codeaudit 1.9.2__py3-none-any.whl → 1.9.3__py3-none-any.whl

codeaudit/__about__.py

@@ -1,4 +1,4 @@
 # SPDX-FileCopyrightText: 2025-present Maikel Mardjan
 #
 # SPDX-License-Identifier: GPL-3.0-or-later
-__version__ = "1.9.2"
+__version__ = "1.9.3"

codeaudit/altairplots.py

@@ -18,7 +18,8 @@ import pandas as pd
 
 from collections import Counter
 from pathlib import Path
-
+from codeaudit.api_interfaces import get_weakness_counts
+from codeaudit.api_reporting import total_weaknesses
 
 def module_count_barchart(scanresult):
     """Create a bar chart showing module counts by category.
@@ -689,20 +690,8 @@ def weaknesses_overview(scanresult):
             .mark_text()
             .encode(text="msg:N")
         )
-
-    # --- Count every 'validation' across all files ---
-    counter = Counter()
-    for file_info in file_security_info.values():
-        if not isinstance(file_info, dict):
-            continue
-        sast_result = file_info.get("sast_result")
-        if not isinstance(sast_result, dict):
-            continue
-        for finding in sast_result.values():
-            if isinstance(finding, dict):
-                validation = finding.get("validation")
-                if validation and isinstance(validation, str):
-                    counter[validation] += 1
+    # --- Count every validation across all files ---
+    counter = Counter(get_weakness_counts(scanresult))    
 
     if not counter:
         return (
@@ -875,7 +864,7 @@ def sast_files_overview(scanresult):
                 "base_name": base_name,
                 "parent_folder": parent_folder,
                 "full_path": str(filepath),
-                "issues": len(sast_result),
+                "issues": total_weaknesses(scanresult),
                 "complexity": file_info.get("Complexity_Score", 0),
             }
         )
@@ -977,19 +966,8 @@ def weaknesses_radial_overview(scanresult):
         )
 
     # --- Count every 'validation' across all files ---
-    counter = Counter()
-    for file_info in file_security_info.values():
-        if not isinstance(file_info, dict):
-            continue
-        sast_result = file_info.get("sast_result")
-        if not isinstance(sast_result, dict):
-            continue
-        for finding in sast_result.values():
-            if isinstance(finding, dict):
-                validation = finding.get("validation")
-                if validation and isinstance(validation, str):
-                    counter[validation] += 1
-
+    counter = Counter(get_weakness_counts(scanresult))    
+   
     if not counter:
         return (
             alt.Chart(

codeaudit/api_interfaces.py

@@ -315,38 +315,56 @@ def read_input_file(filename, safe_directory="data_folder"):
 
 def get_weakness_counts(input_file, nosec=False):
     """
-    Analyze a Python file or package and count occurrences of code weaknesses.
+    Count SAST weaknesses.
+
+    Accepts either:
+    - A scan result dictionary.
+    - A file/package path that will be scanned.
     """
-    # Assuming filescan is imported from codeaudit.api_interfaces
-    scan_result = filescan(input_file, nosec)
+
+    # Accept an existing scan result or scan a file/package
+    if isinstance(input_file, dict):
+        scan_result = input_file
+    else:
+        scan_result = filescan(input_file, nosec)
 
     if not isinstance(scan_result, dict):
-        raise ValueError("filescan() did not return a valid result dictionary")
+        raise ValueError("Invalid scan result")
 
     if "Error" in scan_result:
         raise ValueError(scan_result["Error"])
 
     file_security_info = scan_result.get("file_security_info")
+
     if not isinstance(file_security_info, dict):
         return {}
 
     counter = Counter()
 
     for file_info in file_security_info.values():
+
         if not isinstance(file_info, dict):
             continue
 
         sast_result = file_info.get("sast_result", {})
+
         if not isinstance(sast_result, dict):
             continue
 
-        # Based on your data: sast_result keys are line numbers (e.g., 171)
-        # and values are dicts containing the 'validation' type.
-        for issue_details in sast_result.values():
-            if isinstance(issue_details, dict):
-                # We use the 'validation' field to identify the type of weakness
-                weakness_type = issue_details.get("validation", "Unknown")
-                counter[weakness_type] += 1
+        for finding in sast_result.values():
+
+            # Support individual findings and lists of findings
+            findings = finding if isinstance(finding, list) else [finding]
+
+            for issue in findings:
+
+                if not isinstance(issue, dict):
+                    continue
+
+                weakness_type = issue.get("validation", "Unknown")
+
+                if isinstance(weakness_type, str) and weakness_type:
+                    counter[weakness_type] += 1
 
     return dict(counter)
 

codeaudit/api_reporting.py

@@ -19,17 +19,33 @@ So all results are returned as Pandas Dataframe. This makes things easier for fu
 
 """
 
-
 def total_weaknesses(scan_result):
-    """Returns the total weaknesses found
-    input: scan_result (dict): Scan output containing "file_security_info" with
-            per-file SAST findings. Each finding should include a "validation" field.
+    """Count all individual weaknesses in a scan result.
+
+    Walks through each file's SAST findings and adds up every
+    individual weakness found.
+
+    Args:
+        scan_result (dict): Scan output with a "file_security_info" key
+            mapping file names to their per-file results. Each file's
+            "sast_result" maps check names to either a single finding
+            or a list of findings.
 
-    """
+    Returns:
+        int: Total number of individual weaknesses across all files.
+    """    
     total = 0
 
-    for file_info in scan_result.get("file_security_info", {}).values():
+    file_security_info = scan_result.get("file_security_info", {})
+
+    for file_info in file_security_info.values():
         sast_result = file_info.get("sast_result", {})
-        total += len(sast_result)
+
+        for finding in sast_result.values():
+            if isinstance(finding, list):
+                total += len(finding)
+            else:
+                total += 1
 
     return total
+

codeaudit/data/sastchecks.csv

@@ -9,7 +9,7 @@ Directory Creation,os.mknod,Low,Direct file system calls require careful input v
 Directory Creation,os.makedev,Low,Direct file system calls require careful input validation to prevent vulnerabilities.
 OS Forking,os.fork,Low,"On macOS use of this function is unsafe when mixed with using higher-level system APIs, and that includes using urllib.request."
 Dangerous Built-in: eval,eval,High,This function can execute arbitrary code. Never safe with untrusted input.
-Input Function,input,Low,User input must be strictly sanitized and validated to prevent injection vulnerabilities.
+Input Function,input,High,User input must be strictly sanitized and validated to prevent injection vulnerabilities.
 Overly Broad Exception Handling,pass,Low,Using `pass` in an `except` block can silently ignore critical security exceptions.
 Overly Broad Exception Handling,continue,Low,Skipping over exceptions can mask critical errors and security risks.
 Dangerous Built-in: exec,exec,High,This function can execute arbitrary code and should be used only with validated constructs.

{codeaudit-1.9.2.dist-info → codeaudit-1.9.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: codeaudit
-Version: 1.9.2
+Version: 1.9.3
 Summary: A modern Python security source code analyzer (SAST) based on distrust.
 Project-URL: Homepage, https://codeaudit.nocomplexity.com
 Project-URL: Documentation, https://github.com/nocomplexity/codeaudit#readme
@@ -18,6 +18,7 @@ Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.12

{codeaudit-1.9.2.dist-info → codeaudit-1.9.3.dist-info}/RECORD

@@ -1,9 +1,9 @@
-codeaudit/__about__.py,sha256=lEwjjJlm2CvFjGxH6luX5N-xGFvuupCM1jTTMibyA_w,122
+codeaudit/__about__.py,sha256=nlCTz8cZKQ_lQkUGmTqOtBkb9ZCNmkdh5Rfk-vdyGe0,122
 codeaudit/__init__.py,sha256=vrz_p2yfDBQD-LBiT2hS0Nl6Da896DjCF4tBeg-3zmU,163
-codeaudit/altairplots.py,sha256=WsLmKqZ_sEysAv7q668WDnOlENk7YyHax24AwRihHC8,35906
+codeaudit/altairplots.py,sha256=mKM2JApYE5yDwV4qygAK1eDj3ykZ-YgXFnekH7iWyo0,35131
 codeaudit/api_helpers.py,sha256=-B7XneWSfmYPfHnYRI149DtYTLjRf2Np3l0Tu6rNDQI,3810
-codeaudit/api_interfaces.py,sha256=yCkoIIWaHuF7QCxz2Z2ufbIGcvCrUEdolQirg-zfjxk,31193
-codeaudit/api_reporting.py,sha256=WRXPsS0t9ljdD_6gN5uN-t0xqNOuE9k5oqSmxaYWTf8,1585
+codeaudit/api_interfaces.py,sha256=pAn823GLa3Et76fOCQ_Lqh1wVLq_uCPjG7oJURPdl-Y,31337
+codeaudit/api_reporting.py,sha256=cHAv5FkwGzTfNI-4n5qNR-t7ZegpqBZjw1kUq8lpaVI,2054
 codeaudit/checkmodules.py,sha256=gDQXD1D79zUPgbTtATy-CG7FQuZYLjrukbmXSF-eL08,6505
 codeaudit/ci_workflowscan.py,sha256=ccA_38wTXPyGfWuGgaU9hGtt-HuX3f6cTh_EkaGRaWA,14285
 codeaudit/complexitycheck.py,sha256=7ILf2wYho6DDiC-Q3ZjuJGbUZb1TaGfkTkWKtLO8_RU,4236
@@ -19,10 +19,10 @@ codeaudit/security_checks.py,sha256=7nTlolMtI5MW-fhnOQonsp9W6-1QI1KDvNYO-NL5Am0,
 codeaudit/simple.css,sha256=H7KT61oXJkVr9qXVrC5ME_Zph9jI-uR2IxOsXG1xs5k,4013
 codeaudit/suppression.py,sha256=8ZX8NAoWxJjgP3ZruvuQz5G_XFmPvyjOAYF84Q6bT2M,7755
 codeaudit/totals.py,sha256=i7Y5gXEk52p93Mo_usK2VATq1LmtBkFVKNGvT8AjJzw,6401
-codeaudit/data/sastchecks.csv,sha256=qljGNtwDff-GypMhiSK2KYABWUzpOH5aetrzFbU7PDA,11100
+codeaudit/data/sastchecks.csv,sha256=9hhZun778xfQPRKl_b-i-HJ-KfDW0SmvBYh0FUL1Mws,11101
 codeaudit/data/secretslist.txt,sha256=Vb-kuliUcuQHWAeuxIq3hZ-RNeKNXPNYIWoQe5SCTW4,1962
-codeaudit-1.9.2.dist-info/METADATA,sha256=w4M3E7DmLwvLMfFgA0wdlhtQmmzMvWY6vcoiJXNuphc,9023
-codeaudit-1.9.2.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-codeaudit-1.9.2.dist-info/entry_points.txt,sha256=LSpeBIiwDjyffyx_YQIUzmBOnmdCJ_V42onGC_5Nv5E,53
-codeaudit-1.9.2.dist-info/licenses/LICENSE.txt,sha256=-5gWaMGKJ54oX8TYP7oeg2zITdTapzyWl9PP0tispuA,34674
-codeaudit-1.9.2.dist-info/RECORD,,
+codeaudit-1.9.3.dist-info/METADATA,sha256=oiQ7armvgM3rp72-niELtWPt77OzCNmGgVf4R_p-XPc,9074
+codeaudit-1.9.3.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
+codeaudit-1.9.3.dist-info/entry_points.txt,sha256=LSpeBIiwDjyffyx_YQIUzmBOnmdCJ_V42onGC_5Nv5E,53
+codeaudit-1.9.3.dist-info/licenses/LICENSE.txt,sha256=-5gWaMGKJ54oX8TYP7oeg2zITdTapzyWl9PP0tispuA,34674
+codeaudit-1.9.3.dist-info/RECORD,,

{codeaudit-1.9.2.dist-info → codeaudit-1.9.3.dist-info}/WHEEL

@@ -1,4 +1,4 @@
 Wheel-Version: 1.0
-Generator: hatchling 1.29.0
+Generator: hatchling 1.33.0
 Root-Is-Purelib: true
 Tag: py3-none-any