Add configurable security policy engine

[ramya2006sri]

Before opening: make sure there is an issue tracking this work, and link it below. PRs without a linked issue may be closed without review.

Linked issue

Closes #140

What this PR does

Adds a configurable security policy engine that allows users to upload YAML policy files during scans. Uploaded policies are parsed and evaluated against scan findings, and the evaluation result is included in the scan status.

Type of change

• Bug fix
• New feature
• ML model / training pipeline
• Refactor (no behaviour change)
• Documentation
• Tests only

ML tier (if applicable)

• Tier 1 — Triage
• Tier 2 — Predictive
• Tier 3 — Autonomous
• Not ML-related

Stack affected

• Backend
• Frontend
• Both

---

Changes

Backend

• Added YAML policy parser.
• Added security policy evaluation engine.
• Added optional policy file upload to the /scan endpoint.
• Evaluates scan findings against uploaded policies.
• Stores policy evaluation results in the scan status.
• Added parser and evaluator unit tests.

Frontend

• No frontend changes.

New dependencies

• PyYAML

Database / schema changes

• None

---

Testing

How did you test this?

• Parsed sample YAML policies successfully.
• Executed parser unit tests.
• Executed policy engine unit tests.
• Verified policy evaluation during scan.
• Verified project compilation.

Checklist

• Tested locally end-to-end (upload ZIP or GitHub URL → scan → findings returned correctly)
• New ML model falls back gracefully when model file is absent
• No new console.error or unhandled Python exceptions introduced
• Added or updated tests where applicable
• requirements.txt / package.json updated if new dependencies added
• New model files (.pkl, .pt, etc.) are gitignored, not committed

---

Anything reviewers should focus on

Please review the YAML policy parsing, policy evaluation logic, and integration with the scan workflow to ensure policy rules are correctly evaluated and reported.

Screenshots (if UI changed)

N/A (Backend-only changes)

[github-actions]

🎉 Thank you @ramya2006sri for submitting a Pull Request!

We're excited to review your contribution.

Before Review

✅ Ensure all CI checks pass
✅ Complete the PR template
✅ Link the related issue

⚡ Want faster reviews and contributor support?

Join our Discord community:

🔗 https://discord.gg/FcXuyw2Rs

Maintainers and mentors are active there and can help resolve blockers quickly.

Happy Contributing! 🚀

[github-actions]

✅ PR template check passed!

@arpit2006 this PR is ready for your review. 🚀

[github-actions]

✅ PR template check passed!

@arpit2006 this PR is ready for your review. 🚀

[arpit2006]

@ramya2006sri , Please Resolve CI and Quality issue

[arpit2006]

Please Resolve CI Fail and Quality gate.

[github-actions]

✅ PR template check passed!

@arpit2006 this PR is ready for your review. 🚀

[arpit2006]

Fix CI fails

[github-actions]

✅ PR template check passed!

@arpit2006 this PR is ready for your review. 🚀

[github-actions]

✅ PR template check passed!

@arpit2006 this PR is ready for your review. 🚀

[github-actions]

✅ PR template check passed!

@arpit2006 this PR is ready for your review. 🚀

[github-actions]

✅ PR template check passed!

@arpit2006 this PR is ready for your review. 🚀