checkmate5 4.0.97__tar.gz → 4.0.99__tar.gz

checkmate5-4.0.99/PKG-INFO

@@ -0,0 +1,29 @@
+Metadata-Version: 2.1
+Name: checkmate5
+Version: 4.0.99
+Summary: A meta-code analysis tool
+Home-page: UNKNOWN
+License: MIT
+Description: # Welcome to Checkmate!
+        
+        This is a modified version of original Checkmate.
+        
+        Original author(s), license(s), acknowelegement(s): https://github.com/quantifiedcode/checkmate
+        
+        
+        ## About
+        Checkmate is a cross-language (meta-)tool for static code analysis, written in Python. Unlike other tools, it provides a global overview of the code quality in a project and aims to provide clear, actionable insights to the user.
+        
+        
+        ## Licences
+        
+        * Checkmate is licensed under the MIT license. To view a copy of this license, visit [https://opensource.org/licenses/MIT](https://opensource.org/licenses/MIT).
+        
+        * Original Checkmate's parts remain release under MIT License. However modifications are finally released under AGPL-3.0 license (previously LGPL 2.1 with Commons Clause). Please refer to LICENSE for more info. 
+        
+Platform: UNKNOWN
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.6, <4.0
+Description-Content-Type: text/markdown

checkmate5-4.0.99/checkmate/management/helpers.py

@@ -0,0 +1,142 @@
+# -*- coding: utf-8 -*-
+
+import os
+import re
+import json
+import yaml
+import fnmatch
+from functools import reduce
+import argparse
+from sqlalchemy import create_engine
+from sqlalchemy.exc import SQLAlchemyError
+from checkmate.lib.backend import SQLBackend
+
+def get_project_path(path=None):
+    if not path:
+        path = os.getcwd()
+    while path != "/":
+        config_path = os.path.join(path, '.checkmate')
+        if os.path.exists(config_path) and os.path.isdir(config_path):
+            return path
+        path = os.path.dirname(path)
+    return None
+
+def get_project_config(path):
+    with open(os.path.join(path, ".checkmate/config.json"), "r") as config_file:
+        return json.loads(config_file.read())
+
+def save_project_config(path, config):
+    with open(os.path.join(path, ".checkmate/config.json"), "w") as config_file:
+        config_file.write(json.dumps(config))
+
+def get_files_list(path, with_sha=False):
+    files = []
+    for (dirpath, dirnames, filenames) in os.walk(path):
+        files.extend([(os.path.join(dirpath, f))[len(path):] for f in filenames])
+    return files
+
+def apply_filter(filename, patterns):
+    return reduce(lambda x, y: x or y, [bool(re.search(pattern, filename)) for pattern in patterns], False)
+
+def filter_filenames_by_analyzers(filenames, analyzers, language_patterns):
+    filtered_filenames = []
+    for filename in filenames:
+        for analyzer_params in analyzers:
+            if analyzer_params['language'] not in language_patterns:
+                continue
+            language_pattern = language_patterns[analyzer_params['language']]
+            if 'patterns' not in language_pattern or not apply_filter(filename, language_pattern['patterns']):
+                continue
+            filtered_filenames.append(filename)
+            break
+    return filtered_filenames
+
+def filter_filenames_by_checkignore(file_paths, checkignore_patterns):
+    filtered_file_paths = []
+    for file_path in file_paths:
+        excluded = False
+        always_included = False
+        for pattern in checkignore_patterns:
+            if pattern.startswith("!") and fnmatch.fnmatch(file_path, pattern[1:]):
+                always_included = True
+                break
+            elif fnmatch.fnmatch(file_path, pattern):
+                excluded = True
+        if not excluded or always_included:
+            filtered_file_paths.append(file_path)
+    return filtered_file_paths
+
+def parse_checkmate_settings(content):
+    """Parse .yml content and return a dictionary."""
+    return yaml.safe_load(content)
+
+def parse_checkignore(content):
+    lines = [l for l in (s.strip() for s in content.split("\n")) if l and not l.startswith("#")]
+    return lines
+
+def get_project_and_backend(path, settings, echo=False, initialize_db=True):
+    project_path = get_project_path(path)
+    project_config = get_project_config(project_path)
+    backend = get_backend(project_path, project_config, settings, echo=echo, initialize_db=initialize_db)
+    project = get_project(project_path, project_config, settings, backend)
+    return project, backend
+
+def get_backend(project_path, project_config, settings, echo=False, initialize_db=True):
+    """Return the appropriate backend instance based on the project configuration and settings."""
+    backend_config = project_config.get('backend', {})
+    backend_type = backend_config.get('driver')
+    connection_string = backend_config.get('connection_string', None)
+
+    if backend_type == "sql":
+        if not connection_string:
+            raise ValueError("Connection string is required for the 'sql' backend.")
+        engine = create_engine(connection_string)
+        backend = SQLBackend(engine)
+    elif backend_type == "sqlite":
+        if not connection_string:
+            connection_string = f"sqlite:///{project_path}/database.db"
+        engine = create_engine(connection_string, echo=echo)
+        backend = SQLBackend(engine)
+    else:
+        raise ValueError("Unsupported backend type specified.")
+
+    if initialize_db:
+        try:
+            backend.create_tables()
+        except SQLAlchemyError as e:
+            print(f"Error initializing database: {e}")
+
+    return backend
+
+def get_project(project_path, project_config, settings, backend):
+    project_class = project_config.get('project_class', 'Project')
+    ProjectClass = settings.models[project_class]
+
+    # Attempt to find the project by project_id
+    project = backend.filter(ProjectClass, {'pk': project_config['project_id']}).first()
+
+    # If the project doesn't exist, create a new one
+    if project is None:
+        project = ProjectClass(pk=project_config['project_id'])
+        backend.add(project)
+        # If needed, ensure that the project is persisted
+        backend.commit()  # If your backend requires an explicit commit
+
+    return project
+
+def main():
+    parser = argparse.ArgumentParser(description="Checkmate backend configuration")
+    parser.add_argument('--backend', type=str, help="Specify the backend type (e.g., sqlite, sql)", default="sqlite")
+    parser.add_argument('--connection-string', type=str, help="Connection string for the backend", default=None)
+    args = parser.parse_args()
+
+    backend_type = args.backend
+    connection_string = args.connection_string
+
+    print(f"Using backend: {backend_type}")
+    if connection_string:
+        print(f"Using connection string: {connection_string}")
+
+if __name__ == "__main__":
+    main()
+

checkmate5-4.0.99/checkmate/settings/defaults.py

@@ -0,0 +1,132 @@
+from checkmate.lib.stats.helpers import directory_splitter
+from checkmate.lib.models import (Project,
+                                  Snapshot,
+                                  FileRevision,
+                                  Issue)
+from checkmate.contrib.plugins.git.models import GitSnapshot
+from collections import defaultdict
+
+
+"""
+Default settings values
+"""
+
+hooks = defaultdict(list)
+
+plugins = {
+    'git': 'checkmate.contrib.plugins.git',
+    #'trufflehog3':  'checkmate.contrib.plugins.all.trufflehog3',
+    #'trojansource': 'checkmate.contrib.plugins.all.trojansource',
+    #'yara': 'checkmate.contrib.plugins.all.yara',
+    #'metrics': 'checkmate.contrib.plugins.all.metrics',
+    'bandit': 'checkmate.contrib.plugins.python.bandit',
+    'brakeman': 'checkmate.contrib.plugins.ruby.brakeman',
+    #'phpanalyzer':  'checkmate.contrib.plugins.php.progpilot',
+    #'pmd': 'checkmate.contrib.plugins.java.pmd',
+    #'apex': 'checkmate.contrib.plugins.apex.pmdapex',
+    #'semgrep': 'checkmate.contrib.plugins.java.semgrep',
+    #'checkov': 'checkmate.contrib.plugins.iac.checkov',
+    'tfsec': 'checkmate.contrib.plugins.iac.tfsec',
+    'kubescape': 'checkmate.contrib.plugins.iac.kubescape',
+    #'insidersecswift': 'checkmate.contrib.plugins.swift.insidersecswift',
+    #'insiderseckotlin': 'checkmate.contrib.plugins.kotlin.insiderseckotlin',
+    #'insiderseccsharp': 'checkmate.contrib.plugins.csharp.insiderseccsharp',
+    #'pmdapex': 'checkmate.contrib.plugins.apex.pmdapex',
+    'semgrepjava': 'checkmate.contrib.plugins.java.semgrepjava',
+    'semgrepeslint': 'checkmate.contrib.plugins.javascript.semgrepeslint',
+    'graudit': 'checkmate.contrib.plugins.perl.graudit',
+    'text4shell': 'checkmate.contrib.plugins.cve.text4shell',
+    #'fluidattackscsharp': 'checkmate.contrib.plugins.csharp.fluidattacksscanner',
+    #'fluidattacksgolang': 'checkmate.contrib.plugins.golang.fluidattacksscanner',
+    #'fluidattacksjava': 'checkmate.contrib.plugins.java.fluidattacksscanner',
+    #'fluidattacksjavascript': 'checkmate.contrib.plugins.javascript.fluidattacksscanner',
+    #'fluidattacksswift': 'checkmate.contrib.plugins.swift.fluidattacksscanner',
+    #'fluidattackskotlin': 'checkmate.contrib.plugins.kotlin.fluidattacksscanner',
+    #'fluidattackspython': 'checkmate.contrib.plugins.python.fluidattacksscanner',
+    #'fluidattacksscannercsharp': 'checkmate.contrib.plugins.csharp.fluidattacksscanner',
+    #'fluidattacksscannergolang': 'checkmate.contrib.plugins.golang.fluidattacksscanner',
+    #'fluidattacksscannerjava': 'checkmate.contrib.plugins.java.fluidattacksscanner',
+    #'fluidattacksscannerjavascript': 'checkmate.contrib.plugins.javascript.fluidattacksscanner',
+    #'fluidattacksscannerswift': 'checkmate.contrib.plugins.swift.fluidattacksscanner',
+    #'fluidattacksscannerkotlin': 'checkmate.contrib.plugins.kotlin.fluidattacksscanner',
+    #'fluidattacksscannerpython': 'checkmate.contrib.plugins.python.fluidattacksscanner',
+    'gostaticcheck': 'checkmate.contrib.plugins.golang.gostaticcheck',
+    #'privategptanalyzer': 'checkmate.contrib.plugins.all.privategpt',
+}
+
+language_patterns = {
+    'perl': {
+        'name': 'Perl',
+        'patterns': [u'\.pl$'],
+    },
+    'python': {
+        'name': 'Python',
+        'patterns': [u'\.py$'],
+    },
+    'javascript': {
+        'name': 'Javascript',
+        'patterns': [u'\.js$', u'\.ts$'],
+    },
+    'java': {
+        'name': 'Java',
+        'patterns': [u'\.java$'],
+    },
+    'ruby': {
+        'name': 'Ruby',
+        'patterns': [u'\.rb$'],
+    },
+    'golang': {
+        'name': 'Golang',
+        'patterns': [u'\.go$'],
+    },
+    'iac': {
+        'name': 'IaC',
+        'patterns': [u'\.yml$', u'\.yaml$', u'Dockerfile$', u'\.tf$'],
+    },
+    'all': {
+        'name': 'All',
+        'patterns': [u'.*\.*$'],
+    },
+}
+
+analyzers = {}
+
+commands = {
+    'alembic': 'checkmate.management.commands.alembic.Command',
+    'init': 'checkmate.management.commands.init.Command',
+    'analyze': 'checkmate.management.commands.analyze.Command',
+    'reset': 'checkmate.management.commands.reset.Command',
+    'shell': 'checkmate.management.commands.shell.Command',
+    'summary': 'checkmate.management.commands.summary.Command',
+    'snapshots': 'checkmate.management.commands.snapshots.Command',
+    'issues': 'checkmate.management.commands.issues.Command',
+    'props': {
+        'get': 'checkmate.management.commands.props.get.Command',
+        'set': 'checkmate.management.commands.props.set.Command',
+        'delete': 'checkmate.management.commands.props.delete.Command',
+    }
+}
+
+models = {
+    'Project': Project,
+    'Snapshot': Snapshot,
+    'GitSnapshot': GitSnapshot,
+    'FileRevision': FileRevision,
+    'Issue': Issue,
+}
+
+aggregators = {
+    'directory': {
+        'mapper': lambda file_revision: directory_splitter(file_revision['path'], include_filename=True)
+    }
+}
+
+checkignore = """*/site-packages/*
+*/dist-packages/*
+*/build/*
+*/eggs/*
+*/migrations/*
+*/alembic/versions/*
+*/node_modules/*
+*/.checkmate/*
+"""

checkmate5-4.0.99/checkmate5.egg-info/PKG-INFO

@@ -0,0 +1,29 @@
+Metadata-Version: 2.1
+Name: checkmate5
+Version: 4.0.99
+Summary: A meta-code analysis tool
+Home-page: UNKNOWN
+License: MIT
+Description: # Welcome to Checkmate!
+        
+        This is a modified version of original Checkmate.
+        
+        Original author(s), license(s), acknowelegement(s): https://github.com/quantifiedcode/checkmate
+        
+        
+        ## About
+        Checkmate is a cross-language (meta-)tool for static code analysis, written in Python. Unlike other tools, it provides a global overview of the code quality in a project and aims to provide clear, actionable insights to the user.
+        
+        
+        ## Licences
+        
+        * Checkmate is licensed under the MIT license. To view a copy of this license, visit [https://opensource.org/licenses/MIT](https://opensource.org/licenses/MIT).
+        
+        * Original Checkmate's parts remain release under MIT License. However modifications are finally released under AGPL-3.0 license (previously LGPL 2.1 with Commons Clause). Please refer to LICENSE for more info. 
+        
+Platform: UNKNOWN
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.6, <4.0
+Description-Content-Type: text/markdown