PyPI - SafeAI-Static-Analyzer - Versions diffs - 2.5.0__tar.gz → 2.6.0__tar.gz - Mend

SafeAI-Static-Analyzer 2.5.0tar.gz → 2.6.0tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (260) hide show

{safeai_static_analyzer-2.5.0 → safeai_static_analyzer-2.6.0}/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 2.5.0
+Version: 2.6.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -36,7 +36,7 @@ Dynamic: license-file
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
 [![Website](https://img.shields.io/badge/web-safeai--analyzer.ikaruscareer.com-0f766e)](https://safeai-analyzer.ikaruscareer.com)
-[![Latest Release](https://img.shields.io/badge/latest-v2.4.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.4.0)
+[![Latest Release](https://img.shields.io/badge/latest-v2.5.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.5.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.

{safeai_static_analyzer-2.5.0 → safeai_static_analyzer-2.6.0}/README.md RENAMED Viewed

@@ -3,7 +3,7 @@
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
 [![Website](https://img.shields.io/badge/web-safeai--analyzer.ikaruscareer.com-0f766e)](https://safeai-analyzer.ikaruscareer.com)
-[![Latest Release](https://img.shields.io/badge/latest-v2.4.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.4.0)
+[![Latest Release](https://img.shields.io/badge/latest-v2.5.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.5.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.

{safeai_static_analyzer-2.5.0 → safeai_static_analyzer-2.6.0}/SafeAI_Static_Analyzer.egg-info/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 2.5.0
+Version: 2.6.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -36,7 +36,7 @@ Dynamic: license-file
 [![CI](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml/badge.svg)](https://github.com/ikaruscareer/SafeAI/actions/workflows/ci.yml)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/ikaruscareer/SafeAI/badge)](https://scorecard.dev/viewer/?uri=github.com/ikaruscareer/SafeAI)
 [![Website](https://img.shields.io/badge/web-safeai--analyzer.ikaruscareer.com-0f766e)](https://safeai-analyzer.ikaruscareer.com)
-[![Latest Release](https://img.shields.io/badge/latest-v2.4.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.4.0)
+[![Latest Release](https://img.shields.io/badge/latest-v2.5.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v2.5.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.

{safeai_static_analyzer-2.5.0 → safeai_static_analyzer-2.6.0}/SafeAI_Static_Analyzer.egg-info/SOURCES.txt RENAMED Viewed

@@ -60,6 +60,12 @@ safeai/analyzers/tool_def/__init__.py
 safeai/analyzers/tool_def/analyzer.py
 safeai/analyzers/workflow/__init__.py
 safeai/analyzers/workflow/analyzer.py
+safeai/benchmark/__init__.py
+safeai/benchmark/canonical.py
+safeai/benchmark/compare.py
+safeai/benchmark/metrics.py
+safeai/benchmark/report.py
+safeai/benchmark/runner.py
 safeai/cmd/__init__.py
 safeai/cmd/cli.py
 safeai/cmd/manifest_cli.py
@@ -152,6 +158,7 @@ safeai/report/json_report.py
 safeai/report/pr_comment.py
 safeai/report/registry_html.py
 safeai/report/sarif.py
+safeai/report/security_brief.py
 safeai/report/terminal.py
 safeai/rules/__init__.py
 safeai/rules/base_rules.yaml
@@ -167,6 +174,8 @@ tests/test_adapter_dataflow.py
 tests/test_architectural_invariants.py
 tests/test_architecture_diagram.py
 tests/test_assurance.py
+tests/test_authority_benchmark.py
+tests/test_authority_canonical.py
 tests/test_authority_change.py
 tests/test_baseline.py
 tests/test_baseline_compat.py
@@ -233,6 +242,7 @@ tests/test_scan_framework.py
 tests/test_scan_phase11.py
 tests/test_scorecard.py
 tests/test_scoring.py
+tests/test_security_brief.py
 tests/test_semantic.py
 tests/test_severity.py
 tests/test_suppressions.py

{safeai_static_analyzer-2.5.0 → safeai_static_analyzer-2.6.0}/safeai/analyzers/capability/analyzer.py RENAMED Viewed

@@ -23,6 +23,7 @@ CAP_PATTERNS = {
     "redis": re.compile(r"import redis|from redis|Redis\(|redis\.StrictRedis|redis\.Redis", re.IGNORECASE),
     "s3": re.compile(r"import boto3|from boto3|boto3\.client.*s3|boto3\.resource.*s3|S3Client|s3\.put|s3\.get", re.IGNORECASE),
     "slack": re.compile(r"import slack|from slack|SlackClient|slack_sdk|slack\.WebClient|slack\.SocketModeClient", re.IGNORECASE),
+    "ms_teams": re.compile(r"(?:\bimport\s+teams\b|\bfrom\s+teams\s+import\b|\bTeamsClient\b|\bteams_sdk\b|\bimport\s+pymsteams\b|\bfrom\s+pymsteams\b|\bpymsteams\.(?:connectorcard|cardsection)\b)", re.IGNORECASE),
     "jira": re.compile(r"import jira|from jira|JIRA\(|jira\.Client|jira\.JIRA", re.IGNORECASE),
     "browser_playwright": re.compile(r"import playwright|from playwright|Playwright", re.IGNORECASE),
     "browser_selenium": re.compile(r"import selenium|from selenium|webdriver|WebDriver", re.IGNORECASE),
@@ -45,6 +46,7 @@ RULE_BY_CAP = {
     "redis": "CAP_redis",
     "s3": "CAP_s3",
     "slack": "CAP_slack",
+    "ms_teams": "CAP_ms_teams",
     "jira": "CAP_jira",
     "browser_playwright": "CAP_browser_playwright",
     "browser_selenium": "CAP_browser_selenium",
@@ -63,6 +65,7 @@ CATEGORY_BY_CAP = {
     "redis": "Databases",
     "s3": "Cloud",
     "slack": "Collaboration",
+    "ms_teams": "Collaboration",
     "jira": "Collaboration",
     "browser_playwright": "Browser",
     "browser_selenium": "Browser",

safeai_static_analyzer-2.6.0/safeai/benchmark/__init__.py ADDED Viewed

@@ -0,0 +1,21 @@
+"""Authority evidence validation benchmark (v2.6).
+Offline, deterministic corpus evaluation: runs the real ``safeai
+scan`` CLI path against ``tests/benchmarks/authority/`` and compares
+structurally with hand-verified expected truth. The benchmark
+measures; it never gates.
+"""
+from safeai.benchmark.runner import (
+    BenchmarkError,
+    discover_cases,
+    evaluate_case,
+    run_corpus,
+)
+__all__ = [
+    "BenchmarkError",
+    "discover_cases",
+    "evaluate_case",
+    "run_corpus",
+]

SafeAI-Static-Analyzer 2.5.0__tar.gz → 2.6.0__tar.gz

SafeAI-Static-Analyzer 2.5.0tar.gz → 2.6.0tar.gz