feat: SARIF 2.1.0 download on deep scan (Shannon 흡수)

app.py

@@ -10,6 +10,7 @@ import requests
 import gradio as gr
 from huggingface_hub import whoami
 from gradio_client import Client
+from chitos_sarif import to_sarif
 
 ENGINE = os.environ.get("CHITOS_ENGINE_REPO", "")
 HFTOKEN = os.environ.get("HF_TOKEN", "")
@@ -469,6 +470,17 @@ def _save_html(body, host, deep):
     return fn
 
 
+def _save_sarif(d, host):
+    try:
+        s = to_sarif(d)
+    except Exception:
+        return None
+    fn = os.path.join(tempfile.gettempdir(), "CHITOS_%s.sarif.json" % host.replace(".", "_"))
+    with open(fn, "w", encoding="utf-8") as f:
+        json.dump(s, f, ensure_ascii=False, indent=1)
+    return fn
+
+
 def _spin(lang):
     return ("""<div style="text-align:center;padding:40px 0;font-family:sans-serif">
   <div style="width:46px;height:46px;border:5px solid #ede9fe;border-top-color:#6d28d9;border-radius:50%;margin:0 auto;animation:chspin .8s linear infinite"></div>
@@ -493,28 +505,32 @@ def free_scan(url, lang):
 
 
 def deep_scan(url, lang, profile: gr.OAuthProfile | None = None, oauth_token: gr.OAuthToken | None = None):
+    _hide = gr.update(visible=False)
     if profile is None or oauth_token is None:
         return _note(_L('먼저 위의 <b>"Sign in with Hugging Face"</b> 버튼으로 로그인하세요. (회사/조직 도메인 메일로 가입한 계정)',
-                        'First sign in with the <b>"Sign in with Hugging Face"</b> button above. (an account registered on your company/org domain email)', lang), "mid"), gr.update(visible=False), None
+                        'First sign in with the <b>"Sign in with Hugging Face"</b> button above. (an account registered on your company/org domain email)', lang), "mid"), _hide, _hide, None
     if not (url or "").strip():
-        return _note(_L("진단할 주소를 입력하세요.", "Enter a URL to scan.", lang), "mid"), gr.update(visible=False), None
+        return _note(_L("진단할 주소를 입력하세요.", "Enter a URL to scan.", lang), "mid"), _hide, _hide, None
     try:
         email = (whoami(token=oauth_token.token).get("email") or "").lower()
     except Exception:
         email = ""
     if not email:
         return _note(_L("로그인 계정의 인증된 이메일을 읽지 못했습니다. HF 계정 이메일 인증 후 다시 시도하세요.",
-                        "Could not read a verified email from your account. Verify your HF account email and try again.", lang), "hi"), gr.update(visible=False), None
+                        "Could not read a verified email from your account. Verify your HF account email and try again.", lang), "hi"), _hide, _hide, None
     edom = email.split("@")[-1]
     tdom = _domain(url)
     if edom != tdom and not tdom.endswith("." + edom) and not edom.endswith("." + tdom):
         return _note(_L("도메인 소유 확인 실패. 진단 대상(<b>%s</b>)의 도메인 이메일로 가입한 HF 계정으로 로그인해야 합니다. 현재 계정 도메인: <b>%s</b>" % (html.escape(tdom), html.escape(edom)),
-                        "Ownership check failed. Sign in with an HF account on the target domain (<b>%s</b>). Your account domain: <b>%s</b>" % (html.escape(tdom), html.escape(edom)), lang), "hi"), gr.update(visible=False), None
+                        "Ownership check failed. Sign in with an HF account on the target domain (<b>%s</b>). Your account domain: <b>%s</b>" % (html.escape(tdom), html.escape(edom)), lang), "hi"), _hide, _hide, None
     d = _api("/deep", {"url": url})
     body = build_report(d, deep=True, verified_email=email, lang=lang)
     if d.get("error") or d.get("blocked"):
-        return body, gr.update(visible=False), None
-    return body, gr.update(value=_save_html(body, d.get("host", "site"), True), visible=True), {"d": d, "email": email}
+        return body, _hide, _hide, None
+    host = d.get("host", "site")
+    sarif_fn = _save_sarif(d, host)
+    sarif_up = gr.update(value=sarif_fn, visible=True) if sarif_fn else _hide
+    return body, gr.update(value=_save_html(body, host, True), visible=True), sarif_up, {"d": d, "email": email}
 
 
 def consult(area, name, company, email, phone, msg, lang):
@@ -799,8 +815,9 @@ with gr.Blocks(title="CHITOS 인스턴트 스캔", css=CSS, theme=gr.themes.Soft
             u2 = gr.Textbox(label="진단할 주소 / Target URL", placeholder="example.com")
             b2 = gr.Button("인증 후 심화 진단 / Verify & deep scan", variant="primary")
             f2 = gr.File(label="리포트 다운로드 / Download report (HTML)", visible=False)
+            f_sarif = gr.File(label="SARIF 2.1.0 다운로드 / Download SARIF (CI/CD·GitHub Security)", visible=False)
             o2 = gr.HTML()
-            b2.click(_loading, lang_state, [o2, f2]).then(deep_scan, inputs=[u2, lang_state], outputs=[o2, f2, last_deep])
+            b2.click(_loading, lang_state, [o2, f2]).then(deep_scan, inputs=[u2, lang_state], outputs=[o2, f2, f_sarif, last_deep])
         with gr.Tab("③ 상담 · CONSULT"):
             g_d3 = gr.HTML(desc3("ko"))
             g_ah = gr.HTML(area_help("ko"))