anya-core 1.2.0

Enterprise-grade Bitcoin Infrastructure Platform
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129

# Bitcoin Protocol Security Query Suite
# [AIR-3][AIS-3][AIT-2][BPC-3]

# Import standard query packs
- import: codeql-suites/javascript-security-extended.qls
  from: codeql-javascript
- import: codeql-suites/rust-security-extended.qls
  from: codeql-rust

# Bitcoin-specific queries
- description: "Bitcoin Cryptography Implementation Checks"
  queries:
    - include:
        id: js/insufficient-key-size
        tags:
          - security
          - cryptography
    - include:
        id: js/insufficient-entropy
        tags:
          - security
          - cryptography
    - include:
        id: js/insecure-randomness
        tags:
          - security
          - cryptography
    - include: 
        id: js/hardcoded-credentials
        tags:
          - security
    - include:
        id: js/reflected-xss
        tags:
          - security
    - include:
        id: js/command-line-injection
        tags:
          - security

# Custom queries for Bitcoin protocol security
- description: "Bitcoin Protocol Validation Checks"
  queries:
    # Custom queries for official Bitcoin Improvement Proposals (BIPs)
    - include:
        id: js/taproot-signing-validation
        tags:
          - security
          - crypto
          - bitcoin
    - include:
        id: js/psbt-sanitization
        tags:
          - security
          - bitcoin
    - include:
        id: js/dlc-oracle-validation
        tags:
          - security
          - bitcoin
          - oracle
    - include:
        id: js/lightning-payment-security
        tags:
          - security
          - bitcoin
          - lightning
    - include:
        id: js/constant-time-operations
        tags:
          - security
          - timing-attack
    - include: 
        id: rs/timing-attack
        tags:
          - security
          - cryptography

# Time complexity checks
- description: "Performance and Resource Management"
  queries:
    - include:
        id: js/resource-exhaustion
        tags:
          - security
          - performance
    - include:
        id: js/polynomial-redos
        tags:
          - security
          - performance
    - include:
        id: rs/memory-exhaustion
        tags:
          - security
          - performance

# Input validation for cryptocurrency amounts
- description: "Transaction and Amount Validation"
  queries:
    - include:
        id: js/incomplete-input-sanitization
        tags:
          - security
    - include:
        id: js/unsafe-numeric-cast
        tags:
          - security
    - include:
        id: js/implicit-number-conversion
        tags:
          - security
          - accuracy

# Security queries for the MCP server
- description: "MCP Server Security Checks"
  queries:
    - include:
        id: js/prototype-pollution
        tags:
          - security
    - include:
        id: js/unsafe-deserialization
        tags:
          - security
    - include:
        id: js/request-forgery
        tags:
          - security