cycode 3.12.3.dev2__py3-none-any.whl → 3.12.3.dev3__py3-none-any.whl

cycode/__init__.py

@@ -1 +1 @@
-__version__ = '3.12.3.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.12.3.dev3'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/apps/ai_guardrails/scan/handlers.py

@@ -116,7 +116,8 @@ def handle_before_read_file(ctx: typer.Context, payload: AIHookPayload, policy:
 
     try:
         # Check path-based denylist first
-        if is_denied_path(file_path, policy):
+        is_sensitive_path = is_denied_path(file_path, policy)
+        if is_sensitive_path:
             block_reason = BlockReason.SENSITIVE_PATH
             if mode == PolicyMode.BLOCK and action == PolicyMode.BLOCK:
                 outcome = AIHookOutcome.BLOCKED
@@ -125,13 +126,21 @@ def handle_before_read_file(ctx: typer.Context, payload: AIHookPayload, policy:
                     user_message,
                     'This file path is classified as sensitive; do not read/send it to the model.',
                 )
-            # Warn mode - ask user for permission
+            # Warn mode - if content scan is enabled, emit a separate event for the
+            # sensitive path so the finally block can independently track the scan result.
+            # If content scan is disabled, a single event (from finally) is enough.
             outcome = AIHookOutcome.WARNED
-            user_message = f'Cycode flagged {file_path} as sensitive. Allow reading?'
-            return response_builder.ask_permission(
-                user_message,
-                'This file path is classified as sensitive; proceed with caution.',
-            )
+            if get_policy_value(file_read_config, 'scan_content', default=True):
+                ai_client.create_event(
+                    payload,
+                    AiHookEventType.FILE_READ,
+                    outcome,
+                    block_reason=BlockReason.SENSITIVE_PATH,
+                    file_path=payload.file_path,
+                )
+                # Reset for the content scan result tracked by the finally block
+                block_reason = None
+                outcome = AIHookOutcome.ALLOWED
 
         # Scan file content if enabled
         if get_policy_value(file_read_config, 'scan_content', default=True):
@@ -152,7 +161,14 @@ def handle_before_read_file(ctx: typer.Context, payload: AIHookPayload, policy:
                     user_message,
                     'Possible secrets detected; proceed with caution.',
                 )
-            return response_builder.allow_permission()
+
+        # If path was sensitive but content scan found no secrets (or scan disabled), still warn
+        if is_sensitive_path:
+            user_message = f'Cycode flagged {file_path} as sensitive. Allow reading?'
+            return response_builder.ask_permission(
+                user_message,
+                'This file path is classified as sensitive; proceed with caution.',
+            )
 
         return response_builder.allow_permission()
     except Exception as e:
@@ -342,7 +358,7 @@ def _scan_path_for_secrets(ctx: typer.Context, file_path: str, policy: dict) ->
     Returns tuple of (violation_summary, scan_id) if secrets found, (None, scan_id) if clean.
     Raises exception on error or timeout.
     """
-    if not file_path or not os.path.exists(file_path):
+    if not file_path or not os.path.isfile(file_path):
         return None, None
 
     max_bytes = get_policy_value(policy, 'secrets', 'max_bytes', default=200000)

{cycode-3.12.3.dev2.dist-info → cycode-3.12.3.dev3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.12.3.dev2
+Version: 3.12.3.dev3
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE

{cycode-3.12.3.dev2.dist-info → cycode-3.12.3.dev3.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cycode/__init__.py,sha256=Gny-NPw7ssVE0Ug9mwxX7Y55eomURHuonnfna8G68u4,115
+cycode/__init__.py,sha256=N_QGgVepCNUBZT87hiWWdJmBQ1Te8vL0B_rHb-wEKJw,115
 cycode/__main__.py,sha256=Z3bD5yrA7yPvAChcADQrqCaZd0ChGI1gdiwALwbWJ6U,104
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/app.py,sha256=bsfXV85RRb1iz19JRC9gkc5Iv30fnEE1cwA8dg552NQ,6482
@@ -12,7 +12,7 @@ cycode/cli/apps/ai_guardrails/hooks_manager.py,sha256=37IcEMCK60pQ8lnuy8GThlq9oe
 cycode/cli/apps/ai_guardrails/install_command.py,sha256=qlklts1Uj6j3urK6jwAWJY-L_DgVaZWuk7vZcpoKPAQ,4571
 cycode/cli/apps/ai_guardrails/scan/__init__.py,sha256=qJc82XiQGiAuc1sYY8Ij_A-qXpxgLPuayQq8xWlouMA,48
 cycode/cli/apps/ai_guardrails/scan/consts.py,sha256=drAslw6vW3kxmbCs2qPCUbUPR7PJouT2lsXtu5sD-lQ,1094
-cycode/cli/apps/ai_guardrails/scan/handlers.py,sha256=nTb4kIiaAmd04t0hQlZP-l49RKakvcyn7myZLHNpY7Q,14855
+cycode/cli/apps/ai_guardrails/scan/handlers.py,sha256=e3UlQ6TbFFFAFEAgMUhL5i7bV1mSrmFJuLb9O0FLX2Y,15702
 cycode/cli/apps/ai_guardrails/scan/payload.py,sha256=-r8BsvP-VPD3XibyIPKreCjJNVXGpe_9ENPF78NlnkQ,10178
 cycode/cli/apps/ai_guardrails/scan/policy.py,sha256=39s8hnxgjny1l6XAO59wsRcAlpW-LG00GUnO0PfqvuY,2566
 cycode/cli/apps/ai_guardrails/scan/response_builders.py,sha256=tVFJCnGdqSmyileg-idypOihygct7F6T4KHXYlX8y_c,4653
@@ -198,8 +198,8 @@ cycode/cyclient/report_client.py,sha256=Scq30NeJPzgXv0hPLO1U05AdE9i_2iu6cIrSKpEJ
 cycode/cyclient/scan_client.py,sha256=6TK5FQkfrvV7PHqRnUzEn1PBNd2oPYVamvIixcUfe3c,16755
 cycode/cyclient/scan_config_base.py,sha256=mXsPZGYCtp85rv5GIige40yQZXuRcEKUW-VQJ0vgFzk,1201
 cycode/logger.py,sha256=EfZGRK6VC5rE_LAjIcRrHFiQCueylCDXoG6bvGkrIME,2111
-cycode-3.12.3.dev2.dist-info/METADATA,sha256=kkFFeC4gpGgwhz9oQWVQi5BDjrXf5VoaZAtnXAVuCGM,84350
-cycode-3.12.3.dev2.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
-cycode-3.12.3.dev2.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
-cycode-3.12.3.dev2.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-3.12.3.dev2.dist-info/RECORD,,
+cycode-3.12.3.dev3.dist-info/METADATA,sha256=Ee8Y1VwTf_Ztfg_AzKgqjQHDvtF6evcW3RElYo3SsKA,84350
+cycode-3.12.3.dev3.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+cycode-3.12.3.dev3.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
+cycode-3.12.3.dev3.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-3.12.3.dev3.dist-info/RECORD,,