Skip to content

Feature/yaml refine 8 #192

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
squid-protocol merged 3 commits into from
Jul 12, 2026
Merged

Feature/yaml refine 8 #192

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ca08f33
fix(security): zero out hit_vector array for ignored SARIF paths to p…
squid-protocol Jul 12, 2026
066b7c5
fix(security): obliterate network metrics and domain context for igno…
squid-protocol Jul 12, 2026
0b2d001
Merge branch 'main' into feature/yaml_refine_8
squid-protocol Jul 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 2 additions & 13 deletions gitgalaxy/galaxyscope.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -909,30 +909,19 @@ def execute_pipeline(self, output_file: str = "galaxy.json"):
path_excluded = any(p in file_path for p in ignored_paths)

if path_excluded:
# COMPLETE PATH EXCLUSION: Wipe all threat indicators so SARIF ignores this file
file_data["equations"] = {}
file_data["is_ml_threat"] = False

# 1. NEW: Wipe the numeric hit vector (The SARIF Recorder's primary data source)
if "hit_vector" in file_data and isinstance(file_data["hit_vector"], list):
file_data["hit_vector"] = [0] * len(file_data["hit_vector"])

# 2. Zero out the risk vector
if "risk_vector" in file_data and isinstance(file_data["risk_vector"], list):
file_data["risk_vector"] = [0.0] * len(file_data["risk_vector"])

# 3. Wipe all telemetry strings and contexts
if "telemetry" in file_data:
file_data["telemetry"]["threat_snippets"] = {}
if "domain_context" in file_data["telemetry"]:
file_data["telemetry"]["domain_context"].pop("warning", None)
file_data["telemetry"]["domain_context"].pop("alert", None)
file_data["telemetry"]["domain_context"].pop("AI Threat Class", None)

if "metadata" in file_data:
file_data["metadata"].pop("warning", None)
file_data["metadata"].pop("alert", None)

file_data["telemetry"]["network_metrics"] = {}
file_data["telemetry"]["domain_context"] = {}
continue

mitigs = file_data.get("mitigations", [])
Expand Down
Loading