agentsec-cli 1.0.0__tar.gz → 1.0.3__tar.gz

{agentsec_cli-1.0.0 → agentsec_cli-1.0.3}/CHANGELOG.md

@@ -5,6 +5,29 @@ All notable changes to AgentSec will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.3] - 2026-07-03
+
+### Fixed
+- Recovered local development history that had never been pushed to GitHub (remote `main` only contained the LICENSE file). Realigned local repo as the canonical history.
+- Corrected version drift: PyPI had `1.0.1` published manually (out-of-band of CI/CD), local files were on `1.0.2` and never tagged or released through the pipeline. Bumped to `1.0.3` as a clean, tagged, pipeline-published baseline.
+
+## [1.0.2] - 2026-07-02
+
+### Fixed
+- Fixed SARIF spec version (`sarif["version"]` was accidentally set to `1.0.1` instead of `2.1.0`). This broke compatibility with all SARIF consumers including GitHub CodeQL.
+
+## [1.0.1] - 2026-07-02
+
+### Fixed
+- Fixed version number in SARIF output (was 1.0.0, now 1.0.1)
+- Fixed CI workflow: removed duplicate install steps, added fail-fast, fixed Python matrix
+- Fixed publish workflow: added package validation (wheel install + version check), fixed fail-fast, added Python compatibility check
+- Fixed duplicated dependencies in pyproject.toml (already correct)
+- Fixed version inconsistency across files
+
+### Changed
+- Updated version to 1.0.1 in pyproject.toml, agentsec/__init__.py, agentsec/sarif.py
+
 ## [1.0.0] - 2026-07-02
 
 ### Added

agentsec_cli-1.0.3/PKG-INFO

@@ -0,0 +1,137 @@
+Metadata-Version: 2.4
+Name: agentsec-cli
+Version: 1.0.3
+Summary: Static security scanner for AI coding agents and MCP configurations
+Author: locface
+License-Expression: MIT
+Project-URL: homepage, https://locface.github.io/AgentSec/
+Project-URL: repository, https://github.com/locface/AgentSec
+Project-URL: documentation, https://locface.github.io/AgentSec/docs/
+Project-URL: changelog, https://github.com/locface/AgentSec/blob/main/CHANGELOG.md
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click<9,>=8.0.0
+Requires-Dist: pyyaml<7,>=6.0
+Requires-Dist: toml<1,>=0.10.2
+Requires-Dist: tomli<3,>=2.0.1; python_version < "3.11"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Dynamic: license-file
+
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/locface/AgentSec/main/docs/images/agentsec-dark.svg">
+  <img alt="AgentSec" src="https://raw.githubusercontent.com/locface/AgentSec/main/docs/images/agentsec-light.svg">
+</picture>
+
+# AgentSec
+
+**Static security scanner for AI coding agents and MCP configurations.**
+
+[![PyPI](https://img.shields.io/pypi/v/agentsec-cli.svg)](https://pypi.org/project/agentsec-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/agentsec-cli.svg)](https://pypi.org/project/agentsec-cli/)
+[![License](https://img.shields.io/github/license/locface/AgentSec)](LICENSE)
+[![Tests](https://img.shields.io/github/actions/workflow/status/locface/AgentSec/agentsec.yml?label=tests)](https://github.com/locface/AgentSec/actions)
+
+AI coding agents have access to your shell, filesystem, network, and secrets. Most agent configurations are never audited for security risks. AgentSec inspects MCP server manifests, Claude Desktop configs, Cursor rules, and agent instruction files for dangerous permissions, prompt injection risks, and secret exposure — with no LLM dependencies and no data leaving your machine.
+
+All findings map to [OWASP Top 10 for LLM Applications](https://genai.owasp.org/) (LLM01–LLM10) and the [OWASP Agentic Security Top 10](https://owasp.org/) (AG01–AG10).
+
+## Features
+
+- 41 security rules covering shell execution, filesystem access, network exfiltration, OAuth scopes, prompt injection, container escape, and credential exposure
+- OWASP LLM + Agentic mapping on every finding
+- 4 output formats: terminal, JSON, Markdown, SARIF v2.1.0
+- CI/CD gating with `--fail-on` (exit code 1 at severity threshold)
+- Baseline comparison for regression tracking
+- Automatic detection of JSON, YAML, TOML, and Markdown configs
+- Zero runtime dependencies beyond the Python standard library
+
+## Installation
+
+```bash
+pip install agentsec-cli
+```
+
+Requires Python 3.10 or later.
+
+## Quick Start
+
+```bash
+# Scan a project
+agentsec scan /path/to/project
+
+# Generate SARIF for CI/CD
+agentsec scan . --format sarif > results.sarif
+
+# Gate CI on critical findings
+agentsec scan . --fail-on critical
+
+# Baseline comparison
+agentsec scan . --update-baseline baseline.json
+agentsec scan . --baseline baseline.json
+
+# OWASP mapping
+agentsec scan . --show-owasp
+```
+
+Example output:
+
+```text
+ Scanning /home/user/dev/mcp-project...
+
+[CRITICAL] MCP shell execution
+  File: claude_desktop_config.json
+  Server: shell-server
+  Description: MCP server can execute shell commands
+  Recommendation: Require explicit approval or remove shell access.
+
+[CRITICAL] MCP filesystem write access
+  File: claude_desktop_config.json
+  Server: filesystem
+  Description: MCP server has filesystem write access
+  Recommendation: Restrict filesystem access to read-only or specific directories.
+
+Total findings: 4 · Critical: 3 · High: 0 · Medium: 1 · Low: 0
+```
+
+### Output Formats
+
+- **terminal** (default) — human-readable with severity coloring
+- **json** — machine-parseable JSON array of findings
+- **markdown** — formatted report suitable for commit comments
+- **sarif** — SARIF v2.1.0, compatible with GitHub CodeQL
+
+### Supported Config Files
+
+AgentSec automatically detects and scans these file types:
+
+- MCP servers: `mcp.json`, `mcp.yaml`, `mcp.toml`
+- Claude Desktop: `claude_desktop_config.json`
+- Cursor: `.cursorrules`, `.cursor/rules/*`
+- Codex / Cline: `codex.toml`, `.clinerules`
+- Agent instructions: `AGENTS.md`, `CLAUDE.md`
+- Infrastructure: `Dockerfile`, `package.json`
+
+## Documentation
+
+Full documentation: [https://locface.github.io/AgentSec/docs/](https://locface.github.io/AgentSec/docs/)
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, testing, and pull request workflow.
+
+## Security
+
+Report vulnerabilities privately. See [SECURITY.md](SECURITY.md) for our disclosure policy.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

agentsec_cli-1.0.3/README.md

@@ -0,0 +1,109 @@
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/locface/AgentSec/main/docs/images/agentsec-dark.svg">
+  <img alt="AgentSec" src="https://raw.githubusercontent.com/locface/AgentSec/main/docs/images/agentsec-light.svg">
+</picture>
+
+# AgentSec
+
+**Static security scanner for AI coding agents and MCP configurations.**
+
+[![PyPI](https://img.shields.io/pypi/v/agentsec-cli.svg)](https://pypi.org/project/agentsec-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/agentsec-cli.svg)](https://pypi.org/project/agentsec-cli/)
+[![License](https://img.shields.io/github/license/locface/AgentSec)](LICENSE)
+[![Tests](https://img.shields.io/github/actions/workflow/status/locface/AgentSec/agentsec.yml?label=tests)](https://github.com/locface/AgentSec/actions)
+
+AI coding agents have access to your shell, filesystem, network, and secrets. Most agent configurations are never audited for security risks. AgentSec inspects MCP server manifests, Claude Desktop configs, Cursor rules, and agent instruction files for dangerous permissions, prompt injection risks, and secret exposure — with no LLM dependencies and no data leaving your machine.
+
+All findings map to [OWASP Top 10 for LLM Applications](https://genai.owasp.org/) (LLM01–LLM10) and the [OWASP Agentic Security Top 10](https://owasp.org/) (AG01–AG10).
+
+## Features
+
+- 41 security rules covering shell execution, filesystem access, network exfiltration, OAuth scopes, prompt injection, container escape, and credential exposure
+- OWASP LLM + Agentic mapping on every finding
+- 4 output formats: terminal, JSON, Markdown, SARIF v2.1.0
+- CI/CD gating with `--fail-on` (exit code 1 at severity threshold)
+- Baseline comparison for regression tracking
+- Automatic detection of JSON, YAML, TOML, and Markdown configs
+- Zero runtime dependencies beyond the Python standard library
+
+## Installation
+
+```bash
+pip install agentsec-cli
+```
+
+Requires Python 3.10 or later.
+
+## Quick Start
+
+```bash
+# Scan a project
+agentsec scan /path/to/project
+
+# Generate SARIF for CI/CD
+agentsec scan . --format sarif > results.sarif
+
+# Gate CI on critical findings
+agentsec scan . --fail-on critical
+
+# Baseline comparison
+agentsec scan . --update-baseline baseline.json
+agentsec scan . --baseline baseline.json
+
+# OWASP mapping
+agentsec scan . --show-owasp
+```
+
+Example output:
+
+```text
+ Scanning /home/user/dev/mcp-project...
+
+[CRITICAL] MCP shell execution
+  File: claude_desktop_config.json
+  Server: shell-server
+  Description: MCP server can execute shell commands
+  Recommendation: Require explicit approval or remove shell access.
+
+[CRITICAL] MCP filesystem write access
+  File: claude_desktop_config.json
+  Server: filesystem
+  Description: MCP server has filesystem write access
+  Recommendation: Restrict filesystem access to read-only or specific directories.
+
+Total findings: 4 · Critical: 3 · High: 0 · Medium: 1 · Low: 0
+```
+
+### Output Formats
+
+- **terminal** (default) — human-readable with severity coloring
+- **json** — machine-parseable JSON array of findings
+- **markdown** — formatted report suitable for commit comments
+- **sarif** — SARIF v2.1.0, compatible with GitHub CodeQL
+
+### Supported Config Files
+
+AgentSec automatically detects and scans these file types:
+
+- MCP servers: `mcp.json`, `mcp.yaml`, `mcp.toml`
+- Claude Desktop: `claude_desktop_config.json`
+- Cursor: `.cursorrules`, `.cursor/rules/*`
+- Codex / Cline: `codex.toml`, `.clinerules`
+- Agent instructions: `AGENTS.md`, `CLAUDE.md`
+- Infrastructure: `Dockerfile`, `package.json`
+
+## Documentation
+
+Full documentation: [https://locface.github.io/AgentSec/docs/](https://locface.github.io/AgentSec/docs/)
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, testing, and pull request workflow.
+
+## Security
+
+Report vulnerabilities privately. See [SECURITY.md](SECURITY.md) for our disclosure policy.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

{agentsec_cli-1.0.0 → agentsec_cli-1.0.3}/agentsec/__init__.py

@@ -1,3 +1,3 @@
 """AgentSec: Static security scanner for AI coding agents and MCP configs."""
 
-__version__ = "1.0.0"
+__version__ = "1.0.3"

{agentsec_cli-1.0.0 → agentsec_cli-1.0.3}/agentsec/sarif.py

@@ -90,12 +90,12 @@ def generate_sarif(findings: List[Dict[str, Any]], repo_root: str = ".") -> Dict
                         "organization": "AgentSec",
                         "informationUri": "https://github.com/locface/AgentSec",
                         "rules": list(rules.values()),
-                        "version": "1.0.0"
+                        "version": "1.0.3"
                     }
                 },
                 "results": results,
                 "properties": {
-                    "startTimeUtc": datetime.datetime.now(datetime.UTC).isoformat().replace("+00:00", "Z")
+                    "startTimeUtc": datetime.datetime.now(datetime.timezone.utc).isoformat().replace("+00:00", "Z")
                 }
             }
         ]

agentsec_cli-1.0.3/agentsec_cli.egg-info/PKG-INFO

@@ -0,0 +1,137 @@
+Metadata-Version: 2.4
+Name: agentsec-cli
+Version: 1.0.3
+Summary: Static security scanner for AI coding agents and MCP configurations
+Author: locface
+License-Expression: MIT
+Project-URL: homepage, https://locface.github.io/AgentSec/
+Project-URL: repository, https://github.com/locface/AgentSec
+Project-URL: documentation, https://locface.github.io/AgentSec/docs/
+Project-URL: changelog, https://github.com/locface/AgentSec/blob/main/CHANGELOG.md
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click<9,>=8.0.0
+Requires-Dist: pyyaml<7,>=6.0
+Requires-Dist: toml<1,>=0.10.2
+Requires-Dist: tomli<3,>=2.0.1; python_version < "3.11"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Dynamic: license-file
+
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/locface/AgentSec/main/docs/images/agentsec-dark.svg">
+  <img alt="AgentSec" src="https://raw.githubusercontent.com/locface/AgentSec/main/docs/images/agentsec-light.svg">
+</picture>
+
+# AgentSec
+
+**Static security scanner for AI coding agents and MCP configurations.**
+
+[![PyPI](https://img.shields.io/pypi/v/agentsec-cli.svg)](https://pypi.org/project/agentsec-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/agentsec-cli.svg)](https://pypi.org/project/agentsec-cli/)
+[![License](https://img.shields.io/github/license/locface/AgentSec)](LICENSE)
+[![Tests](https://img.shields.io/github/actions/workflow/status/locface/AgentSec/agentsec.yml?label=tests)](https://github.com/locface/AgentSec/actions)
+
+AI coding agents have access to your shell, filesystem, network, and secrets. Most agent configurations are never audited for security risks. AgentSec inspects MCP server manifests, Claude Desktop configs, Cursor rules, and agent instruction files for dangerous permissions, prompt injection risks, and secret exposure — with no LLM dependencies and no data leaving your machine.
+
+All findings map to [OWASP Top 10 for LLM Applications](https://genai.owasp.org/) (LLM01–LLM10) and the [OWASP Agentic Security Top 10](https://owasp.org/) (AG01–AG10).
+
+## Features
+
+- 41 security rules covering shell execution, filesystem access, network exfiltration, OAuth scopes, prompt injection, container escape, and credential exposure
+- OWASP LLM + Agentic mapping on every finding
+- 4 output formats: terminal, JSON, Markdown, SARIF v2.1.0
+- CI/CD gating with `--fail-on` (exit code 1 at severity threshold)
+- Baseline comparison for regression tracking
+- Automatic detection of JSON, YAML, TOML, and Markdown configs
+- Zero runtime dependencies beyond the Python standard library
+
+## Installation
+
+```bash
+pip install agentsec-cli
+```
+
+Requires Python 3.10 or later.
+
+## Quick Start
+
+```bash
+# Scan a project
+agentsec scan /path/to/project
+
+# Generate SARIF for CI/CD
+agentsec scan . --format sarif > results.sarif
+
+# Gate CI on critical findings
+agentsec scan . --fail-on critical
+
+# Baseline comparison
+agentsec scan . --update-baseline baseline.json
+agentsec scan . --baseline baseline.json
+
+# OWASP mapping
+agentsec scan . --show-owasp
+```
+
+Example output:
+
+```text
+ Scanning /home/user/dev/mcp-project...
+
+[CRITICAL] MCP shell execution
+  File: claude_desktop_config.json
+  Server: shell-server
+  Description: MCP server can execute shell commands
+  Recommendation: Require explicit approval or remove shell access.
+
+[CRITICAL] MCP filesystem write access
+  File: claude_desktop_config.json
+  Server: filesystem
+  Description: MCP server has filesystem write access
+  Recommendation: Restrict filesystem access to read-only or specific directories.
+
+Total findings: 4 · Critical: 3 · High: 0 · Medium: 1 · Low: 0
+```
+
+### Output Formats
+
+- **terminal** (default) — human-readable with severity coloring
+- **json** — machine-parseable JSON array of findings
+- **markdown** — formatted report suitable for commit comments
+- **sarif** — SARIF v2.1.0, compatible with GitHub CodeQL
+
+### Supported Config Files
+
+AgentSec automatically detects and scans these file types:
+
+- MCP servers: `mcp.json`, `mcp.yaml`, `mcp.toml`
+- Claude Desktop: `claude_desktop_config.json`
+- Cursor: `.cursorrules`, `.cursor/rules/*`
+- Codex / Cline: `codex.toml`, `.clinerules`
+- Agent instructions: `AGENTS.md`, `CLAUDE.md`
+- Infrastructure: `Dockerfile`, `package.json`
+
+## Documentation
+
+Full documentation: [https://locface.github.io/AgentSec/docs/](https://locface.github.io/AgentSec/docs/)
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, testing, and pull request workflow.
+
+## Security
+
+Report vulnerabilities privately. See [SECURITY.md](SECURITY.md) for our disclosure policy.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

{agentsec_cli-1.0.0 → agentsec_cli-1.0.3}/pyproject.toml

@@ -1,12 +1,12 @@
 [project]
 name = "agentsec-cli"
-version = "1.0.0"
+version = "1.0.3"
 description = "Static security scanner for AI coding agents and MCP configurations"
 readme = "README.md"
 authors = [{name = "locface"}]
 license = "MIT"
 classifiers = [
-    "Development Status :: 5 - Production/Stable",
+    "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.10",