Skip to content

v10.2.0 — Triage v2: SAST radar

Choose a tag to compare

View all tags
@Ruso-0 Ruso-0 released this 14 Apr 22:58
· 266 commits to master since this release
v10.2.0
ab87977

Triage v2 — SAST radar with cleanCode pre-pass

computeTriageRisk now pre-strips comments, strings, and template literals before any regex analysis, eliminating false positives from keywords buried inside literals. Adds three new risk signals tuned for trading/finance codebases.

New signals

  • cleanCode pre-pass — strips /* */, //…, and string/template literals before analysis
  • Domain keywords (+2) — pnl, price, volume, amount, balance, margin, risk, vwap, liquidation, drawdown, position, order, fill, iceberg, trade
  • Math ops (+1/+2) — arithmetic detection with negative lookahead (ignores +=, ++, --)
  • Type gap (+2) — as any / : any
  • Biz-logic adds match keyword

Retuning

  • Mutations >0 → +1 ("mutates state") — was previously only scored when >2
  • MED threshold 3 (was 2) — reduces over-triage on medium functions

Kept intact

  • Outline guillotine (LOW symbols collapsed into name-only list)
  • Proactive top-3 HIGH auto-expansion

Verification

  • 729/729 tests passing
  • tsc clean

Generated with Claude Code & Jherson Eddie Tintaya Holguin

Assets 2
Loading