@lowwattlabs/clawsec 2.0.0 → 2.0.1

package/cli/clawsec.py

@@ -19,7 +19,7 @@ import sys
 import time
 from pathlib import Path
 
-VERSION = "2.0.0"
+VERSION = "2.0.1"
 CLAWSEC_DIR = os.environ.get("CLAWSEC_HOME", os.path.expanduser("~/.clawsec"))
 INTEL_DIR = os.environ.get("CLAWSEC_INTEL_DIR", os.path.join(CLAWSEC_DIR, "intel"))
 REPORTS_DIR = os.environ.get("CLAWSEC_REPORTS_DIR", os.path.join(CLAWSEC_DIR, "reports"))
@@ -91,6 +91,11 @@ def cmd_scan(args):
 
 def cmd_sync(args):
     """Run intel sync."""
+    # Ensure intel directories exist
+    intel_dirs = ['cisa-kev', 'osv', 'osv/npm', 'osv/PyPI', 'epss', 'malwarebazaar', 'urlhaus', 'threatfox', 'feodo', 'yara-rules', 'semgrep-rules']
+    for d in intel_dirs:
+        os.makedirs(os.path.join(INTEL_DIR, d), exist_ok=True)
+    os.makedirs(REPORTS_DIR, exist_ok=True)
     sync_sh = os.path.join(PKG_ROOT, "lib", "intel-sync", "sync.sh")
     if not os.path.exists(sync_sh):
         sync_sh = os.path.join(CLAWSEC_DIR, "lib", "intel-sync", "sync.sh")

package/lib/intel-sync/sources/osv.sh

@@ -59,9 +59,11 @@ for eco in "${ECOSYSTEMS[@]}"; do
 
     if [[ -d "$eco_dir" ]]; then
         # Build index using Python for speed
-        python3 -c "
+        # Pass both eco_dir and index_file as arguments to avoid bash-in-Python variable scoping
+        index_count=$(python3 -c "
 import json, os, sys
 eco_dir = sys.argv[1]
+index_path = sys.argv[2]
 index = {}
 for fname in os.listdir(eco_dir):
     if not fname.endswith('.json') or fname == 'index.json':
@@ -81,12 +83,12 @@ for fname in os.listdir(eco_dir):
     except (json.JSONDecodeError, KeyError, OSError):
         continue
 # Write index atomically
-tmp = index_file + '.new'
+tmp = index_path + '.new'
 with open(tmp, 'w') as f:
     json.dump(index, f)
-os.rename(tmp, index_file)
-" "$eco_dir"
-        index_count=$(python3 -c "import json; print(len(json.load(open('$index_file'))))" 2>/dev/null || echo "?")
+os.rename(tmp, index_path)
+print(len(index))
+" "$eco_dir" "$index_file")
         log_info "OSV $eco index: $index_count packages"
     fi
 done

package/lib/intel-sync/sync.sh

@@ -29,6 +29,14 @@ usage() {
 }
 
 ALL_SOURCES=(cisa-kev osv epss malwarebazaar urlhaus threatfox feodo yara-rules semgrep-rules)
+
+# Ensure intel directories exist
+INTEL_DIR=
+for src in ; do
+    mkdir -p /
+done
+mkdir -p /osv/npm /osv/PyPI
+mkdir -p 
 requested_sources=()
 json_output=0
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowwattlabs/clawsec",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "ClawSec - Security Verification for ClawHub Skills",
   "bin": {
     "clawsec": "./bin/clawsec.js",