commit log
- Extract Semgrep JavaScript decorator scanners 360f79d Jaime Fournier
- Extract Semgrep TypeScript decorator scanners 3ae0adb Jaime Fournier
- Extract Semgrep JavaScript vardef scanner d447e02 Jaime Fournier
- Extract Semgrep XML and YAML scanner helpers 6237e25 Jaime Fournier
- Extract Semgrep generic text scanner 26a9d3f Jaime Fournier
- Extract Semgrep regex scanning and literal utilities c557810 Jaime Fournier
- Extract Semgrep finding builder helpers 97af96e Jaime Fournier
- Extract Semgrep regex support helpers 0424b3a Jaime Fournier
- Extract Semgrep finding utility helpers 2191eb1 Jaime Fournier
- Extract Semgrep source offset utilities f0efb00 Jaime Fournier
- Add upstream oracle baselines and split scan planning 0d692d2 Jaime Fournier
- Remove obsolete Semgrep port plan d9526de Jaime Fournier
- Document Semgrep Jerboa implementation plan c7d0290 Jaime Fournier
- Merge measurement scaffold disabled by default 8a66067 Jaime Fournier
- Merge dart structural migration 30c2df8 Jaime Fournier
- add stuff 4a76343 Jaime Fournier
- Merge: typed-metavariable (Type $VAR) syntax for Java 0ca20f2 Jaime Fournier
- Structural matcher: semgrep typed-metavariable syntax `(Type $VAR)` for Java 8240b87 Jaime Fournier
- Document statement-pattern / best_fit_sink11 investigation + stale-build lesson dc71a2b Jaime Fournier
- Document propagated-source argument-taint core-engine wall (3 failed experiments) 1ab0dcc Jaime Fournier
- Merge: getter/setter field-sensitivity 1e0d754 Jaime Fournier
- Structural taint engine: getter/setter field-sensitivity 9fac12b Jaime Fournier
- Merge: boolean value-analysis (completes assume_safe_booleans1) 0045080 Jaime Fournier
- Structural taint engine: boolean value-analysis (assume_safe_booleans) f2e15d6 Jaime Fournier
- Merge: flow-sensitive numeric var inference (completes assume_safe_numbers1) 6ca4373 Jaime Fournier
- Structural taint engine: flow-sensitive numeric var inference (assume-safe step 3c) 16785e8 Jaime Fournier
- Merge: argument-taint (call args / binary-expr operands) bbb9d18 Jaime Fournier
- Structural taint engine: argument-taint (call args / binary-expr operands) bc6a4fd Jaime Fournier
- Refine argument-taint roadmap: origin-guard works, propagator 1->0 is next bug a2a8aa2 Jaime Fournier
- Merge: numeric value-analysis (assume-safe step 3) 0e959ff Jaime Fournier
- Structural taint engine: numeric value-analysis (assume-safe step 3) 35f6468 Jaime Fournier
- Document argument-taint attempt + lesson (syntactic token-in-arg too broad) f4a743a Jaime Fournier
- Merge: receiver-taint base-flow (method calls / field chains) 591bfbe Jaime Fournier
- Structural taint engine: receiver-taint base-flow (method calls / field chains) 53d27cb Jaime Fournier
- Merge: numeric-typed param source classification (assume-safe step 2) 180fd6e Jaime Fournier
- Structural taint engine: numeric-typed param source classification (assume-safe step 2) 4f9f274 Jaime Fournier
- Merge: per-method scope-aware taint reachability 62e1509 Jaime Fournier
- Handoff: per-method scope-aware reachability built (taint engine step 1) 2818fc6 Jaime Fournier
- Structural taint engine: per-method scope-aware reachability b6f9e3c Jaime Fournier
- Handoff: scope-aware reachability is the next taint-engine blocker (verified) 521575c Jaime Fournier
- Merge: java parameter-pattern preprocessor for param-source taint matching b58b22f Jaime Fournier
- Structural taint engine: java parameter-pattern preprocessor (param-sources) 0ad2808 Jaime Fournier
- Handoff: structural taint engine progress (foundation + field/foreach propagators) 16e7c9d Jaime Fournier
- Merge: drop java documentbuilderfactory taint overfit (general engine covers it) 7a51617 Jaime Fournier
- Structural taint engine: drop documentbuilderfactory overfit (general engine covers it) a1f280e Jaime Fournier
- Merge: structural enhanced-for taint propagator (drop java iterator overfit) a50ac58 Jaime Fournier
- Structural taint engine: enhanced-for loop-variable propagator (drop iterator overfit) e317eaa Jaime Fournier
- Merge: structural taint field_declaration propagator (drop java tainting overfit) fcbcb13 Jaime Fournier
- Structural taint engine: field_declaration propagator bridge (drop `tainting` overfit) ba4f63e Jaime Fournier
- Merge: structural taint engine foundation (java bare-expr source scaffolding) 5e82247 Jaime Fournier