Repository navigation
What's New
New Features
Sandworm Mode IOC Detection
- Added
sandworm_mode.py: New IOC definitions for the Sandworm threat actor's supply chain attack patterns - Detects malicious packages associated with Sandworm/APT44 campaigns
Codebase Restructuring
- Moved issue definitions into
src/github_ioc_scanner/issues/folder for better organization - Added
npmjs_help.pywith IOC patterns for npm-based attack vectors - Updated
shai_hulud.pywith latest threat intelligence
Improvements
Batch Processing
BatchCoordinator.get_batch_metrics()converted fromasyncto synchronous for simpler consumptionprocess_files_batch()now accepts an optionalstrategyparameter_format_file_batch_results()returns a flat{file_path: FileContent}dict (successful files only)- Added
_report_progress()method for real-time batch progress reporting - Improved metrics tracking:
global_metricsis now updated after eachprocess_files_batch()call
Bug Fixes
- Fixed
BatchCoordinatortest suite: corrected mock signatures forget_file_content_async - Fixed
BatchCoordinatorintegration tests: corrected argument order inBatchCoordinatorinstantiation - Fixed
test_batch_workflow_error_recovery_scenarios: now correctly tests partial-failure scenarios
Full Changelog: https://github.com/christianherweg0807/github_package_scanner/blob/main/CHANGELOG.md