aictem 0.1.0__tar.gz

aictem-0.1.0/.gitignore

@@ -0,0 +1,25 @@
+# local infrastructure and secrets
+.local/
+.env
+.env.*
+!.env.example
+# python
+__pycache__/
+*.pyc
+.venv/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+backend/var/
+# node
+node_modules/
+.next/
+out/
+*.tsbuildinfo
+coverage/
+# os / editors
+.DS_Store
+.idea/
+.vscode/

aictem-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 d0gra
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

aictem-0.1.0/PKG-INFO

@@ -0,0 +1,136 @@
+Metadata-Version: 2.5
+Name: aictem
+Version: 0.1.0
+Summary: Discover repository, dependency, container, cloud and AI assets (providers, agents, RAG, MCP, models) from inside a repository
+Project-URL: Homepage, https://github.com/d0gra/AI-CTEM
+Project-URL: Documentation, https://github.com/d0gra/AI-CTEM/blob/main/cli/README.md
+Project-URL: Repository, https://github.com/d0gra/AI-CTEM
+Project-URL: Issues, https://github.com/d0gra/AI-CTEM/issues
+Project-URL: Changelog, https://github.com/d0gra/AI-CTEM/blob/main/CHANGELOG.md
+License-Expression: MIT
+License-File: LICENSE
+Keywords: agents,ai-security,asset-discovery,ctem,llm,mcp,sarif,sbom,security,shadow-ai
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# aictem: repository and AI asset discovery
+
+`aictem` inventories a repository from the inside and reports what it finds as assets, relationships and findings. It covers dependencies, container images, cloud resources, CI pipelines, committed secrets, and AI systems (model providers, frameworks, agents and their tools, RAG pipelines, vector stores, MCP servers and clients, and model files).
+
+- **Works offline, anywhere.** The standard library is the only dependency, so it runs in any CI image with Python 3.11 or later.
+- **Safe by design.** Model files are disassembled, never loaded. Secret values are never stored or printed; findings carry a prefix, the length and a fingerprint.
+- **Accurate.** Agent, tool, import and risky-flag patterns only count when they appear in real code, not in strings or comments. AI usage seen only in tests is labelled as such.
+- **Connects to the platform.** `--upload` sends the inventory to [CTEM Platform](https://github.com/d0gra/AI-CTEM) with an upload-only pipeline token. Results merge with the platform's own analysis, because identifiers and rule names match.
+
+## Install
+
+```bash
+pipx install aictem        # or: uv tool install aictem
+pip install aictem         # into the current environment
+uvx aictem discover .      # or run it without installing
+```
+
+From a checkout of this repository: `pipx install ./cli`.
+
+## Use
+
+```bash
+aictem discover                               # scan the current directory; terminal summary
+aictem discover ~/code/app --all              # list every asset and finding
+aictem discover . -f json -o inventory.json   # full report (also the upload format)
+aictem discover . -f sarif -o aictem.sarif      # for GitHub code scanning and other SARIF dashboards
+aictem discover . --approved-providers openai,anthropic   # other providers are reported as shadow AI
+aictem discover . --vulns                     # look up known vulnerabilities in pinned packages (osv.dev)
+aictem discover . --fail-on high              # exit 1 if a high or critical finding is present
+```
+
+Send the inventory to the platform. Create a token under **Integrations → CI/CD pipelines**:
+
+```bash
+export CTEM_URL=https://ctem.example.com CTEM_CI_TOKEN=ctem_ci_...
+aictem discover . --upload --gate high        # exit 3 if the platform's gate fails
+```
+
+Inside GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI or Bitbucket, the upload records the provider and the pipeline URL automatically, together with the repository, branch and commit from git.
+
+## What it finds
+
+| Area | Sources | Assets | Findings (examples) |
+| --- | --- | --- | --- |
+| Dependencies | requirements, pyproject, Pipfile, poetry/uv locks, package.json, npm/pnpm/yarn locks, go.mod, Cargo, Gemfile.lock, composer, pom.xml, Gradle, .csproj | `package` (purl), `repository` | Known vulnerabilities with `--vulns`, or by the platform on upload |
+| AI providers and serving | Imports, dependencies, endpoint URLs, environment variables, containers, IaC | `ai_provider`, `llm_endpoint` | Unapproved provider (shadow AI) |
+| AI frameworks and agents | LangChain/LangGraph, LlamaIndex, Haystack, CrewAI, AutoGen, OpenAI Agents SDK, Pydantic AI, smolagents, Semantic Kernel, Google ADK, Strands, Vercel AI SDK, Mastra, function-calling tool schemas | `ai_framework`, `ai_agent` (with tools and capabilities) | High-impact tools without an approval step, disabled LangChain safety flags, model output passed to exec/eval |
+| Retrieval | Vector store clients plus retrievers, loaders, splitters and embeddings | `rag_application`, `vector_database` | |
+| MCP | Client configs (Claude Desktop, Cursor, VS Code, Windsurf, Claude Code and more) and servers implemented in the repository | `mcp_client`, `mcp_server` | Plaintext transport, literal credentials, unpinned packages, broad filesystem roots, privileged launch, auto-approved tools, tool-description poisoning |
+| Models | Pickle, PyTorch, safetensors, ONNX, GGUF, Keras and more; Hugging Face model references | `ai_model` | Code-execution callables in pickle streams, unsafe formats, `trust_remote_code=True`, `torch.load` without `weights_only` |
+| Containers | Dockerfile, Compose, Kubernetes manifests | `container_image`, `k8s_resource` | Root user, unpinned base image, privileged containers |
+| Cloud (IaC) | Terraform, CloudFormation, including SageMaker, Bedrock, Vertex AI and Azure OpenAI | `storage`, `database`, `identity`, `llm_endpoint`, ... | Public buckets, publicly accessible databases |
+| CI/CD | GitHub Actions and other pipeline files | (attributes) | Unpinned third-party actions, pull_request_target running PR code, write-all tokens |
+| Secrets | AI provider keys, cloud and SaaS tokens, private keys | | Committed credential (value never stored) |
+
+Exclude paths with `--exclude GLOB` or a `.aictemignore` file (one glob per line). Dependency folders such as `node_modules`, `.venv`, `dist` and `build` are always skipped.
+
+## Exit codes
+
+| Code | Meaning |
+| --- | --- |
+| 0 | Success |
+| 1 | `--fail-on` threshold reached |
+| 2 | Usage or upload error |
+| 3 | Upload succeeded, but the platform's `--gate` failed |
+
+## Development
+
+```bash
+cd cli && uv run --with pytest pytest
+```
+
+MIT licensed.
+
+## Releasing
+
+Versions follow the project's `CHANGELOG.md`. A release is a tag: GitHub Actions runs the tests on
+Python 3.11-3.13, builds the sdist and wheel, installs the built wheel and runs it, then publishes to
+PyPI and opens a GitHub release.
+
+```bash
+# 1. set the new version in cli/pyproject.toml and note the changes in CHANGELOG.md, then commit
+# 2. tag it; the tag must match the version, or the workflow stops before publishing
+git tag cli-v0.2.0 && git push origin cli-v0.2.0
+```
+
+`workflow_dispatch` runs the same workflow without publishing, for checking a release before tagging.
+
+### One-time PyPI setup
+
+Publishing uses [trusted publishing](https://docs.pypi.org/trusted-publishers/), so no API token is
+stored in the repository: GitHub proves the workflow's identity over OpenID Connect and PyPI issues a
+short-lived token for that one upload. Before the first release, add the publisher on PyPI
+(**Your projects -> aictem -> Publishing**, or **Publishing** under your account for a project that does
+not exist yet):
+
+| Field | Value |
+| --- | --- |
+| Owner | `d0gra` |
+| Repository name | `AI-CTEM` |
+| Workflow name | `release-cli.yml` |
+| Environment name | `pypi` |
+
+The environment is created by the first run, so nothing is needed on the GitHub side. To require an
+approval before each upload, add a protection rule to that environment in the repository settings.

aictem-0.1.0/README.md

@@ -0,0 +1,105 @@
+# aictem: repository and AI asset discovery
+
+`aictem` inventories a repository from the inside and reports what it finds as assets, relationships and findings. It covers dependencies, container images, cloud resources, CI pipelines, committed secrets, and AI systems (model providers, frameworks, agents and their tools, RAG pipelines, vector stores, MCP servers and clients, and model files).
+
+- **Works offline, anywhere.** The standard library is the only dependency, so it runs in any CI image with Python 3.11 or later.
+- **Safe by design.** Model files are disassembled, never loaded. Secret values are never stored or printed; findings carry a prefix, the length and a fingerprint.
+- **Accurate.** Agent, tool, import and risky-flag patterns only count when they appear in real code, not in strings or comments. AI usage seen only in tests is labelled as such.
+- **Connects to the platform.** `--upload` sends the inventory to [CTEM Platform](https://github.com/d0gra/AI-CTEM) with an upload-only pipeline token. Results merge with the platform's own analysis, because identifiers and rule names match.
+
+## Install
+
+```bash
+pipx install aictem        # or: uv tool install aictem
+pip install aictem         # into the current environment
+uvx aictem discover .      # or run it without installing
+```
+
+From a checkout of this repository: `pipx install ./cli`.
+
+## Use
+
+```bash
+aictem discover                               # scan the current directory; terminal summary
+aictem discover ~/code/app --all              # list every asset and finding
+aictem discover . -f json -o inventory.json   # full report (also the upload format)
+aictem discover . -f sarif -o aictem.sarif      # for GitHub code scanning and other SARIF dashboards
+aictem discover . --approved-providers openai,anthropic   # other providers are reported as shadow AI
+aictem discover . --vulns                     # look up known vulnerabilities in pinned packages (osv.dev)
+aictem discover . --fail-on high              # exit 1 if a high or critical finding is present
+```
+
+Send the inventory to the platform. Create a token under **Integrations → CI/CD pipelines**:
+
+```bash
+export CTEM_URL=https://ctem.example.com CTEM_CI_TOKEN=ctem_ci_...
+aictem discover . --upload --gate high        # exit 3 if the platform's gate fails
+```
+
+Inside GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI or Bitbucket, the upload records the provider and the pipeline URL automatically, together with the repository, branch and commit from git.
+
+## What it finds
+
+| Area | Sources | Assets | Findings (examples) |
+| --- | --- | --- | --- |
+| Dependencies | requirements, pyproject, Pipfile, poetry/uv locks, package.json, npm/pnpm/yarn locks, go.mod, Cargo, Gemfile.lock, composer, pom.xml, Gradle, .csproj | `package` (purl), `repository` | Known vulnerabilities with `--vulns`, or by the platform on upload |
+| AI providers and serving | Imports, dependencies, endpoint URLs, environment variables, containers, IaC | `ai_provider`, `llm_endpoint` | Unapproved provider (shadow AI) |
+| AI frameworks and agents | LangChain/LangGraph, LlamaIndex, Haystack, CrewAI, AutoGen, OpenAI Agents SDK, Pydantic AI, smolagents, Semantic Kernel, Google ADK, Strands, Vercel AI SDK, Mastra, function-calling tool schemas | `ai_framework`, `ai_agent` (with tools and capabilities) | High-impact tools without an approval step, disabled LangChain safety flags, model output passed to exec/eval |
+| Retrieval | Vector store clients plus retrievers, loaders, splitters and embeddings | `rag_application`, `vector_database` | |
+| MCP | Client configs (Claude Desktop, Cursor, VS Code, Windsurf, Claude Code and more) and servers implemented in the repository | `mcp_client`, `mcp_server` | Plaintext transport, literal credentials, unpinned packages, broad filesystem roots, privileged launch, auto-approved tools, tool-description poisoning |
+| Models | Pickle, PyTorch, safetensors, ONNX, GGUF, Keras and more; Hugging Face model references | `ai_model` | Code-execution callables in pickle streams, unsafe formats, `trust_remote_code=True`, `torch.load` without `weights_only` |
+| Containers | Dockerfile, Compose, Kubernetes manifests | `container_image`, `k8s_resource` | Root user, unpinned base image, privileged containers |
+| Cloud (IaC) | Terraform, CloudFormation, including SageMaker, Bedrock, Vertex AI and Azure OpenAI | `storage`, `database`, `identity`, `llm_endpoint`, ... | Public buckets, publicly accessible databases |
+| CI/CD | GitHub Actions and other pipeline files | (attributes) | Unpinned third-party actions, pull_request_target running PR code, write-all tokens |
+| Secrets | AI provider keys, cloud and SaaS tokens, private keys | | Committed credential (value never stored) |
+
+Exclude paths with `--exclude GLOB` or a `.aictemignore` file (one glob per line). Dependency folders such as `node_modules`, `.venv`, `dist` and `build` are always skipped.
+
+## Exit codes
+
+| Code | Meaning |
+| --- | --- |
+| 0 | Success |
+| 1 | `--fail-on` threshold reached |
+| 2 | Usage or upload error |
+| 3 | Upload succeeded, but the platform's `--gate` failed |
+
+## Development
+
+```bash
+cd cli && uv run --with pytest pytest
+```
+
+MIT licensed.
+
+## Releasing
+
+Versions follow the project's `CHANGELOG.md`. A release is a tag: GitHub Actions runs the tests on
+Python 3.11-3.13, builds the sdist and wheel, installs the built wheel and runs it, then publishes to
+PyPI and opens a GitHub release.
+
+```bash
+# 1. set the new version in cli/pyproject.toml and note the changes in CHANGELOG.md, then commit
+# 2. tag it; the tag must match the version, or the workflow stops before publishing
+git tag cli-v0.2.0 && git push origin cli-v0.2.0
+```
+
+`workflow_dispatch` runs the same workflow without publishing, for checking a release before tagging.
+
+### One-time PyPI setup
+
+Publishing uses [trusted publishing](https://docs.pypi.org/trusted-publishers/), so no API token is
+stored in the repository: GitHub proves the workflow's identity over OpenID Connect and PyPI issues a
+short-lived token for that one upload. Before the first release, add the publisher on PyPI
+(**Your projects -> aictem -> Publishing**, or **Publishing** under your account for a project that does
+not exist yet):
+
+| Field | Value |
+| --- | --- |
+| Owner | `d0gra` |
+| Repository name | `AI-CTEM` |
+| Workflow name | `release-cli.yml` |
+| Environment name | `pypi` |
+
+The environment is created by the first run, so nothing is needed on the GitHub side. To require an
+approval before each upload, add a protection rule to that environment in the repository settings.

aictem-0.1.0/pyproject.toml

@@ -0,0 +1,57 @@
+[project]
+name = "aictem"
+version = "0.1.0"
+description = "Discover repository, dependency, container, cloud and AI assets (providers, agents, RAG, MCP, models) from inside a repository"
+readme = "README.md"
+license = "MIT"
+license-files = ["LICENSE"]
+requires-python = ">=3.11"
+dependencies = []  # standard library only, so it runs in any CI image
+keywords = ["security", "ctem", "ai-security", "sbom", "mcp", "llm", "agents", "shadow-ai", "asset-discovery", "sarif"]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "Intended Audience :: Information Technology",
+  "License :: OSI Approved :: MIT License",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
+  "Topic :: Security",
+  "Topic :: Software Development :: Quality Assurance",
+  "Typing :: Typed",
+]
+
+[project.urls]
+Homepage = "https://github.com/d0gra/AI-CTEM"
+Documentation = "https://github.com/d0gra/AI-CTEM/blob/main/cli/README.md"
+Repository = "https://github.com/d0gra/AI-CTEM"
+Issues = "https://github.com/d0gra/AI-CTEM/issues"
+Changelog = "https://github.com/d0gra/AI-CTEM/blob/main/CHANGELOG.md"
+
+[project.scripts]
+aictem = "aictem.__main__:main"
+
+[project.optional-dependencies]
+dev = ["pytest>=8"]
+
+[build-system]
+requires = ["hatchling>=1.25"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/aictem"]
+
+[tool.hatch.build.targets.sdist]
+include = ["src/", "tests/", "README.md", "LICENSE", "pyproject.toml"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["src"]
+
+[tool.ruff]
+line-length = 140
+target-version = "py311"

aictem-0.1.0/src/aictem/__init__.py

@@ -0,0 +1,3 @@
+"""aictem: discover repository, dependency, container, cloud and AI assets."""
+
+__version__ = "0.1.0"

aictem-0.1.0/src/aictem/__main__.py

@@ -0,0 +1,106 @@
+"""aictem command line.
+
+  aictem discover [PATH]                  inventory a repository: packages, containers, cloud, CI and AI assets, with findings
+  aictem discover . --format json -o r.json
+  aictem discover . --upload              send the inventory to the CTEM platform (CTEM_URL, CTEM_CI_TOKEN)
+  aictem discover . --vulns               also look up known vulnerabilities in pinned packages (OSV)
+  aictem discover . --fail-on high        exit 1 if a finding at or above the severity is present
+"""
+
+from __future__ import annotations
+
+import argparse
+import os
+import sys
+from pathlib import Path
+
+from aictem import __version__, output, scan
+from aictem.model import SEVERITY_RANK
+
+EXIT_FINDINGS, EXIT_UPLOAD_GATE, EXIT_ERROR = 1, 3, 2
+
+
+def _parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser(prog="aictem", description="Discover repository and AI assets and send them to the CTEM platform.")
+    parser.add_argument("--version", action="version", version=f"aictem {__version__}")
+    sub = parser.add_subparsers(dest="command", required=True)
+    d = sub.add_parser("discover", help="inventory a directory tree", description="Inventory a repository: dependencies, container images, cloud "
+                       "resources, CI pipelines, secrets, and AI assets (providers, frameworks, agents, RAG, MCP servers, models).")
+    d.add_argument("path", nargs="?", default=".", help="directory to scan (default: current directory)")
+    d.add_argument("-f", "--format", choices=("table", "json", "sarif"), default="table", help="output format (json is the upload format)")
+    d.add_argument("-o", "--output", help="write the report to a file instead of standard output")
+    d.add_argument("--approved-providers", help="comma-separated AI provider keys; others are reported as shadow AI (for example openai,anthropic)")
+    d.add_argument("--no-secrets", action="store_true", help="skip the committed-credential scan")
+    d.add_argument("--vulns", action="store_true", help="look up known vulnerabilities in pinned packages at osv.dev (sends names and versions)")
+    d.add_argument("--exclude", action="append", default=[], metavar="GLOB", help="skip paths matching a glob (repeatable; also read from .aictemignore)")
+    d.add_argument("--max-files", type=int, default=50_000, help="stop after this many files (default 50000)")
+    d.add_argument("--fail-on", choices=("none", "low", "medium", "high", "critical"), default="none",
+                   help="exit with status 1 when a finding at or above this severity is present")
+    d.add_argument("--all", action="store_true", help="table format: list every asset and finding")
+    up = d.add_argument_group("upload to the CTEM platform")
+    up.add_argument("--upload", action="store_true", help="send the report to the platform's CI ingestion endpoint")
+    up.add_argument("--url", default=os.environ.get("CTEM_URL"), help="platform address (default: $CTEM_URL)")
+    up.add_argument("--token-env", default="CTEM_CI_TOKEN", help="environment variable holding the pipeline token (default: CTEM_CI_TOKEN)")
+    up.add_argument("--gate", choices=("none", "low", "medium", "high", "critical"), default="none",
+                    help="server-side gate: fail (exit 3) when open findings at or above this severity remain after the upload")
+    return parser
+
+
+def main(argv: list[str] | None = None) -> int:
+    args = _parser().parse_args(argv)
+    approved = {p.strip().lower() for p in (args.approved_providers or "").split(",") if p.strip()} or None
+    report = scan.run(Path(args.path), approved_providers=approved, secrets_enabled=not args.no_secrets, max_files=args.max_files,
+                      excludes=args.exclude)
+    if args.vulns:
+        from aictem import osv
+
+        try:
+            added = osv.enrich(report)
+            print(f"aictem: {added} known vulnerabilities in {report['summary']['vulnerabilities_checked']} pinned packages", file=sys.stderr)
+        except OSError as exc:
+            print(f"aictem: vulnerability lookup failed: {exc}", file=sys.stderr)
+
+    if args.format == "table" and not args.output:
+        output.table(report, show_all=args.all)
+    else:
+        rendered = output.to_sarif(report) if args.format == "sarif" else output.to_json(report) if args.format == "json" else None
+        if rendered is None:  # table to a file
+            with open(args.output, "w", encoding="utf-8") as fh:
+                output.table(report, fh, show_all=True)
+        elif args.output:
+            Path(args.output).write_text(rendered, encoding="utf-8")
+        else:
+            sys.stdout.write(rendered)
+        if args.output:
+            s = report["summary"]
+            print(f"aictem: wrote {args.output}: {len(report['assets'])} assets ({s['ai_assets']} AI), {len(report['findings'])} findings", file=sys.stderr)
+
+    status = 0
+    if args.upload:
+        from aictem import upload
+
+        token = os.environ.get(args.token_env)
+        if not args.url or not token:
+            print(f"aictem: --upload needs --url (or CTEM_URL) and a pipeline token in ${args.token_env}", file=sys.stderr)
+            return EXIT_ERROR
+        code, body = upload.send(report, args.url, token, fail_on=args.gate)
+        if code >= 400 and code != 412:
+            print(f"aictem: upload failed (HTTP {code}): {(body.get('error') or {}).get('message') or body}", file=sys.stderr)
+            return EXIT_ERROR
+        gate = body.get("gate") or {}
+        print(f"aictem: uploaded ({body.get('status')}): {body.get('findings_new', 0)} new, {body.get('findings_seen', 0)} seen findings"
+              + (f"; gate {'passed' if gate.get('passed') else 'FAILED'} at {gate.get('threshold')}" if gate and gate.get("threshold") != "none" else ""),
+              file=sys.stderr)
+        if code == 412:
+            status = EXIT_UPLOAD_GATE
+
+    if args.fail_on != "none":
+        worst = output.worst(report)
+        if worst and SEVERITY_RANK[worst] >= SEVERITY_RANK[args.fail_on]:
+            print(f"aictem: findings at or above {args.fail_on} present (worst: {worst})", file=sys.stderr)
+            status = status or EXIT_FINDINGS
+    return status
+
+
+if __name__ == "__main__":
+    sys.exit(main())