checkmate5 4.1.0.dev42__py3-none-any.whl → 4.1.0.dev44__py3-none-any.whl

checkmate/contrib/plugins/all/opengrep/analyzer.py

@@ -0,0 +1,95 @@
+# -*- coding: utf-8 -*-
+
+
+from checkmate.lib.analysis.base import BaseAnalyzer
+
+import logging
+import os
+import tempfile
+import json
+
+import subprocess
+
+logger = logging.getLogger(__name__)
+
+
+class OpengrepAnalyzer(BaseAnalyzer):
+
+    def __init__(self, *args, **kwargs):
+        super(OpengrepAnalyzer, self).__init__(*args, **kwargs)
+        try:
+            result = subprocess.check_output(
+                ["opengrep", "--version"],stderr=subprocess.DEVNULL).strip()
+        except subprocess.CalledProcessError:
+            logger.error(
+                "Cannot initialize opengrep analyzer: Executable is missing, please install it.")
+            raise
+
+    def summarize(self, items):
+        pass
+
+    def analyze(self, file_revision):
+        issues = []
+        tmpdir = "/tmp/"+file_revision.project.pk
+
+        if not os.path.exists(os.path.dirname(tmpdir+"/"+file_revision.path)):
+            try:
+                os.makedirs(os.path.dirname(tmpdir+"/"+file_revision.path))
+            except OSError as exc:  # Guard against race condition
+                if exc.errno != errno.EEXIST:
+                    raise
+        f = open(tmpdir+"/"+file_revision.path, "wb")
+
+        fout = tempfile.NamedTemporaryFile(suffix=".json", delete=False)
+        result = {}
+        try:
+            with f:
+                try:
+                  f.write(file_revision.get_file_content())
+                except UnicodeDecodeError:
+                  pass
+            try:
+                result = subprocess.check_output(["opengrep",
+                                                  "scan",
+                                                  "-f",
+                                                  "/root/opengrep-rules"
+                                                  "--no-git-ignore",
+                                                  "--json",
+                                                  f.name],
+                                                  stderr=subprocess.DEVNULL).strip()
+                
+            except subprocess.CalledProcessError as e:
+                if e.returncode == 4:
+                    result = e.output
+                elif e.returncode == 3:
+                    result = []
+                    pass
+                else:
+                    result = e.output
+                    pass
+
+            
+            try:
+                json_result = json.loads(result)
+
+                for issue in json_result['results']:
+
+                    location = (((issue['start']['line'], None),
+                                 (issue['start']['line'], None)),)
+                    val = issue['check_id']
+                    val = val.replace("root.","")
+                    val = val.title().replace("_","")
+
+                    issues.append({
+                            'code': val,
+                            'location': location,
+                            'data': issue['extra']['message'],
+                            'file': file_revision.path,
+                            'line': issue['start']['line'],
+                            'fingerprint': self.get_fingerprint_from_code(file_revision, location, extra_data=issue['extra']['message'])
+                        })
+            except:
+                pass
+
+        finally:     
+            return {'issues': issues}

checkmate/contrib/plugins/all/opengrep/issues_data.py

@@ -0,0 +1,5 @@
+# -*- coding: utf-8 -*-
+
+
+issues_data = {
+}

checkmate/contrib/plugins/all/opengrep/setup.py

@@ -0,0 +1,13 @@
+from .analyzer import OpengrepAnalyzer
+from .issues_data import issues_data
+
+analyzers = {
+    'opengrep':
+        {
+            'name': 'opengrep',
+            'title': 'opengrep',
+            'class': OpengrepAnalyzer,
+            'language': 'all',
+            'issues_data': issues_data,
+        },
+}

checkmate/scripts/manage.py

@@ -46,6 +46,7 @@ root.addHandler(ch)
 
 
 def load_command_class(settings):
+    """Parses sys.argv to find and load the appropriate command class."""
     i = 1
     command_chain = []
     current_commands = settings.commands
@@ -57,7 +58,7 @@ def load_command_class(settings):
         cmd = sys.argv[i]
         command_chain.append(cmd)
         i += 1
-        if not cmd in current_commands:
+        if cmd not in current_commands:
             sys.stderr.write("Unknown command: %s\n" % " ".join(command_chain))
             exit(-1)
         if not isinstance(current_commands[cmd], dict):
@@ -65,19 +66,19 @@ def load_command_class(settings):
                 command_module_name, command_class_name = current_commands[cmd].rsplit(".", 1)
                 command_module = importlib.import_module(command_module_name)
                 return getattr(command_module, command_class_name), command_chain
-        else:  # it is a class
-            return current_commands[cmd], command_chain
-    current_commands = current_commands[cmd]
+            else:  # it is a class
+                return current_commands[cmd], command_chain
+        current_commands = current_commands[cmd]
 
 
 def main():
 
     if not os.path.isdir('.git'):
-      sys.stderr.write("Not a git repository.\nTry running: \"git init && git add . && git commit -m \"init\" \" in the folder\n")
-      exit(-1)
-    if not "CODE_DIR" in os.environ:
-      sys.stderr.write("CODE_DIR env not set. Please set it to directory of your code.\nTry running: \"export CODE_DIR=/path/to/code\" before\n")
-      exit(-1)
+        sys.stderr.write("Not a git repository.\nTry running: \"git init && git add . && git commit -m \"init\" \" in the folder\n")
+        exit(-1)
+    if "CODE_DIR" not in os.environ:
+        sys.stderr.write("CODE_DIR env not set. Please set it to directory of your code.\nTry running: \"export CODE_DIR=/path/to/code\" before\n")
+        exit(-1)
 
     project_path = get_project_path()
 
@@ -105,13 +106,19 @@ def main():
                            prog=sys.argv[0]+" "+" ".join(command_chain),
                            args=sys.argv[1+len(command_chain):])
     try:
+        # Check for the 'help' command first
         if 'help' in command.opts and command.opts['help']:
             print((command.help_message()))
             exit(0)
+        
+        # Execute the command's main logic
         result = command.run()
+        
+        # Serialize and print the result if the command supports it
         if hasattr(command, 'serialize'):
             result_str = command.serialize(result, 'text')
             print(result_str)
+            
     except KeyboardInterrupt:
         print("[CTRL-C pressed, aborting]")
         exit(-1)

checkmate/settings/defaults.py

@@ -21,6 +21,7 @@ plugins = {
     'brakeman': 'checkmate.contrib.plugins.ruby.brakeman',
     'tfsec': 'checkmate.contrib.plugins.iac.tfsec',
     'kubescape': 'checkmate.contrib.plugins.iac.kubescape',
+    'opengrep': 'checkmate.contrib.plugins.all.opengrep',
   
 }
 

{checkmate5-4.1.0.dev42.dist-info → checkmate5-4.1.0.dev44.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: checkmate5
-Version: 4.1.0.dev42
+Version: 4.1.0.dev44
 Summary: A meta-code checker written in Python.
 Author: Andreas Dewes
 License: AGPL-3.0

{checkmate5-4.1.0.dev42.dist-info → checkmate5-4.1.0.dev44.dist-info}/RECORD

@@ -6,6 +6,10 @@ checkmate/contrib/plugins/all/aigraphcodescan/__init__.py,sha256=47DEQpj8HBSa-_T
 checkmate/contrib/plugins/all/aigraphcodescan/analyzer.py,sha256=5CLYKjtKqxmtq5s9PYYrW8qnSN6eG55HoqWHQ4Kf7Nc,3189
 checkmate/contrib/plugins/all/aigraphcodescan/issues_data.py,sha256=pUC6pC33TEpgRProHoAJPvEr7wYaWgQvDXruWCTO_NE,252
 checkmate/contrib/plugins/all/aigraphcodescan/setup.py,sha256=ojrkDPRHVOC3mK34alu1d994uc0VpixFXsOJuZmr0pY,340
+checkmate/contrib/plugins/all/opengrep/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+checkmate/contrib/plugins/all/opengrep/analyzer.py,sha256=WhoTaagC8IAbWtf0VX2aBb3NIGC94ls_x41mybpdX_Y,3312
+checkmate/contrib/plugins/all/opengrep/issues_data.py,sha256=XKspT10LzjPgE_euavpZGqR34evbvL-ctsIJn7_lrKw,44
+checkmate/contrib/plugins/all/opengrep/setup.py,sha256=axjstT1Dy3_2zVi_Gs8wFST-LOR08ZWzEghat0Kcv9M,305
 checkmate/contrib/plugins/cve/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 checkmate/contrib/plugins/cve/text4shell/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 checkmate/contrib/plugins/cve/text4shell/analyzer.py,sha256=RgYq1dIGLLRdn8GeehXbjmyaE5nJDh0qRfeI22xTO2g,1850
@@ -107,13 +111,13 @@ checkmate/management/commands/props/delete.py,sha256=skrsBtAz-w_4_ZpX88AADWBGcmg
 checkmate/management/commands/props/get.py,sha256=YsvE_sr8ViIvpjLJ7sPMp6UoujKGWMrcaZMnAVfQnNs,763
 checkmate/management/commands/props/set.py,sha256=VEoFbHletPqZXeHdiqXOGbgLArf4FHBZNupNH4DaRIo,728
 checkmate/scripts/__init__.py,sha256=XAi0y8z1NviyGvLB68Oxnzr6Nw5AP8xgbcSSnc1Zcvw,766
-checkmate/scripts/manage.py,sha256=Ci0HBkvB_KzGIQTAr1UnwEXWuqDq7MP2e7Y_7p2CC94,4213
+checkmate/scripts/manage.py,sha256=vb4L171yfctLbZpQxn_kZ1hQLtCDqdQQGiq7BJlnQ2A,4494
 checkmate/settings/__init__.py,sha256=z32hPz-kGS-tTGa6dWCFjrrrbS_eagLd-YrqBP3gjWI,33
 checkmate/settings/base.py,sha256=3WBXZITqoWepIja96bo5JTi-TDpQALPTCugL0E8z-yE,4551
-checkmate/settings/defaults.py,sha256=JaR9H5fciWy4PMX3oqIeaui7HDzjWSIhsXZD3tj4mSc,2736
-checkmate5-4.1.0.dev42.dist-info/licenses/LICENSE.txt,sha256=SGQTFjJQjkYGoK1PCFfMKpfgRLm3yL0h9Mq2o26sm2E,151451
-checkmate5-4.1.0.dev42.dist-info/METADATA,sha256=znr31OI8-Tw2pKYmCG6VkEXCP6mazp7AuCPwQ3fOIh4,1286
-checkmate5-4.1.0.dev42.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-checkmate5-4.1.0.dev42.dist-info/entry_points.txt,sha256=FbGnau5C4z98WmBYpMJqUzobQEr1AIi9aZApSavNojQ,60
-checkmate5-4.1.0.dev42.dist-info/top_level.txt,sha256=tl6eIJXedpLZbcbmYEwlhEzuTaSt0TvIRUesOb8gtng,10
-checkmate5-4.1.0.dev42.dist-info/RECORD,,
+checkmate/settings/defaults.py,sha256=nkEvDEqr3fhoy8ewvMX2ehyGtbdtkqxyqFJInol8wPg,2794
+checkmate5-4.1.0.dev44.dist-info/licenses/LICENSE.txt,sha256=SGQTFjJQjkYGoK1PCFfMKpfgRLm3yL0h9Mq2o26sm2E,151451
+checkmate5-4.1.0.dev44.dist-info/METADATA,sha256=QTdZMt2b0vB4-RKiQkHnznoUuIhB3QEHAZO4jcGhNZw,1286
+checkmate5-4.1.0.dev44.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+checkmate5-4.1.0.dev44.dist-info/entry_points.txt,sha256=FbGnau5C4z98WmBYpMJqUzobQEr1AIi9aZApSavNojQ,60
+checkmate5-4.1.0.dev44.dist-info/top_level.txt,sha256=tl6eIJXedpLZbcbmYEwlhEzuTaSt0TvIRUesOb8gtng,10
+checkmate5-4.1.0.dev44.dist-info/RECORD,,