github-guardian 1.0.3__tar.gz → 1.0.4__tar.gz

{github_guardian-1.0.3 → github_guardian-1.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-guardian
-Version: 1.0.3
+Version: 1.0.4
 Summary: Deep Forensic Security Audit Engine & Pre-Commit Shield
 Author: GitHub Guardian Team
 Requires-Dist: typer>=0.9.0

{github_guardian-1.0.3 → github_guardian-1.0.4}/core/scanner.py

@@ -43,7 +43,7 @@ def calculate_entropy(s: str) -> float:
     return entropy
 
 SAST_PATTERNS = {
-    "SQL Injection (Raw Query)": r"\.execute\(\".*%\s*\"",
+    "SQL Injection (Raw Query)": r"\.execute\(\s*['\"].*['\"]\s*%\s*",
     "Insecure Rendering (XSS)": r"dangerouslySetInnerHTML",
     "Hardcoded Auth/Secret": r"password\s*=\s*['\"][^'\"]+['\"]"
 }
@@ -70,8 +70,16 @@ def run_local_scan(path: str, console, hook_mode: bool = False) -> bool:
         if any(x in split_dirs for x in [".git", "node_modules", "venv", ".venv", "build_env", "dist", "build", "__pycache__"]):
             continue
         for file in files:
-            ext = os.path.splitext(file)[1]
-            if ext in [".png", ".jpg", ".pdf", ".zip", ".pyc"]: 
+            ext = os.path.splitext(file)[1].lower()
+            if ext in [
+                ".png", ".jpg", ".jpeg", ".gif", ".svg", ".ico", 
+                ".pdf", ".zip", ".gz", ".tar", ".pyc", ".exe", 
+                ".dll", ".so", ".dylib", ".woff", ".woff2", ".ttf", ".eot",
+                ".tldr", ".drawio", ".map", ".mp3", ".mp4", ".mov", ".wav"
+            ]: 
+                continue
+                
+            if file.lower() in ["package-lock.json", "yarn.lock", "pnpm-lock.yaml", "poetry.lock", "cargo.lock", "composer.lock"]:
                 continue
                 
             # Skip the scanner scripts themselves to prevent false positives!

{github_guardian-1.0.3 → github_guardian-1.0.4}/github_guardian.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-guardian
-Version: 1.0.3
+Version: 1.0.4
 Summary: Deep Forensic Security Audit Engine & Pre-Commit Shield
 Author: GitHub Guardian Team
 Requires-Dist: typer>=0.9.0

{github_guardian-1.0.3 → github_guardian-1.0.4}/setup.py

@@ -2,7 +2,7 @@ from setuptools import setup, find_packages
 
 setup(
     name="github-guardian",
-    version="1.0.3",
+    version="1.0.4",
     description="Deep Forensic Security Audit Engine & Pre-Commit Shield",
     author="GitHub Guardian Team",
     packages=find_packages(),