Top Level Namespace

Defined in:

Constant Summary

AI_CONTEXT_FEATURES = ["guards", "sinks", "validators", "signals", "callee", "all"]

--ai-context accepts an optional comma-separated feature list. Crystal's OptionParser cannot express "optional positional value", so we rewrite the few well-defined ambiguous forms upfront:

--ai-context → --ai-context= (bare, all features) --ai-context=guards,sinks → unchanged (explicit value) --ai-context guards,sinks → --ai-context=guards,sinks (heuristic) --ai-context ./app → --ai-context= (next token is a path)

The heuristic for "is the next token a feature list?" is intentionally tight: lowercase comma-separated words drawn from a fixed vocabulary. This keeps noir scan --ai-context ./app working as a positional path.

AI_CONTEXT_VALID_FEATURES = {"guards", "sinks", "validators", "signals", "callee", "all"}

--ai-context[=LIST] always enables AI context output. An empty LIST means "every category"; a non-empty LIST narrows the output to the named categories.

ALLOWED_HTTP_METHODS = ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS", "HEAD", "TRACE", "CONNECT", "QUERY"]

INCLUDE_TARGETS = {"path" => "include_path", "techs" => "include_techs", "callee" => "include_callee"}

LEGACY_INCLUDE_TARGETS = {"--include-path" => "include_path", "--include-techs" => "include_techs", "--include-callee" => "include_callee"}

LEGACY_PVALUE_TARGETS = {"--set-pvalue" => "set_pvalue", "--set-pvalue-header" => "set_pvalue_header", "--set-pvalue-cookie" => "set_pvalue_cookie", "--set-pvalue-query" => "set_pvalue_query", "--set-pvalue-form" => "set_pvalue_form", "--set-pvalue-json" => "set_pvalue_json", "--set-pvalue-path" => "set_pvalue_path"}

Silently translate v0 flag spellings to their v1 storage. Keeping the work here (instead of parser.on "--include-path") means the legacy names no longer clutter noir scan -h, while every v0 script keeps working untouched in v1.x.

OPERATION_REGEX = Regex.new("(query|mutation|subscription)\\s+([_A-Za-z][_0-9A-Za-z]*)")

Define the regex as a top-level constant in this file

PVALUE_TYPE_KEYS = {"any" => "set_pvalue", "all" => "set_pvalue", "header" => "set_pvalue_header", "cookie" => "set_pvalue_cookie", "query" => "set_pvalue_query", "form" => "set_pvalue_form", "json" => "set_pvalue_json", "path" => "set_pvalue_path"}

Split TYPE=VAL (or bare VAL → all-types) and route it into the right slot in noir_options. --pvalue may be repeated to set multiple values across different types.

Method Summary

• analysis_endpoints(options : Hash(String, YAML::Any), techs, logger : NoirLogger)
• any_to_bool(any) : Bool
• apply_ai_context(noir_options : Hash(String, YAML::Any), spec : String)
• apply_include_list(noir_options : Hash(String, YAML::Any), spec : String)
• banner(io : IO = STDERR)
• detect_techs(base_paths : Array(String), options : Hash(String, YAML::Any), passive_scans : Array(PassiveScan), logger : NoirLogger)
• escape_glob_path(path : String) : String

  Escapes glob metacharacters in a path string.

• extract_hidden_prompt_flags(noir_options : Hash(String, YAML::Any)) : Array(String)
• extract_legacy_aliases(args : Array(String), noir_options : Hash(String, YAML::Any)) : Array(String)
• filter_redundant_generic_techs(techs : Array(String)) : Array(String)
• generate_bash_completion_script
• generate_elvish_completion_script

  Native Elvish (https://elv.sh) completion.

• generate_fish_completion_script
• generate_zsh_completion_script
• get_allowed_methods
• get_home
• get_relative_path(base_path : String, path : String) : String
• get_symbol(method : String)
• handle_pvalue(noir_options : Hash(String, YAML::Any), spec : String)
• initialize_analyzers(logger : NoirLogger)
• join_path(*segments : String) : String
• join_paths(*paths : String) : String
• normalize_ai_context_flag(args : Array(String)) : Array(String)
• parse_body(body : String, params : Array(Param))
• parse_params(query : String | Nil, params : Array(Param), type : String)
• process_line(line : String, index : Int32, path : String, url : String, method : String, endpoint_url : String, headers : Bool, body : String, params : Array(Param), parsed_url : URI, results : Array(Endpoint))
• regex_matches_with_timeout?(regex : Regex, input : String, timeout : Time::Span = 500.milliseconds) : Bool

  Safely checks if a regex matches a string within a given timeout.

• remove_start_slash(input_path : String) : String
• run_options_parser
• valid_json?(content : String) : Bool
• valid_yaml?(content : String) : Bool

Macro Summary

• define_analyzers(analyzers)
• define_detectors(detectors)

Method Detail

Macro Detail