Issues

• Inert, bypassable and over-broad sanitizers across taint rules

  bugdetection-rules
  hedgerow-dev/rowan#74 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Taint sinks match the whole call: focus every sink on the dangerous argument

  detection-rulesenhancement
  hedgerow-dev/rowan#72 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Regex engine limits: per-line pattern-not and OR patterns make 'X without Y' rules unreliable

  engineenhancement
  hedgerow-dev/rowan#71 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Cross-file analysis: propagate taint through class attributes

  engineenhancement
  hedgerow-dev/rowan#70 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Golden end-to-end fixture and enrichment ordering tests

  engineenhancement
  hedgerow-dev/rowan#69 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Export the enrichment decision trail in JSON/SARIF and add an --explain mode

  engineenhancement
  hedgerow-dev/rowan#68 · Filter by author hedgerow-dev opened on Oct 11, 2026

• One sink and sanitizer registry for taint rules, cross-file pass and enrichment

  engineenhancement
  hedgerow-dev/rowan#67 · Filter by author hedgerow-dev opened on Oct 11, 2026

• One source taxonomy: stamp source_kind on registry fragments and unify route-parameter definitions

  engineenhancement
  hedgerow-dev/rowan#66 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Silent degradation: dead bulk cap, manifest-load failure, non-OOM Opengrep errors, timed-out batches

  bugengine
  hedgerow-dev/rowan#64 · Filter by author hedgerow-dev opened on Oct 11, 2026
  1

• Detection review: Dockerfile, Terraform and GitHub Actions rules

  detection-rulesenhancement
  hedgerow-dev/rowan#58 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Detection review: Rust, Ruby and PHP rules (regex only today)

  detection-rulesenhancement
  hedgerow-dev/rowan#57 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Detection review: Go rules (go, go_taint, go_ai_taint, go_ai_opengrep)

  detection-rulesenhancement
  hedgerow-dev/rowan#56 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Detection review: Java, Kotlin and C# rules

  detection-rulesenhancement
  hedgerow-dev/rowan#55 · Filter by author hedgerow-dev opened on Oct 11, 2026
  1

• Detection review: JavaScript and TypeScript rules

  detection-rulesenhancement
  hedgerow-dev/rowan#54 · Filter by author hedgerow-dev opened on Oct 11, 2026
  1

• Detection review: Python framework, template, inference, ingest, cloud and guardrail rules

  detection-rulesenhancement
  hedgerow-dev/rowan#53 · Filter by author hedgerow-dev opened on Oct 11, 2026
  1

• Detection review: general regex rules (security_surface, neuroscan, misc, ai_ml_neuroscan)

  detection-rulesenhancement
  hedgerow-dev/rowan#52 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Detection review: ai_security.yaml regex rules (101 rules)

  detection-rulesenhancement
  hedgerow-dev/rowan#51 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Detection review: Python agent and LLM-output taint rules (agent, llm_output, a2a, langchain)

  detection-rulesenhancement
  hedgerow-dev/rowan#50 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Detection review: Python ML taint rules (ml_taint, ai_ml_taint)

  detection-rulesenhancement
  hedgerow-dev/rowan#49 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Detection review: Python web taint rules (python_taint, web_taint, extended, supply chain)

  detection-rulesenhancement
  hedgerow-dev/rowan#48 · Filter by author hedgerow-dev opened on Oct 11, 2026
  1

• Detection review 2026-10: rules and framework

  enhancement
  hedgerow-dev/rowan#47 · Filter by author hedgerow-dev opened on Oct 11, 2026

• Hunt: add durable checkpoints, resumable runs, and schema-valid recovery

  hedgerow-dev/rowan#19 · Filter by author hedgerow-dev opened on Oct 5, 2026

• Hunt: make static inventory, verification outcomes, and discovery scores explicit

  hedgerow-dev/rowan#18 · Filter by author hedgerow-dev opened on Oct 5, 2026

• Hunt: strengthen verification evidence and retrieve missing guards and callers

  hedgerow-dev/rowan#17 · Filter by author hedgerow-dev opened on Oct 5, 2026

• Hunt: normalize reachability assessments and separate conditional risks from confirmed paths

  hedgerow-dev/rowan#16 · Filter by author hedgerow-dev opened on Oct 5, 2026