HeimDall-SecurityV1

HeimDall-SecurityV1 is the Streamlit prototype version of Heimdall. It provides a simple web interface for uploading a source-code ZIP, running Semgrep SAST, reviewing ranked findings, generating safe validation payloads, and optionally validating a selected finding against an authorized target.

This repository is kept as the prototype snapshot. The full DevSecOps backend, CLI workflow, CI/CD policy engine, and research pipeline live in HeimDall-SecurityV2.

Features

• Upload a source-code ZIP for scanning.
• Run Semgrep with safe default rules.
• Use supplemental prototype SAST patterns when Semgrep configs miss obvious demo vulnerabilities.
• Display ranked SAST findings.
• Select one finding for validation.
• Generate AI-assisted validation payloads.
• Show request, response excerpt, heuristic verdict, and AI verdict.
• Require explicit authorization before live DAST validation.
• Read API keys from Streamlit input or OPENAI_API_KEY.
• Use dark Streamlit theme by default.

Local Setup

python -m venv .venv
.venv\Scripts\activate
pip install -r requirements.txt
streamlit run app.py

For macOS or Linux:

python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
streamlit run app.py

Safety

Use this prototype only for authorized testing in local, lab, or classroom environments. Do not validate against systems you do not own or do not have permission to test.