Skip to content

feat(reporting): fix #504 by implementing Soroban Audit Evidence Generator - #526

Merged
mijinummi merged 2 commits into
MDTechLabs:mainfrom
TochukwuJustice:evidence-generator
Jun 22, 2026
Merged

feat(reporting): fix #504 by implementing Soroban Audit Evidence Generator#526
mijinummi merged 2 commits into
MDTechLabs:mainfrom
TochukwuJustice:evidence-generator

Conversation

@TochukwuJustice

Copy link
Copy Markdown
Contributor

closes #504
This PR addresses issue #504 to provide traceable supporting evidence for findings generated by the GasGuard analyzer. Previously, findings were simply reported but lacked the verifiable file evidence and detailed documentation references required for robust audits.

The new flow utilizes the stellarKB to link finding rules with their full explanations and documentation links. Additionally, it reads the original source code directly using a caching mechanism to extract snippets safely padded with contextual lines. This change matters significantly as it creates a direct, provable link between the tool's finding and the underlying code, enabling accurate human review and CI tracking.

Implementation details:

  • Created the SorobanEvidenceGenerator class to process findings into Evidence artifacts.
  • Implemented extractCodeSnippet which manages a file I/O cache to prevent redundant disk reads for the same source file.
  • Enabled JSON artifact exports.

4. Changes Made

5. Testing

The following commands were executed to verify the functionality:

npx jest src/reporting/evidence/stellar/evidence-generator.spec.ts

@mijinummi
mijinummi merged commit 87edfbd into MDTechLabs:main Jun 22, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement Soroban Audit Evidence Generator

2 participants