checkmate5 4.3.0.dev2__tar.gz → 5.1.0.dev2__tar.gz

{checkmate5-4.3.0.dev2 → checkmate5-5.1.0.dev2}/.github/workflows/auto-tag.yml

@@ -1,4 +1,3 @@
-
 name: Auto Tag on Commit
 
 on:

{checkmate5-4.3.0.dev2/checkmate5.egg-info → checkmate5-5.1.0.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: checkmate5
-Version: 4.3.0.dev2
+Version: 5.1.0.dev2
 Summary: A meta-code checker written in Python.
 Author: Andreas Dewes
 License: AGPL-3.0

{checkmate5-4.3.0.dev2 → checkmate5-5.1.0.dev2}/checkmate/settings/defaults.py

@@ -15,45 +15,10 @@ hooks = defaultdict(list)
 
 plugins = {
     'git': 'checkmate.contrib.plugins.git',
-    'bandit': 'checkmate.contrib.plugins.python.bandit',
-    'gostaticcheck': 'checkmate.contrib.plugins.golang.gostaticcheck',
-    'aigraphcodescan': 'checkmate.contrib.plugins.all.aigraphcodescan',
-    'brakeman': 'checkmate.contrib.plugins.ruby.brakeman',
-    'tfsec': 'checkmate.contrib.plugins.iac.tfsec',
-    'kubescape': 'checkmate.contrib.plugins.iac.kubescape',
-    'opengrep': 'checkmate.contrib.plugins.all.opengrep',
-  
+    'aigraphcodescan': 'checkmate.contrib.plugins.all.aigraphcodescan'
 }
 
 language_patterns = {
-    'perl': {
-        'name': 'Perl',
-        'patterns': [u'\.pl$'],
-    },
-    'python': {
-        'name': 'Python',
-        'patterns': [u'\.py$'],
-    },
-    'javascript': {
-        'name': 'Javascript',
-        'patterns': [u'\.js$', u'\.ts$'],
-    },
-    'java': {
-        'name': 'Java',
-        'patterns': [u'\.java$'],
-    },
-    'ruby': {
-        'name': 'Ruby',
-        'patterns': [u'\.rb$'],
-    },
-    'golang': {
-        'name': 'Golang',
-        'patterns': [u'\.go$'],
-    },
-    'iac': {
-        'name': 'IaC',
-        'patterns': [u'\.yml$', u'\.yaml$', u'Dockerfile$', u'\.tf$'],
-    },
     'all': {
         'name': 'All',
         'patterns': [u'.*\.*$'],

{checkmate5-4.3.0.dev2 → checkmate5-5.1.0.dev2/checkmate5.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: checkmate5
-Version: 4.3.0.dev2
+Version: 5.1.0.dev2
 Summary: A meta-code checker written in Python.
 Author: Andreas Dewes
 License: AGPL-3.0

{checkmate5-4.3.0.dev2 → checkmate5-5.1.0.dev2}/checkmate5.egg-info/SOURCES.txt

@@ -17,16 +17,6 @@ checkmate/contrib/plugins/all/aigraphcodescan/__init__.py
 checkmate/contrib/plugins/all/aigraphcodescan/analyzer.py
 checkmate/contrib/plugins/all/aigraphcodescan/issues_data.py
 checkmate/contrib/plugins/all/aigraphcodescan/setup.py
-checkmate/contrib/plugins/all/opengrep/__init__.py
-checkmate/contrib/plugins/all/opengrep/analyzer.py
-checkmate/contrib/plugins/all/opengrep/issues_data.py
-checkmate/contrib/plugins/all/opengrep/opengrep_manylinux_x86
-checkmate/contrib/plugins/all/opengrep/setup.py
-checkmate/contrib/plugins/cve/__init__.py
-checkmate/contrib/plugins/cve/text4shell/__init__.py
-checkmate/contrib/plugins/cve/text4shell/analyzer.py
-checkmate/contrib/plugins/cve/text4shell/issues_data.py
-checkmate/contrib/plugins/cve/text4shell/setup.py
 checkmate/contrib/plugins/git/__init__.py
 checkmate/contrib/plugins/git/models.py
 checkmate/contrib/plugins/git/setup.py
@@ -42,45 +32,6 @@ checkmate/contrib/plugins/git/lib/__init__.py
 checkmate/contrib/plugins/git/lib/repository.py
 checkmate/contrib/plugins/git/lib/repository_pygit2.py
 checkmate/contrib/plugins/git/lib/ssh
-checkmate/contrib/plugins/golang/__init__.py
-checkmate/contrib/plugins/golang/gostaticcheck/__init__.py
-checkmate/contrib/plugins/golang/gostaticcheck/analyzer.py
-checkmate/contrib/plugins/golang/gostaticcheck/issues_data.py
-checkmate/contrib/plugins/golang/gostaticcheck/setup.py
-checkmate/contrib/plugins/iac/__init__.py
-checkmate/contrib/plugins/iac/kubescape/__init__.py
-checkmate/contrib/plugins/iac/kubescape/analyzer.py
-checkmate/contrib/plugins/iac/kubescape/issues_data.py
-checkmate/contrib/plugins/iac/kubescape/setup.py
-checkmate/contrib/plugins/iac/tfsec/__init__.py
-checkmate/contrib/plugins/iac/tfsec/analyzer.py
-checkmate/contrib/plugins/iac/tfsec/issues_data.py
-checkmate/contrib/plugins/iac/tfsec/setup.py
-checkmate/contrib/plugins/java/__init__.py
-checkmate/contrib/plugins/java/semgrepjava/__init__.py
-checkmate/contrib/plugins/java/semgrepjava/analyzer.py
-checkmate/contrib/plugins/java/semgrepjava/issues_data.py
-checkmate/contrib/plugins/java/semgrepjava/setup.py
-checkmate/contrib/plugins/javascript/__init__.py
-checkmate/contrib/plugins/javascript/semgrepeslint/__init__.py
-checkmate/contrib/plugins/javascript/semgrepeslint/analyzer.py
-checkmate/contrib/plugins/javascript/semgrepeslint/issues_data.py
-checkmate/contrib/plugins/javascript/semgrepeslint/setup.py
-checkmate/contrib/plugins/perl/__init__.py
-checkmate/contrib/plugins/perl/graudit/__init__.py
-checkmate/contrib/plugins/perl/graudit/analyzer.py
-checkmate/contrib/plugins/perl/graudit/issues_data.py
-checkmate/contrib/plugins/perl/graudit/setup.py
-checkmate/contrib/plugins/python/__init__.py
-checkmate/contrib/plugins/python/bandit/__init__.py
-checkmate/contrib/plugins/python/bandit/analyzer.py
-checkmate/contrib/plugins/python/bandit/issues_data.py
-checkmate/contrib/plugins/python/bandit/setup.py
-checkmate/contrib/plugins/ruby/__init__.py
-checkmate/contrib/plugins/ruby/brakeman/__init__.py
-checkmate/contrib/plugins/ruby/brakeman/analyzer.py
-checkmate/contrib/plugins/ruby/brakeman/issues_data.py
-checkmate/contrib/plugins/ruby/brakeman/setup.py
 checkmate/helpers/__init__.py
 checkmate/helpers/exceptions.py
 checkmate/helpers/facts.py

checkmate5-4.3.0.dev2/checkmate/contrib/plugins/all/opengrep/analyzer.py

@@ -1,150 +0,0 @@
-# -*- coding: utf-8 -*-
-
-from checkmate.lib.analysis.base import BaseAnalyzer
-
-import logging
-import os
-import tempfile
-import json
-import subprocess
-
-logger = logging.getLogger(__name__)
-
-
-class OpengrepAnalyzer(BaseAnalyzer):
-    def __init__(self, *args, **kwargs):
-        super(OpengrepAnalyzer, self).__init__(*args, **kwargs)
-        try:
-            result = subprocess.check_output(
-                ["opengrep", "--version"], stderr=subprocess.DEVNULL
-            ).strip()
-        except subprocess.CalledProcessError:
-            logger.error(
-                "Cannot initialize opengrep analyzer: Executable is missing, please install it."
-            )
-            raise
-
-    def summarize(self, items):
-        pass
-
-    def analyze(self, file_revision):
-        issues = []
-        tmpdir = "/tmp/" + file_revision.project.pk
-
-        # This block handles directory creation. Note: It's often safer to use
-        # Python's tempfile module for secure temporary file/directory handling
-        # instead of constructing paths manually in /tmp/.
-        if not os.path.exists(os.path.dirname(tmpdir + "/" + file_revision.path)):
-            try:
-                os.makedirs(os.path.dirname(tmpdir + "/" + file_revision.path))
-            except OSError as exc:  # Guard against race condition
-                # Import 'errno' is missing for this check (import errno)
-                if exc.errno != 17:  # 17 corresponds to errno.EEXIST
-                    raise
-        
-        # Opened file handle. It's crucial to ensure this is closed properly.
-        # Using tempfile.NamedTemporaryFile for the entire process is generally
-        # safer and handles cleanup more robustly.
-        f = open(tmpdir + "/" + file_revision.path, "wb")
-
-        # This variable 'fout' is created but not used in the provided logic.
-        # It can likely be removed.
-        fout = tempfile.NamedTemporaryFile(suffix=".json", delete=False)
-        result = {}
-
-        try:
-            # The 'with f:' block ensures the file is properly closed,
-            # but 'f' was already opened outside this block.
-            # For best practice, open the file directly within the 'with' statement.
-            with f:
-                try:
-                    f.write(file_revision.get_file_content())
-                except UnicodeDecodeError:
-                    # Handle cases where the file content might not be decodable as text.
-                    # This often occurs with binary files.
-                    pass
-
-            # Get the file extension from the temporary file's name.
-            file_name = f.name
-            _, file_extension = os.path.splitext(file_name)
-
-            # Remove the leading dot from the extension (e.g., '.php' becomes 'php').
-            if file_extension:
-                file_extension = file_extension[1:]
-
-            # Construct the base rule path.
-            base_rules_path = "/root/opengrep-rules"
-
-            # Determine the specific rule folder based on the extension.
-            if file_extension:
-                rules_folder = file_extension.lower()  # Convert to lowercase for consistency
-                rules_path = os.path.join(base_rules_path, rules_folder)
-            else:
-                rules_path = base_rules_path # Use the base path if no extension
-
-            # Execute the opengrep command.
-            try:
-                result = subprocess.check_output(
-                    [
-                        "opengrep",
-                        "scan",
-                        "-f",
-                        rules_path,  # Dynamically set the rules path
-                        "--no-git-ignore",
-                        "--json",
-                        f.name,
-                    ],
-                    stderr=subprocess.DEVNULL,
-                ).strip()
-            except subprocess.CalledProcessError as e:
-                # Handle cases where opengrep command fails (e.g., non-zero exit code).
-                print(f"Opengrep command failed with error: {e}")
-                print(f"Output: {e.output.decode(errors='ignore')}") # Decode output for printing
-            except FileNotFoundError:
-                # Handle cases where 'opengrep' command itself is not found.
-                print("Error: 'opengrep' command not found. Make sure it's in your PATH.")
-
-            # Process the JSON result from opengrep.
-            # This 'try' block was originally at a different indentation level.
-            # It should ideally be part of the main analysis flow, possibly
-            # after the subprocess call.
-            try:
-                json_result = json.loads(result)
-
-                for issue in json_result["results"]:
-                    location = (
-                        ((issue["start"]["line"], None), (issue["start"]["line"], None)),
-                    )
-                    val = issue["check_id"]
-                    val = val.replace("root.", "")
-                    val = val.title().replace("_", "")
-
-                    issues.append(
-                        {
-                            "code": val,
-                            "location": location,
-                            "data": issue["extra"]["message"],
-                            "file": file_revision.path,
-                            "line": issue["start"]["line"],
-                            "fingerprint": self.get_fingerprint_from_code(
-                                file_revision, location, extra_data=issue["extra"]["message"]
-                            ),
-                        }
-                    )
-            except: # This is a bare except, which catches all exceptions.
-                    # It's better to catch specific exceptions, like json.JSONDecodeError,
-                    # and log errors instead of silently passing.
-                pass
-
-        except Exception as e:
-            # Catch any other unexpected errors during file writing or processing.
-            print(f"An unexpected error occurred: {e}")
-
-        finally:
-            # The 'finally' block must align with its 'try' block.
-            # Ensure the temporary file 'f' is closed and deleted here if it was opened.
-            # In your original code, 'f' was opened, but there was no explicit close
-            # or deletion in the finally block for the manual file creation.
-            # Using tempfile.NamedTemporaryFile with its own 'with' context usually
-            # handles this automatically.
-            return {"issues": issues}

checkmate5-4.3.0.dev2/checkmate/contrib/plugins/all/opengrep/issues_data.py

@@ -1,5 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-issues_data = {
-}

checkmate5-4.3.0.dev2/checkmate/contrib/plugins/all/opengrep/setup.py

@@ -1,13 +0,0 @@
-from .analyzer import OpengrepAnalyzer
-from .issues_data import issues_data
-
-analyzers = {
-    'opengrep':
-        {
-            'name': 'opengrep',
-            'title': 'opengrep',
-            'class': OpengrepAnalyzer,
-            'language': 'all',
-            'issues_data': issues_data,
-        },
-}

checkmate5-4.3.0.dev2/checkmate/contrib/plugins/cve/text4shell/analyzer.py

@@ -1,64 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-from checkmate.lib.analysis.base import BaseAnalyzer
-
-import logging
-import os
-import tempfile
-import json
-import subprocess
-
-logger = logging.getLogger(__name__)
-
-
-class Text4shellAnalyzer(BaseAnalyzer):
-
-    def __init__(self, *args, **kwargs):
-        super(Text4shellAnalyzer, self).__init__(*args, **kwargs)
-
-    def summarize(self, items):
-        pass
-
-    def analyze(self, file_revision):
-        issues = []
-        tmpdir = "/tmp/"+file_revision.project.pk
-        f = open(tmpdir+"/"+file_revision.path, "wb")
-        try:
-            with f:
-                f.write(file_revision.get_file_content())
-            try:
-                result = subprocess.check_output(["python3","/root/text4shell-ce/scan_commons_text_versions.py",
-                                                  f.name,
-                                                  "-quiet"]
-                                                  )
-            except subprocess.CalledProcessError as e:
-                pass
-
-            try:
-                json_result = json.loads(result)
-            except ValueError:
-                json_result = {}
-                pass
-
-            try:
-                line = "1"
-                line = int(line)
-                location = (((line, line),
-                             (line, None)),)
-
-                issues.append({
-                    'code': "I001",
-                    'location': location,
-                    'data': json_result["I001"],
-                    'file': file_revision.path,
-                    'line': line,
-                    'fingerprint': self.get_fingerprint_from_code(file_revision, location, extra_data=json_result["I001"])
-                })
-
-            except KeyError:
-                pass
-
-        finally:
-            os.unlink(f.name)
-        return {'issues': issues}

checkmate5-4.3.0.dev2/checkmate/contrib/plugins/cve/text4shell/issues_data.py

@@ -1,8 +0,0 @@
-issues_data = {
-    "I001": {
-        "title": "Text4Shell",
-        "description": "%(issue.data)s",
-        "severity": 3,
-        "categories": []
-    }
-}

checkmate5-4.3.0.dev2/checkmate/contrib/plugins/cve/text4shell/setup.py

@@ -1,13 +0,0 @@
-from .analyzer import Text4shellAnalyzer
-from .issues_data import issues_data
-
-analyzers = {
-    'text4shell':
-        {
-            'name': 'text4shell',
-            'title': 'text4shell',
-            'class': Text4shellAnalyzer,
-            'language': 'cve',
-            'issues_data': issues_data,
-        },
-}

checkmate5-4.3.0.dev2/checkmate/contrib/plugins/golang/gostaticcheck/analyzer.py

@@ -1,94 +0,0 @@
-# -*- coding: utf-8 -*-
-
-
-from checkmate.lib.analysis.base import BaseAnalyzer
-
-import logging
-import os
-import tempfile
-import json
-import subprocess
-
-
-logger = logging.getLogger(__name__)
-
-
-class GostaticcheckAnalyzer(BaseAnalyzer):
-
-    def __init__(self, *args, **kwargs):
-        super(GostaticcheckAnalyzer, self).__init__(*args, **kwargs)
-
-    def summarize(self, items):
-        pass
-
-    def analyze(self, file_revision):
-        issues = []
-        tmpdir = "/tmp/"+file_revision.project.pk
-
-        if not os.path.exists(os.path.dirname(tmpdir+"/"+file_revision.path)):
-            try:
-                os.makedirs(os.path.dirname(tmpdir+"/"+file_revision.path))
-            except OSError as exc:  # Guard against race condition
-                if exc.errno != errno.EEXIST:
-                    raise
-        
-        result = subprocess.check_output(["rsync -r . "+tmpdir+" --exclude .git"],shell=True).strip()
-                                        
-        f = open(tmpdir+"/"+file_revision.path, "wb")
-
-        result = {}
-        try:
-            with f:
-                try:
-                  f.write(file_revision.get_file_content())
-                except UnicodeDecodeError:
-                  pass
-            os.chdir(tmpdir)
-            os.environ["PATH"] = "/root/.go/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/:/usr/local/go/bin/"
-
-            try:
-                result = subprocess.check_output(["/root/bin/staticcheck",
-                                                  "-f", "json",
-                                                  f.name],
-                                                  stderr=subprocess.DEVNULL).strip()
-            except subprocess.CalledProcessError as e:
-                if e.returncode == 2:
-                    result = e.output
-                elif e.returncode == 1:
-                    result = e.output
-                    pass
-                else:
-                    result = []
-
-            for line in result.splitlines():
-              try:
-                  json_result = json.loads(line)
-              except ValueError:
-                  json_result = []
-                  pass
-              try:
-                    issue = json_result
-                    value = issue['location']['line']
-
-                    location = (((value,None),
-                                  (value,None)),)
-
-                   
-
-                    if ".go" in file_revision.path:
-                        issues.append({
-                            'code': issue['code'],
-                            'location': location,
-                            'data': issue['message'],
-                            'file': file_revision.path,
-                            'line': value,
-                            'fingerprint': self.get_fingerprint_from_code(file_revision, location, extra_data=issue['message'])
-                        })
-
-              except:
-                pass
-
-        finally:
-            pass
-        return {'issues': issues}
-