forkless/strix
1
0
Fork 0
mirror of https://github.com/usestrix/strix.git synced 2026-08-18 09:49:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

reporting: require the source-to-sink trace in reachability evidence, not just CVSS reasoning

Browse Source
This commit is contained in:
Ahmed Allam
2026-08-17 09:11:59 +00:00
parent 84163e8e3b
commit 256df30d28
3 changed files with 43 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_reporting_fields.py
+1
View File
@@ -887,6 +887,7 @@ def test_dep_tool_exposes_contextual_cvss_params() -> None:
):
assert field in dep_props
assert "source-to-sink" in dep_props["contextual_cvss_metrics"]["description"].lower()
assert "source-to-sink" in dep_props["reachability_evidence"]["description"].lower()
assert "file:line" in dep_props["contextual_cvss_reasoning"]["description"].lower()