Sharang ParnerkarandClaude Opus 4.8 6ae5d9a07f fix(orchestrator): run semantic control mapping on PLC findings ...

run_plc_scan is a separate path from run_pipeline and never called the
control-mapping passes, so IEC 61131-3 (pump_station.st etc.) findings were
persisted with empty control_refs even with mapping enabled. PLC findings carry
file_path/line/cwe, so the semantic pass now runs per source (its region is read
under that source's working path) and stamps master-control refs. LUT + grounded
passes are code-pattern/CRA-specific and don't apply to control logic, so only the
semantic pass runs on the PLC path.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-22 15:09:48 +02:00

..

rules

feat(controls): B1 — custom semgrep detectors for 4 CRA controls (#218)

2026-07-21 12:31:20 +00:00

src

fix(orchestrator): run semantic control mapping on PLC findings

2026-07-22 15:09:48 +02:00

tests

feat(controls): promote grounded controls to covered + enable LLM passes by default (#224)

2026-07-22 07:48:51 +00:00

Cargo.toml

feat: control-driven SAST — LUT + grounded LLM triage over tool findings (#213)

2026-07-21 09:01:51 +00:00