mirror of
https://github.com/usestrix/strix.git
synced 2026-10-15 04:18:10 +00:00
768b101615
The per-finding markdown report carries the CVE, CWE and confidence, plus the counterevidence, the confidence rationale, what would change the severity and the assumptions. The PDF rendered none of them: a reader of the PDF saw a CVSS score and a severity but not how sure the agent was, what argued against the finding or what would change its rating. Add Confidence, CWE and CVE to the finding's header line, and the four reasoning fields as blocks between the evidence and the remediation, in the same wording the markdown report uses. Fields a finding does not have are skipped, like the existing ones. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TavwVMH7PvrD68JTDfd6Hb |
||
|---|---|---|
| .. | ||
| agents | ||
| config | ||
| core | ||
| interface | ||
| llm | ||
| report | ||
| runtime | ||
| skills | ||
| telemetry | ||
| tools | ||
| utils | ||
| __init__.py | ||