codelaw-rules-security-python 0.4.2__py3-none-any.whl → 0.5.1__py3-none-any.whl

codelaw_rules_security_python/rules/sec-py/suspicious-pyghmi-import.md

@@ -0,0 +1,50 @@
+---
+id: sec-py/suspicious-pyghmi-import
+title: "`pyghmi` is imported"
+languages: [python]
+fix: manual
+fix_reason: "the protocol is the problem, and the replacement is a different protocol"
+fix_exception: security
+stability: preview
+ported_from: [ruff/S415]
+security: { cwe: [319], owasp: ["A02:2025"], severity: medium }
+since: 0.5.0
+---
+
+`import pyghmi` and `from pyghmi import …` are reported. `pyghmi` is an IPMI library.
+
+**Why:** IPMI sends authentication material that can be captured and cracked offline, and many BMCs expose it by default. An encrypted management protocol (Redfish over TLS, SSH to the BMC) does not have the weakness (CWE-319).
+
+```codelaw
+native: sec-py/suspicious-pyghmi-import
+```
+
+## How to fix
+
+1. Prefer a Redfish client over TLS for out-of-band management.
+2. Where IPMI is unavoidable, keep it on an isolated management network and use IPMI 2.0 with strong, unique credentials.
+
+
+## Examples
+
+### Python
+
+#### Don't
+
+```python
+import pyghmi
+
+session = pyghmi.ipmi.command.Command(bmc=host, userid=user, password=password)
+```
+
+#### Do
+
+```python
+import requests
+
+resp = requests.get(f"https://{host}/redfish/v1/", timeout=10)
+```
+
+## Differences from the source
+
+Only the exact module `pyghmi` is matched, as in Ruff: `import pyghmi.ipmi` and `from pyghmi.ipmi import command` are not.

codelaw_rules_security_python/rules/sec-py/suspicious-subprocess-import.cases.md

@@ -0,0 +1,24 @@
+# sec-py/suspicious-subprocess-import — cases
+
+### case: a from-import
+
+```python
+from subprocess import run
+```
+
+```expect
+1:6 sec-py/suspicious-subprocess-import
+```
+
+### case: type-checking only
+
+```python
+from typing import TYPE_CHECKING
+
+if TYPE_CHECKING:
+    import subprocess
+```
+
+```expect
+(none)
+```

codelaw_rules_security_python/rules/sec-py/suspicious-subprocess-import.md

@@ -0,0 +1,51 @@
+---
+id: sec-py/suspicious-subprocess-import
+title: "`subprocess` is imported"
+languages: [python]
+fix: manual
+fix_reason: "whether the import is a risk depends on what is passed to it; no edit makes it safe"
+fix_exception: security
+stability: preview
+ported_from: [ruff/S404]
+security: { cwe: [78], owasp: ["A05:2025"], severity: low }
+since: 0.5.0
+---
+
+`import subprocess` and `from subprocess import …` are reported at the import, outside an `if TYPE_CHECKING:` block and outside stub files. Opt-in: a project that wants every use of a subprocess to be reviewed.
+
+**Why:** A subprocess call is where a command line is built from data, and the injection rules (`sec-py/no-shell`) only see the call. Listing the import points a reviewer at each module that can start a process (CWE-78).
+
+```codelaw
+native: sec-py/suspicious-subprocess-import
+```
+
+## How to fix
+
+1. Check that every call passes a list of arguments and no `shell=True`; `sec-py/no-shell` reports the ones that do not.
+2. Keep the import where the call is needed, and the module's inputs validated.
+3. If the module only needs a path or an environment lookup, use `pathlib` or `shutil` and drop the import.
+
+
+## Examples
+
+### Python
+
+#### Don't
+
+```python
+import subprocess
+
+subprocess.run(["ls", path])
+```
+
+#### Do
+
+```python
+import os
+
+entries = os.listdir(path)
+```
+
+## Differences from the source
+
+The import is found as written. Ruff's rule has no fix either.

codelaw_rules_security_python/rules/sec-py/urlopen-scheme.md

@@ -4,6 +4,7 @@ title: "`urlopen` of a value that may be `file://`"
 languages: [python]
 fix: manual
 fix_reason: "the allowed schemes and hosts are policy"
+fix_exception: security
 stability: preview
 ported_from: [bandit/B310, ruff/S310]
 security: { cwe: [22, 918], owasp: ["A01:2025"], severity: medium }

{codelaw_rules_security_python-0.4.2.dist-info → codelaw_rules_security_python-0.5.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codelaw-rules-security-python
-Version: 0.4.2
+Version: 0.5.1
 Summary: codelaw's security rules for Python: CWE and OWASP Top 10:2025 mapped; PyPI only (SR-RULE-PACKS)
 License-Expression: MIT
 License-File: LICENSE
@@ -32,6 +32,18 @@ preview = true   # every rule is `preview` until a corpus run promotes it
 
 <!-- /docs-sync:presets -->
 
+## The fix ladder
+
+Each rule's fix class ([SR-LAW-4](../../records/0006_LAW-4-every-rule-has-a-fix.md)): `manual` rules by their named exception. `codelaw rules --fix-stats` prints the same table.
+
+<!-- rule-docs:fix-ladder -->
+
+| auto | suggest | manual | value | restructure | authored | security | waiting to move up |
+|---|---|---|---|---|---|---|---|
+| 0 | 29 | 37 | 10 | 9 | 1 | 17 | 0 |
+
+<!-- /rule-docs:fix-ladder -->
+
 `recommended` holds only high-confidence rules, at `error`; `strict` adds the
 heuristic ones, at `warn`, so a team can start without noise.
 

{codelaw_rules_security_python-0.4.2.dist-info → codelaw_rules_security_python-0.5.1.dist-info}/RECORD

@@ -1,8 +1,8 @@
 codelaw_rules_security_python/LICENSE,sha256=_R8NFLyGiKUo7mPzbUGbqg3hdEKYhaTsIgBGXqtFfa8,1097
 codelaw_rules_security_python/NOTICE,sha256=I5c_ZIxoE-PJcMJpjDP9MG2WT5TS7QA36DO_58fI2Qo,1100
-codelaw_rules_security_python/README.md,sha256=T8L_yTB8NsMKFO7NahW536QUNGgjuSy28BcJ17Y7Xqg,21535
-codelaw_rules_security_python/codelaw-pack.toml,sha256=O03s054CdnvyaEhnOmFHAVwNy0fuYSoz3XM_MMy0dLs,265
-codelaw_rules_security_python/corpus.toml,sha256=7kCkBqK0TlzXL5ej4948CgI2EwrFOgOx4KccG-60rqk,1986
+codelaw_rules_security_python/README.md,sha256=O8e1ljvuS3EbJyA1NyWu_PVMdZkuB1Jg5VNWieq_EBU,21962
+codelaw_rules_security_python/codelaw-pack.toml,sha256=vcKwaNvYnfVnumLMtIpPP6ztIpWmL6re0Ee-RtHeoOM,265
+codelaw_rules_security_python/corpus.toml,sha256=ER5VNb1YdmY6c9YKv8bl6GMkoQ5AoTUBaplMDNk_UCo,2173
 codelaw_rules_security_python/data/sources/django.json,sha256=kopyhAr3eY8lIf9Uty8wci4f8u1J3twKQRzflRKEK8U,327
 codelaw_rules_security_python/data/sources/fastapi.json,sha256=ePtnSdeNuLqstvRQ1XP0Rel3fCjwQm6gIWV02n8VCpI,170
 codelaw_rules_security_python/data/sources/flask.json,sha256=7AeuNT6MLWNM068ZgxyaUI17kNyYJzI_yXXWMRnK5g4,243
@@ -10,114 +10,121 @@ codelaw_rules_security_python/presets/sec-py/recommended.toml,sha256=Vf4Y2omb5IA
 codelaw_rules_security_python/presets/sec-py/strict.toml,sha256=hUL0Npbe5RcGK8_pPRqxyVlGJqD2G5LBjT5psb84y-c,277
 codelaw_rules_security_python/rules/sec-py/cookie-flags.cases.md,sha256=xI4glUrdBRxb-W7SyE-naFssXaFpQUVfAf-WQGTp2wo,818
 codelaw_rules_security_python/rules/sec-py/cookie-flags.md,sha256=HUIFGqhDrDpdvTGTJqux5cmjh2SbOi_FRzRZuxumz08,3235
-codelaw_rules_security_python/rules/sec-py/django-settings.cases.md,sha256=SI9FXe1FEaQlSNFLG7Qa4fRmuZPoBGQteQjAmMe5NNw,738
-codelaw_rules_security_python/rules/sec-py/django-settings.md,sha256=yBxipH_y89YZ7T06xNmIF3csSKlOiOetJ6VGdPBsvfg,2303
+codelaw_rules_security_python/rules/sec-py/django-settings.cases.md,sha256=rU3DYgl6OAHD83oHXMXMlP6qrifjhx6NO-0o5O244qs,925
+codelaw_rules_security_python/rules/sec-py/django-settings.md,sha256=L4jpR8m9-WJjVTaa6XtvEAyBf7cRS_a793zEhdpnZvw,2375
 codelaw_rules_security_python/rules/sec-py/fastapi-cors.cases.md,sha256=Z5FLQYtsSv_Y_8Gx2UjqoAeCyaYgpCSw0IYcb4CLHMw,483
-codelaw_rules_security_python/rules/sec-py/fastapi-cors.md,sha256=18iO3b1OwBbhSHFbPN-lqqZHw3-7Y0QJ4meUvkh94oU,1288
+codelaw_rules_security_python/rules/sec-py/fastapi-cors.md,sha256=H-hLwzdoWvvmQGGVWkS9hWbo6MkijGmc7XW6KbuNkQU,1309
 codelaw_rules_security_python/rules/sec-py/flask-debug.cases.md,sha256=YODqWw22aWjIZK1J7b6oVfeTLGf8QwyavTVLZwq5NfQ,280
 codelaw_rules_security_python/rules/sec-py/flask-debug.md,sha256=Di85uSsqH9NfNHRdECriJbdNOTQW9rBTAPlGgI1cork,1449
-codelaw_rules_security_python/rules/sec-py/flask-settings.cases.md,sha256=DhKAcPaxaOEeivMSf2HUwD3a9xYhr-7unKRxBIA3iA8,584
-codelaw_rules_security_python/rules/sec-py/flask-settings.md,sha256=aq3RM2SKy4339Om0mV4maCbPbU7sRZuSeYR62KazIH0,2884
+codelaw_rules_security_python/rules/sec-py/flask-settings.cases.md,sha256=gSXWZOJF25aomRX4mjTGLWdn3LDswMu8CNIPQNUFAl8,966
+codelaw_rules_security_python/rules/sec-py/flask-settings.md,sha256=m1M1QdrxYFC2_2Iuf22C25-8sQIg8Hbvg_xwhzw42-M,2992
 codelaw_rules_security_python/rules/sec-py/hf-pin-revision.cases.md,sha256=ARuVN_1DZk6Bd2eQ8-2xsJgAzGz_aoibtnwJKc5Pyf8,595
-codelaw_rules_security_python/rules/sec-py/hf-pin-revision.md,sha256=Qmb0gwPvwhl9DtwTUtUjHmmuNVAlrFe1-iLsR1DmTqU,1529
+codelaw_rules_security_python/rules/sec-py/hf-pin-revision.md,sha256=a_EpAr7aGpt6iTGVj--K1YtQnorFEHsxUATFvSvUmBc,1550
 codelaw_rules_security_python/rules/sec-py/jinja-autoescape.cases.md,sha256=-kMJkwPZ1SjQSAAJkZogL3326ckG5bqWW4feBA2K-EA,732
 codelaw_rules_security_python/rules/sec-py/jinja-autoescape.md,sha256=vHNhu_SuguAFmy46FgVkJWmxY8LVtvb6invvIcuuPCM,2286
 codelaw_rules_security_python/rules/sec-py/logging-listen.cases.md,sha256=XTFws7H-7B7s7uZGIqrpHoq4UELslE5drwHmOQO0Yj0,292
-codelaw_rules_security_python/rules/sec-py/logging-listen.md,sha256=9w9jzuBr9k8_cGnBXw26T2x5QWr7gexYXRDYX1kUrH0,1132
-codelaw_rules_security_python/rules/sec-py/ml-unsafe-load.cases.md,sha256=n0Ces_BDR4RatAsWnNW9mW2j5v0uIn_xs2g89Q6T01Y,585
-codelaw_rules_security_python/rules/sec-py/ml-unsafe-load.md,sha256=oJ00fhmBtV3zC-OU4pg4YyDf74iiLtwiZaD0gOPkgcM,1944
-codelaw_rules_security_python/rules/sec-py/no-assert-for-auth.cases.md,sha256=fn_aGMNGV4hJa0ecSUNOIJJ9jlwSn01eftjBNa0yUFA,338
-codelaw_rules_security_python/rules/sec-py/no-assert-for-auth.md,sha256=O2YZ7SYZnvLLngF9PEn_66IHsnAbWezVHBh7OIGlt98,1432
-codelaw_rules_security_python/rules/sec-py/no-bind-all-interfaces.cases.md,sha256=ivhe3vmSv8POLVa98KQOkhIeVos4JqYSt-cYKr2aKqI,419
-codelaw_rules_security_python/rules/sec-py/no-bind-all-interfaces.md,sha256=xl_Y1JPfeXeboBuy5xYetqJZc14Ro71FJYEKeztlK4c,2010
+codelaw_rules_security_python/rules/sec-py/logging-listen.md,sha256=NxDEnizvosk3aG1Gm0_2vMgKgxA0-IO1rCk9BIZYfq4,1159
+codelaw_rules_security_python/rules/sec-py/ml-unsafe-load.cases.md,sha256=W8WJ22VAsTnabBf5a7tE7lQPuruUMzU0b3CT0kpFitk,790
+codelaw_rules_security_python/rules/sec-py/ml-unsafe-load.md,sha256=j9gXTCGn7ukWchqG4TBTghdXzRTFvUksN0mWp6GV348,2094
+codelaw_rules_security_python/rules/sec-py/no-assert-for-auth.cases.md,sha256=MCFm9IKYz3PSHG2nuHl3KV-PWeuxcrc7Yhuc8xUcIiY,615
+codelaw_rules_security_python/rules/sec-py/no-assert-for-auth.md,sha256=F1zDux54628_FoBwnFXTc2SFcERYG26rzNrpUx7B6Y0,2104
+codelaw_rules_security_python/rules/sec-py/no-bind-all-interfaces.cases.md,sha256=pmP3p_D90AUxLqzITatOjeb338Inh7hi_fxy6Hutv-k,890
+codelaw_rules_security_python/rules/sec-py/no-bind-all-interfaces.md,sha256=wr8VAF9rJbtCbPG-brxJ3O2ZOAwL6hogiPSQfCpbIzc,2578
 codelaw_rules_security_python/rules/sec-py/no-cleartext-http.cases.md,sha256=1Xjc04kIeUXl25gduOWVzRyT2z_YiinpKXBZiE1pFx4,458
-codelaw_rules_security_python/rules/sec-py/no-cleartext-http.md,sha256=yPDZA4pJigoEMLm_POeRmxlYyONYXRH-fCj8cc7S8mk,1308
-codelaw_rules_security_python/rules/sec-py/no-csrf-exempt.cases.md,sha256=0C6NuUPuSyxFDqCLyPrlOnNo8knm1aoCvNo6SQsSzpw,457
-codelaw_rules_security_python/rules/sec-py/no-csrf-exempt.md,sha256=6pHRkTT63pn-plkHrwaqBA9Ladp2wXGwSX5fbP5_s8g,1051
+codelaw_rules_security_python/rules/sec-py/no-cleartext-http.md,sha256=5fbh3vuhirQZekKeEtrh0lR3xVpog2YUAXhp0zPMs4w,1332
+codelaw_rules_security_python/rules/sec-py/no-csrf-exempt.cases.md,sha256=CCHijBVkMou3W7obun2WrGytUvPXcwo5y7N3jxNJdv4,635
+codelaw_rules_security_python/rules/sec-py/no-csrf-exempt.md,sha256=3v_6RKEjDJV7uMPNpWD2NIJlC8yBZFyN32NyRnfy1DQ,1276
 codelaw_rules_security_python/rules/sec-py/no-dynamic-import.cases.md,sha256=13mKQBcBU_4t2TL-4H_h8VHJGm1SW7U3R90ICOEG4-c,445
-codelaw_rules_security_python/rules/sec-py/no-dynamic-import.md,sha256=sw3aXGPb6501gzKchubtnu0RwcRfUJ8wxSqEi4NyujA,1512
+codelaw_rules_security_python/rules/sec-py/no-dynamic-import.md,sha256=rOoydp6TIxAFcb0A5kxpDA4Bm37PZQyoRJOtjhbkx1Q,1533
 codelaw_rules_security_python/rules/sec-py/no-exec-eval.cases.md,sha256=9RJytLwZ79i0il6HpXT1PQcIhVJW1q5M9DRdFQxnvLY,478
-codelaw_rules_security_python/rules/sec-py/no-exec-eval.md,sha256=i5J3P-4WndmXeWT2FUw4Bxd6VhaIaUZ7Pxoqk9B_cpk,1459
+codelaw_rules_security_python/rules/sec-py/no-exec-eval.md,sha256=QysJZIJqk4K6_nq9s5o-_BXu56iJspjuXXh5YD2PWYA,1483
 codelaw_rules_security_python/rules/sec-py/no-format-string-injection.cases.md,sha256=XD_rYPkQDVvaHkirhj_wPi8ZaJ0O8IFTqMiw7dWJhDg,480
-codelaw_rules_security_python/rules/sec-py/no-format-string-injection.md,sha256=ZqFCjihKa7OtwoaRyuQTvGHgJSPb8EvYQSP1P6V4VT8,1379
+codelaw_rules_security_python/rules/sec-py/no-format-string-injection.md,sha256=EnOVN9KMgCye2mJrsJrMbW97Zfvd58ONP9HE6rhazK0,1403
 codelaw_rules_security_python/rules/sec-py/no-hardcoded-crypto-key.cases.md,sha256=ch4k31D1KBp_sQq2_pn9jM0eq5XdNhmGuI1hQFcfrkY,588
-codelaw_rules_security_python/rules/sec-py/no-hardcoded-crypto-key.md,sha256=fp9NjSO8boy6xMQMMQzk5_4T44BAo308A7atP8Yyy3c,2947
+codelaw_rules_security_python/rules/sec-py/no-hardcoded-crypto-key.md,sha256=xqxQ2lMFDc1N5WgPhPQte6IZfBdmElWcLP8eyVY-2dc,2968
 codelaw_rules_security_python/rules/sec-py/no-hardcoded-secret.cases.md,sha256=PvIJLkgZiWpFOn-bURv1S5VxJ2ZiSsv5wM4R870bBkk,669
-codelaw_rules_security_python/rules/sec-py/no-hardcoded-secret.md,sha256=opAA1G6D833jHOcUD1P2qV9zDRJZibjGiWtYwKW6JdA,2969
-codelaw_rules_security_python/rules/sec-py/no-header-injection.cases.md,sha256=JEXhxP-iaWslxVKAOksUkjVu5C9A_cWpK0tTWKAx2Xw,526
-codelaw_rules_security_python/rules/sec-py/no-header-injection.md,sha256=nEge53cgzIa1l5qSlOI6SI5tx-18NydMyksnDIDHGXI,1766
+codelaw_rules_security_python/rules/sec-py/no-hardcoded-secret.md,sha256=8BoU85kkNSsuU6fCa9GO0mrRH7d8_lmsSB3dTfU5Odo,2990
+codelaw_rules_security_python/rules/sec-py/no-header-injection.cases.md,sha256=ONKZytUve_Pj-XNS1UAIIkV-Z_aunvFxuYD5Qysc9vI,807
+codelaw_rules_security_python/rules/sec-py/no-header-injection.md,sha256=EAJnkw8yDC4ZHqaJFCfWGvdVmRkQprNHXuPWkddKlC4,2543
 codelaw_rules_security_python/rules/sec-py/no-insecure-protocol.cases.md,sha256=NG4CFrdKjTr-CQS8jviLaXAzurEiplQZMwhsdwfnewE,404
-codelaw_rules_security_python/rules/sec-py/no-insecure-protocol.md,sha256=swl_iKw1e3oKH01lwjfpBnUS-2HYkJ43qizTEB3fYCA,1413
+codelaw_rules_security_python/rules/sec-py/no-insecure-protocol.md,sha256=9aQp10kEUMBJ_QJQMh2evRycKfGF4vXuOhnrO93CR9Y,1517
 codelaw_rules_security_python/rules/sec-py/no-insecure-random.cases.md,sha256=z2QL5JVsDVpaWCwys6NlsTQ-RenrJkFNThXX2z130zc,430
 codelaw_rules_security_python/rules/sec-py/no-insecure-random.md,sha256=GLB3xZEXZY5iPvH-aAxS_twUTzwyeR6cFYFgj7ja2Ko,1545
 codelaw_rules_security_python/rules/sec-py/no-insecure-tempfile.cases.md,sha256=ZbEXV3QSi3MHcg-FOWJofFQXgJwZZySiV_MRj2wXy9s,432
 codelaw_rules_security_python/rules/sec-py/no-insecure-tempfile.md,sha256=V3EETTbYnG_uwffqLpR-oW8qXsYAQ6Ta5bM_iNwrHHo,1531
 codelaw_rules_security_python/rules/sec-py/no-ldap-injection.cases.md,sha256=0yd9c6Rkgc6SFcTZ_agNdX1hQo9RPvveDFcjRlXmrUE,461
-codelaw_rules_security_python/rules/sec-py/no-ldap-injection.md,sha256=2T06bXVdd7Pr2DEPSenFs5z7RKu1LcjzYi88l6GzAoc,1427
+codelaw_rules_security_python/rules/sec-py/no-ldap-injection.md,sha256=13VWKJmvbTFQUDynlISQwe7a1MxsCa3cm28DuBeGxOA,1451
 codelaw_rules_security_python/rules/sec-py/no-llm-output-to-sink.cases.md,sha256=HSjojlHwC88SguVjKm_jCZoFYSs8dtea4pSsvp4Q9tQ,368
-codelaw_rules_security_python/rules/sec-py/no-llm-output-to-sink.md,sha256=M9bdnMgzDZAaL6wwiDOivQ6JL38vX8BdWVG-XkpVqNo,1732
-codelaw_rules_security_python/rules/sec-py/no-log-injection.cases.md,sha256=wO5Aqz170Nx1ojMj2WL1CP4a0riFwcVh27e776fCTiw,536
-codelaw_rules_security_python/rules/sec-py/no-log-injection.md,sha256=04fJYQf6g-rYNZtiZxFk9mLcGBhHGTxT1Jm-s5tFzJw,1730
-codelaw_rules_security_python/rules/sec-py/no-mako.cases.md,sha256=XYjI8HKimIszoV5picmlNg9pcm3XB6HObDIt6t5PS70,360
-codelaw_rules_security_python/rules/sec-py/no-mako.md,sha256=lPz_CXEgIzoVo196Qe970aZcCeHBY-BJAZ0F4wKSdP8,1277
+codelaw_rules_security_python/rules/sec-py/no-llm-output-to-sink.md,sha256=LJFT4ThAF6A4Q3dOO3YfP3ZDUgr5PkFJ-7rDjpMJ2mA,1759
+codelaw_rules_security_python/rules/sec-py/no-log-injection.cases.md,sha256=xGSZcxg8QC9HvRne4_Lj3tsbdatrxtzhGFPkgrTl7FE,791
+codelaw_rules_security_python/rules/sec-py/no-log-injection.md,sha256=xxZyEmZ68ZKzrPlFMCIbxTS4OAGcthiUMLLq_0fucI4,1997
+codelaw_rules_security_python/rules/sec-py/no-mako.cases.md,sha256=n5Q2NkwR_WAABmq0TzdHms7WUaYEY3LTjKAU12itRNk,767
+codelaw_rules_security_python/rules/sec-py/no-mako.md,sha256=1Fy8gIY0Ve44FliccniFJR5f6F17bsKGHIEyfKX4rfs,1617
 codelaw_rules_security_python/rules/sec-py/no-mark-safe.cases.md,sha256=0gLF4XzpOAgpfc5eEhwuCUoYuc1N2VmibQS3aKcvn7A,488
-codelaw_rules_security_python/rules/sec-py/no-mark-safe.md,sha256=l5hYrzvqXz1lPzNEyNL-66_TrGt19aXno4t1sOb_Ucs,1524
+codelaw_rules_security_python/rules/sec-py/no-mark-safe.md,sha256=Wb1ZimaezsPjsChDQimAMvAvcuCsUklDPb75wXMw6cw,1548
 codelaw_rules_security_python/rules/sec-py/no-mass-assignment.cases.md,sha256=pNYIVb3bSPxg0XZMjaPJeL9QKIAYkd63__hG4HqDZn0,593
-codelaw_rules_security_python/rules/sec-py/no-mass-assignment.md,sha256=w08H1WKZywFoOKN3cNYq6DrcBMcvul_z6bjp_Hb0k6E,1670
+codelaw_rules_security_python/rules/sec-py/no-mass-assignment.md,sha256=PnMDeMwqaC9o203tpy45IZP1f4MFgsqsiCk6C5o5FPo,1691
 codelaw_rules_security_python/rules/sec-py/no-nosql-injection.cases.md,sha256=oWd18Lp4AwNK2mgU97YRhdUT4e1FhJ7_-JAaqmhdLZg,460
-codelaw_rules_security_python/rules/sec-py/no-nosql-injection.md,sha256=kHZCE67qW96fEm2pYYLsfmPTfUv0ERbCLvweWg1A4gU,1950
+codelaw_rules_security_python/rules/sec-py/no-nosql-injection.md,sha256=3AdHfuc5oU3HU57OsZ7WoEPZm89f34cPP4OYGcW2KhA,1971
 codelaw_rules_security_python/rules/sec-py/no-open-redirect.cases.md,sha256=KDF2AGSVMW2WrllKpxICfQZLeiY3hwzOkLM-mOoCx8o,435
-codelaw_rules_security_python/rules/sec-py/no-open-redirect.md,sha256=nvemD_S4rwEp_4uGJnYEQdqpUfLsZcE4WtuelBz1oOA,1598
+codelaw_rules_security_python/rules/sec-py/no-open-redirect.md,sha256=kAJuhwuHgnQYrvmLm_mkwe-943391YTmS7kRNBGjKyo,1622
 codelaw_rules_security_python/rules/sec-py/no-partial-path.cases.md,sha256=G7qBUzSbeetBRULL4HUMheKgxiuEImxwn1rKu4bM1F4,450
-codelaw_rules_security_python/rules/sec-py/no-partial-path.md,sha256=-90duEFxl0Ydc9L5VSE2IYxZ9mPAt2qC3V-looPCNwc,1522
+codelaw_rules_security_python/rules/sec-py/no-partial-path.md,sha256=CGN-x2DjMuGh7kKzfa_IXy9msOQfSfpHb9jiudlEgnU,1543
 codelaw_rules_security_python/rules/sec-py/no-path-traversal.cases.md,sha256=x1joUXMrFT-j6Ii4Fxj_qSYp_KKp4pl1R2Lx9Q3IwmU,533
-codelaw_rules_security_python/rules/sec-py/no-path-traversal.md,sha256=zJmvdNPbRpSjNNEB6sRGIpMD-0_wR3w84mcpQ-frLWQ,1740
+codelaw_rules_security_python/rules/sec-py/no-path-traversal.md,sha256=-jQnfrQ0aZV91W_HY_BinnqITgFIA4nwp7k4c8lpYcY,1749
 codelaw_rules_security_python/rules/sec-py/no-prompt-injection.cases.md,sha256=kKLzEeYl7Md-mfrUTAnKTJNbA1FsoHolspV71V1Ngbw,644
-codelaw_rules_security_python/rules/sec-py/no-prompt-injection.md,sha256=oVxTNSbMrYYb5aF-IBMTdxI8ezN54emaPOFYvUST5Xs,2164
+codelaw_rules_security_python/rules/sec-py/no-prompt-injection.md,sha256=vFFEcl8PSJkmxSxR4ut6NIgmNK67RE7eqJikgHUiQ2I,2191
 codelaw_rules_security_python/rules/sec-py/no-pycrypto.cases.md,sha256=odkuJrXbYDs0gUiaHTdeQz-JQqJCisn6gLhnnk-Nu-4,396
-codelaw_rules_security_python/rules/sec-py/no-pycrypto.md,sha256=hWacG8YYee4HpGFXgIPc_WY11C2p-2-aL-7xql1qYco,1318
+codelaw_rules_security_python/rules/sec-py/no-pycrypto.md,sha256=2kEJ-4LI2CZ9jfQr0KYF9QFyC-8fpv1G0I3FU3yB42k,1345
 codelaw_rules_security_python/rules/sec-py/no-reflected-xss.cases.md,sha256=xkqnciGWxoyrTxzdx2iXNA0neFgvZYLPbU2oTgI2Ans,532
-codelaw_rules_security_python/rules/sec-py/no-reflected-xss.md,sha256=1yid96GaNwKamb0Uxnkf9oXaZ0QX9pnNgQy-eX-oO2c,1930
+codelaw_rules_security_python/rules/sec-py/no-reflected-xss.md,sha256=V8DPHtda-0UfEus9rrLNkscfnXu6vEewjdCOCpZpB_o,2000
 codelaw_rules_security_python/rules/sec-py/no-regex-injection.cases.md,sha256=8m2drHxndYpZYAb1l87PeJRE6iE9LCwThkdg7kCqzSg,380
 codelaw_rules_security_python/rules/sec-py/no-regex-injection.md,sha256=AV6S8RiC0taNAPFAExUEuqeM5s7VlkVYkMlonfOr6IM,1631
-codelaw_rules_security_python/rules/sec-py/no-secret-in-log.cases.md,sha256=vD0GAVDM_ngghttsNFLMP_gMswc2nTd2C6Lct9sTDCE,423
-codelaw_rules_security_python/rules/sec-py/no-secret-in-log.md,sha256=Ltz6b3TCNNzgezDX3X07v88sBQq4eRVoxq5460fzS4E,1451
+codelaw_rules_security_python/rules/sec-py/no-secret-in-log.cases.md,sha256=l_CQVGAYnI-S5TvO7AxeTrh5yZgc0PzokZX9TnUvK5E,790
+codelaw_rules_security_python/rules/sec-py/no-secret-in-log.md,sha256=O9cGO5XybG58DBqOphe0eckoyOZZsIzAkRdeuJZ4tNc,1686
 codelaw_rules_security_python/rules/sec-py/no-shell.cases.md,sha256=8OHYSRDRdqawfsbJFmnlrlcVzF6041cnvVP6SangwHU,563
 codelaw_rules_security_python/rules/sec-py/no-shell.md,sha256=bx7Brkl3lxKJzF083xpZVuIznV8k6w2oiAu6oAEA9OY,1762
 codelaw_rules_security_python/rules/sec-py/no-silent-except.cases.md,sha256=gcTBZaFsVXeTFwBYDYcOFAUxaHJH-CGg0d6DXbrp8-Y,467
-codelaw_rules_security_python/rules/sec-py/no-silent-except.md,sha256=Z5rF5ri6thoPt6SNvx_VL6vo138xz2De05NDL1Xc1RM,1339
+codelaw_rules_security_python/rules/sec-py/no-silent-except.md,sha256=xyR64s_fZD_IRXcVohYHuxbuDsiJqX8Tfw33A4qjjfE,1363
 codelaw_rules_security_python/rules/sec-py/no-sql-string.cases.md,sha256=_o60UU0_dUulSdqoIzjhjsAkCoVy9knOeu_uzIxHiX4,1087
-codelaw_rules_security_python/rules/sec-py/no-sql-string.md,sha256=cCpD0oCpz6njkDF7JkVjEF9_7YX24oCMvh48UD2HMww,2656
+codelaw_rules_security_python/rules/sec-py/no-sql-string.md,sha256=AW43KycfOHQCK9TwVgIFEhPaI6PesXttsxftYwluXUg,2680
 codelaw_rules_security_python/rules/sec-py/no-ssrf.cases.md,sha256=GB9Xydct2LldgGLyBTY-9CkZz0Oq1rnekSwvGcsjw7E,454
-codelaw_rules_security_python/rules/sec-py/no-ssrf.md,sha256=jj7wL6kX-hUhiE5BQD1fB0Y1i66YLMkBSJ-Zk8n_UO8,1782
+codelaw_rules_security_python/rules/sec-py/no-ssrf.md,sha256=4JrOvcgTq5t-zS4OYMhvtJejg5kwtPtapKjWvzDWb70,1803
 codelaw_rules_security_python/rules/sec-py/no-stack-trace-response.cases.md,sha256=uiTyRwSV9Sm4oA06_EaNsCiO93uM2QU239EYHi_et1M,529
-codelaw_rules_security_python/rules/sec-py/no-stack-trace-response.md,sha256=JodSReesiOozdvBYU93kJDZrCK5L4ss8YKRTXMYBXTQ,1905
+codelaw_rules_security_python/rules/sec-py/no-stack-trace-response.md,sha256=huX96ui4UjdnHUHoQbLJhyhby7pi6mMwLZeWAy0624c,1929
 codelaw_rules_security_python/rules/sec-py/no-tls-bypass.cases.md,sha256=KpXyvEAz9T9gG4OZ0PMcgL224JrHWtdiEhdJ0_SPo5w,805
 codelaw_rules_security_python/rules/sec-py/no-tls-bypass.md,sha256=RKxGoZ5veAcl-2SFfwFxS18XswuPtB6h7xX8J3bpLHI,2198
-codelaw_rules_security_python/rules/sec-py/no-trust-remote-code.cases.md,sha256=yt4XGu7Ialx9J5K17mRRXPTYNWK-ul0CmKn_zO910IQ,403
-codelaw_rules_security_python/rules/sec-py/no-trust-remote-code.md,sha256=IPMfIzSt-GAMrfegyMQGmAM5WidEkfQ2QVsKPnBLEdI,1404
+codelaw_rules_security_python/rules/sec-py/no-trust-remote-code.cases.md,sha256=Jo_0-h9DxmfTGUgr6N4PVqPZ8hozjn6EJJ2bSzPWeiE,630
+codelaw_rules_security_python/rules/sec-py/no-trust-remote-code.md,sha256=VQUW3eBHbPPHxXD0Wz0LnkT3Su4orvFC5nN-ibrDfro,1561
 codelaw_rules_security_python/rules/sec-py/no-unsafe-deserialize.cases.md,sha256=mHtX0wPs8CRMaGd5DDQvXweolg-fCRGdfEQYGj2ah1o,590
-codelaw_rules_security_python/rules/sec-py/no-unsafe-deserialize.md,sha256=jL8x36irhEXq1GdsESgHTQD1Wf3N5Ln4bm39321yvn0,1296
+codelaw_rules_security_python/rules/sec-py/no-unsafe-deserialize.md,sha256=07F1UCySH7X1x8laDz7caju523KxSEW3Pnd75ugDLQY,1323
 codelaw_rules_security_python/rules/sec-py/no-weak-cipher.cases.md,sha256=AXpoaFe_ACCwzPjvZTvmcWx8ivtCZF-mB-vuT--9cAY,495
-codelaw_rules_security_python/rules/sec-py/no-weak-cipher.md,sha256=nOCPQWaM79QIXo9s13d9yNPKU6975qsKa0P6oG6Z_wc,1593
+codelaw_rules_security_python/rules/sec-py/no-weak-cipher.md,sha256=rCWT4VjLS9mlZIyKWeesYlD1VSGOhHFPD13Ig1VNZ_A,1620
 codelaw_rules_security_python/rules/sec-py/no-weak-hash.cases.md,sha256=HCjazWiSskDoNR6JIN6eekmIUC04BWfza4P92gl91YQ,374
 codelaw_rules_security_python/rules/sec-py/no-weak-hash.md,sha256=2J7Wv-u2fpLFBP_RGtsvEaWsqMaKPlJcRAfzc3XAfZg,1395
 codelaw_rules_security_python/rules/sec-py/no-wildcard-injection.cases.md,sha256=u3BYFcGFCdJd0u4qDXM0HRKndrDtS9Q7KvEClqP2Qt4,418
-codelaw_rules_security_python/rules/sec-py/no-wildcard-injection.md,sha256=kDUIYIc00iKm0ei7p2AaNFIaC8Qcku8RDH4TNEpZRiA,1401
+codelaw_rules_security_python/rules/sec-py/no-wildcard-injection.md,sha256=ijmla1DigWZqshK5KJUHwaXkSqYwvm92DuhJblBlIBc,1425
 codelaw_rules_security_python/rules/sec-py/no-world-writable.cases.md,sha256=rWUSyAyo9w0LEgbklFmYsCHYs0N-dj95ADxYI9pSiU8,464
 codelaw_rules_security_python/rules/sec-py/no-world-writable.md,sha256=QVrVyFd3HrAfx5dlhIwydO_752gNVYSJ2FaKV70xeno,1112
 codelaw_rules_security_python/rules/sec-py/no-xml-unsafe-parser.cases.md,sha256=rbrpJpePU2MeHrpNuPrILTb7QZGl-kkp6iGA2uVtHf0,900
 codelaw_rules_security_python/rules/sec-py/no-xml-unsafe-parser.md,sha256=PjyZLMF0pECNa3iOzVJ10IloB_0RBpkth2DGNZtaeuM,2543
 codelaw_rules_security_python/rules/sec-py/no-xmlrpc.cases.md,sha256=p_7ccr7j2H-Ru8-TzsGlr_NUuDuYwynRz2X8RuEIOIs,309
-codelaw_rules_security_python/rules/sec-py/no-xmlrpc.md,sha256=0mOX-QWQxnl2iZVUmKbvkMeJ-iztMjvTrKfs7KQYk5E,1337
+codelaw_rules_security_python/rules/sec-py/no-xmlrpc.md,sha256=WORheuAfq_dudfuEioD8uU6NVkGFa0Q-PaeMQOdrk70,1364
 codelaw_rules_security_python/rules/sec-py/no-xpath-injection.cases.md,sha256=12ELsXAeZ0FRSBPs1WrmWQH3Nlo6wwFoHo2Ip6poaZ8,453
-codelaw_rules_security_python/rules/sec-py/no-xpath-injection.md,sha256=dQpJF8r3TUO0dPzN94x06xxONNfDO3E2wRSNc8aZsBo,1481
+codelaw_rules_security_python/rules/sec-py/no-xpath-injection.md,sha256=kaEi9NbwMEJ6LTbDFQ2CtwMo7UkCj-91dHilGsk6rEw,1505
+codelaw_rules_security_python/rules/sec-py/paramiko-call.md,sha256=Qan5CIFQLszHA06qtu5uFayhRIP8YIag6lswEpFgEBA,1192
 codelaw_rules_security_python/rules/sec-py/paramiko-host-key.cases.md,sha256=_cW9njkzLeCqpZglP6roybNrXHtTTvEZXv6azC0iPQ0,284
-codelaw_rules_security_python/rules/sec-py/paramiko-host-key.md,sha256=jOzj4P45qimJsuA1EHGTZRGY-hGFaRAik7dygjrK_xY,1172
+codelaw_rules_security_python/rules/sec-py/paramiko-host-key.md,sha256=DZkQzxkLzRw6U105ph4x8wGjzmNR0Iz2KUjB60oM_Yk,1248
 codelaw_rules_security_python/rules/sec-py/password-hash-effort.cases.md,sha256=y4RK-stw00hyT-Co-ziofg2zbZfcqMj9QDIe-vacMag,748
-codelaw_rules_security_python/rules/sec-py/password-hash-effort.md,sha256=47MZ3PL08EpGKokgagK-toMBBrJCN0RsHeqJDWMzUVI,2295
+codelaw_rules_security_python/rules/sec-py/password-hash-effort.md,sha256=cy7pZmE1yvSe0f-UJ0O8PEPGSf2qMN4Fnq7o_bBrarg,2322
 codelaw_rules_security_python/rules/sec-py/requests-timeout.cases.md,sha256=-bSMFejq0o_QFz4x5Ace3MefgHu7XLFJeY4w7VAyuAQ,412
 codelaw_rules_security_python/rules/sec-py/requests-timeout.md,sha256=Hwg6jf8bVw29Dt184f0OyXZ4N_3P75w3SDTONWSN6iY,1423
+codelaw_rules_security_python/rules/sec-py/start-process-with-no-shell.cases.md,sha256=ZMcRIZdzVzKxm_8lIPBbafrFIpTbH7Sznu1BTMLV-HE,294
+codelaw_rules_security_python/rules/sec-py/start-process-with-no-shell.md,sha256=EwuQ5Q0Cfi6MrAcmHgDUuNnKl7za7TQ1ebbrRVTpuaM,1529
+codelaw_rules_security_python/rules/sec-py/suspicious-httpoxy-import.md,sha256=WMZUPQeIRpnnNl9J7bvzBlA99ViVDB6_tcYu_NBRWvw,1540
+codelaw_rules_security_python/rules/sec-py/suspicious-pyghmi-import.md,sha256=hRGRsj5p8Vc7WD2An30zBuPKMPYvK26GGQNPOXyZbHM,1322
+codelaw_rules_security_python/rules/sec-py/suspicious-subprocess-import.cases.md,sha256=g7TbA6TZKNsRIJ_Pa2oRkt9q3jjYNh81BtChZ_e-3x0,311
+codelaw_rules_security_python/rules/sec-py/suspicious-subprocess-import.md,sha256=kqNMSxlyZxo4ka9i5zvgO0cOTAEHq6DvsWQEfbQS4AE,1433
 codelaw_rules_security_python/rules/sec-py/tarfile-filter.cases.md,sha256=tJyDnb16lUXgaivjlfhL3a0P6xsXNKS-0BGGuOs04BE,523
 codelaw_rules_security_python/rules/sec-py/tarfile-filter.md,sha256=dy8SWGL1IMzN2Hwb5AObxhKMadWyxOarZVp1kwPcqyw,1681
 codelaw_rules_security_python/rules/sec-py/torch-load-weights-only.cases.md,sha256=yqHrGKPeg9S8xlJpYMCnZp0iGokQpG4MXtSgrx-RLBM,497
@@ -125,12 +132,12 @@ codelaw_rules_security_python/rules/sec-py/torch-load-weights-only.md,sha256=NzB
 codelaw_rules_security_python/rules/sec-py/upload-secure-filename.cases.md,sha256=dMMaUR8rO_8_R3oH2XjkKAUj5wIsY07YViI6OSW0F4g,453
 codelaw_rules_security_python/rules/sec-py/upload-secure-filename.md,sha256=lLvrDO4KKLHwJkYuVg45OeAxsozwhPoaEGDMcEcbBDw,1752
 codelaw_rules_security_python/rules/sec-py/urlopen-scheme.cases.md,sha256=dGpfEzMhSc-q65SaoULm12UG0lj5fb2hy11I8_On14s,431
-codelaw_rules_security_python/rules/sec-py/urlopen-scheme.md,sha256=327_LJI5r2qJFX11HRSzonu7qI-RH21lUlLY-bI3Z-Q,1419
+codelaw_rules_security_python/rules/sec-py/urlopen-scheme.md,sha256=VhjsCViTLYuQZbXkucB2gbdW1_ecrqFB4V7ozpn54GY,1443
 codelaw_rules_security_python/rules/sec-py/weak-key-size.cases.md,sha256=A6QAQ9S8lnc_48K98Jlp1chWvGvX6HCVWmaG3U-WeRU,547
 codelaw_rules_security_python/rules/sec-py/weak-key-size.md,sha256=LNcsMDOks_lqY904MrEWeab5EZ2SKDYIiH8FZS45G-g,2262
 codelaw_rules_security_python/rules/sec-py/yaml-safe-load.cases.md,sha256=RA4YO0Ys9vOUu4_YiknDqMdiXCU68owoqzzP2j8y7TQ,678
 codelaw_rules_security_python/rules/sec-py/yaml-safe-load.md,sha256=cfTLRHvcfxwhlbBJdKxDZ3LvQBlSgunfDMQd12HRuMI,1134
-codelaw_rules_security_python-0.4.2.dist-info/METADATA,sha256=Z9xMUIqMvuMPL9AW5X7IpF2YYAEJqQygDecJ5EDNw3s,21887
-codelaw_rules_security_python-0.4.2.dist-info/WHEEL,sha256=iL940CG79gUG1gJG0fuOXtdNe75u1bVsFzkAeObStpM,97
-codelaw_rules_security_python-0.4.2.dist-info/licenses/LICENSE,sha256=_R8NFLyGiKUo7mPzbUGbqg3hdEKYhaTsIgBGXqtFfa8,1097
-codelaw_rules_security_python-0.4.2.dist-info/RECORD,,
+codelaw_rules_security_python-0.5.1.dist-info/METADATA,sha256=I-npa5IzRlxmlpM1pxLfDEery3GrexprLJTzgKWidaA,22314
+codelaw_rules_security_python-0.5.1.dist-info/WHEEL,sha256=iL940CG79gUG1gJG0fuOXtdNe75u1bVsFzkAeObStpM,97
+codelaw_rules_security_python-0.5.1.dist-info/licenses/LICENSE,sha256=_R8NFLyGiKUo7mPzbUGbqg3hdEKYhaTsIgBGXqtFfa8,1097
+codelaw_rules_security_python-0.5.1.dist-info/RECORD,,