Asmitha1234/AppSec-Hybrid-Automated-Triage-Threat-Intelligence-Pipeline

# 应用安全混合自动化分类与威胁情报流水线 一个企业级的两阶段混合静态应用安全测试（SAST）编排引擎和 AI 辅助的漏洞分类注册表。该系统通过特征签名诊断在本地扫描目标应用程序，利用高弹性网络循环控制通过 GitHub Models 调用云端 AI（`gpt-4o-mini`）处理扫描结果，映射历史上游 CVE 数据，并提供交互式 Web 仪表板矩阵。 ## 🚀 系统流水线架构 ``` [ Target Workspace ] │ ▼ ( Phase 1 Engine ) ──► compiles local signature alerts (scanner.py) │ ▼ ( Phase 2 Engine ) ──► processes context windows + strict timeout guards (ai_triage_github.py) │ ▼ [ Presentation Layer ] ──► serves real-time visualization analytics on port 8085 (generate_dashboard.py) ``` ## 🛠️ 安装与虚拟环境设置 ### 1. 克隆代码库目标位置 ``` git clone [https://github.com/Asmitha1234/AppSec-Hybrid-Automated-Triage-Threat-Intelligence-Pipeline.git](https://github.com/Asmitha1234/AppSec-Hybrid-Automated-Triage-Threat-Intelligence-Pipeline.git) cd AppSec-Hybrid-Automated-Triage-Threat-Intelligence-Pipeline ``` ### 🏃 执行手册 ``` Before triggering the runtime runner, provide a valid GitHub Personal Access Token (PAT) inside your active console terminal context to authenticate with the cloud inference models: ``` ### Windows 命令提示符（`cmd`） ``` set GITHUB_TOKEN=github_pat_your_token_here python run_pipeline.py ```

标签：AI 辅助分类, FTP漏洞扫描, Python, 可视化看板, 后端开发, 安全编排, 无后门, 漏洞审计, 逆向工具, 静态应用安全测试