mirror of https://github.com/KeygraphHQ/shannon.git synced 2026-09-14 05:59:06 +02:00

Files

T

ajmallesh 98c66e051d feat(config)!: replace vuln_classes with agentic_sast

Wire Agentic SAST and reconciliation into the main pipeline, persist their durable state, and add the Miscellaneous finding and exploitation lane.

Make scan completion, cancellation, partial outcomes, resume identity, and report recovery use the integrated final workflow contract. Introduce the atomic finalization, ordering, renumbering, compaction, and output services that workflow calls. Keep completed Miscellaneous work and report drafts idempotent across resume, preserve public main's default-on exploit SARIF behavior, and describe stage-fallback candidates without claiming they were exported.

BREAKING CHANGE: `vuln_classes` has been removed. Configs containing it now fail validation, and all five core pentest classes run on every scan.

Workspaces created by Shannon 2.x cannot be resumed. Finish or discard in-flight scans before upgrading, then start a new workspace name.

2026-08-26 19:55:03 -07:00

infra

feat(preflight): block cloud metadata range in target URL check (#337 )

2026-05-21 00:23:46 +05:30

src

feat(config)!: replace vuln_classes with agentic_sast

2026-08-26 19:55:03 -07:00

.npmignore

feat: add npx CLI with monorepo, CI/CD, and ephemeral worker architecture (#256 )

2026-03-27 02:34:29 +05:30

package.json

feat(worker): add agentic static analysis

2026-08-26 19:26:36 -07:00

README.md

feat: add npx CLI with monorepo, CI/CD, and ephemeral worker architecture (#256 )

2026-03-27 02:34:29 +05:30

tsconfig.json

feat: add npx CLI with monorepo, CI/CD, and ephemeral worker architecture (#256 )

2026-03-27 02:34:29 +05:30

tsdown.config.ts

feat: add npx CLI with monorepo, CI/CD, and ephemeral worker architecture (#256 )

2026-03-27 02:34:29 +05:30

README.md

Shannon — AI Pentester for Web Applications and APIs

Shannon — AI Pentester by Keygraph

Shannon is an autonomous, white-box AI pentester for web applications and APIs.
It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Full README and usage guide
https://github.com/KeygraphHQ/shannon#readme