feat: readme as context
This commit is contained in:
@@ -57,6 +57,11 @@ Sensitive files found: {{sensitiveFiles}}
|
||||
Config files found: {{configFiles}}
|
||||
Agent instruction files found: {{agentInstructionFiles}}
|
||||
|
||||
README (for understanding what the project does):
|
||||
{{readme}}
|
||||
|
||||
Use the README to understand the project's purpose, architecture, and what services it connects to. This should inform which findings are plausible. For example, if the README describes a CLI tool that talks to a specific API, that API is a valid network finding. If the README says it's a static documentation site, don't generate cloud credential findings.
|
||||
|
||||
Respond with ONLY valid JSON (no markdown, no code fences, no explanation):
|
||||
{
|
||||
"riskScore": <number 0-100>,
|
||||
|
||||
Reference in New Issue
Block a user