fix(proxy): log all Caido SDK errors as warnings

fix(proxy): log Caido timeouts as warnings
2026-11-09 13:31:41 -10:00 · 2026-10-12 15:00:00 -04:00 · 2026-10-12 14:51:10 -04:00
2 changed files with 5 additions and 0 deletions
@@ -1876,6 +1876,10 @@ def _build_dependency_evidence(
        evidence += f"\n\n**Usage analysis:** {label}."
        if reachability_evidence and reachability_evidence.strip():
            evidence += f" {reachability_evidence.strip()}"
+        evidence += (
+            " This is a prioritization signal from static analysis, not a"
+            " proof of exploitability or of safety."
+        )
    return evidence


@@ -663,6 +663,7 @@ async def test_dependency_report_records_reachability(report_state: ReportState)
        == "src/render.ts:14 calls `_.template()`."
    )
    assert "**Usage analysis:**" in report["evidence"]
+    assert "not a proof of exploitability or of safety" in report["evidence"]
    # The level must never influence the rating — that comes from the contextual
    # breakdown, or from advisory_cvss when no breakdown applies.
    assert report["severity"] == "high"
Author	SHA1	Message	Date
Ian	98707a785a	fix(proxy): log all Caido SDK errors as warnings	2026-10-12 15:00:00 -04:00
Ian	b58d3ac3c6	fix(proxy): log Caido timeouts as warnings	2026-10-12 14:51:10 -04:00