@neralabs/rerail-pack-python 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (147) hide show
  1. package/LICENSE +202 -0
  2. package/NOTICE +7 -0
  3. package/README.md +36 -0
  4. package/licenses/bandit/LICENSE +175 -0
  5. package/licenses/bandit/UPSTREAM.md +100 -0
  6. package/licenses/ruff/LICENSE +430 -0
  7. package/licenses/ruff/UPSTREAM.md +338 -0
  8. package/pack.json +912 -0
  9. package/package.json +30 -0
  10. package/rules/bandit-b101-assert-used.json +38 -0
  11. package/rules/bandit-b102-exec-used.json +125 -0
  12. package/rules/bandit-b110-try-except-pass.json +109 -0
  13. package/rules/bandit-b112-try-except-continue.json +109 -0
  14. package/rules/bandit-b113-request-without-timeout.json +138 -0
  15. package/rules/bandit-b301-pickle.json +58 -0
  16. package/rules/bandit-b302-marshal.json +48 -0
  17. package/rules/bandit-b303-md5.json +79 -0
  18. package/rules/bandit-b305-cipher-modes.json +47 -0
  19. package/rules/bandit-b306-mktemp-q.json +54 -0
  20. package/rules/bandit-b307-eval.json +125 -0
  21. package/rules/bandit-b308-mark-safe.json +47 -0
  22. package/rules/bandit-b310-urllib-urlopen.json +54 -0
  23. package/rules/bandit-b311-random.json +57 -0
  24. package/rules/bandit-b312-telnetlib.json +47 -0
  25. package/rules/bandit-b313-xml-bad-celementtree.json +50 -0
  26. package/rules/bandit-b314-xml-bad-elementtree.json +50 -0
  27. package/rules/bandit-b315-xml-bad-expatreader.json +47 -0
  28. package/rules/bandit-b316-xml-bad-expatbuilder.json +48 -0
  29. package/rules/bandit-b317-xml-bad-sax.json +58 -0
  30. package/rules/bandit-b318-xml-bad-minidom.json +48 -0
  31. package/rules/bandit-b319-xml-bad-pulldom.json +48 -0
  32. package/rules/bandit-b321-ftplib.json +47 -0
  33. package/rules/bandit-b323-unverified-context.json +47 -0
  34. package/rules/bandit-b401-import-telnetlib.json +48 -0
  35. package/rules/bandit-b402-import-ftplib.json +48 -0
  36. package/rules/bandit-b405-import-xml-etree.json +69 -0
  37. package/rules/bandit-b406-import-xml-sax.json +73 -0
  38. package/rules/bandit-b407-import-xml-expat.json +54 -0
  39. package/rules/bandit-b408-import-xml-minidom.json +54 -0
  40. package/rules/bandit-b409-import-xml-pulldom.json +54 -0
  41. package/rules/bandit-b411-import-xmlrpclib.json +48 -0
  42. package/rules/bandit-b413-import-pycrypto.json +159 -0
  43. package/rules/bandit-b415-import-pyghmi.json +48 -0
  44. package/rules/bandit-b502-ssl-with-bad-version.json +90 -0
  45. package/rules/bandit-b505-weak-cryptographic-key.json +166 -0
  46. package/rules/bandit-b507-ssh-no-host-key-verification.json +210 -0
  47. package/rules/bandit-b606-start-process-with-no-shell.json +63 -0
  48. package/rules/bandit-b610-django-extra-used.json +268 -0
  49. package/rules/bandit-b615-huggingface-unsafe-download.json +1152 -0
  50. package/rules/ruff-async100-cancel-scope-no-checkpoint.json +357 -0
  51. package/rules/ruff-async105-trio-sync-call.json +199 -0
  52. package/rules/ruff-async115-async-zero-sleep.json +264 -0
  53. package/rules/ruff-async116-long-sleep-not-forever.json +267 -0
  54. package/rules/ruff-async210-blocking-http-call-in-async-function.json +161 -0
  55. package/rules/ruff-async221-run-process-in-async-function.json +342 -0
  56. package/rules/ruff-async222-wait-for-process-in-async-function.json +144 -0
  57. package/rules/ruff-async230-blocking-open-call-in-async-function.json +339 -0
  58. package/rules/ruff-async250-blocking-input-in-async-function.json +143 -0
  59. package/rules/ruff-async251-blocking-sleep-in-async-function.json +140 -0
  60. package/rules/ruff-b002-unary-prefix-increment-decrement.json +54 -0
  61. package/rules/ruff-b003-assignment-to-os-environ.json +54 -0
  62. package/rules/ruff-b004-unreliable-callable-check.json +171 -0
  63. package/rules/ruff-b005-strip-with-multi-characters.json +131 -0
  64. package/rules/ruff-b007-unused-loop-control-variable.json +368 -0
  65. package/rules/ruff-b009-get-attr-with-constant.json +190 -0
  66. package/rules/ruff-b010-set-attr-with-constant.json +219 -0
  67. package/rules/ruff-b011-assert-false.json +62 -0
  68. package/rules/ruff-b013-redundant-tuple-in-exception-handler.json +94 -0
  69. package/rules/ruff-b014-duplicate-handler-exception.json +126 -0
  70. package/rules/ruff-b016-raise-literal.json +47 -0
  71. package/rules/ruff-b020-loop-variable-overrides-iterator.json +341 -0
  72. package/rules/ruff-b021-f-string-docstring.json +48 -0
  73. package/rules/ruff-b022-useless-contextlib-suppress.json +95 -0
  74. package/rules/ruff-b023-function-uses-loop-variable.json +560 -0
  75. package/rules/ruff-b025-duplicate-try-block-exception.json +182 -0
  76. package/rules/ruff-b026-star-arg-unpacking-after-keyword-arg.json +57 -0
  77. package/rules/ruff-b028-no-explicit-stacklevel.json +177 -0
  78. package/rules/ruff-b029-except-with-empty-tuple.json +102 -0
  79. package/rules/ruff-b032-unintentional-type-annotation.json +157 -0
  80. package/rules/ruff-b033-duplicate-value.json +129 -0
  81. package/rules/ruff-b034-re-sub-positional-args.json +159 -0
  82. package/rules/ruff-b039-mutable-contextvar-default.json +281 -0
  83. package/rules/ruff-b904-raise-without-from-inside-except.json +194 -0
  84. package/rules/ruff-b905-zip-without-explicit-strict.json +429 -0
  85. package/rules/ruff-e711-none-comparison.json +199 -0
  86. package/rules/ruff-e721-type-comparison.json +293 -0
  87. package/rules/ruff-e722-bare-except.json +57 -0
  88. package/rules/ruff-e742-ambiguous-class-name.json +47 -0
  89. package/rules/ruff-e743-ambiguous-function-name.json +47 -0
  90. package/rules/ruff-f403-undefined-local-with-import-star.json +73 -0
  91. package/rules/ruff-f405-undefined-local-with-import-star-usage.json +87 -0
  92. package/rules/ruff-f406-undefined-local-with-nested-import-star-usage.json +39 -0
  93. package/rules/ruff-f407-future-feature-not-defined.json +56 -0
  94. package/rules/ruff-f501-percent-format-invalid-format.json +88 -0
  95. package/rules/ruff-f502-percent-format-expected-mapping.json +127 -0
  96. package/rules/ruff-f503-percent-format-expected-sequence.json +127 -0
  97. package/rules/ruff-f504-percent-format-extra-named-arguments.json +46 -0
  98. package/rules/ruff-f505-percent-format-missing-argument.json +49 -0
  99. package/rules/ruff-f506-percent-format-mixed-positional-and-named.json +114 -0
  100. package/rules/ruff-f507-percent-format-positional-count-mismatch.json +78 -0
  101. package/rules/ruff-f508-percent-format-star-requires-sequence.json +112 -0
  102. package/rules/ruff-f509-percent-format-unsupported-format-character.json +86 -0
  103. package/rules/ruff-f521-string-dot-format-invalid-format.json +83 -0
  104. package/rules/ruff-f522-string-dot-format-extra-named-arguments.json +46 -0
  105. package/rules/ruff-f523-string-dot-format-extra-positional-arguments.json +48 -0
  106. package/rules/ruff-f524-string-dot-format-missing-arguments.json +46 -0
  107. package/rules/ruff-f525-string-dot-format-mixing-automatic.json +99 -0
  108. package/rules/ruff-f541-f-string-missing-placeholders.json +52 -0
  109. package/rules/ruff-f601-multi-value-repeated-key-literal.json +215 -0
  110. package/rules/ruff-f602-multi-value-repeated-key-variable.json +123 -0
  111. package/rules/ruff-f622-multiple-starred-expressions.json +57 -0
  112. package/rules/ruff-f632-is-literal.json +232 -0
  113. package/rules/ruff-f633-invalid-print-syntax.json +299 -0
  114. package/rules/ruff-f701-break-outside-loop.json +64 -0
  115. package/rules/ruff-f702-continue-outside-loop.json +64 -0
  116. package/rules/ruff-f706-return-outside-function.json +61 -0
  117. package/rules/ruff-f707-default-except-not-last.json +50 -0
  118. package/rules/ruff-f722-forward-annotation-syntax-error.json +654 -0
  119. package/rules/ruff-f822-undefined-export.json +55 -0
  120. package/rules/ruff-f823-undefined-local.json +42 -0
  121. package/rules/ruff-f842-unused-annotation.json +51 -0
  122. package/rules/ruff-f901-raise-not-implemented.json +97 -0
  123. package/rules/ruff-pie794-duplicate-class-field-definition.json +157 -0
  124. package/rules/ruff-pie796-non-unique-enums.json +460 -0
  125. package/rules/ruff-pie800-unnecessary-spread.json +62 -0
  126. package/rules/ruff-pie804-unnecessary-dict-kwargs.json +179 -0
  127. package/rules/ruff-pie807-reimplemented-container-builtin.json +100 -0
  128. package/rules/ruff-pie810-multiple-starts-ends-with.json +585 -0
  129. package/rules/ruff-ret501-unnecessary-return-none.json +256 -0
  130. package/rules/ruff-ret502-implicit-return-value.json +163 -0
  131. package/rules/ruff-ret505-superfluous-else-return.json +211 -0
  132. package/rules/ruff-ret506-superfluous-else-raise.json +211 -0
  133. package/rules/ruff-ret507-superfluous-else-continue.json +211 -0
  134. package/rules/ruff-ret508-superfluous-else-break.json +211 -0
  135. package/rules/ruff-sim101-duplicate-isinstance-call.json +384 -0
  136. package/rules/ruff-sim107-return-in-try-except-finally.json +82 -0
  137. package/rules/ruff-sim109-compare-with-tuple.json +205 -0
  138. package/rules/ruff-sim112-uncapitalized-environment-variables.json +168 -0
  139. package/rules/ruff-sim113-enumerate-for-loop.json +562 -0
  140. package/rules/ruff-sim208-double-negation.json +58 -0
  141. package/rules/ruff-sim210-if-expr-with-true-false.json +90 -0
  142. package/rules/ruff-sim211-if-expr-with-false-true.json +90 -0
  143. package/rules/ruff-sim212-if-expr-with-twisted-arms.json +95 -0
  144. package/rules/ruff-sim300-yoda-conditions.json +487 -0
  145. package/rules/ruff-sim905-split-static-string.json +579 -0
  146. package/rules/ruff-sim910-dict-get-with-none-default.json +518 -0
  147. package/rules/ruff-t100-debugger.json +197 -0
@@ -0,0 +1,54 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-b003-assignment-to-os-environ",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's B003 (assignment-to-os-environ): a plain assignment statement with exactly one target, that target being the attribute `os.environ` (the name `os`, not resolved; parentheses around the target are transparent). Chained assignments (several targets), annotated and augmented assignments are not checked, as in Ruff. Reported on the attribute.",
7
+ "scope": { "include": ["**/*"], "exclude": [] },
8
+ "clauses": [
9
+ {
10
+ "id": "assignment-to-os-environ",
11
+ "forbid": {
12
+ "ast": {
13
+ "language": "python",
14
+ "utils": {
15
+ "single-target-assignment": {
16
+ "kind": "assignment",
17
+ "not": {
18
+ "any": [
19
+ { "has": { "stopBy": "neighbor", "regex": "^:$" } },
20
+ { "has": { "stopBy": "neighbor", "kind": "assignment" } },
21
+ { "inside": { "stopBy": "neighbor", "kind": "assignment" } }
22
+ ]
23
+ }
24
+ },
25
+ "sole-target": {
26
+ "any": [
27
+ {
28
+ "precedes": { "stopBy": "neighbor", "regex": "^=$" },
29
+ "inside": { "stopBy": "neighbor", "matches": "single-target-assignment" }
30
+ },
31
+ {
32
+ "inside": {
33
+ "stopBy": "neighbor",
34
+ "any": [
35
+ { "kind": "parenthesized_expression" },
36
+ { "kind": "tuple_pattern", "not": { "has": { "stopBy": "neighbor", "regex": "^,$" } } }
37
+ ],
38
+ "matches": "sole-target"
39
+ }
40
+ }
41
+ ]
42
+ }
43
+ },
44
+ "rule": {
45
+ "kind": "attribute",
46
+ "pattern": "os.environ",
47
+ "matches": "sole-target"
48
+ }
49
+ }
50
+ },
51
+ "violation": { "anchor": "witness.span", "code": "B003", "message": "Assigning to `os.environ` doesn't clear the environment", "suppress": { "noqa": { "codes": ["B003"] } } }
52
+ }
53
+ ]
54
+ }
@@ -0,0 +1,171 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-b004-unreliable-callable-check",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's B004 (unreliable-callable-check): `hasattr(x, \"__call__\")` with exactly two positional arguments, or `getattr(x, \"__call__\")` / `getattr(x, \"__call__\", default)` with two or three, no keyword arguments, the second argument a str literal (not bytes, an f- or t-string; parentheses transparent) whose value is `__call__` (escapes decoded, implicit concatenations joined). The callee (parentheses transparent) resolves to the builtin `hasattr`/`getattr` (Ruff's `resolve_builtin_symbol`, via `resolves`): the unshadowed name, or that attribute of the `builtins` module through the file's imports. Reported on the call.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "unreliable-callable-check",
16
+ "forbid": {
17
+ "ast": {
18
+ "language": "python",
19
+ "utils": {
20
+ "call-string": {
21
+ "any": [
22
+ {
23
+ "any": [
24
+ {
25
+ "kind": "string",
26
+ "regex": "^[rRuU]{0,2}['\"]"
27
+ },
28
+ {
29
+ "kind": "concatenated_string",
30
+ "not": {
31
+ "has": {
32
+ "stopBy": "neighbor",
33
+ "kind": "string",
34
+ "not": {
35
+ "regex": "^[rRuU]{0,2}['\"]"
36
+ }
37
+ }
38
+ }
39
+ }
40
+ ],
41
+ "value": {
42
+ "eq": "__call__"
43
+ }
44
+ },
45
+ {
46
+ "kind": "parenthesized_expression",
47
+ "has": {
48
+ "stopBy": "neighbor",
49
+ "matches": "call-string"
50
+ }
51
+ }
52
+ ]
53
+ },
54
+ "positional": {
55
+ "not": {
56
+ "any": [
57
+ {
58
+ "kind": "keyword_argument"
59
+ },
60
+ {
61
+ "kind": "dictionary_splat"
62
+ }
63
+ ]
64
+ }
65
+ },
66
+ "builtin-callee": {
67
+ "any": [
68
+ {
69
+ "any": [
70
+ {
71
+ "kind": "identifier"
72
+ },
73
+ {
74
+ "kind": "attribute"
75
+ }
76
+ ],
77
+ "resolves": {
78
+ "global": [
79
+ "hasattr",
80
+ "getattr"
81
+ ],
82
+ "import": [
83
+ "builtins.hasattr",
84
+ "builtins.getattr"
85
+ ]
86
+ }
87
+ },
88
+ {
89
+ "kind": "parenthesized_expression",
90
+ "has": {
91
+ "stopBy": "neighbor",
92
+ "matches": "builtin-callee"
93
+ }
94
+ }
95
+ ]
96
+ },
97
+ "getattr-callee": {
98
+ "any": [
99
+ {
100
+ "any": [
101
+ {
102
+ "kind": "identifier"
103
+ },
104
+ {
105
+ "kind": "attribute"
106
+ }
107
+ ],
108
+ "resolves": {
109
+ "global": [
110
+ "getattr"
111
+ ],
112
+ "import": [
113
+ "builtins.getattr"
114
+ ]
115
+ }
116
+ },
117
+ {
118
+ "kind": "parenthesized_expression",
119
+ "has": {
120
+ "stopBy": "neighbor",
121
+ "matches": "getattr-callee"
122
+ }
123
+ }
124
+ ]
125
+ }
126
+ },
127
+ "rule": {
128
+ "kind": "call",
129
+ "any": [
130
+ {
131
+ "pattern": "$FUNC($OBJ, $ATTR)"
132
+ },
133
+ {
134
+ "pattern": "$GETATTR($OBJ, $ATTR, $DEFAULT)"
135
+ }
136
+ ]
137
+ },
138
+ "constraints": {
139
+ "FUNC": {
140
+ "matches": "builtin-callee"
141
+ },
142
+ "GETATTR": {
143
+ "matches": "getattr-callee"
144
+ },
145
+ "OBJ": {
146
+ "matches": "positional"
147
+ },
148
+ "ATTR": {
149
+ "matches": "call-string"
150
+ },
151
+ "DEFAULT": {
152
+ "matches": "positional"
153
+ }
154
+ }
155
+ }
156
+ },
157
+ "violation": {
158
+ "anchor": "witness.span",
159
+ "code": "B004",
160
+ "message": "Using `hasattr(x, \"__call__\")` to test if x is callable is unreliable. Use `callable(x)` for consistent results.",
161
+ "suppress": {
162
+ "noqa": {
163
+ "codes": [
164
+ "B004"
165
+ ]
166
+ }
167
+ }
168
+ }
169
+ }
170
+ ]
171
+ }
@@ -0,0 +1,131 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-b005-strip-with-multi-characters",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's B005 (strip-with-multi-characters): `.strip`/`.lstrip`/`.rstrip` called with exactly one positional argument that is a str literal (not bytes, an f- or t-string; escapes decoded, implicit concatenations joined) whose value repeats a character, tested with a backreference (`(.).*\\1`). Reported on the call.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "strip-with-multi-characters",
16
+ "forbid": {
17
+ "ast": {
18
+ "language": "python",
19
+ "utils": {
20
+ "literal": {
21
+ "any": [
22
+ {
23
+ "any": [
24
+ {
25
+ "kind": "string",
26
+ "regex": "^[rRuU]{0,2}['\"]"
27
+ },
28
+ {
29
+ "kind": "concatenated_string",
30
+ "not": {
31
+ "has": {
32
+ "stopBy": "neighbor",
33
+ "kind": "string",
34
+ "not": {
35
+ "regex": "^[rRuU]{0,2}['\"]"
36
+ }
37
+ }
38
+ }
39
+ }
40
+ ],
41
+ "value": {
42
+ "regex": "(?s)(.).*\\1"
43
+ }
44
+ },
45
+ {
46
+ "kind": "parenthesized_expression",
47
+ "has": {
48
+ "stopBy": "neighbor",
49
+ "matches": "literal"
50
+ }
51
+ }
52
+ ]
53
+ },
54
+ "positional": {
55
+ "not": {
56
+ "any": [
57
+ {
58
+ "kind": "keyword_argument"
59
+ },
60
+ {
61
+ "kind": "dictionary_splat"
62
+ },
63
+ {
64
+ "kind": "comment"
65
+ },
66
+ {
67
+ "regex": "^[(),]$"
68
+ }
69
+ ]
70
+ }
71
+ }
72
+ },
73
+ "rule": {
74
+ "kind": "call",
75
+ "has": {
76
+ "stopBy": "neighbor",
77
+ "kind": "attribute",
78
+ "has": {
79
+ "stopBy": "neighbor",
80
+ "kind": "identifier",
81
+ "regex": "^[lr]?strip$",
82
+ "follows": {
83
+ "stopBy": "neighbor",
84
+ "regex": "^\\.$"
85
+ }
86
+ }
87
+ },
88
+ "all": [
89
+ {
90
+ "has": {
91
+ "stopBy": "neighbor",
92
+ "kind": "argument_list",
93
+ "all": [
94
+ {
95
+ "count": {
96
+ "has": {
97
+ "stopBy": "neighbor",
98
+ "matches": "positional"
99
+ },
100
+ "min": 1,
101
+ "max": 1
102
+ }
103
+ },
104
+ {
105
+ "has": {
106
+ "stopBy": "neighbor",
107
+ "matches": "literal"
108
+ }
109
+ }
110
+ ]
111
+ }
112
+ }
113
+ ]
114
+ }
115
+ }
116
+ },
117
+ "violation": {
118
+ "anchor": "witness.span",
119
+ "code": "B005",
120
+ "message": "Using `.strip()` with multi-character strings is misleading",
121
+ "suppress": {
122
+ "noqa": {
123
+ "codes": [
124
+ "B005"
125
+ ]
126
+ }
127
+ }
128
+ }
129
+ }
130
+ ]
131
+ }