Current source preview reference
Source and schema provenance
Source revision, schema checksums and export details for this CodeSecurity API reference. Check which implementation the documentation describes.
Exact source and schema identity
Public repository: lomolabs/lomo-codesecurity
- Full public commit
bccff297ea36ba46f1af1f3849fa233b66c72ad3- Public archive SHA-256
5d9d8175eb3e832c6d70ae79b17a9ae195dda352ea904a1a556cbda10c8fc0ae- Package version
- 0.1.0
- Generator identity
dd185ed98a162fe49e0c58dfd959b59750d5031b367b5cb6b050923528041740
Download the machine-readable manifest
Inventory and schema downloads
| Service | Operations / paths | OpenAPI |
|---|---|---|
| advisor-connector | 7 / 7 | JSON schema |
| control | 95 / 83 | JSON schema |
| scanner | 11 / 9 | JSON schema |
| updater | 5 / 4 | JSON schema |
The inventory excludes framework documentation endpoints and static mounts. The exporter compares every declared method/path with actual assembled routes and fails on a mismatch.
Offline export boundary
Actual six router objects with FastAPI get_openapi; no production application factory.
Actual updater router with unused executor plus exact scanner/connector/health declaration projections. Module top-level runtime settings and lifecycle are excluded.
Scrubbed environment, Python audit denial of sockets/processes/writes and out-of-bound reads, thread/runtime/settings/engine denial. Python-level defense for reviewed source, not an OS or native-code sandbox. SystemVersion.plist and /proc/stat may be read for Python/Prometheus platform metadata.
Native OS sandbox: Darwin. Network and filesystem writes are denied independently of the Python guard, with separate denial probes before each export.
The dependency environment is isolated and pinned. Source acquisition and dependency installation happen before export. No product application, lifespan, database, scanner or backend is started. This is declaration and schema verification, not runtime acceptance.
What automatic schemas cannot prove
Manual headers, authority and literal error cases are added from reviewed source. Dynamic errors and cross-module failures can add cases. Broad dictionaries and untyped request parsing remain broad. The sanitized control 422 model omits submitted input, matching the production exception handler.
161 examples are validated against JSON Schema 2020-12 shapes and formats. That does not execute every Pydantic custom validator or a service operation. The focused test suite exercises representative pure source validators separately.
Version selection
/v1 is the API protocol prefix. 0.1.0/bccff29 identifies the product/source snapshot. Those identifiers have different purposes.
Current selected reference · Immutable snapshot · Internal boundary guide