List of all items
Structs
- approval::ApprovalMetadata
- audit::AuditEntry
- audit_aggregator::AuditFilter
- audit_aggregator::AuditRecord
- audit_aggregator::AuditStats
- audit_aggregator::HookStats
- audit_aggregator::ReadLogResult
- checkpoint::CheckpointConfig
- checkpoint::CheckpointListEntry
- checkpoint::CheckpointMeta
- checkpoint::DiffEntry
- checkpoint::ManifestEntry
- checkpoint::PurgeResult
- engine::AnalysisContext
- escalation::EscalationHit
- extract::ByteFinding
- extract::ByteScanResult
- extract::ExtractedUrl
- extract::ScpRemoteSpec
- license::LicenseInfo
- mcp::types::ClientInfo
- mcp::types::ContentItem
- mcp::types::InitializeParams
- mcp::types::InitializeResult
- mcp::types::JsonRpcError
- mcp::types::JsonRpcResponse
- mcp::types::ResourceContent
- mcp::types::ResourceDefinition
- mcp::types::ResourceReadParams
- mcp::types::ResourcesCapability
- mcp::types::ServerCapabilities
- mcp::types::ServerInfo
- mcp::types::ToolCallParams
- mcp::types::ToolCallResult
- mcp::types::ToolDefinition
- mcp::types::ToolsCapability
- normalize::NormalizedComponent
- output::JsonOutput
- policy::AllowlistRule
- policy::ApprovalRule
- policy::CheckpointPolicyConfig
- policy::CustomRule
- policy::Policy
- policy::ScanPolicyConfig
- policy::ScanProfile
- policy::ThreatIntelConfig
- policy::WebhookConfig
- policy_validate::PolicyIssue
- receipt::Receipt
- redact::CompiledCustomPatterns
- rule_explanations::RuleExplanation
- rule_metadata::RuleMeta
- rules::cloaking::AgentResponse
- rules::cloaking::CloakingResult
- rules::cloaking::DiffPair
- rules::configfile::ConfigPathMatcher
- rules::custom::CompiledCustomRule
- rules::environment::RealEnv
- rules::threatintel::PackageRef
- runner::RunOptions
- runner::RunResult
- sarif::SarifFinding
- scan::FileScanResult
- scan::ScanConfig
- scan::ScanResult
- script_analysis::ScriptAnalysis
- session_warnings::EscalationEvent
- session_warnings::HiddenEvent
- session_warnings::SessionWarnings
- session_warnings::WarningEvent
- threatdb::ThreatDb
- threatdb::ThreatDbStats
- threatdb::ThreatDbWriter
- threatdb::ThreatMatch
- threatdb::TyposquatMatch
- threatdb_feeds::FeedEntries
- tokenize::Segment
- verdict::Finding
- verdict::SuspiciousChar
- verdict::Timings
- verdict::Verdict
Enums
- checkpoint::DiffStatus
- escalation::CallerContext
- escalation::EscalationAction
- escalation::EscalationRule
- extract::ScanContext
- license::KeyFormatStatus
- license::Tier
- parse::UrlLike
- policy::FailMode
- policy_client::PolicyFetchError
- policy_validate::IssueLevel
- rules::configfile::ConfigMatch
- style::Stream
- threatdb::Confidence
- threatdb::Ecosystem
- threatdb::ThreatDbError
- threatdb::ThreatSource
- threatdb_api::RuntimeThreatMode
- tokenize::ShellType
- verdict::Action
- verdict::Evidence
- verdict::RuleId
- verdict::Severity
Traits
Functions
- approval::apply_approval
- approval::check_approval
- approval::sanitize_description
- approval::write_approval_file
- approval::write_no_approval_file
- approval::write_warn_ack_file
- audit::audit_diagnostic
- audit::log_hook_event
- audit::log_trust_change
- audit::log_verdict
- audit::log_verdict_with_raw
- audit_aggregator::compute_hook_stats
- audit_aggregator::compute_stats
- audit_aggregator::export_csv
- audit_aggregator::export_json
- audit_aggregator::filter_records
- audit_aggregator::generate_compliance_report
- audit_aggregator::generate_html_report
- audit_aggregator::read_log
- audit_upload::drain_spool
- audit_upload::spool_and_upload
- audit_upload::spool_event
- checkpoint::checkpoints_dir
- checkpoint::create
- checkpoint::create_and_purge
- checkpoint::diff
- checkpoint::list
- checkpoint::purge
- checkpoint::restore
- checkpoint::should_auto_checkpoint
- confusables::are_confusable
- confusables::is_confusable
- confusables::skeleton
- data::is_known_domain
- data::is_popular_repo
- data::is_public_suffix
- data::known_domains
- data::ocr_confusions
- data::registrable_domain
- engine::analyze
- engine::analyze_returning_policy
- engine::filter_findings_by_paranoia
- engine::filter_findings_by_paranoia_vec
- escalation::apply_action_overrides
- escalation::apply_escalation
- escalation::post_process_verdict
- extract::extract_urls
- extract::extractor_ids
- extract::parse_scp_remote_spec
- extract::resolve_wrapped_command
- extract::scan_bytes
- extract::tier1_scan
- extract::tirith_inert_arg_range
- homoglyph::analyze_hostname
- license::current_tier
- license::decode_and_validate_token
- license::key_format_status
- license::license_info
- license::license_key_path
- license::refresh_from_server
- license::validate_key_structure
- mcp::dispatcher::run
- mcp::resources::list
- mcp::resources::read
- mcp::resources::read_content
- mcp::tools::call
- mcp::tools::list
- mcp::types::negotiate_version
- network::dns::check_dns_blocklist
- network::shorturl::is_shortened_url
- network::shorturl::resolve_shortened_url
- normalize::normalize_path
- normalize::normalize_query
- output::write_human
- output::write_human_auto
- output::write_json
- parse::extract_raw_host
- parse::parse_docker_ref
- parse::parse_url
- policy::allowlist_pattern_matches
- policy::config_dir
- policy::data_dir
- policy::find_repo_root
- policy::find_workspace_kiro_dir
- policy::state_dir
- policy_client::fetch_remote_policy
- policy_validate::validate
- receipt::short_hash
- redact::redact
- redact::redact_command_text
- redact::redact_finding
- redact::redact_findings
- redact::redact_shell_assignments
- redact::redact_verdict
- redact::redact_with_compiled
- redact::redact_with_custom
- redact::redacted_findings
- rule_explanations::categories
- rule_explanations::explain
- rule_explanations::list_all
- rule_explanations::list_by_category
- rule_explanations::mitre_id_for_rule
- rule_metadata::filter_early_access
- rule_metadata::filter_early_access_at
- rule_metadata::filter_early_access_with
- rule_metadata::is_early_access_active
- rules::cloaking::check
- rules::codefile::check
- rules::codefile::is_code_file
- rules::command::check
- rules::command::check_network_policy
- rules::configfile::check
- rules::credential::check
- rules::custom::check
- rules::custom::compile_rules
- rules::ecosystem::check
- rules::environment::check
- rules::hostname::check
- rules::path::check
- rules::rendered::check
- rules::rendered::check_pdf
- rules::rendered::is_renderable_file
- rules::terminal::check_bytes
- rules::terminal::check_bytes_with_ignore
- rules::terminal::check_clipboard_html
- rules::terminal::check_hidden_multiline
- rules::threatintel::check
- rules::threatintel::extract_ipv4_from_token
- rules::threatintel::extract_packages
- rules::transport::check
- rules::transport::check_insecure_flags
- runner::run
- sarif::to_sarif
- scan::matches_ignore_pattern
- scan::scan
- scan::scan_single_file
- scan::scan_stdin
- script_analysis::analyze
- script_analysis::detect_interpreter
- session::env_session_id
- session::fallback_session_id
- session::new_session_id
- session::resolve_session_id
- session::session_id
- session_warnings::clear_session
- session_warnings::extract_domains_from_evidence
- session_warnings::gc_stale_sessions
- session_warnings::load
- session_warnings::record_escalation_event
- session_warnings::record_outcome
- session_warnings::record_warning
- session_warnings::session_state_path
- style::bold
- style::bold_red
- style::dim
- style::fail_mark
- style::green
- style::pass_mark
- style::red
- style::severity_label
- style::use_color_for
- style::yellow
- text_confusables::is_text_confusable
- threatdb_api::enrich_command
- threatdb_feeds::extract_hostname_from_url
- threatdb_feeds::parse_domain_blocklist
- threatdb_feeds::parse_phishtank_csv
- threatdb_feeds::parse_threatfox_csv
- threatdb_feeds::parse_threatfox_zip
- threatdb_feeds::parse_tor_exit_list
- threatdb_feeds::parse_urlhaus_csv
- tokenize::is_env_assignment
- tokenize::leading_env_assignment_values
- tokenize::leading_env_assignments
- tokenize::tokenize
- url_validate::validate_fetch_url
- url_validate::validate_server_url
- util::levenshtein
- util::truncate_bytes
- verdict::action_from_findings
- verdict::upgraded_action_from_findings
- webhook::dispatch
Constants
- confusables::CONFUSABLE_COUNT
- confusables::CONFUSABLE_TABLE
- data::KNOWN_DOMAINS
- data::KNOWN_DOMAIN_COUNT
- data::OCR_CONFUSIONS
- data::OCR_CONFUSION_COUNT
- data::POPULAR_REPOS
- data::PUBLIC_SUFFIXES
- data::PUBLIC_SUFFIX_COUNT
- mcp::resources::MCP_SCAN_MAX_FILES
- mcp::types::SUPPORTED_VERSIONS
- rule_explanations::RULE_EXPLANATIONS
- rule_metadata::RULE_META
- rules::command::INTERPRETERS
- rules::shared::SENSITIVE_KEY_VARS
- text_confusables::TEXT_CONFUSABLE_COUNT
- text_confusables::TEXT_CONFUSABLE_TABLE