attackmap 0.4.3__tar.gz → 0.4.4__tar.gz

{attackmap-0.4.3/src/attackmap.egg-info → attackmap-0.4.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: attackmap
-Version: 0.4.3
+Version: 0.4.4
 Summary: AI-assisted defensive security analyzer for codebases — scans a repository, models assets and controls, finds cross-cutting weaknesses, and generates an evidence-grounded review with MITRE ATT&CK mappings and detection-engineering hints.
 Author: AttackMap Contributors
 Author-email: Matthew Davis <matthewd@matthewd.xyz>

{attackmap-0.4.3 → attackmap-0.4.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "attackmap"
-version = "0.4.3"
+version = "0.4.4"
 description = "AI-assisted defensive security analyzer for codebases — scans a repository, models assets and controls, finds cross-cutting weaknesses, and generates an evidence-grounded review with MITRE ATT&CK mappings and detection-engineering hints."
 readme = "README.md"
 requires-python = ">=3.11"

{attackmap-0.4.3 → attackmap-0.4.4}/src/attackmap/__init__.py

@@ -1,2 +1,2 @@
 __all__ = ["__version__"]
-__version__ = "0.4.3"
+__version__ = "0.4.4"

{attackmap-0.4.3 → attackmap-0.4.4}/src/attackmap/cli.py

@@ -449,8 +449,32 @@ def analyze(
 
 
 @app.command("modules")
-def modules() -> None:
+def modules(
+    json_output: bool = typer.Option(
+        False,
+        "--json",
+        help="Emit the installed analyzer modules as a JSON array "
+        "(name/display_name/description/scope/ecosystems/enabled_by_default). "
+        "Network-free — the remote module-repository section is omitted. "
+        "Intended for tool / GUI front-ends that offer analyzer selection.",
+    ),
+) -> None:
     available_modules = get_available_modules()
+    if json_output:
+        payload = [
+            {
+                "name": meta.name,
+                "display_name": meta.display_name or meta.name,
+                "description": meta.description,
+                "scope": meta.scope,
+                "ecosystems": list(meta.ecosystems),
+                "enabled_by_default": meta.enabled_by_default,
+            }
+            for meta in available_modules
+        ]
+        typer.echo(json.dumps(payload, indent=2))
+        return
+
     if not available_modules:
         typer.echo("No analyzer modules are currently available.")
     else:

{attackmap-0.4.3 → attackmap-0.4.4/src/attackmap.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: attackmap
-Version: 0.4.3
+Version: 0.4.4
 Summary: AI-assisted defensive security analyzer for codebases — scans a repository, models assets and controls, finds cross-cutting weaknesses, and generates an evidence-grounded review with MITRE ATT&CK mappings and detection-engineering hints.
 Author: AttackMap Contributors
 Author-email: Matthew Davis <matthewd@matthewd.xyz>

{attackmap-0.4.3 → attackmap-0.4.4}/src/attackmap.egg-info/SOURCES.txt

@@ -71,6 +71,7 @@ tests/test_hunt.py
 tests/test_injection_sinks.py
 tests/test_llm_review.py
 tests/test_merge.py
+tests/test_modules_cli.py
 tests/test_pr_comment.py
 tests/test_progress.py
 tests/test_provenance.py

attackmap-0.4.4/tests/test_modules_cli.py

@@ -0,0 +1,44 @@
+from __future__ import annotations
+
+import json
+
+from typer.testing import CliRunner
+
+from attackmap.cli import app
+
+runner = CliRunner()
+
+
+def test_modules_json_emits_installed_modules_as_array() -> None:
+    result = runner.invoke(app, ["modules", "--json"])
+    assert result.exit_code == 0, result.output
+
+    payload = json.loads(result.output)
+    assert isinstance(payload, list) and payload, "expected a non-empty JSON array"
+
+    for entry in payload:
+        assert set(entry) >= {
+            "name",
+            "display_name",
+            "description",
+            "scope",
+            "ecosystems",
+            "enabled_by_default",
+        }
+        assert isinstance(entry["name"], str) and entry["name"]
+        assert isinstance(entry["ecosystems"], list)
+        assert isinstance(entry["enabled_by_default"], bool)
+
+    # The built-in Python web analyzer ships in-tree and runs by default.
+    by_name = {e["name"]: e for e in payload}
+    assert "python-web" in by_name
+    assert by_name["python-web"]["enabled_by_default"] is True
+
+
+def test_modules_json_is_network_free_and_omits_remote_section() -> None:
+    # --json must not print the "module repositories (mlaify GitHub org)" block
+    # (that section does network I/O); the output is pure JSON.
+    result = runner.invoke(app, ["modules", "--json"])
+    assert result.exit_code == 0
+    assert "GitHub org" not in result.output
+    json.loads(result.output)  # parses cleanly as a whole