sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

feat(pipeline): PLC/SPS control-logic security scanner (IEC 61131-3) #162

Merged
sharang merged 3 commits from feat/plc-control-logic-scanner into main 2026-07-16 08:31:44 +00:00
Conversation 0 Commits 3 Files Changed 13
+3 -3
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 5e983d699f - Show all commits
compliance-agent/src/pipeline/plc/rules.rs
+3 -3
View File
@@ -395,9 +395,9 @@ fn check_safety_bypass(target: &Expr, value: &Expr, line: u32, pou: &str, hits:
.iter() .iter()
.any(|h| n.contains(h)); .any(|h| n.contains(h));
let watchdog = n.contains("watchdog") || n.contains("wdt"); let watchdog = n.contains("watchdog") || n.contains("wdt");
let disabling = matches!(value, Expr::Bool(false, _)) // A safety enable / interlock / watchdog signal driven to FALSE or 0 in
|| matches!(value, Expr::Int(0, _)) // application logic is a bypass (e.g. `Safety_Enable := FALSE`, `Watchdog_Kick := 0`).
|| (watchdog && matches!(value, Expr::Int(0, _))); let disabling = matches!(value, Expr::Bool(false, _)) || matches!(value, Expr::Int(0, _));
if (safety || watchdog) && disabling { if (safety || watchdog) && disabling {
hits.push(RuleHit { hits.push(RuleHit {
line, line,