cycode 3.0.2.dev2__py3-none-any.whl → 3.1.1.dev1__py3-none-any.whl

cycode/__init__.py

@@ -1 +1 @@
-__version__ = '3.0.2.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.1.1.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/consts.py

@@ -14,38 +14,40 @@ IAC_SCAN_TYPE = 'iac'
 SCA_SCAN_TYPE = 'sca'
 SAST_SCAN_TYPE = 'sast'
 
-IAC_SCAN_SUPPORTED_FILES = ('.tf', '.tf.json', '.json', '.yaml', '.yml', 'dockerfile')
+IAC_SCAN_SUPPORTED_FILE_EXTENSIONS = ('.tf', '.tf.json', '.json', '.yaml', '.yml', '.dockerfile', '.containerfile')
+IAC_SCAN_SUPPORTED_FILE_PREFIXES = ('dockerfile', 'containerfile')
 
 SECRET_SCAN_FILE_EXTENSIONS_TO_IGNORE = (
-    '.7z',
+    '.DS_Store',
     '.bmp',
-    '.bz2',
-    '.dmg',
-    '.exe',
     '.gif',
-    '.gz',
     '.ico',
-    '.jar',
-    '.jpg',
-    '.jpeg',
-    '.png',
-    '.rar',
-    '.realm',
-    '.s7z',
-    '.svg',
-    '.tar',
     '.tif',
     '.tiff',
     '.webp',
-    '.zi',
+    '.mp3',
+    '.mp4',
+    '.mkv',
+    '.avi',
+    '.mov',
+    '.mpg',
+    '.mpeg',
+    '.wav',
+    '.vob',
+    '.aac',
+    '.flac',
+    '.ogg',
+    '.mka',
+    '.wma',
+    '.wmv',
+    '.psd',
+    '.ai',
+    '.model',
     '.lock',
     '.css',
-    '.less',
-    '.dll',
-    '.enc',
-    '.deb',
-    '.obj',
-    '.model',
+    '.pdf',
+    '.odt',
+    '.iso',
 )
 
 SCA_CONFIGURATION_SCAN_SUPPORTED_FILES = (  # keep in lowercase
@@ -55,11 +57,18 @@ SCA_CONFIGURATION_SCAN_SUPPORTED_FILES = (  # keep in lowercase
     'composer.lock',
     'go.sum',
     'go.mod',
+    'go.mod.graph',
     'gopkg.lock',
     'pom.xml',
+    'bom.json',
+    'bcde.mvndeps',
     'build.gradle',
+    '.gradle',
     'gradle.lockfile',
     'build.gradle.kts',
+    '.gradle.kts',
+    '.properties',
+    '.kt',  # config KT files
     'package.json',
     'package-lock.json',
     'yarn.lock',
@@ -69,9 +78,10 @@ SCA_CONFIGURATION_SCAN_SUPPORTED_FILES = (  # keep in lowercase
     'packages.lock.json',
     'nuget.config',
     '.csproj',
+    '.vbproj',
     'gemfile',
     'gemfile.lock',
-    'build.sbt',
+    '.sbt',
     'build.scala',
     'build.sbt.lock',
     'pyproject.toml',
@@ -84,14 +94,36 @@ SCA_CONFIGURATION_SCAN_SUPPORTED_FILES = (  # keep in lowercase
     'mix.lock',
     'package.swift',
     'package.resolved',
+    'pubspec.yaml',
+    'pubspec.lock',
+    'conanfile.py',
+    'conanfile.txt',
+    'maven_install.json',
+    'conan.lock',
 )
 
-SCA_EXCLUDED_PATHS = ('node_modules',)
+SCA_EXCLUDED_PATHS = (
+    'node_modules',
+    'venv',
+    '.venv',
+    '__pycache__',
+    '.pytest_cache',
+    '.tox',
+    '.mvn',
+    '.gradle',
+    '.npm',
+    '.yarn',
+    '.bundle',
+    '.bloop',
+    '.build',
+    '.dart_tool',
+    '.pub',
+)
 
 PROJECT_FILES_BY_ECOSYSTEM_MAP = {
     'crates': ['Cargo.lock', 'Cargo.toml'],
     'composer': ['composer.json', 'composer.lock'],
-    'go': ['go.sum', 'go.mod', 'Gopkg.lock'],
+    'go': ['go.sum', 'go.mod', 'go.mod.graph', 'Gopkg.lock'],
     'maven_pom': ['pom.xml'],
     'maven_gradle': ['build.gradle', 'build.gradle.kts', 'gradle.lockfile'],
     'npm': ['package.json', 'package-lock.json', 'yarn.lock', 'npm-shrinkwrap.json', '.npmrc'],
@@ -104,6 +136,8 @@ PROJECT_FILES_BY_ECOSYSTEM_MAP = {
     'pypi_setup': ['setup.py'],
     'hex': ['mix.exs', 'mix.lock'],
     'swift_pm': ['Package.swift', 'Package.resolved'],
+    'dart': ['pubspec.yaml', 'pubspec.lock'],
+    'conan': ['conanfile.py', 'conanfile.txt', 'conan.lock'],
 }
 
 COMMIT_RANGE_SCAN_SUPPORTED_SCAN_TYPES = [SECRET_SCAN_TYPE, SCA_SCAN_TYPE]

cycode/cli/files_collector/excluder.py

@@ -51,8 +51,11 @@ def _is_file_relevant_for_sca_scan(filename: str) -> bool:
 
 class Excluder:
     def __init__(self) -> None:
+        self._scannable_prefixes: dict[str, tuple[str, ...]] = {
+            consts.IAC_SCAN_TYPE: consts.IAC_SCAN_SUPPORTED_FILE_PREFIXES,
+        }
         self._scannable_extensions: dict[str, tuple[str, ...]] = {
-            consts.IAC_SCAN_TYPE: consts.IAC_SCAN_SUPPORTED_FILES,
+            consts.IAC_SCAN_TYPE: consts.IAC_SCAN_SUPPORTED_FILE_EXTENSIONS,
             consts.SCA_SCAN_TYPE: consts.SCA_CONFIGURATION_SCAN_SUPPORTED_FILES,
         }
         self._non_scannable_extensions: dict[str, tuple[str, ...]] = {
@@ -74,6 +77,10 @@ class Excluder:
         if non_scannable_extensions:
             return not filename.endswith(non_scannable_extensions)
 
+        scannable_prefixes = self._scannable_prefixes.get(scan_type)
+        if scannable_prefixes:
+            return filename.startswith(scannable_prefixes)
+
         return True
 
     def _is_relevant_file_to_scan_common(self, scan_type: str, filename: str) -> bool:

{cycode-3.0.2.dev2.dist-info → cycode-3.1.1.dev1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cycode
-Version: 3.0.2.dev2
+Version: 3.1.1.dev1
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 Home-page: https://github.com/cycodehq/cycode-cli
 License: MIT

{cycode-3.0.2.dev2.dist-info → cycode-3.1.1.dev1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cycode/__init__.py,sha256=iv1LHbeyY-MRAGc2FKsW5_2Q8NiGPmDanIzbE89VDwE,114
+cycode/__init__.py,sha256=z-rtO68_RbSrt8_29a6O9T4id1y27lU9YvgtFPxyPw8,114
 cycode/__main__.py,sha256=Z3bD5yrA7yPvAChcADQrqCaZd0ChGI1gdiwALwbWJ6U,104
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/app.py,sha256=VOWHpvF7PxLnxesElorhddn7EUWxe1NuJkljlrA9DbM,5958
@@ -53,7 +53,7 @@ cycode/cli/apps/status/version_command.py,sha256=c6Iko_rmZo9T_kQSd3HUloBi40Qv7cj
 cycode/cli/cli_types.py,sha256=sRxDlpz3QiuHwYhzxtiHjwUaK7TtQYQcAkWsBZiuPt4,2677
 cycode/cli/config.py,sha256=EblYUlUA4lTp_lrL3gMG-cW7FUOTE1jtGIOljcLnEzk,250
 cycode/cli/console.py,sha256=vp-DHwlkwpwdsPyfwGdjsPF-6-Bi3f8W7G-W_YXCMH8,1914
-cycode/cli/consts.py,sha256=6GJY213XWBv_CWEb1MYb4ZoS_utyMsKSnIq3j86iYGk,7532
+cycode/cli/consts.py,sha256=PHExBlgqVbsABVS-j70tTKNGDtCGZWDdox5lWcYEYYE,8251
 cycode/cli/exceptions/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/exceptions/custom_exceptions.py,sha256=Uh4Lqp4moTIFRTRtnT5b8dqb07L3wSAnAuFonS6-omQ,3610
 cycode/cli/exceptions/handle_ai_remediation_errors.py,sha256=mA70upSYXK3rL_fmanzKYeUzLENhpXdkW8k3aIHrKzU,785
@@ -62,7 +62,7 @@ cycode/cli/exceptions/handle_errors.py,sha256=9ZiDbHswXLe0TscUqZL9Or5Jq2AlYtzGb6
 cycode/cli/exceptions/handle_report_sbom_errors.py,sha256=bi0EizHtQLL-ovhHRH98CZ7qXdDPLTYnI59Jn1Y5c0E,926
 cycode/cli/exceptions/handle_scan_errors.py,sha256=-QIYvbBXmZVOvAdNwGYwAdmBma6Z_pPpS0a77aDICp8,1916
 cycode/cli/files_collector/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-cycode/cli/files_collector/excluder.py,sha256=Qf6N2Wrhu4jrUMFAN70nc8tvxPBEMAT33TeSi_wKzFY,6904
+cycode/cli/files_collector/excluder.py,sha256=JN0KmK95WCk7p_QCcHClVnIpMHV_opM6I6FfiEderss,7224
 cycode/cli/files_collector/iac/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/files_collector/iac/tf_content_generator.py,sha256=a65zA0Ejv_LSA5jac2omHck4IKoNS5MX6v6ltF2wo4E,2873
 cycode/cli/files_collector/models/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -148,8 +148,8 @@ cycode/cyclient/report_client.py,sha256=h12pz3vWCwDF73BhqFX7iDSxBgQDFwkiGh3hmul2
 cycode/cyclient/scan_client.py,sha256=cKXBqJcwf97yw9PkswN5fgGx4Brp2l6P6zb8SROVvcE,11806
 cycode/cyclient/scan_config_base.py,sha256=mXsPZGYCtp85rv5GIige40yQZXuRcEKUW-VQJ0vgFzk,1201
 cycode/logger.py,sha256=tKiTDKIVbE7pQiXxMBDsT1SP3PWaNZ-yzSMkbbkomxk,1972
-cycode-3.0.2.dev2.dist-info/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-3.0.2.dev2.dist-info/METADATA,sha256=MAe_ABUxu7evMU6WVuJV1cvPiSPJnZ_BbLlBtPb3O7g,46217
-cycode-3.0.2.dev2.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
-cycode-3.0.2.dev2.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
-cycode-3.0.2.dev2.dist-info/RECORD,,
+cycode-3.1.1.dev1.dist-info/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-3.1.1.dev1.dist-info/METADATA,sha256=zbXeRPMFL4Lw6eDEwBabYIQTsnl8PAXdbDy7bIRA3As,46217
+cycode-3.1.1.dev1.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
+cycode-3.1.1.dev1.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
+cycode-3.1.1.dev1.dist-info/RECORD,,