Files
shannon/THIRD_PARTY_NOTICES.md
T
ajmallesh 980607c602 feat(worker): add agentic static analysis
Add the ten-stage Agentic SAST pipeline, confined repository tools, model runtime, prompt templates, and SARIF export.

Make retries, repair sessions, reduced coverage, usage accounting, and model-output drift durable across Temporal replay and resume. Keep retry diagnostics in their actionable closed vocabulary. Package the Mantis-derived license material with the prompts that require it.
2026-08-26 19:26:36 -07:00

37 lines
1.4 KiB
Markdown

# Third-Party Notices
Shannon incorporates and adapts material from third-party open-source projects.
Shannon as a whole is distributed under the GNU Affero General Public License,
version 3.0 (see LICENSE). Third-party material incorporated into Shannon
remains subject to the attribution and notice requirements of its own license.
## Mantis
Portions of Shannon's Capella agentic SAST implementation, specifically the
agent prompts, are derived from the Mantis project.
- Project: https://github.com/google/mantis
- Upstream commit: 876a0c8c6b92c92f34e0041b7dbbc0e4cccddc52
- Retrieved: 2026-08-25
- License: Apache License, Version 2.0
The Apache License, Version 2.0 is reproduced at LICENSES/Apache-2.0.txt.
The Mantis-derived files are individually marked with a provenance header and
reside under:
- apps/worker/prompts/partials/ (capella-*.hbs prompt partials)
- apps/worker/prompts/sast/capella/ (prompt templates)
The pinned upstream tree contains no NOTICE file, so no upstream NOTICE text is
reproduced here. The upstream LICENSE carries no copyright notice of its own, so
none is reproduced.
The Mantis-derived material has been substantially modified by Keygraph for
Shannon. Material changes include adaptation to Shannon's agent architecture,
enforcing repository-relative paths and complete verdict sets, and providing
separate production and pipeline-testing prompt variants.
Modifications: Copyright © 2026 Keygraph, Inc.