https://cybertoolchain.io/tools/raptor New releases and features in RAPTOR, tracked by The Cyber Toolchain. en Mon, 07 Sep 2026 07:48:41 GMT https://github.com/gadievron/raptor/releases/tag/v3.1.0 https://github.com/gadievron/raptor/releases/tag/v3.1.0 Mon, 07 Sep 2026 07:48:41 GMT RAPTOR v3.1.0 lands bulk audit mode, OCI/Dockerfile substrate, SCA supply-chain detection, multi-LLM provider support, and Frida reachability integration. • Adds `--audit-verbose` flag for strace-style verbose output during sandbox audit runs. • Adds `--audit-budget <n>` flag to cap the maximum number of audit events collected per run. • Adds `--compiler-scan` / `--no-compiler-scan` flags to enable or disable a compiler-analyzer channel using gcc `-fanalyzer` or clang `--analyze`. • Adds `--compiler-scan-max-tus <n>` flag to cap the number of translation units analyzed by `--compiler-scan` (default 2000). • Adds `--expanded-semgrep` flag to re-run Semgrep rules over preprocessor-expanded views of macro-heavy C/C++ translation units. • Adds OCI registry, Dockerfile, and tar as scan substrates, enabling RAPTOR to analyze container images and tarballs directly. • Adds a full SCA (software composition analysis) mechanical pipeline with supply-chain detector and first-party hardening. • Adds `cve-env` as an integrated package (`packages/cve_env`) for CVE environment modeling (Phase 1). • Adds full multi-LLM provider support for the analysis dispatch layer, with Mantle and InvokeModel coexistence. • Adds source intelligence substrate with a minimal axis-1 rule for source-level intel gathering. • Adds a corpus runner with rule evaluation and label linting for calibrating detection rules. • Adds per-function annotations emitted across validation stages A, B, and D via the `validate` module. • Adds mechanical sink discovery and framework API detection (MAP-5f) to the `understand` module. • Adds agentic checker synthesis — the system now generates a checker per confirmed finding. • Adds JS and Go function-as-argument framework registration for reachability analysis. • Adds a persistent verdict-bearing coverage store wired into the live pipeline. • Adds Frida evidence pipeline with full consumer wiring and reachability integration. • Adds a web correlation tier with expectations, check legs, and a poisoned-render oracle for web vulnerability analysis. • Adds proxy-hosts auto-calibration for CodeQL analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/raptor https://github.com/gadievron/raptor/releases/tag/v3.1.0 https://github.com/gadievron/raptor/releases/tag/v3.1.0 Mon, 07 Sep 2026 07:48:41 GMT RAPTOR v3.1.0 lands bulk audit mode, OCI/Dockerfile substrate, SCA supply-chain detection, multi-LLM provider support, and Frida reachability integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--audit-verbose` flag for strace-style verbose output during sandbox audit runs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--audit-budget <n>` flag to cap the maximum number of audit events collected per run. • Adds `--compiler-scan` / `--no-compiler-scan` flags to enable or disable a compiler-analyzer channel using gcc `-fanalyzer` or clang `--analyze`. • Adds `--compiler-scan-max-tus <n>` flag to cap the number of translation units analyzed by `--compiler-scan` (default 2000). • Adds `--expanded-semgrep` flag to re-run Semgrep rules over preprocessor-expanded views of macro-heavy C/C++ translation units. • Adds OCI registry, Dockerfile, and tar as scan substrates, enabling RAPTOR to analyze container images and tarballs directly. • Adds a full SCA (software composition analysis) mechanical pipeline with supply-chain detector and first-party hardening. • Adds `cve-env` as an integrated package (`packages/cve_env`) for CVE environment modeling (Phase 1). • Adds full multi-LLM provider support for the analysis dispatch layer, with Mantle and InvokeModel coexistence. • Adds source intelligence substrate with a minimal axis-1 rule for source-level intel gathering. • Adds a corpus runner with rule evaluation and label linting for calibrating detection rules. • Adds per-function annotations emitted across validation stages A, B, and D via the `validate` module. • Adds mechanical sink discovery and framework API detection (MAP-5f) to the `understand` module. • Adds agentic checker synthesis — the system now generates a checker per confirmed finding. • Adds JS and Go function-as-argument framework registration for reachability analysis. • Adds a persistent verdict-bearing coverage store wired into the live pipeline. • Adds Frida evidence pipeline with full consumer wiring and reachability integration. • Adds a web correlation tier with expectations, check legs, and a poisoned-render oracle for web vulnerability analysis. • Adds proxy-hosts auto-calibration for CodeQL analysis. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/raptor