FloandClaude Opus 4.8 aac1fa7351 fix(security): fix CVSS parsing and Claude prompt ...

OSV returns severity.score as a CVSS vector string, not a number, so
unmarshalling into float64 errored and every vuln was dropped. Read it
as a string, compute the CVSS v3 base score from the vector, and fall
back to the database_specific severity label otherwise.

Invoke the analysis via "claude -p" instead of a nonexistent "ask"
subcommand (which made the CLI treat "ask" as the prompt), and request
strict JSON so recommendations are parsed reliably rather than by
substring matching.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GVbEgdgcC1w6qwSq3zC4kg

2026-06-23 15:30:05 +02:00

..

audit_test.go

Initial project scaffold: macOS package security audit tool

2026-06-23 04:56:57 -07:00

audit.go

Initial project scaffold: macOS package security audit tool

2026-06-23 04:56:57 -07:00

claude.go

fix(security): fix CVSS parsing and Claude prompt

2026-06-23 15:30:05 +02:00

osv_test.go

fix(security): fix CVSS parsing and Claude prompt

2026-06-23 15:30:05 +02:00

osv.go

fix(security): fix CVSS parsing and Claude prompt

2026-06-23 15:30:05 +02:00