post-patch-validation
trailofbits491 installs
Put security fixes to the test before merging.
What it does
Validates security patches against vulnerable baselines and returns reproducible failures, preserved evidence, and remaining testing gaps.
When to use it
Use after a security patch exists and before accepting, merging, or reporting it as fixed, including for AI-generated patches.
How to use it
Give it a repository, vulnerable revision, patch, and finding; it saves a validation report and reproducible evidence identifying failures and coverage gaps.
What you provide
- the vulnerable Git ref
- the patched Git ref or patch file
- the finding ID and root cause
- An existing project
Latest review
What you need · 2
The bundled runner requires Python 3.11 or newer.
The documented command-line procedure uses uv to run the validation script.
Access · 1
This skill
files referenced by check commands
Read
Hashes files referenced by checks