ballpython 2.0.4__py3-none-any.whl → 2.0.5__py3-none-any.whl

{ballpython-2.0.4.dist-info → ballpython-2.0.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ballpython
-Version: 2.0.4
+Version: 2.0.5
 Summary: The Ultimate Static Python Intelligence, Healing, Type Verification, and Security Suite
 Author: Developer
 License-Expression: MIT
@@ -78,7 +78,7 @@ Add `ballpython` to your `.pre-commit-config.yaml`:
 ```yaml
 repos:
   - repo: https://github.com/moonrox420/ball-python
-    rev: v2.0.4
+    rev: v2.0.5
     hooks:
       - id: pycleaner
         args: ["check"]

{ballpython-2.0.4.dist-info → ballpython-2.0.5.dist-info}/RECORD

@@ -2,7 +2,7 @@ ballpython/__init__.py,sha256=d8ONxgaz9jml_fHPVvg867Vt5jGRhGTqzWPtux3WJOc,206
 ballpython/__main__.py,sha256=aCRr0vnZfKYHDrPHBsYSjX5xTxtFJpTTSPVUSZTBK-I,136
 ballpython/cli.py,sha256=LllCLRAQQ-fRR_lIXwmd2e3Q7DLCIvf-5jHBXsAhJWs,125
 ballpython/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycleaner/__init__.py,sha256=AbIZyqCYVTi-fjqPCgWZmTeSth_8ma-8sYbl9SghNnQ,2894
+pycleaner/__init__.py,sha256=G8pQ2M9iH32OK4bKf5Koao554EdGiiHue5rdZ5AS7sM,2894
 pycleaner/__main__.py,sha256=8QBFrPyxId563F6cipPMNVEBTG8TIZUgxQfp8gk1VSI,135
 pycleaner/baseline.py,sha256=DS32C8_G8khYYNJo42FVv6Cc58lJj7NUmPOzWNfQwlU,3856
 pycleaner/cache.py,sha256=WhCiMkuL6ryWVr3l3XrYLLoI7A3bRF8jNxpOyedNW8M,10761
@@ -18,7 +18,7 @@ pycleaner/linter_formatter.py,sha256=LB5j66OCASU8WG8QgRFpSX7C2c7_UNMBgkJh2hSWxAY
 pycleaner/modernizer.py,sha256=L9hxXXfdyTwf8itDO58y6bW5LobGo6dg8q537QdiYbM,12946
 pycleaner/pipeline.py,sha256=ZG7_9PNz0jBadFrZoiI7juLtUJXglGQhLgQhrLJqEac,20612
 pycleaner/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pycleaner/security_scanner.py,sha256=h7WSPYf40X-PBlJVOsJL-KaknDaOcWCMhcPwXkUvlbA,21986
+pycleaner/security_scanner.py,sha256=cWf4cAGQrgwsGslSQDfZv0XUN3sWvlcOIQaogpmv6C0,23422
 pycleaner/syntax_healer.py,sha256=TlIMKIJhaX9GED3e2JNzNMJ5aXmL9eLJMCu7xKSjdv8,26711
 pycleaner/taint_engine.py,sha256=96cZdDpSPbo5b13zIZY18f_4GJm_tw0clqCZMBtjXMQ,26481
 pycleaner/test_generator.py,sha256=TJsNJSojc6eIsaKZkwMlpnb-MKHuDpNLZCPnMlO-a8M,19663
@@ -27,8 +27,8 @@ pycleaner/typeshed_resolver.py,sha256=N-kWU_CI5DG59lQMkt7wMW9sHYjNCBdfFS42b4y2Kr
 pycleaner/verifier.py,sha256=pOfSLRNHe4qDUYJG8mxDxjY6Ph8QKBdJZmqBtoJX87w,17937
 pycleaner/frameworks/__init__.py,sha256=-W24zqvug8eUkkwqla5oh7rFOqQR-WI4TohQhbXGYoo,3472
 pycleaner/frameworks/plugins.py,sha256=sMhP9mZ82sx10OI3opgXIEPXNAWFZRe2I__6yh2Uq_E,11453
-ballpython-2.0.4.dist-info/METADATA,sha256=vIeFxyxog9s1kF_UlbDp4yJg-UCiSho2HQe3qhC4odE,3466
-ballpython-2.0.4.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-ballpython-2.0.4.dist-info/entry_points.txt,sha256=6ux-5UxoVSmlK5p9M-GDVt24sCdwTQq9wgRDkpMIYU8,81
-ballpython-2.0.4.dist-info/top_level.txt,sha256=u6lmy8RWZ_saxCZAQTL7EijB4sunegOiVyk5fHjpwLk,21
-ballpython-2.0.4.dist-info/RECORD,,
+ballpython-2.0.5.dist-info/METADATA,sha256=LqjBIVBjanDL5rdXJ7gES5vF4ezSqbG2Y1SKMG6rXx4,3466
+ballpython-2.0.5.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+ballpython-2.0.5.dist-info/entry_points.txt,sha256=6ux-5UxoVSmlK5p9M-GDVt24sCdwTQq9wgRDkpMIYU8,81
+ballpython-2.0.5.dist-info/top_level.txt,sha256=u6lmy8RWZ_saxCZAQTL7EijB4sunegOiVyk5fHjpwLk,21
+ballpython-2.0.5.dist-info/RECORD,,

pycleaner/__init__.py

@@ -18,7 +18,7 @@ from pycleaner.discovery import (
     is_protected_file,
 )
 
-__version__ = "2.0.4"
+__version__ = "2.0.5"
 __all__ = [
     "BaselineFingerprint",
     "BaselineManager",

pycleaner/security_scanner.py

@@ -190,6 +190,24 @@ class _DangerousCallDetector(ast.NodeVisitor):
         self.filepath = filepath
         self.source_lines = source_lines
         self.findings: list[SecurityFinding] = []
+        self._is_test_module: bool = False
+
+    def check_tree(self, tree: ast.AST) -> None:
+        """Inspect imports to determine if module is a test file."""
+        for node in ast.walk(tree):
+            if isinstance(node, ast.Import):
+                for alias in node.names:
+                    if alias.name.split(".")[0] in ("pytest", "unittest", "mock"):
+                        self._is_test_module = True
+                        return
+            elif isinstance(node, ast.ImportFrom):
+                if node.module and node.module.split(".")[0] in (
+                    "pytest",
+                    "unittest",
+                    "mock",
+                ):
+                    self._is_test_module = True
+                    return
 
     def _get_snippet(self, lineno: int) -> str:
         if 1 <= lineno <= len(self.source_lines):
@@ -245,8 +263,11 @@ class _DangerousCallDetector(ast.NodeVisitor):
         parts = [p.lower() for p in Path(filepath).parts[:-1]]
         return any(p in ("tests", "test", "testing") for p in parts)
 
+    def _is_test(self) -> bool:
+        return self._is_test_module or self._is_test_path(self.filepath)
+
     def visit_Assert(self, node: ast.Assert) -> None:
-        if self._is_test_path(self.filepath):
+        if self._is_test():
             return
         self._add_finding(
             SecurityFinding(
@@ -429,7 +450,20 @@ class _DangerousCallDetector(ast.NodeVisitor):
         if isinstance(arg, ast.BinOp) and isinstance(arg.op, ast.Add):
             return True
         if isinstance(arg, ast.Call):
-            return isinstance(arg.func, ast.Attribute) and arg.func.attr == "format"
+            if isinstance(arg.func, ast.Attribute) and arg.func.attr == "format":
+                # Check for psycopg safe sql.SQL(...).format(...) query composition
+                val = arg.func.value
+                if isinstance(val, ast.Call):
+                    func = val.func
+                    func_id = ""
+                    if isinstance(func, ast.Name):
+                        func_id = func.id
+                    elif isinstance(func, ast.Attribute):
+                        func_id = func.attr
+                    if func_id == "SQL":
+                        return False
+                return True
+            return False
         if isinstance(arg, ast.BinOp) and isinstance(arg.op, ast.Mod):
             return isinstance(arg.left, ast.Constant) and isinstance(
                 arg.left.value, str
@@ -483,6 +517,7 @@ class SecurityScanner:
             tree = ast.parse(source, filename=filename)
             source_lines = source.splitlines()
             detector = _DangerousCallDetector(filename, source_lines)
+            detector.check_tree(tree)
             detector.visit(tree)
             findings.extend(detector.findings)
         except SyntaxError: