss.py
tests/unit/test_datayaml.py
tests/unit/test_dbsync.py
tests/unit/test_dependency_domain2.py
tests/unit/test_dependency_review.py
tests/unit/test_detectors.py
tests/unit/test_device.py
tests/unit/test_distrodb.py
tests/unit/test_dockerfile_bases.py
tests/unit/test_documentation.py
tests/unit/test_documentation_counts.py
tests/unit/test_ecosystem_depth.py
tests/unit/test_ecosystem_matrix.py
tests/unit/test_ecosystems.py
tests/unit/test_ed25519.py
tests/unit/test_embedded.py
tests/unit/test_engine.py
tests/unit/test_enterprise_noise.py
tests/unit/test_epss.py
tests/unit/test_exploited.py
tests/unit/test_extension_and_repository_coverage.py
tests/unit/test_feed.py
tests/unit/test_feed_delta_is_bounded.py
tests/unit/test_finding_locations.py
tests/unit/test_fixer.py
tests/unit/test_formats.py
tests/unit/test_function_reachability.py
tests/unit/test_git_source.py
tests/unit/test_gitlab_and_vex.py
tests/unit/test_glob_index_bounds.py
tests/unit/test_guard.py
tests/unit/test_help_screens.py
tests/unit/test_host_scan.py
tests/unit/test_iac_integrity.py
tests/unit/test_iac_policies.py
tests/unit/test_image_ecosystem.py
tests/unit/test_image_package_sources.py
tests/unit/test_image_parity.py
tests/unit/test_images.py
tests/unit/test_incoming_code.py
tests/unit/test_infra_ecosystems.py
tests/unit/test_infrastructure_noise.py
tests/unit/test_licenses.py
tests/unit/test_live_mcp.py
tests/unit/test_lockfile_parsers.py
tests/unit/test_lockfile_scale_regressions.py
tests/unit/test_manifest_confusion.py
tests/unit/test_models.py
tests/unit/test_more_registries.py
tests/unit/test_named_secret_flow.py
tests/unit/test_native_language_packs.py
tests/unit/test_new_ecosystems.py
tests/unit/test_notify.py
tests/unit/test_osv_delta.py
tests/unit/test_osv_import.py
tests/unit/test_package_commands.py
tests/unit/test_package_intel.py
tests/unit/test_parallel.py
tests/unit/test_pattern_safety.py
tests/unit/test_pin_bump.py
tests/unit/test_policy_pins.py
tests/unit/test_private_registries.py
tests/unit/test_progress.py
tests/unit/test_provenance.py
tests/unit/test_providers.py
tests/unit/test_pyast.py
tests/unit/test_ranges.py
tests/unit/test_reachability.py
tests/unit/test_real_world_noise.py
tests/unit/test_records_exclude.py
tests/unit/test_redact.py
tests/unit/test_refresh_movement.py
tests/unit/test_registry_detector.py
tests/unit/test_release_artefacts.py
tests/unit/test_release_diff.py
tests/unit/test_release_notes.py
tests/unit/test_reporters.py
tests/unit/test_review_defects.py
tests/unit/test_ruby_php_behaviour.py
tests/unit/test_rubysec.py
tests/unit/test_rule_claims.py
tests/unit/test_rule_documentation.py
tests/unit/test_rules.py
tests/unit/test_runner.py
tests/unit/test_safexml.py
tests/unit/test_sandbox.py
tests/unit/test_sandbox_canaries.py
tests/unit/test_sandbox_depth.py
tests/unit/test_sbom.py
tests/unit/test_sbom_generate.py
tests/unit/test_scale_regressions.py
tests/unit/test_scoring_policy.py
tests/unit/test_script_language_packs.py
tests/unit/test_secret_history.py
tests/unit/test_secrets_assembled.py
tests/unit/test_self_scan_scope.py
tests/unit/test_signing_keys.py
tests/unit/test_slopsquat.py
tests/unit/test_streamed_jar.py
tests/unit/test_submodules_and_sbom_ingest.py
tests/unit/test_taxonomy.py
tests/unit/test_trees.py
tests/unit/test_tutorial_reference.py
tests/unit/test_tutorials.py
tests/unit/test_unexercised_rules.py
tests/unit/test_vcs.py
tests/unit/test_versions.py
tests/unit/test_vex_csaf.py
tests/unit/test_vex_input.py
tests/unit/test_vscode_extension.py
tests/unit/test_workload_images.py
tests/unit/test_yara_pack.py
tests/unit/test_zip_views_agree.py