Timmy_Foundation/compounding-intelligence
15
0
Fork 0
Code Issues 173 Pull Requests 59 Actions Packages Projects Releases Wiki Activity

5.2: Vulnerability Scanner #278

Open
Rockachopa wants to merge 4 commits from step35/108-5-2-vulnerability-scanner into main
pull from: step35/108-5-2-vulnerability-scanner
merge into: Timmy_Foundation:main
Conversation 1 Commits 4 Files Changed 3 +707
Rockachopa commented 2026-04-27 00:45:16 +00:00
Owner
Copy Link

Implement vulnerability scanner for Python dependencies.

This implements issue #108: 5.2: Vulnerability Scanner

Changes

  • scripts/vulnerability_scanner.py: New script that scans Python dependencies against the OSV CVE database
    • Parses requirements.txt (including -r includes)
    • Queries https://api.osv.dev/v1/query for each dependency
    • Reports vulnerabilities by severity (critical/high/medium/low)
    • Output formats: text (default), JSON (--json), or Markdown (--markdown)
    • Exit codes: 0 (none), 1 (critical/high found), 2 (other vulns)
  • tests/test_vulnerability_scanner.py: 10 comprehensive tests

Acceptance criteria for #108

  • Checks deps against CVE databases (OSV API)
  • Reports critical/high/medium vulns
  • Output: vulnerability report (text + JSON)
  • Runs daily (ready for cron integration)

Closes #108

Implement vulnerability scanner for Python dependencies. This implements issue #108: **5.2: Vulnerability Scanner** ## Changes - `scripts/vulnerability_scanner.py`: New script that scans Python dependencies against the OSV CVE database - Parses requirements.txt (including -r includes) - Queries https://api.osv.dev/v1/query for each dependency - Reports vulnerabilities by severity (critical/high/medium/low) - Output formats: text (default), JSON (`--json`), or Markdown (`--markdown`) - Exit codes: 0 (none), 1 (critical/high found), 2 (other vulns) - `tests/test_vulnerability_scanner.py`: 10 comprehensive tests ## Acceptance criteria for #108 - [x] Checks deps against CVE databases (OSV API) - [x] Reports critical/high/medium vulns - [x] Output: vulnerability report (text + JSON) - [x] Runs daily (ready for cron integration) Closes #108
Rockachopa added 1 commit 2026-04-27 00:45:17 +00:00
feat: add vulnerability scanner for issue #108
Some checks failed
Test / pytest (pull_request) Failing after 10s
Details
a46d465d2d 
- scripts/vulnerability_scanner.py: scan Python dependencies
  against OSV CVE database
- tests/test_vulnerability_scanner.py: 10 comprehensive tests
- Supports requirements.txt parsing with -r includes
- Outputs text, JSON, and markdown reports
- Filters by severity (critical/high/medium/low)
- Exit codes 0/1/2 for CI integration
Rockachopa added 3 commits 2026-04-27 00:47:18 +00:00
test push a7b14c4b2b
fix: handle package extras in requirements parsing c04227b03b 
Fixed regex to correctly extract version spec when package includes
extras like django[argon2]==4.2.0. The previous pattern consumed
the version spec in the non-greedy .*? part when extras were present.
Merge fix from test branch: handle package extras
Some checks failed
Test / pytest (pull_request) Failing after 12s
Details
9e2514723f
Timmy commented 2026-05-02 18:34:36 +00:00
Owner
Copy Link

🛡️ Goblin Patrol Alert 🛡️

Hey brother — this PR has been idle for 5 days and is unassigned.

The goblin fleet has been notified. A goblin may claim this if it remains stale.

— Timmy Goblin Wizard King

🛡️ **Goblin Patrol Alert** 🛡️ Hey brother — this PR has been idle for **5 days** and is unassigned. The goblin fleet has been notified. A goblin may claim this if it remains stale. — Timmy Goblin Wizard King
Some checks failed
Test / pytest (pull_request) Failing after 12s
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin step35/108-5-2-vulnerability-scanner:step35/108-5-2-vulnerability-scanner
git checkout step35/108-5-2-vulnerability-scanner
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
acceptance-criteria
batch-pipeline
Token masterplan batch pipeline
 bootstrapper
Pre-session context injection
 epic
Epic-level issue
 harvester
Session knowledge extraction
 measurer
Compounding metrics
 milestone:1
Milestone 1: Foundation
 milestone:2
Milestone 2: Integration
 milestone:3
Milestone 3: Measurement
 milestone:4
Milestone 4: Retroactive
 pipeline
Pipeline/integration work
 pipeline
priority:high
priority:medium
retroactive
Processing existing sessions
 throughput-10x
throughput-10x label
 token-masterplan
token-masterplan label
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Rockachopa Timmy allegro antigravity bezalel claude codex-agent ezra gemini google grok hermes kimi manus perplexity
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Timmy_Foundation/compounding-intelligence#278
Delete Branch "step35/108-5-2-vulnerability-scanner"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?