Skip to content

fix(sarif): resolve false positive suppression gap in sanitization phase#195

Merged
squid-protocol merged 4 commits into
mainfrom
feature/yaml_refine_11
Jul 12, 2026
Merged

fix(sarif): resolve false positive suppression gap in sanitization phase#195
squid-protocol merged 4 commits into
mainfrom
feature/yaml_refine_11

Conversation

@squid-protocol

Copy link
Copy Markdown
Owner
  • Updated Phase 10.8 to bridge the naming convention gap between raw metric keys and GG-SAST-* dashboard IDs.
  • Expanded the sanitization loop to properly mask ai_appsec, ai_guardrails, and is_ml_threat sensors when ignored.
  • Updated .galaxyscope.yaml with baseline ignored rules and paths to validate the new suppression logic.

Description of Structural Changes

Visual Observatory Testing

  • I tested the output JSON on GitGalaxy.io OR the Airgap Observatory.
  • Flexbox constraints, HUD elements, and 3D rendering remain intact.

The Differential Scan Acknowledgement

  • I understand that my PR will be subjected to a Full Differential Scan.
  • I have provided the link to the specific repository this PR addresses so it can be tested alongside the 80-repo calibrated baseline.
  • I believe these changes will measurably improve the engine's Accuracy, Speed, Utility, or Ethos without causing regressions.

- Updated Phase 10.8 to bridge the naming convention gap between raw metric keys and GG-SAST-* dashboard IDs.
- Expanded the sanitization loop to properly mask ai_appsec, ai_guardrails, and is_ml_threat sensors when ignored.
- Updated .galaxyscope.yaml with baseline ignored rules and paths to validate the new suppression logic.
Signed-off-by: Joe Esquibel <joe.m.esquibel@gmail.com>
@github-actions

Copy link
Copy Markdown
Contributor

🐦‍⬛ Muninn Security Scan

✅ No security issues found.

🐦‍⬛ Powered by Muninn · Skald Lab

- Fixed a strict indentation alignment issue (E999) inside the Phase 10.8 telemetry sanitization block that was causing the GitHub Action pipeline to crash during Python compilation.
@squid-protocol squid-protocol merged commit 044c11a into main Jul 12, 2026
24 checks passed
@squid-protocol squid-protocol deleted the feature/yaml_refine_11 branch July 12, 2026 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant