📦
Historial de auditorías
python-web-app-security-audit - 2 auditorías
Comparación de versiones
Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.
Versión de auditoría 2 Más reciente
10 ago 2026, 11:14
All 136 static findings are false positives caused by defensive test payloads, explicit local configuration, safe copy operations, or Markdown formatting. Requests use in-process ASGITransport, active probes require owner opt-in, and no credential exfiltration, prompt injection, or malicious intent was found.
26
Archivos escaneados
2,063
Líneas analizadas
4
Elementos de revisión
0
Falsos positivos ignorados
Factores de riesgo
🌐 Acceso a red (16)
references/assertion-catalog.md:7 security/.env.test.template:33 security/.env.test.template:41 security/.env.test.template:42 security/conftest.py:63 security/conftest.py:80 security/conftest.py:110 security/test_config.py:149 security/test_config.py:161 security/test_cookies.py:94 security/test_cors.py:42 security/test_cors.py:56 security/test_cors.py:16 security/test_cors.py:17 security/test_headers.py:93 security/test_rate_limit.py:117
🔑 Variables de entorno (50)
references/setup-and-boundaries.md:19 requirements.txt:4 security/conftest.py:18 security/conftest.py:44 security/conftest.py:76 security/conftest.py:84 security/conftest.py:85 security/conftest.py:106 security/conftest.py:113 security/conftest.py:114 security/conftest.py:131 security/conftest.py:18 security/conftest.py:44 security/conftest.py:76 security/conftest.py:84 security/conftest.py:85 security/conftest.py:106 security/conftest.py:113 security/conftest.py:114 security/conftest.py:131 security/conftest.py:10 security/conftest.py:13 security/conftest.py:10 security/conftest.py:13 security/test_auth.py:114 security/test_auth.py:149 security/test_auth.py:168 security/test_auth.py:114 security/test_auth.py:149 security/test_auth.py:168 security/test_authorization.py:15 security/test_authorization.py:24 security/test_authorization.py:64 security/test_authorization.py:15 security/test_authorization.py:24 security/test_authorization.py:64 security/test_config.py:89 security/test_config.py:90 security/test_config.py:128 security/test_config.py:88 security/test_config.py:91 security/test_config.py:97 security/test_cookies.py:37 security/test_cookies.py:38 security/test_cookies.py:60 security/test_cookies.py:61 security/test_cookies.py:81 security/test_cookies.py:82 security/test_cookies.py:106 security/test_cookies.py:107
📁 Acceso al sistema de archivos (3)
Auditado por: codex
7 ago 2026, 13:59
All 123 static findings are false positives in context. They describe documented test configuration, bounded file copying, in-process HTTP checks, defensive payloads, or Markdown code examples; no evidence of data exfiltration, malicious commands, or prompt injection was found.
17
Archivos escaneados
1,831
Líneas analizadas
4
Elementos de revisión
0
Falsos positivos ignorados
Factores de riesgo
🔑 Variables de entorno (50)
references/setup-and-boundaries.md:17 security/conftest.py:22 security/conftest.py:54 security/conftest.py:62 security/conftest.py:63 security/conftest.py:84 security/conftest.py:91 security/conftest.py:92 security/conftest.py:109 security/conftest.py:22 security/conftest.py:54 security/conftest.py:62 security/conftest.py:63 security/conftest.py:84 security/conftest.py:91 security/conftest.py:92 security/conftest.py:109 security/conftest.py:10 security/conftest.py:13 security/conftest.py:10 security/conftest.py:13 security/test_auth.py:112 security/test_auth.py:147 security/test_auth.py:166 security/test_auth.py:112 security/test_auth.py:147 security/test_auth.py:166 security/test_authorization.py:15 security/test_authorization.py:15 security/test_config.py:89 security/test_config.py:90 security/test_config.py:128 security/test_config.py:88 security/test_config.py:91 security/test_config.py:97 security/test_cookies.py:37 security/test_cookies.py:38 security/test_cookies.py:60 security/test_cookies.py:61 security/test_cookies.py:81 security/test_cookies.py:82 security/test_cookies.py:106 security/test_cookies.py:107 security/test_cookies.py:37 security/test_cookies.py:38 security/test_cookies.py:60 security/test_cookies.py:61 security/test_cookies.py:81 security/test_cookies.py:82 security/test_cookies.py:106
📁 Acceso al sistema de archivos (3)
🌐 Acceso a red (14)
security/.env.test.template:34 security/.env.test.template:35 security/conftest.py:41 security/conftest.py:58 security/conftest.py:88 security/test_config.py:149 security/test_config.py:161 security/test_cookies.py:94 security/test_cors.py:42 security/test_cors.py:56 security/test_cors.py:16 security/test_cors.py:17 security/test_headers.py:93 security/test_rate_limit.py:100
Auditado por: codex