Sharang ParnerkarandClaude Fable 5
b7534d1123
New standalone crate — the 'transcribing' layer that maps each control to the static-scan step(s) that check it, or marks it needs_tooling / not_code_checkable. Authored + human-reviewed: no LLM decides coverage. The LLM only triages the tool's findings downstream (in the agent), never here. - ControlMap / ControlEntry / ScanBinding / Coverage types + embedded JSON LUT - query API: coverage(control), controls_for(tool, cwe), summary() - CRA LUT: 40 controls -> 9 covered (semgrep/gitleaks/syft/osv) / 16 needs_tooling / 15 not_code_checkable - wired into CI (clippy + test). 4 lib tests. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
42 lines
1.2 KiB
TOML
42 lines
1.2 KiB
TOML
[workspace]
|
|
members = [
|
|
"compliance-core",
|
|
"compliance-agent",
|
|
"compliance-dashboard",
|
|
"compliance-graph",
|
|
"compliance-dast",
|
|
"compliance-mcp",
|
|
"compliance-smoke",
|
|
"werkbank-exec",
|
|
"control-map",
|
|
]
|
|
resolver = "2"
|
|
|
|
[workspace.lints.clippy]
|
|
unwrap_used = "deny"
|
|
expect_used = "deny"
|
|
|
|
[workspace.dependencies]
|
|
compliance-core = { path = "compliance-core", default-features = false }
|
|
control-map = { path = "control-map" }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
tokio = { version = "1", features = ["full"] }
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
mongodb = { version = "3", features = ["rustls-tls", "compat-3-0-0"] }
|
|
reqwest = { version = "0.12", features = ["json", "rustls-tls", "multipart", "cookies"], default-features = false }
|
|
thiserror = "2"
|
|
sha2 = "0.10"
|
|
hex = "0.4"
|
|
uuid = { version = "1", features = ["v4", "v5", "serde"] }
|
|
secrecy = { version = "0.10", features = ["serde"] }
|
|
regex = "1"
|
|
zip = { version = "2", features = ["aes-crypto", "deflate"] }
|
|
dashmap = "6"
|
|
tokio-stream = { version = "0.1", features = ["sync"] }
|
|
aes-gcm = "0.10"
|
|
rand = "0.9"
|
|
base64 = "0.22"
|