kulshan 0.1.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (165) hide show
  1. kulshan-0.1.0/.gitignore +102 -0
  2. kulshan-0.1.0/LICENSE.txt +189 -0
  3. kulshan-0.1.0/PKG-INFO +136 -0
  4. kulshan-0.1.0/README.md +70 -0
  5. kulshan-0.1.0/pyproject.toml +115 -0
  6. kulshan-0.1.0/src/kulshan/__init__.py +9 -0
  7. kulshan-0.1.0/src/kulshan/__version__.py +1 -0
  8. kulshan-0.1.0/src/kulshan/adapter.py +244 -0
  9. kulshan-0.1.0/src/kulshan/checks/__init__.py +9 -0
  10. kulshan-0.1.0/src/kulshan/checks/age/__init__.py +134 -0
  11. kulshan-0.1.0/src/kulshan/checks/age/scanner/__init__.py +0 -0
  12. kulshan-0.1.0/src/kulshan/checks/age/scanner/eol_db.py +124 -0
  13. kulshan-0.1.0/src/kulshan/checks/age/scanner/freshness.py +241 -0
  14. kulshan-0.1.0/src/kulshan/checks/age/scoring/__init__.py +0 -0
  15. kulshan-0.1.0/src/kulshan/checks/age/scoring/engine.py +78 -0
  16. kulshan-0.1.0/src/kulshan/checks/age/utils/__init__.py +0 -0
  17. kulshan-0.1.0/src/kulshan/checks/age/utils/aws.py +52 -0
  18. kulshan-0.1.0/src/kulshan/checks/cost/__init__.py +434 -0
  19. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/__init__.py +0 -0
  20. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/advanced.py +519 -0
  21. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/anomaly.py +258 -0
  22. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/budgets.py +146 -0
  23. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/efficiency.py +192 -0
  24. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/insights.py +144 -0
  25. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/network.py +81 -0
  26. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/network_cost.py +154 -0
  27. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/tag_attribution.py +110 -0
  28. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/trends.py +78 -0
  29. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/waste.py +67 -0
  30. kulshan-0.1.0/src/kulshan/checks/cost/analyzers/wow.py +325 -0
  31. kulshan-0.1.0/src/kulshan/checks/cost/attribution.py +205 -0
  32. kulshan-0.1.0/src/kulshan/checks/cost/aws_native.py +307 -0
  33. kulshan-0.1.0/src/kulshan/checks/cost/config.py +0 -0
  34. kulshan-0.1.0/src/kulshan/checks/cost/cost_fetcher.py +878 -0
  35. kulshan-0.1.0/src/kulshan/checks/cost/reporters/__init__.py +1 -0
  36. kulshan-0.1.0/src/kulshan/checks/cost/reporters/exporter.py +458 -0
  37. kulshan-0.1.0/src/kulshan/checks/cost/reporters/html_report.py +470 -0
  38. kulshan-0.1.0/src/kulshan/checks/cost/reporters/summary_pdf.py +148 -0
  39. kulshan-0.1.0/src/kulshan/checks/cost/reporters/terminal.py +1889 -0
  40. kulshan-0.1.0/src/kulshan/checks/dr/__init__.py +160 -0
  41. kulshan-0.1.0/src/kulshan/checks/dr/scanner/__init__.py +0 -0
  42. kulshan-0.1.0/src/kulshan/checks/dr/scanner/backup.py +113 -0
  43. kulshan-0.1.0/src/kulshan/checks/dr/scanner/compute.py +128 -0
  44. kulshan-0.1.0/src/kulshan/checks/dr/scanner/database.py +171 -0
  45. kulshan-0.1.0/src/kulshan/checks/dr/scanner/dns.py +98 -0
  46. kulshan-0.1.0/src/kulshan/checks/dr/scanner/spof.py +96 -0
  47. kulshan-0.1.0/src/kulshan/checks/dr/scanner/storage.py +86 -0
  48. kulshan-0.1.0/src/kulshan/checks/dr/scoring/__init__.py +0 -0
  49. kulshan-0.1.0/src/kulshan/checks/dr/scoring/engine.py +162 -0
  50. kulshan-0.1.0/src/kulshan/checks/dr/scoring/simulator.py +170 -0
  51. kulshan-0.1.0/src/kulshan/checks/dr/utils/__init__.py +0 -0
  52. kulshan-0.1.0/src/kulshan/checks/dr/utils/aws.py +69 -0
  53. kulshan-0.1.0/src/kulshan/checks/drift/__init__.py +119 -0
  54. kulshan-0.1.0/src/kulshan/checks/drift/scanner/__init__.py +0 -0
  55. kulshan-0.1.0/src/kulshan/checks/drift/scanner/cfn_drift.py +205 -0
  56. kulshan-0.1.0/src/kulshan/checks/drift/scanner/coverage.py +127 -0
  57. kulshan-0.1.0/src/kulshan/checks/drift/scoring/__init__.py +0 -0
  58. kulshan-0.1.0/src/kulshan/checks/drift/scoring/engine.py +106 -0
  59. kulshan-0.1.0/src/kulshan/checks/drift/utils/__init__.py +0 -0
  60. kulshan-0.1.0/src/kulshan/checks/drift/utils/aws.py +68 -0
  61. kulshan-0.1.0/src/kulshan/checks/limit/__init__.py +107 -0
  62. kulshan-0.1.0/src/kulshan/checks/limit/scanner/__init__.py +0 -0
  63. kulshan-0.1.0/src/kulshan/checks/limit/scanner/quotas.py +228 -0
  64. kulshan-0.1.0/src/kulshan/checks/limit/scoring/__init__.py +0 -0
  65. kulshan-0.1.0/src/kulshan/checks/limit/scoring/engine.py +138 -0
  66. kulshan-0.1.0/src/kulshan/checks/limit/utils/__init__.py +0 -0
  67. kulshan-0.1.0/src/kulshan/checks/limit/utils/aws.py +69 -0
  68. kulshan-0.1.0/src/kulshan/checks/pulse/__init__.py +133 -0
  69. kulshan-0.1.0/src/kulshan/checks/pulse/scanner/__init__.py +0 -0
  70. kulshan-0.1.0/src/kulshan/checks/pulse/scanner/alarms.py +167 -0
  71. kulshan-0.1.0/src/kulshan/checks/pulse/scanner/logging.py +141 -0
  72. kulshan-0.1.0/src/kulshan/checks/pulse/scanner/tracing.py +135 -0
  73. kulshan-0.1.0/src/kulshan/checks/pulse/scoring/__init__.py +0 -0
  74. kulshan-0.1.0/src/kulshan/checks/pulse/scoring/engine.py +151 -0
  75. kulshan-0.1.0/src/kulshan/checks/pulse/utils/__init__.py +0 -0
  76. kulshan-0.1.0/src/kulshan/checks/pulse/utils/aws.py +68 -0
  77. kulshan-0.1.0/src/kulshan/checks/security/__init__.py +239 -0
  78. kulshan-0.1.0/src/kulshan/checks/security/blame.py +83 -0
  79. kulshan-0.1.0/src/kulshan/checks/security/crown_jewels.py +126 -0
  80. kulshan-0.1.0/src/kulshan/checks/security/graph/__init__.py +0 -0
  81. kulshan-0.1.0/src/kulshan/checks/security/graph/builder.py +113 -0
  82. kulshan-0.1.0/src/kulshan/checks/security/remediation.py +201 -0
  83. kulshan-0.1.0/src/kulshan/checks/security/scanner/__init__.py +0 -0
  84. kulshan-0.1.0/src/kulshan/checks/security/scanner/base.py +63 -0
  85. kulshan-0.1.0/src/kulshan/checks/security/scanner/compute.py +115 -0
  86. kulshan-0.1.0/src/kulshan/checks/security/scanner/data.py +129 -0
  87. kulshan-0.1.0/src/kulshan/checks/security/scanner/encryption.py +79 -0
  88. kulshan-0.1.0/src/kulshan/checks/security/scanner/iam.py +444 -0
  89. kulshan-0.1.0/src/kulshan/checks/security/scanner/logging_monitor.py +128 -0
  90. kulshan-0.1.0/src/kulshan/checks/security/scanner/network.py +251 -0
  91. kulshan-0.1.0/src/kulshan/checks/security/scoring/__init__.py +0 -0
  92. kulshan-0.1.0/src/kulshan/checks/security/scoring/breach_cost.py +54 -0
  93. kulshan-0.1.0/src/kulshan/checks/security/scoring/compliance.py +75 -0
  94. kulshan-0.1.0/src/kulshan/checks/security/scoring/diff.py +48 -0
  95. kulshan-0.1.0/src/kulshan/checks/security/scoring/engine.py +85 -0
  96. kulshan-0.1.0/src/kulshan/checks/security/scoring/exposure.py +116 -0
  97. kulshan-0.1.0/src/kulshan/checks/security/scoring/history.py +77 -0
  98. kulshan-0.1.0/src/kulshan/checks/security/scoring/inventory.py +28 -0
  99. kulshan-0.1.0/src/kulshan/checks/security/utils/__init__.py +0 -0
  100. kulshan-0.1.0/src/kulshan/checks/security/utils/aws.py +134 -0
  101. kulshan-0.1.0/src/kulshan/checks/sweep/__init__.py +126 -0
  102. kulshan-0.1.0/src/kulshan/checks/sweep/scanner/__init__.py +0 -0
  103. kulshan-0.1.0/src/kulshan/checks/sweep/scanner/compute.py +168 -0
  104. kulshan-0.1.0/src/kulshan/checks/sweep/scanner/database.py +70 -0
  105. kulshan-0.1.0/src/kulshan/checks/sweep/scanner/monitoring.py +136 -0
  106. kulshan-0.1.0/src/kulshan/checks/sweep/scanner/network.py +164 -0
  107. kulshan-0.1.0/src/kulshan/checks/sweep/scanner/storage.py +87 -0
  108. kulshan-0.1.0/src/kulshan/checks/sweep/scoring/__init__.py +0 -0
  109. kulshan-0.1.0/src/kulshan/checks/sweep/scoring/engine.py +123 -0
  110. kulshan-0.1.0/src/kulshan/checks/sweep/utils/__init__.py +0 -0
  111. kulshan-0.1.0/src/kulshan/checks/sweep/utils/aws.py +70 -0
  112. kulshan-0.1.0/src/kulshan/checks/tag/__init__.py +135 -0
  113. kulshan-0.1.0/src/kulshan/checks/tag/analysis/__init__.py +1 -0
  114. kulshan-0.1.0/src/kulshan/checks/tag/analysis/compliance.py +85 -0
  115. kulshan-0.1.0/src/kulshan/checks/tag/analysis/consistency.py +96 -0
  116. kulshan-0.1.0/src/kulshan/checks/tag/analysis/cost_impact.py +63 -0
  117. kulshan-0.1.0/src/kulshan/checks/tag/scanner/__init__.py +1 -0
  118. kulshan-0.1.0/src/kulshan/checks/tag/scanner/tagging_api.py +91 -0
  119. kulshan-0.1.0/src/kulshan/checks/tag/scoring/__init__.py +1 -0
  120. kulshan-0.1.0/src/kulshan/checks/tag/scoring/engine.py +82 -0
  121. kulshan-0.1.0/src/kulshan/checks/tag/utils/__init__.py +1 -0
  122. kulshan-0.1.0/src/kulshan/checks/tag/utils/aws.py +77 -0
  123. kulshan-0.1.0/src/kulshan/checks/topo/__init__.py +131 -0
  124. kulshan-0.1.0/src/kulshan/checks/topo/scanner/__init__.py +0 -0
  125. kulshan-0.1.0/src/kulshan/checks/topo/scanner/topology.py +377 -0
  126. kulshan-0.1.0/src/kulshan/checks/topo/scoring/__init__.py +0 -0
  127. kulshan-0.1.0/src/kulshan/checks/topo/scoring/engine.py +95 -0
  128. kulshan-0.1.0/src/kulshan/checks/topo/utils/__init__.py +0 -0
  129. kulshan-0.1.0/src/kulshan/checks/topo/utils/aws.py +46 -0
  130. kulshan-0.1.0/src/kulshan/ci/__init__.py +1 -0
  131. kulshan-0.1.0/src/kulshan/cli.py +631 -0
  132. kulshan-0.1.0/src/kulshan/commands/__init__.py +1 -0
  133. kulshan-0.1.0/src/kulshan/completion.py +173 -0
  134. kulshan-0.1.0/src/kulshan/config/__init__.py +1 -0
  135. kulshan-0.1.0/src/kulshan/constants.py +21 -0
  136. kulshan-0.1.0/src/kulshan/diagnostics.py +190 -0
  137. kulshan-0.1.0/src/kulshan/errors.py +29 -0
  138. kulshan-0.1.0/src/kulshan/findings.py +5 -0
  139. kulshan-0.1.0/src/kulshan/findings_ranker.py +134 -0
  140. kulshan-0.1.0/src/kulshan/help_formatter.py +66 -0
  141. kulshan-0.1.0/src/kulshan/history/__init__.py +229 -0
  142. kulshan-0.1.0/src/kulshan/license/__init__.py +1 -0
  143. kulshan-0.1.0/src/kulshan/models.py +1111 -0
  144. kulshan-0.1.0/src/kulshan/orchestrator.py +389 -0
  145. kulshan-0.1.0/src/kulshan/plugins/__init__.py +1 -0
  146. kulshan-0.1.0/src/kulshan/preflight.py +143 -0
  147. kulshan-0.1.0/src/kulshan/question_mark.py +234 -0
  148. kulshan-0.1.0/src/kulshan/redact.py +295 -0
  149. kulshan-0.1.0/src/kulshan/remediation.py +103 -0
  150. kulshan-0.1.0/src/kulshan/repl.py +343 -0
  151. kulshan-0.1.0/src/kulshan/report/__init__.py +1 -0
  152. kulshan-0.1.0/src/kulshan/report/csv_export.py +56 -0
  153. kulshan-0.1.0/src/kulshan/report/html.py +1534 -0
  154. kulshan-0.1.0/src/kulshan/report/sarif.py +173 -0
  155. kulshan-0.1.0/src/kulshan/report/terminal.py +308 -0
  156. kulshan-0.1.0/src/kulshan/scoring_utils.py +23 -0
  157. kulshan-0.1.0/src/kulshan/session.py +64 -0
  158. kulshan-0.1.0/src/kulshan/setup.py +87 -0
  159. kulshan-0.1.0/src/kulshan/slm/__init__.py +1 -0
  160. kulshan-0.1.0/src/kulshan/slm/backends/__init__.py +1 -0
  161. kulshan-0.1.0/src/kulshan/telemetry/__init__.py +1 -0
  162. kulshan-0.1.0/src/kulshan/theme.py +97 -0
  163. kulshan-0.1.0/src/kulshan/theme_constants.py +44 -0
  164. kulshan-0.1.0/src/kulshan/trust/__init__.py +1 -0
  165. kulshan-0.1.0/src/kulshan/utils/__init__.py +1 -0
@@ -0,0 +1,102 @@
1
+ # ============================================================
2
+ # Mission FinOps: repo hygiene
3
+ # Default policy: track everything by default; opt out below.
4
+ # ============================================================
5
+
6
+ # --- Local history backups (NEVER commit; contains pre-scrub history) ---
7
+ .git.backup-*
8
+ .git-backup-*
9
+ *.git.backup
10
+ *.bak
11
+
12
+ # --- Secrets / credentials (NEVER commit) ---
13
+ .env
14
+ .env.*
15
+ *.envrc
16
+ *.pem
17
+ *.key
18
+ *.p12
19
+ *.pfx
20
+ id_rsa*
21
+ id_ecdsa*
22
+ id_ed25519*
23
+ credentials
24
+ credentials.json
25
+ .aws/
26
+ aws-credentials*
27
+ **/secrets/
28
+ **/secret.json
29
+ **/secrets.json
30
+ **/.netrc
31
+
32
+ # --- Customer / scan / audit / report output (NEVER commit) ---
33
+ cost_report_*
34
+ *.cost-analyzer-scores.json
35
+ .cost-analyzer-scores.json
36
+ scan-output/
37
+ audit-output/
38
+ reckoner-runs/
39
+
40
+ # --- Internal source dumps (drift hazard) ---
41
+ FULL_SOURCE_REFERENCE.txt
42
+
43
+ # --- Python build / test / cache artifacts ---
44
+ __pycache__/
45
+ *.py[cod]
46
+ *$py.class
47
+ *.egg
48
+ *.egg-info/
49
+ .eggs/
50
+ build/
51
+ dist/
52
+ pip-wheel-metadata/
53
+ .coverage
54
+ .coverage.*
55
+ htmlcov/
56
+ .pytest_cache/
57
+ .hypothesis/
58
+ .tox/
59
+ .mypy_cache/
60
+ .ruff_cache/
61
+ .venv/
62
+ venv/
63
+ env/
64
+
65
+ # --- Node (in case anything web-side ever lands) ---
66
+ node_modules/
67
+ npm-debug.log*
68
+ yarn-debug.log*
69
+ yarn-error.log*
70
+
71
+ # --- OS / editor junk ---
72
+ .DS_Store
73
+ Thumbs.db
74
+ desktop.ini
75
+ .vscode/
76
+ .idea/
77
+ *.swp
78
+ *.swo
79
+ *~
80
+
81
+ # --- Agent / planning scratch (explicit, not via *.md blanket) ---
82
+ .claude/
83
+ .kiro/specs/*/design.md
84
+ .kiro/specs/*/requirements.md
85
+ .kiro/specs/*/tasks.md
86
+
87
+ # --- Internal strategy docs (not for buyers) ---
88
+ AWS_TOOLS_ANALYSIS.md
89
+
90
+ # --- Research scratch (LOCAL-ONLY, review later before any commit) ---
91
+ docs/research for finops site/
92
+
93
+ # --- Marketing / GTM (LOCAL-ONLY, NEVER commit, NEVER push) ---
94
+ # Outreach playbooks, prospecting lists, founder-team plans.
95
+ # Must never reach any public or shared remote.
96
+ marketing/
97
+
98
+ # --- Local-only assets ---
99
+ *.pdf
100
+ *.zip
101
+ *.tar.gz
102
+ *.tgz
@@ -0,0 +1,189 @@
1
+ Apache License
2
+ Version 2.0, January 2004
3
+ http://www.apache.org/licenses/
4
+
5
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
6
+
7
+ 1. Definitions.
8
+
9
+ "License" shall mean the terms and conditions for use, reproduction,
10
+ and distribution as defined by Sections 1 through 9 of this document.
11
+
12
+ "Licensor" shall mean the copyright owner or entity authorized by
13
+ the copyright owner that is granting the License.
14
+
15
+ "Legal Entity" shall mean the union of the acting entity and all
16
+ other entities that control, are controlled by, or are under common
17
+ control with that entity. For the purposes of this definition,
18
+ "control" means (i) the power, direct or indirect, to cause the
19
+ direction or management of such entity, whether by contract or
20
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
21
+ outstanding shares, or (iii) beneficial ownership of such entity.
22
+
23
+ "You" (or "Your") shall mean an individual or Legal Entity
24
+ exercising permissions granted by this License.
25
+
26
+ "Source" form shall mean the preferred form for making modifications,
27
+ including but not limited to software source code, documentation
28
+ source, and configuration files.
29
+
30
+ "Object" form shall mean any form resulting from mechanical
31
+ transformation or translation of a Source form, including but
32
+ not limited to compiled object code, generated documentation,
33
+ and conversions to other media types.
34
+
35
+ "Work" shall mean the work of authorship, whether in Source or
36
+ Object form, made available under the License, as indicated by a
37
+ copyright notice that is included in or attached to the work.
38
+
39
+ "Derivative Works" shall mean any work, whether in Source or Object
40
+ form, that is based on (or derived from) the Work and for which the
41
+ editorial revisions, annotations, elaborations, or other modifications
42
+ represent, as a whole, an original work of authorship. For the purposes
43
+ of this License, Derivative Works shall not include works that remain
44
+ separable from, or merely link (or bind by name) to the interfaces of,
45
+ the Work and Derivative Works thereof.
46
+
47
+ "Contribution" shall mean any work of authorship, including
48
+ the original version of the Work and any modifications or additions
49
+ to that Work or Derivative Works thereof, that is intentionally
50
+ submitted to the Licensor for inclusion in the Work by the copyright owner
51
+ or by an individual or Legal Entity authorized to submit on behalf of
52
+ the copyright owner. For the purposes of this definition, "submitted"
53
+ means any form of electronic, verbal, or written communication sent
54
+ to the Licensor or its representatives, including but not limited to
55
+ communication on electronic mailing lists, source code control systems,
56
+ and issue tracking systems that are managed by, or on behalf of, the
57
+ Licensor for the purpose of discussing and improving the Work, but
58
+ excluding communication that is conspicuously marked or otherwise
59
+ designated in writing by the copyright owner as "Not a Contribution."
60
+
61
+ "Contributor" shall mean Licensor and any individual or Legal Entity
62
+ on behalf of whom a Contribution has been received by the Licensor and
63
+ subsequently incorporated within the Work.
64
+
65
+ 2. Grant of Copyright License. Subject to the terms and conditions of
66
+ this License, each Contributor hereby grants to You a perpetual,
67
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
68
+ copyright license to reproduce, prepare Derivative Works of,
69
+ publicly display, publicly perform, sublicense, and distribute the
70
+ Work and such Derivative Works in Source or Object form.
71
+
72
+ 3. Grant of Patent License. Subject to the terms and conditions of
73
+ this License, each Contributor hereby grants to You a perpetual,
74
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
75
+ (except as stated in this section) patent license to make, have made,
76
+ use, offer to sell, sell, import, and otherwise transfer the Work,
77
+ where such license applies only to those patent claims licensable
78
+ by such Contributor that are necessarily infringed by their
79
+ Contribution(s) alone or by combination of their Contribution(s)
80
+ with the Work to which such Contribution(s) was submitted. If You
81
+ institute patent litigation against any entity (including a
82
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
83
+ or a Contribution incorporated within the Work constitutes direct
84
+ or contributory patent infringement, then any patent licenses
85
+ granted to You under this License for that Work shall terminate
86
+ as of the date such litigation is filed.
87
+
88
+ 4. Redistribution. You may reproduce and distribute copies of the
89
+ Work or Derivative Works thereof in any medium, with or without
90
+ modifications, and in Source or Object form, provided that You
91
+ meet the following conditions:
92
+
93
+ (a) You must give any other recipients of the Work or
94
+ Derivative Works a copy of this License; and
95
+
96
+ (b) You must cause any modified files to carry prominent notices
97
+ stating that You changed the files; and
98
+
99
+ (c) You must retain, in the Source form of any Derivative Works
100
+ that You distribute, all copyright, patent, trademark, and
101
+ attribution notices from the Source form of the Work,
102
+ excluding those notices that do not pertain to any part of
103
+ the Derivative Works; and
104
+
105
+ (d) If the Work includes a "NOTICE" text file as part of its
106
+ distribution, then any Derivative Works that You distribute must
107
+ include a readable copy of the attribution notices contained
108
+ within such NOTICE file, excluding any notices that do not
109
+ pertain to any part of the Derivative Works, in at least one
110
+ of the following places: within a NOTICE text file distributed
111
+ as part of the Derivative Works; within the Source form or
112
+ documentation, if provided along with the Derivative Works; or,
113
+ within a display generated by the Derivative Works, if and
114
+ wherever such third-party notices normally appear. The contents
115
+ of the NOTICE file are for informational purposes only and
116
+ do not modify the License. You may add Your own attribution
117
+ notices within Derivative Works that You distribute, alongside
118
+ or as an addendum to the NOTICE text from the Work, provided
119
+ that such additional attribution notices cannot be construed
120
+ as modifying the License.
121
+
122
+ You may add Your own copyright statement to Your modifications and
123
+ may provide additional or different license terms and conditions
124
+ for use, reproduction, or distribution of Your modifications, or
125
+ for any such Derivative Works as a whole, provided Your use,
126
+ reproduction, and distribution of the Work otherwise complies with
127
+ the conditions stated in this License.
128
+
129
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
130
+ any Contribution intentionally submitted for inclusion in the Work
131
+ by You to the Licensor shall be under the terms and conditions of
132
+ this License, without any additional terms or conditions.
133
+ Notwithstanding the above, nothing herein shall supersede or modify
134
+ the terms of any separate license agreement you may have executed
135
+ with Licensor regarding such Contributions.
136
+
137
+ 6. Trademarks. This License does not grant permission to use the trade
138
+ names, trademarks, service marks, or product names of the Licensor,
139
+ except as required for reasonable and customary use in describing the
140
+ origin of the Work and reproducing the content of the NOTICE file.
141
+
142
+ 7. Disclaimer of Warranty. Unless required by applicable law or
143
+ agreed to in writing, Licensor provides the Work (and each
144
+ Contributor provides its Contributions) on an "AS IS" BASIS,
145
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
146
+ implied, including, without limitation, any warranties or conditions
147
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
148
+ PARTICULAR PURPOSE. You are solely responsible for determining the
149
+ appropriateness of using or redistributing the Work and assume any
150
+ risks associated with Your exercise of permissions under this License.
151
+
152
+ 8. Limitation of Liability. In no event and under no legal theory,
153
+ whether in tort (including negligence), contract, or otherwise,
154
+ unless required by applicable law (such as deliberate and grossly
155
+ negligent acts) or agreed to in writing, shall any Contributor be
156
+ liable to You for damages, including any direct, indirect, special,
157
+ incidental, or consequential damages of any character arising as a
158
+ result of this License or out of the use or inability to use the
159
+ Work (including but not limited to damages for loss of goodwill,
160
+ work stoppage, computer failure or malfunction, or any and all
161
+ other commercial damages or losses), even if such Contributor
162
+ has been advised of the possibility of such damages.
163
+
164
+ 9. Accepting Warranty or Additional Liability. While redistributing
165
+ the Work or Derivative Works thereof, You may choose to offer,
166
+ and charge a fee for, acceptance of support, warranty, indemnity,
167
+ or other liability obligations and/or rights consistent with this
168
+ License. However, in accepting such obligations, You may act only
169
+ on Your own behalf and on Your sole responsibility, not on behalf
170
+ of any other Contributor, and only if You agree to indemnify,
171
+ defend, and hold each Contributor harmless for any liability
172
+ incurred by, or claims asserted against, such Contributor by reason
173
+ of your accepting any such warranty or additional liability.
174
+
175
+ END OF TERMS AND CONDITIONS
176
+
177
+ Copyright 2025-2026 Yuvdeep Singh / Mission FinOps
178
+
179
+ Licensed under the Apache License, Version 2.0 (the "License");
180
+ you may not use this file except in compliance with the License.
181
+ You may obtain a copy of the License at
182
+
183
+ http://www.apache.org/licenses/LICENSE-2.0
184
+
185
+ Unless required by applicable law or agreed to in writing, software
186
+ distributed under the License is distributed on an "AS IS" BASIS,
187
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
188
+ See the License for the specific language governing permissions and
189
+ limitations under the License.
kulshan-0.1.0/PKG-INFO ADDED
@@ -0,0 +1,136 @@
1
+ Metadata-Version: 2.4
2
+ Name: kulshan
3
+ Version: 0.1.0
4
+ Summary: Unified CLI for cost, security, waste, DR, lifecycle, drift, tagging, observability, quota, and network analysis on cloud infrastructure.
5
+ Project-URL: Homepage, https://github.com/azz-kikkr/kulshan
6
+ Project-URL: Repository, https://github.com/azz-kikkr/kulshan
7
+ Project-URL: Documentation, https://github.com/azz-kikkr/kulshan/tree/master/docs
8
+ Project-URL: Issues, https://github.com/azz-kikkr/kulshan/issues
9
+ Author: Yuvdeep Singh
10
+ License: Apache-2.0
11
+ License-File: LICENSE.txt
12
+ Keywords: aws,cli,cost,devops,finops,local-ai,mission-finops,security,slm
13
+ Classifier: Development Status :: 4 - Beta
14
+ Classifier: Environment :: Console
15
+ Classifier: Intended Audience :: Developers
16
+ Classifier: Intended Audience :: System Administrators
17
+ Classifier: License :: OSI Approved :: Apache Software License
18
+ Classifier: Programming Language :: Python :: 3
19
+ Classifier: Programming Language :: Python :: 3.9
20
+ Classifier: Programming Language :: Python :: 3.10
21
+ Classifier: Programming Language :: Python :: 3.11
22
+ Classifier: Programming Language :: Python :: 3.12
23
+ Classifier: Programming Language :: Python :: 3.13
24
+ Classifier: Topic :: Security
25
+ Classifier: Topic :: System :: Monitoring
26
+ Requires-Python: >=3.9
27
+ Requires-Dist: awscrt>=0.19
28
+ Requires-Dist: boto3>=1.28
29
+ Requires-Dist: click>=8.0
30
+ Requires-Dist: httpx>=0.25
31
+ Requires-Dist: jinja2>=3.1
32
+ Requires-Dist: networkx>=3.0
33
+ Requires-Dist: numpy>=1.23.0
34
+ Requires-Dist: pandas>=2.2.0
35
+ Requires-Dist: platformdirs>=4.0
36
+ Requires-Dist: plotext>=5.2.0
37
+ Requires-Dist: prompt-toolkit>=3.0
38
+ Requires-Dist: pyjwt[crypto]>=2.8
39
+ Requires-Dist: rich-click>=1.7
40
+ Requires-Dist: rich>=13.0
41
+ Requires-Dist: tomli>=2.0; python_version < '3.11'
42
+ Provides-Extra: all
43
+ Requires-Dist: huggingface-hub>=0.20; extra == 'all'
44
+ Requires-Dist: llama-cpp-python>=0.3; extra == 'all'
45
+ Requires-Dist: openpyxl>=3.1.0; extra == 'all'
46
+ Requires-Dist: python-pptx>=0.6.21; extra == 'all'
47
+ Requires-Dist: weasyprint>=60.0; extra == 'all'
48
+ Provides-Extra: dev
49
+ Requires-Dist: hypothesis>=6.100; extra == 'dev'
50
+ Requires-Dist: jsonschema>=4.20; extra == 'dev'
51
+ Requires-Dist: moto[ce,ec2,iam,organizations,rds,s3,sts]>=5.0; extra == 'dev'
52
+ Requires-Dist: mypy>=1.10; extra == 'dev'
53
+ Requires-Dist: pytest-cov>=5.0; extra == 'dev'
54
+ Requires-Dist: pytest>=8.0; extra == 'dev'
55
+ Requires-Dist: ruff>=0.5; extra == 'dev'
56
+ Provides-Extra: excel
57
+ Requires-Dist: openpyxl>=3.1.0; extra == 'excel'
58
+ Provides-Extra: pdf
59
+ Requires-Dist: weasyprint>=60.0; extra == 'pdf'
60
+ Provides-Extra: pptx
61
+ Requires-Dist: python-pptx>=0.6.21; extra == 'pptx'
62
+ Provides-Extra: slm
63
+ Requires-Dist: huggingface-hub>=0.20; extra == 'slm'
64
+ Requires-Dist: llama-cpp-python>=0.3; extra == 'slm'
65
+ Description-Content-Type: text/markdown
66
+
67
+ # Kulshan
68
+
69
+ **Free, open-source AWS audit CLI with no infrastructure mutation or remediation.**
70
+
71
+ Kulshan scans your AWS account across ten audit dimensions and produces a unified scored report. Scanning and report generation are local-first by default.
72
+
73
+ ## Install
74
+
75
+ ```bash
76
+ pip install kulshan # all platforms: macOS, Linux, Windows
77
+ ```
78
+
79
+ Requires Python 3.9+. Works with the AWS credentials you already use (`aws sts get-caller-identity`).
80
+
81
+ ## Quick Start
82
+
83
+ ```bash
84
+ kulshan doctor # Check AWS readiness (no cost, no writes)
85
+ kulshan report --quick # Quick scan (3 regions)
86
+ kulshan report -o report.html # Full HTML report
87
+ kulshan report --packs security,sweep # Free packs only ($0 AWS cost)
88
+ kulshan shell # Interactive REPL
89
+ ```
90
+
91
+ ## What You Get
92
+
93
+ - **Cost analysis** — multi-method anomaly detection (z-score, IQR, MAD), RI/SP coverage, forecasting
94
+ - **Security posture** — 50+ checks across IAM, network, encryption, logging
95
+ - **Waste detection** — orphaned EBS, EIPs, snapshots, idle ALBs, NAT gateways
96
+ - **DR readiness** — backup coverage, Multi-AZ, single points of failure
97
+ - **Lifecycle audit** — EOL runtimes, expiring certs, stale AMIs
98
+ - **IaC drift** — CloudFormation drift detection, coverage gaps
99
+ - **Tag compliance** — untagged resources, cost attribution gaps
100
+ - **Observability** — alarm coverage, logging gaps, blind spots
101
+ - **Quota headroom** — service limits, scaling blockers
102
+ - **Network topology** — CIDR overlaps, route integrity, flow log coverage
103
+
104
+ Output formats: terminal (scored dashboard), JSON, HTML, SARIF, CSV.
105
+
106
+ ## Trust & Security
107
+
108
+ - **No infrastructure mutation** — no remediation or customer-resource changes
109
+ - **Auditable permissions** — 147 explicit actions, including non-mutating `DetectStackDrift`
110
+ - **Local-first by default** — no active telemetry implementation
111
+ - **Explicit integrations** — optional webhooks send data only when deliberately invoked
112
+ - **Published IAM policy** — inspect every action before granting access
113
+ - **Open source** — Apache 2.0, read every line of code on GitHub
114
+ - **Sensitive-data masking** — common identifiers are masked by default; review reports before sharing
115
+
116
+ ## AWS API Costs
117
+
118
+ - Cost pack: ~$0.20-0.40/run (Cost Explorer @ $0.01/request, billed by AWS)
119
+ - All other 9 packs: $0 (free-tier APIs only)
120
+ - Skip cost pack: `kulshan report --packs security,sweep,dr`
121
+
122
+ ## About the Name
123
+
124
+ Kulshan is the Lummi name for the mountain known colonially as Mt. Baker — meaning "great white watcher." We acknowledge the Lummi and Nooksack peoples as the original namers of this mountain.
125
+
126
+ ## Built by
127
+
128
+ [Mission FinOps](https://missionfinops.com) — Mission, BC, Canada.
129
+
130
+ ## AI Agents
131
+
132
+ Kulshan works with Claude Code, Codex, Kiro, Cursor, and any agent that can run shell commands. See [`agent-pack/`](https://github.com/azz-kikkr/kulshan/tree/master/agent-pack) for integration instructions.
133
+
134
+ ## License
135
+
136
+ Apache 2.0 — free and open source forever.
@@ -0,0 +1,70 @@
1
+ # Kulshan
2
+
3
+ **Free, open-source AWS audit CLI with no infrastructure mutation or remediation.**
4
+
5
+ Kulshan scans your AWS account across ten audit dimensions and produces a unified scored report. Scanning and report generation are local-first by default.
6
+
7
+ ## Install
8
+
9
+ ```bash
10
+ pip install kulshan # all platforms: macOS, Linux, Windows
11
+ ```
12
+
13
+ Requires Python 3.9+. Works with the AWS credentials you already use (`aws sts get-caller-identity`).
14
+
15
+ ## Quick Start
16
+
17
+ ```bash
18
+ kulshan doctor # Check AWS readiness (no cost, no writes)
19
+ kulshan report --quick # Quick scan (3 regions)
20
+ kulshan report -o report.html # Full HTML report
21
+ kulshan report --packs security,sweep # Free packs only ($0 AWS cost)
22
+ kulshan shell # Interactive REPL
23
+ ```
24
+
25
+ ## What You Get
26
+
27
+ - **Cost analysis** — multi-method anomaly detection (z-score, IQR, MAD), RI/SP coverage, forecasting
28
+ - **Security posture** — 50+ checks across IAM, network, encryption, logging
29
+ - **Waste detection** — orphaned EBS, EIPs, snapshots, idle ALBs, NAT gateways
30
+ - **DR readiness** — backup coverage, Multi-AZ, single points of failure
31
+ - **Lifecycle audit** — EOL runtimes, expiring certs, stale AMIs
32
+ - **IaC drift** — CloudFormation drift detection, coverage gaps
33
+ - **Tag compliance** — untagged resources, cost attribution gaps
34
+ - **Observability** — alarm coverage, logging gaps, blind spots
35
+ - **Quota headroom** — service limits, scaling blockers
36
+ - **Network topology** — CIDR overlaps, route integrity, flow log coverage
37
+
38
+ Output formats: terminal (scored dashboard), JSON, HTML, SARIF, CSV.
39
+
40
+ ## Trust & Security
41
+
42
+ - **No infrastructure mutation** — no remediation or customer-resource changes
43
+ - **Auditable permissions** — 147 explicit actions, including non-mutating `DetectStackDrift`
44
+ - **Local-first by default** — no active telemetry implementation
45
+ - **Explicit integrations** — optional webhooks send data only when deliberately invoked
46
+ - **Published IAM policy** — inspect every action before granting access
47
+ - **Open source** — Apache 2.0, read every line of code on GitHub
48
+ - **Sensitive-data masking** — common identifiers are masked by default; review reports before sharing
49
+
50
+ ## AWS API Costs
51
+
52
+ - Cost pack: ~$0.20-0.40/run (Cost Explorer @ $0.01/request, billed by AWS)
53
+ - All other 9 packs: $0 (free-tier APIs only)
54
+ - Skip cost pack: `kulshan report --packs security,sweep,dr`
55
+
56
+ ## About the Name
57
+
58
+ Kulshan is the Lummi name for the mountain known colonially as Mt. Baker — meaning "great white watcher." We acknowledge the Lummi and Nooksack peoples as the original namers of this mountain.
59
+
60
+ ## Built by
61
+
62
+ [Mission FinOps](https://missionfinops.com) — Mission, BC, Canada.
63
+
64
+ ## AI Agents
65
+
66
+ Kulshan works with Claude Code, Codex, Kiro, Cursor, and any agent that can run shell commands. See [`agent-pack/`](https://github.com/azz-kikkr/kulshan/tree/master/agent-pack) for integration instructions.
67
+
68
+ ## License
69
+
70
+ Apache 2.0 — free and open source forever.
@@ -0,0 +1,115 @@
1
+ [build-system]
2
+ requires = ["hatchling>=1.21"]
3
+ build-backend = "hatchling.build"
4
+
5
+ [project]
6
+ name = "kulshan"
7
+ dynamic = ["version"]
8
+ description = "Unified CLI for cost, security, waste, DR, lifecycle, drift, tagging, observability, quota, and network analysis on cloud infrastructure."
9
+ readme = "README.md"
10
+ license = { text = "Apache-2.0" }
11
+ requires-python = ">=3.9"
12
+ authors = [
13
+ { name = "Yuvdeep Singh" }
14
+ ]
15
+ keywords = ["aws", "finops", "cost", "security", "cli", "devops", "slm", "local-ai", "mission-finops"]
16
+ classifiers = [
17
+ "Development Status :: 4 - Beta",
18
+ "Environment :: Console",
19
+ "Intended Audience :: Developers",
20
+ "Intended Audience :: System Administrators",
21
+ "Programming Language :: Python :: 3",
22
+ "Programming Language :: Python :: 3.9",
23
+ "Programming Language :: Python :: 3.10",
24
+ "Programming Language :: Python :: 3.11",
25
+ "Programming Language :: Python :: 3.12",
26
+ "Programming Language :: Python :: 3.13",
27
+ "Topic :: System :: Monitoring",
28
+ "Topic :: Security",
29
+ "License :: OSI Approved :: Apache Software License",
30
+ ]
31
+
32
+ dependencies = [
33
+ "boto3>=1.28",
34
+ "click>=8.0",
35
+ "rich>=13.0",
36
+ "rich-click>=1.7",
37
+ "jinja2>=3.1",
38
+ "pyjwt[crypto]>=2.8",
39
+ "httpx>=0.25",
40
+ "platformdirs>=4.0",
41
+ "prompt_toolkit>=3.0",
42
+ "tomli>=2.0; python_version<'3.11'",
43
+ "pandas>=2.2.0",
44
+ "numpy>=1.23.0",
45
+ "plotext>=5.2.0",
46
+ "networkx>=3.0",
47
+ "awscrt>=0.19",
48
+ ]
49
+
50
+ [project.optional-dependencies]
51
+ slm = [
52
+ "llama-cpp-python>=0.3",
53
+ "huggingface-hub>=0.20",
54
+ ]
55
+ pdf = ["weasyprint>=60.0"]
56
+ excel = ["openpyxl>=3.1.0"]
57
+ pptx = ["python-pptx>=0.6.21"]
58
+ dev = [
59
+ "pytest>=8.0",
60
+ "pytest-cov>=5.0",
61
+ "hypothesis>=6.100",
62
+ "ruff>=0.5",
63
+ "mypy>=1.10",
64
+ "moto[ec2,iam,s3,rds,ce,sts,organizations]>=5.0",
65
+ "jsonschema>=4.20",
66
+ ]
67
+ all = ["kulshan[slm,pdf,excel,pptx]"]
68
+
69
+ [project.scripts]
70
+ kulshan = "kulshan.cli:main"
71
+
72
+ [project.urls]
73
+ Homepage = "https://github.com/azz-kikkr/kulshan"
74
+ Repository = "https://github.com/azz-kikkr/kulshan"
75
+ Documentation = "https://github.com/azz-kikkr/kulshan/tree/master/docs"
76
+ Issues = "https://github.com/azz-kikkr/kulshan/issues"
77
+
78
+ [tool.hatch.version]
79
+ path = "src/kulshan/__version__.py"
80
+
81
+ [tool.hatch.build.targets.wheel]
82
+ packages = ["src/kulshan"]
83
+
84
+ [tool.hatch.build]
85
+ include = [
86
+ "src/kulshan/**/*.py",
87
+ "src/kulshan/**/*.toml",
88
+ "src/kulshan/**/*.sql",
89
+ "src/kulshan/**/*.txt",
90
+ "src/kulshan/**/*.pem",
91
+ "src/kulshan/**/*.json",
92
+ "src/kulshan/**/*.j2",
93
+ "src/kulshan/**/*.html",
94
+ "src/kulshan/**/*.css",
95
+ "src/kulshan/**/*.js",
96
+ ]
97
+
98
+ [tool.ruff]
99
+ line-length = 100
100
+ target-version = "py39"
101
+
102
+ [tool.ruff.lint]
103
+ select = ["E", "F", "W", "I", "N", "UP", "B", "A", "C4", "SIM", "TID"]
104
+
105
+ [tool.mypy]
106
+ python_version = "3.9"
107
+ strict = true
108
+
109
+ [tool.pytest.ini_options]
110
+ testpaths = ["tests"]
111
+ addopts = "-q --strict-markers --cov=kulshan --cov-report=term-missing"
112
+ markers = [
113
+ "slow: tests that take >5s",
114
+ "integration: requires AWS mock setup",
115
+ ]
@@ -0,0 +1,9 @@
1
+ """
2
+ Kulshan: CLI for AWS cost, security, and waste analysis.
3
+
4
+ Local-first, non-mutating AWS audits. Optional integrations require explicit invocation.
5
+ """
6
+
7
+ from kulshan.__version__ import __version__
8
+
9
+ __all__ = ["__version__"]
@@ -0,0 +1 @@
1
+ __version__ = "0.1.0"