v0.2.64: engine reliability (FP fix + ReDoS fix + SARIF helpUri)#53
Merged
Conversation
… fix + SARIF helpUri - Eliminated false positives on clean code (86 -> 0): pruned generic words leaking from KEYWORD_DENYLIST. Suite green (216 passed, 7 xfailed), zero recall lost. - Fixed ReDoS/scanner hang at root: 31 anchored whole-doc classifier regexes now use .match() not .search() (O(n^2) -> linear). decoder.py 117s -> 0.30s. - Gated ROT13/reverse/shape enrichment to <=2000 chars. - Fixed SARIF helpUri: category->chapter deep-links + /patterns hub fallback (unblocks GitHub Action). - Pattern library unchanged: 1019 patterns / 65 categories / 7350 keywords. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reliability release. Eliminates clean-code false positives (86->0), fixes the ReDoS/scanner hang at root (anchored regexes use .match(); decoder.py 117s->0.30s), gates enrichment to <=2000 chars, and fixes SARIF helpUri deep-links. Pattern library unchanged (1019/65/7350). Suite: 216 passed, 7 xfailed. PyPI 0.2.64 already live.
Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com