yoni 42df95b681 fix(llm): write credential store via mkstemp to defeat symlink attacks ...

Third review pass (security): the store temp file used a predictable
subscription-auth.json.tmp name, so a local attacker could pre-plant a symlink
there and divert the OAuth token write. Create it with tempfile.mkstemp
(random name, mode 0600, no symlink following) in the same directory, then
atomically rename over the target.

2026-07-29 18:00:36 +00:00

..

__init__.py

Add configurable token / cost usage limits (#576)

2026-06-22 11:17:08 -04:00

test_agent_factory_shell.py

feat(context): spill oversized tool output into the sandbox workspace (#882)

2026-07-26 14:42:22 -07:00

test_agent_tool_registration.py

Allow scan agent tool registration (#733)

2026-07-11 23:58:51 -04:00

test_auth_cli.py

fix(llm): make logout-all atomic and persist provider in run record

2026-07-29 17:48:33 +00:00

test_cli_target_list.py

Add target list CLI option (#711)

2026-07-06 23:33:08 -04:00

test_codex_auth.py

fix(tls): replace raw urllib with requests for external HTTPS calls (frozen-build cert failures) (#903)

2026-07-27 12:34:26 -07:00

test_codex_streaming.py

Sign in with a ChatGPT subscription for inference (#854)

2026-07-24 15:41:19 -07:00

test_compaction.py

feat(context): model-aware conversation compaction for long scans (#881)

2026-07-26 14:39:41 -07:00

test_config_loader.py

refactor(context): trim verbose comments

2026-07-26 14:38:12 -07:00

test_context_budget.py

feat(context): model-aware conversation compaction for long scans (#881)

2026-07-26 14:39:41 -07:00

test_cost_tracking.py

fix(report): restore cost tracking for OpenRouter and other LiteLLM-routed models (#801)

2026-07-17 13:38:23 -07:00

test_dedupe_model.py

feat(dedupe): add dedicated deduplication model (#823)

2026-07-25 06:29:39 -07:00

test_docker_client_delete.py

fix(runtime): swallow torn-down docker socket in sandbox delete() (#721)

2026-07-10 00:13:35 -04:00

test_e2e_budget_lifecycle.py

feat(runtime): graduated wrap-up warnings, budget reserve, and interactive budget pause/continue (#893)

2026-07-26 20:37:14 -07:00

test_execution_transient_retry.py

fix(runtime): retry transient mid-stream provider errors instead of crashing the scan (#891)

2026-07-26 16:23:31 -07:00

test_execution.py

fix: recoverable guardrail blocks and decoupled crash-notify (#919)

2026-07-27 16:28:48 -07:00

test_fenced_code.py

refactor: move strix/viewer under strix/interface

2026-07-26 13:11:14 -07:00

test_grok_auth.py

feat(llm): opt-in Grok/SuperGrok subscription OAuth

2026-07-28 21:44:43 +00:00

test_grok_routing.py

fix(llm): make logout-all atomic and persist provider in run record

2026-07-29 17:48:33 +00:00

test_hooks.py

feat(runtime): graduated wrap-up warnings, budget reserve, and interactive budget pause/continue (#893)

2026-07-26 20:37:14 -07:00

test_inputs.py

feat(llm): enable Bedrock/Anthropic prompt caching for Claude models (#772)

2026-07-26 17:12:57 -07:00

test_install_script.py

Add Linux ARM64 standalone release support (#886)

2026-07-26 16:27:02 -07:00

test_list_reports.py

feat(reporting): add read-only list_reports + get_report tools (#889)

2026-07-26 14:05:53 -07:00

test_local_dir_staging.py

runtime: resolve staged local-dir path to avoid symlink rejection on macOS (#857)

2026-07-25 05:45:31 -07:00

test_local_sources.py

Add target list CLI option (#711)

2026-07-06 23:33:08 -04:00

test_model_retry.py

Sign in with a ChatGPT subscription for inference (#854)

2026-07-24 15:41:19 -07:00

test_models.py

Sign in with a ChatGPT subscription for inference (#854)

2026-07-24 15:41:19 -07:00

test_notes.py

feat(reporting): add read-only list_reports + get_report tools (#889)

2026-07-26 14:05:53 -07:00

test_optional_deps.py

fix(providers): declare bedrock + vertex extras and add provider import-error hints (#588)

2026-07-07 10:24:49 -04:00

test_output_store.py

feat(context): spill oversized tool output into the sandbox workspace (#882)

2026-07-26 14:42:22 -07:00

test_provider_hints.py

fix(providers): match google submodule imports and walk full exception chain

2026-07-10 07:21:47 -07:00

test_proxy_client.py

strip transfer encoding (#820)

2026-07-20 21:56:34 -04:00

test_proxy_renderer.py

fix(tui): show 'more content available' for view_request over 15 lines (#687)

2026-07-06 03:50:02 -07:00

test_report_pdf.py

refactor: move strix/viewer under strix/interface

2026-07-26 13:11:14 -07:00

test_report_writer.py

fix(reports): safe-fence markdown PoC export and share fence helpers

2026-07-25 13:09:57 -07:00

test_reporting_fields.py

fix(reporting): require advisory_cvss for dependency findings + add SCA TUI renderer (#753)

2026-07-12 17:31:49 -07:00

test_runner_rate_limit.py

feat(llm): enable Bedrock/Anthropic prompt caching for Claude models (#772)

2026-07-26 17:12:57 -07:00

test_runner_root_prompt.py

feat(llm): enable Bedrock/Anthropic prompt caching for Claude models (#772)

2026-07-26 17:12:57 -07:00

test_sarif_stride.py

feat(report): tag SARIF rules with STRIDE legs derived from CWE (#708)

2026-07-06 21:19:53 -04:00

test_sarif.py

feat(report): SARIF 2.1.0 emitter for CI / code-scanning integration (#626)

2026-07-03 10:43:31 -04:00

test_session_entries.py

fix(runtime): stage symlink-safe copies for LocalDir uploads (#766)

2026-07-14 17:40:23 -04:00

test_skill_dir_extension.py

Add skill directory registration (#746)

2026-07-12 12:05:58 -04:00

test_state_repo_context.py

fix(report): omit SARIF provenance for multiple repos (#726)

2026-07-10 09:41:18 -04:00

test_subscription_store.py

fix(llm): write credential store via mkstemp to defeat symlink attacks

2026-07-29 18:00:36 +00:00

test_update_check.py

Add Linux ARM64 standalone release support (#886)

2026-07-26 16:27:02 -07:00

test_usage_subscription.py

Sign in with a ChatGPT subscription for inference (#854)

2026-07-24 15:41:19 -07:00

test_viewer_auth.py

refactor: move strix/viewer under strix/interface

2026-07-26 13:11:14 -07:00

test_viewer_runs_gating.py

refactor: move strix/viewer under strix/interface

2026-07-26 13:11:14 -07:00

test_viewer.py

fix(viewer): label historical subscription runs by provider

2026-07-29 17:04:38 +00:00