ds-analysis-lib 6.2.0__tar.gz → 6.3.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/PKG-INFO +5 -2
  2. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/pyproject.toml +8 -2
  3. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/analysis_lib/__init__.py +3 -0
  4. ds_analysis_lib-6.3.0/src/analysis_lib/dosai_slices.py +797 -0
  5. ds_analysis_lib-6.3.0/src/analysis_lib/golem_slices.py +676 -0
  6. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/analysis_lib/output.py +70 -33
  7. ds_analysis_lib-6.3.0/src/analysis_lib/reachability.py +498 -0
  8. ds_analysis_lib-6.3.0/src/analysis_lib/rusi_slices.py +620 -0
  9. ds_analysis_lib-6.3.0/src/analysis_lib/search.py +461 -0
  10. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/analysis_lib/utils.py +121 -24
  11. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/analysis_lib/vdr.py +14 -2
  12. ds_analysis_lib-6.3.0/src/analysis_lib/vex/__init__.py +8 -0
  13. ds_analysis_lib-6.3.0/src/analysis_lib/vex/csaf.py +155 -0
  14. ds_analysis_lib-6.3.0/src/analysis_lib/vex/cvss.py +141 -0
  15. ds_analysis_lib-6.3.0/src/analysis_lib/vex/data/csaf_2.0_json_schema.json +1414 -0
  16. ds_analysis_lib-6.3.0/src/analysis_lib/vex/data/csaf_2.1_json_schema.json +1736 -0
  17. ds_analysis_lib-6.3.0/src/analysis_lib/vex/data/cvss/cvss-v2.0.json +104 -0
  18. ds_analysis_lib-6.3.0/src/analysis_lib/vex/data/cvss/cvss-v3.0.json +143 -0
  19. ds_analysis_lib-6.3.0/src/analysis_lib/vex/data/cvss/cvss-v3.1.json +143 -0
  20. ds_analysis_lib-6.3.0/src/analysis_lib/vex/data/cvss/cvss-v4.0.json +457 -0
  21. ds_analysis_lib-6.3.0/src/analysis_lib/vex/emit.py +263 -0
  22. ds_analysis_lib-6.3.0/src/analysis_lib/vex/models.py +317 -0
  23. ds_analysis_lib-6.3.0/src/analysis_lib/vex/product_tree.py +150 -0
  24. ds_analysis_lib-6.3.0/src/analysis_lib/vex/reachability.py +90 -0
  25. ds_analysis_lib-6.3.0/src/analysis_lib/vex/refs.py +120 -0
  26. ds_analysis_lib-6.3.0/src/analysis_lib/vex/tracking.py +82 -0
  27. ds_analysis_lib-6.3.0/src/analysis_lib/vex/vulnerabilities.py +155 -0
  28. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/ds_analysis_lib.egg-info/PKG-INFO +5 -2
  29. ds_analysis_lib-6.3.0/src/ds_analysis_lib.egg-info/SOURCES.txt +46 -0
  30. ds_analysis_lib-6.3.0/src/ds_analysis_lib.egg-info/requires.txt +7 -0
  31. ds_analysis_lib-6.3.0/tests/test_dosai_runner.py +421 -0
  32. ds_analysis_lib-6.3.0/tests/test_dosai_slices.py +425 -0
  33. ds_analysis_lib-6.3.0/tests/test_golem_runner.py +345 -0
  34. ds_analysis_lib-6.3.0/tests/test_golem_slices.py +640 -0
  35. ds_analysis_lib-6.3.0/tests/test_reachability.py +613 -0
  36. ds_analysis_lib-6.3.0/tests/test_rusi_runner.py +241 -0
  37. ds_analysis_lib-6.3.0/tests/test_rusi_slices.py +799 -0
  38. ds_analysis_lib-6.3.0/tests/test_search.py +370 -0
  39. ds_analysis_lib-6.3.0/tests/test_utils.py +328 -0
  40. ds_analysis_lib-6.3.0/tests/test_vex.py +716 -0
  41. ds_analysis_lib-6.2.0/src/analysis_lib/csaf.py +0 -691
  42. ds_analysis_lib-6.2.0/src/analysis_lib/reachability.py +0 -262
  43. ds_analysis_lib-6.2.0/src/analysis_lib/search.py +0 -190
  44. ds_analysis_lib-6.2.0/src/ds_analysis_lib.egg-info/SOURCES.txt +0 -21
  45. ds_analysis_lib-6.2.0/src/ds_analysis_lib.egg-info/requires.txt +0 -5
  46. ds_analysis_lib-6.2.0/tests/test_csaf.py +0 -1428
  47. ds_analysis_lib-6.2.0/tests/test_search.py +0 -48
  48. ds_analysis_lib-6.2.0/tests/test_utils.py +0 -172
  49. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/README.md +0 -0
  50. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/setup.cfg +0 -0
  51. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/analysis_lib/config.py +0 -0
  52. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/analysis_lib/normalize.py +0 -0
  53. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/ds_analysis_lib.egg-info/dependency_links.txt +0 -0
  54. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/src/ds_analysis_lib.egg-info/top_level.txt +0 -0
  55. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/tests/test_analysis.py +0 -0
  56. {ds_analysis_lib-6.2.0 → ds_analysis_lib-6.3.0}/tests/test_norm.py +0 -0
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: ds-analysis-lib
3
- Version: 6.2.0
3
+ Version: 6.3.0
4
4
  Summary: Analysis library for owasp depscan
5
5
  Author-email: Team AppThreat <cloud@appthreat.com>
6
6
  License-Expression: MIT
@@ -15,12 +15,15 @@ Classifier: Programming Language :: Python :: 3.10
15
15
  Classifier: Programming Language :: Python :: 3.11
16
16
  Classifier: Programming Language :: Python :: 3.12
17
17
  Classifier: Programming Language :: Python :: 3.13
18
+ Classifier: Programming Language :: Python :: 3.14
18
19
  Classifier: Topic :: Security
19
20
  Classifier: Topic :: Utilities
20
21
  Requires-Python: >=3.10
21
22
  Description-Content-Type: text/markdown
22
- Requires-Dist: appthreat-vulnerability-db[oras]>=6.6.2
23
+ Requires-Dist: appthreat-vulnerability-db[oras]~=6.7.2
23
24
  Requires-Dist: custom-json-diff>=2.1.6
24
25
  Requires-Dist: cvss>=3.4
26
+ Requires-Dist: jsonschema>=4.20
27
+ Requires-Dist: referencing>=0.31
25
28
  Requires-Dist: rich>=13.9.4
26
29
  Requires-Dist: toml>=0.10.2
@@ -1,14 +1,16 @@
1
1
  [project]
2
2
  name = "ds-analysis-lib"
3
- version = "6.2.0"
3
+ version = "6.3.0"
4
4
  description = "Analysis library for owasp depscan"
5
5
  authors = [
6
6
  {name = "Team AppThreat", email = "cloud@appthreat.com"},
7
7
  ]
8
8
  dependencies = [
9
- "appthreat-vulnerability-db[oras]>=6.6.2",
9
+ "appthreat-vulnerability-db[oras]~=6.7.2",
10
10
  "custom-json-diff>=2.1.6",
11
11
  "cvss>=3.4",
12
+ "jsonschema>=4.20",
13
+ "referencing>=0.31",
12
14
  "rich>=13.9.4",
13
15
  "toml>=0.10.2"
14
16
  ]
@@ -25,6 +27,7 @@ classifiers = [
25
27
  "Programming Language :: Python :: 3.11",
26
28
  "Programming Language :: Python :: 3.12",
27
29
  "Programming Language :: Python :: 3.13",
30
+ "Programming Language :: Python :: 3.14",
28
31
  "Topic :: Security",
29
32
  "Topic :: Utilities",
30
33
  ]
@@ -39,6 +42,9 @@ Funding = "https://owasp.org/donate/?reponame=www-project-dep-scan&title=OWASP+d
39
42
  requires = ["setuptools>=61", "wheel"]
40
43
  build-backend = "setuptools.build_meta"
41
44
 
45
+ [tool.setuptools.package-data]
46
+ "analysis_lib.vex.data" = ["*.json", "cvss/*.json"]
47
+
42
48
  [tool.pytest.ini_options]
43
49
  minversion = "6.0"
44
50
  addopts = "-q -s --verbose --cov-append --cov-report term --cov analysis_lib"
@@ -52,6 +52,9 @@ class VdrAnalysisKV:
52
52
  decommission_refs: Optional[Dict] = None
53
53
  fuzzy_search: bool = False
54
54
  search_order: Optional[str] = None
55
+ severity: Optional[str] = None
56
+ exclude_malware: bool = False
57
+ malware_only: bool = False
55
58
 
56
59
 
57
60
  @dataclass