test: cover archive primitive detection

[mldangelo-oai]

Summary

• add TorchServe handler regression coverage for direct/imported ctypes and webbrowser primitives plus shadowed negatives
• add generic ZIP Python-member regression coverage for direct/imported ctypes and webbrowser primitives plus shadowed negatives
• rerun exact C197 probes to confirm ctypes, webbrowser, runpy, fallback MAR, and ZIP paths now fail with S108/S109/S110 checks

Validation

• PYTHONPATH=/private/tmp/modelaudit-c197 PROMPTFOO_DISABLE_TELEMETRY=1 /Users/mdangelo/code/modelaudit/.venv/bin/pytest tests/scanners/test_torchserve_mar_scanner.py::test_scan_detects_handler_execution_primitive tests/scanners/test_torchserve_mar_scanner.py::test_scan_allows_shadowed_direct_handler_primitives tests/scanners/test_zip_scanner.py::test_scan_zip_flags_direct_imported_python_member_primitives tests/scanners/test_zip_scanner.py::test_scan_zip_allows_shadowed_direct_python_member_primitives -q: 27 passed
• PYTHONPATH=/private/tmp/modelaudit-c197 PROMPTFOO_DISABLE_TELEMETRY=1 /Users/mdangelo/code/modelaudit/.venv/bin/pytest tests/scanners/test_torchserve_mar_scanner.py tests/scanners/test_zip_scanner.py -q: 591 passed, 13 warnings
• ruff check modelaudit/scanners/torchserve_mar_scanner.py modelaudit/scanners/archive_member_security.py tests/scanners/test_torchserve_mar_scanner.py tests/scanners/test_zip_scanner.py
• ruff format --check modelaudit/scanners/torchserve_mar_scanner.py modelaudit/scanners/archive_member_security.py tests/scanners/test_torchserve_mar_scanner.py tests/scanners/test_zip_scanner.py
• mypy modelaudit/scanners/torchserve_mar_scanner.py modelaudit/scanners/archive_member_security.py tests/scanners/test_torchserve_mar_scanner.py tests/scanners/test_zip_scanner.py
• git diff --check

[mldangelo-oai]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Hooray!

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[ianw-oai]

Looks good.