Optimize SAST verification pipeline with voting rounds, parallel retr…

Dockerfile

@@ -9,7 +9,7 @@ RUN useradd -m -u 1000 codeassureuser
 WORKDIR /app
 
 # Install codeassure
-RUN uv pip install --system --no-cache git+https://github.com/accuknox/codeassure-cli.git@v0.1.0
+RUN uv pip install --system --no-cache git+https://github.com/accuknox/codeassure-cli.git@v0.2.0
 
 # Set ownership
 RUN chown -R codeassureuser:codeassureuser /app

brev_docker_files/docker-compose.yml

@@ -33,6 +33,10 @@ services:
       - qwen3_coder
       - --reasoning-parser
       - qwen3
+      - --enable-prefix-caching
+      - --enable-chunked-prefill
+      - --max-num-batched-tokens
+      - "8192"
       - --trust-remote-code
       - --host
       - 0.0.0.0

codeassure.json

@@ -1,11 +1,11 @@
 {
   "model": {
     "provider": "openai",
-    "name": "qwen/qwen3.5-9b",
-    "api_base": "https://openrouter.ai/api",
-    "api_key": "$OPENROUTER_KEY"
+    "name": "qwen35-nvfp4",
+    "api_base": "http://localhost:5000",
+    "temperature": 0.1
   },
-  "concurrency": 2,
+  "concurrency": 7,
   "stage_timeout": 300,
   "finding_timeout": 600
 }

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "codeassure"
-version = "0.1.1"
+version = "0.2.0"
 description = "AI-powered SAST finding verification"
 readme = "README.md"
 requires-python = ">=3.11"

sast_verify/__init__.py

@@ -1 +1 @@
-__version__ = "0.1.0"
+__version__ = "0.2.0"

sast_verify/agents/__init__.py

@@ -1,12 +1,11 @@
-from .analyzer import build_analyzer, build_verdict_formatter
+from .analyzer import build_analyzer
 from .deps import AnalyzerDeps
 from .runner import analyze_all
 from .tools import grep_code, read_file
 
 __all__ = [
     "AnalyzerDeps",
     "build_analyzer",
-    "build_verdict_formatter",
     "analyze_all",
     "read_file",
     "grep_code",

sast_verify/agents/analyzer.py

@@ -38,6 +38,13 @@ def build_verdict_formatter() -> Agent[None, str]:
     )
 
 
+def build_group_verdict_formatter() -> Agent[None, str]:
+    return Agent(
+        get_config().build_model(),
+        instructions=GROUP_VERDICT_FORMATTER_INSTRUCTION,
+    )
+
+
 def build_group_analyzer() -> Agent[AnalyzerDeps, str]:
     cfg = get_config()
     if cfg.model.tool_calling:
@@ -52,10 +59,3 @@ def build_group_analyzer() -> Agent[AnalyzerDeps, str]:
         deps_type=AnalyzerDeps,
         instructions=GROUP_ANALYZER_INSTRUCTION_NO_TOOLS,
     )
-
-
-def build_group_verdict_formatter() -> Agent[None, str]:
-    return Agent(
-        get_config().build_model(),
-        instructions=GROUP_VERDICT_FORMATTER_INSTRUCTION,
-    )