/** * Extended audit patterns for project-level security scanning. * * Imports the existing 37 SCAN_PATTERNS from the scanner module * and extends them with project-audit-specific patterns for * SQL injection, SSRF, XSS, hardcoded secrets, etc. */ import type { PatternCheck } from "../scanner/types.js"; /** * Extended pattern with safe-context awareness and confidence. */ export interface AuditPatternCheck extends PatternCheck { /** Pattern ID (unique across all patterns) */ id: string; /** Human-readable name */ name: string; /** Regexes that suppress the finding when they match the line */ safeContexts?: RegExp[]; /** Default confidence for this pattern */ confidence: "high" | "medium" | "low"; } /** * Project-specific security patterns (beyond the existing 37 skill patterns). */ export declare const PROJECT_PATTERNS: AuditPatternCheck[]; /** * Combined audit patterns: original SCAN_PATTERNS + project-specific patterns. * * The SCAN_PATTERNS are adapted to AuditPatternCheck interface (id from ScanPattern.id). */ export declare const AUDIT_PATTERNS: AuditPatternCheck[];