plugin-scanner 2.0.780__tar.gz → 2.0.781__tar.gz

{plugin_scanner-2.0.780 → plugin_scanner-2.0.781}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.780
+Version: 2.0.781
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.780 → plugin_scanner-2.0.781}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.780"
+version = "2.0.781"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.780 → plugin_scanner-2.0.781}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.780"
+version = "2.0.781"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.780 → plugin_scanner-2.0.781}/src/codex_plugin_scanner/guard/aibom_trust_metadata.py

@@ -2,8 +2,6 @@
 
 from __future__ import annotations
 
-import hashlib
-import json
 from pathlib import Path
 from typing import Literal
 
@@ -14,6 +12,7 @@ from ..trust_mcp_scoring import build_mcp_domain, build_mcp_surface_domain
 from ..trust_models import TrustAdapterScore, TrustComponentScore, TrustDomainScore
 from ..trust_plugin_scoring import build_plugin_domain
 from ..trust_skill_scoring import build_skill_domain
+from .runtime.evidence_hash import guard_evidence_hash
 
 _INVENTORY_TRUST_SCAN_OPTIONS = ScanOptions(cisco_skill_scan="off")
 
@@ -170,6 +169,10 @@ def _local_skill_security_for_artifact(
     status = str(getattr(run, "status", "unknown"))
     normalized_captured_at = _normalize_inventory_datetime(captured_at)
     findings = _local_skill_security_findings(run, skill_root=trust_root)
+    findings = sorted(
+        findings,
+        key=lambda finding: (finding.get("file", ""), finding.get("ruleId", ""), finding.get("message", "")),
+    )
     severity_counts = _cisco_severity_counts(run)
     score = _cisco_layer_score(severity_counts) if status == "enabled" else None
     safety = None
@@ -199,6 +202,18 @@ def _local_skill_security_for_artifact(
             if value is not None:
                 metadata_payload[key] = value
 
+    metadata_payload["evidenceHash"] = guard_evidence_hash(
+        {
+            "capturedAt": normalized_captured_at,
+            "entityType": "skill",
+            "findings": findings,
+            "provider": "cisco-skill-scanner",
+            "safety": safety,
+            "source": "local_indexed",
+            "status": status,
+        }
+    )
+
     return {
         "entityType": "skill",
         "source": "local_indexed",
@@ -646,5 +661,4 @@ def _trust_component_row(
 
 
 def _trust_evidence_hash(payload: dict[str, object]) -> str:
-    encoded = json.dumps(payload, sort_keys=True, separators=(",", ":"), ensure_ascii=True)
-    return hashlib.sha256(encoded.encode("utf-8")).hexdigest()
+    return guard_evidence_hash(payload)

plugin_scanner-2.0.781/src/codex_plugin_scanner/guard/runtime/evidence_hash.py

@@ -0,0 +1,13 @@
+from __future__ import annotations
+
+import hashlib
+import json
+from collections.abc import Mapping
+
+
+def canonical_guard_evidence_payload(payload: Mapping[str, object]) -> str:
+    return json.dumps(payload, sort_keys=True, separators=(",", ":"), ensure_ascii=True)
+
+
+def guard_evidence_hash(payload: Mapping[str, object]) -> str:
+    return hashlib.sha256(canonical_guard_evidence_payload(payload).encode("utf-8")).hexdigest()

{plugin_scanner-2.0.780 → plugin_scanner-2.0.781}/src/codex_plugin_scanner/guard/runtime/trust_attestation.py

@@ -2,10 +2,10 @@ from __future__ import annotations
 
 import base64
 import hashlib
-import json
 import os
 from collections.abc import Mapping
 from dataclasses import dataclass
+from functools import lru_cache
 
 from cryptography.exceptions import InvalidSignature
 from cryptography.hazmat.primitives import hashes, serialization
@@ -13,6 +13,8 @@ from cryptography.hazmat.primitives.asymmetric import ec, padding
 from cryptography.hazmat.primitives.asymmetric.ec import EllipticCurvePrivateKey, EllipticCurvePublicKey
 from cryptography.hazmat.primitives.asymmetric.rsa import RSAPrivateKey, RSAPublicKey
 
+from .evidence_hash import canonical_guard_evidence_payload, guard_evidence_hash
+
 GUARD_TRUST_ATTESTATION_PAYLOAD_VERSION = "guard-aibom-trust-attestation.v1"
 GUARD_TRUST_ATTESTATION_PAYLOAD_VERSION_V2 = "guard-aibom-trust-attestation.v2"
 GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM = "rsa-pss-sha256"
@@ -37,11 +39,11 @@ class GuardTrustAttestationVerificationKey:
 
 
 def canonical_trust_attestation_payload(payload: Mapping[str, object]) -> bytes:
-    return json.dumps(payload, sort_keys=True, separators=(",", ":"), ensure_ascii=True).encode("utf-8")
+    return canonical_guard_evidence_payload(payload).encode("utf-8")
 
 
 def payload_hash_for_trust_attestation(payload: Mapping[str, object]) -> str:
-    return hashlib.sha256(canonical_trust_attestation_payload(payload)).hexdigest()
+    return guard_evidence_hash(payload)
 
 
 def resolve_trust_attestation_signing_config(
@@ -51,6 +53,8 @@ def resolve_trust_attestation_signing_config(
     active_key_id = _sanitize_env(env.get("GUARD_AIBOM_TRUST_ATTESTATION_KEY_ID")) or "guard-aibom-trust-key-default"
     private_key_pem = _normalize_pem(_sanitize_env(env.get("GUARD_AIBOM_TRUST_ATTESTATION_PRIVATE_KEY")))
     if not private_key_pem:
+        if _headless_short_lived_attestation_enabled(env):
+            return _resolve_headless_short_lived_trust_attestation_signing_config(active_key_id=active_key_id)
         return None
     return GuardTrustAttestationSigningConfig(
         active_key_id=active_key_id,
@@ -105,6 +109,39 @@ def trust_attestation_v2_enabled(environ: Mapping[str, str] | None = None) -> bo
     return _sanitize_env(env.get("GUARD_AIBOM_TRUST_ATTESTATION_V2")).lower() in _TRUTHY_ENV_VALUES
 
 
+def _headless_short_lived_attestation_enabled(environ: Mapping[str, str]) -> bool:
+    raw = environ.get("GUARD_AIBOM_TRUST_ATTESTATION_HEADLESS_SHORT_LIVED")
+    return _sanitize_env(raw).lower() in _TRUTHY_ENV_VALUES
+
+
+@lru_cache(maxsize=4)
+def _resolve_headless_short_lived_trust_attestation_signing_config(
+    *,
+    active_key_id: str,
+) -> GuardTrustAttestationSigningConfig:
+    private_key = ec.generate_private_key(ec.SECP256R1())
+    private_key_pem = private_key.private_bytes(
+        encoding=serialization.Encoding.PEM,
+        format=serialization.PrivateFormat.PKCS8,
+        encryption_algorithm=serialization.NoEncryption(),
+    ).decode("utf-8")
+    public_key_pem = (
+        private_key.public_key()
+        .public_bytes(
+            encoding=serialization.Encoding.PEM,
+            format=serialization.PublicFormat.SubjectPublicKeyInfo,
+        )
+        .decode("utf-8")
+        .strip()
+    )
+    return GuardTrustAttestationSigningConfig(
+        active_key_id=active_key_id,
+        private_key_pem=private_key_pem,
+        public_jwk_thumbprint=_public_key_fingerprint(public_key_pem),
+        signature_algorithm=GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
+    )
+
+
 def build_trust_attestation_payload(
     *,
     agent_id: str,

{plugin_scanner-2.0.780 → plugin_scanner-2.0.781}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.780"
+__version__ = "2.0.781"

{plugin_scanner-2.0.780 → plugin_scanner-2.0.781}/tests/test_guard_aibom_trust_metadata.py

@@ -13,14 +13,16 @@ import pytest
 from cryptography.hazmat.primitives import serialization
 from cryptography.hazmat.primitives.asymmetric import ec, rsa
 
-from codex_plugin_scanner.guard.aibom_trust_metadata import trust_resolution_from_domain
 from codex_plugin_scanner.guard.cli.oauth_client import generate_dpop_key_pair
+from codex_plugin_scanner.guard.aibom_trust_metadata import trust_resolution_from_domain
+from codex_plugin_scanner.guard.inventory_cisco import CiscoInventoryRun
 from codex_plugin_scanner.guard.inventory_contract import inventory_snapshot_from_detection
 from codex_plugin_scanner.guard.models import GuardArtifact, HarnessDetection
+from codex_plugin_scanner.guard.runtime.evidence_hash import guard_evidence_hash
 from codex_plugin_scanner.guard.runtime.trust_attestation import (
-    GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
     GuardTrustAttestationSigningConfig,
     GuardTrustAttestationVerificationKey,
+    GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
     build_trust_attestation_payload,
     build_trust_attestation_verification_key,
     resolve_guard_oauth_trust_attestation_signing_config,
@@ -71,6 +73,7 @@ def _snapshot_for_artifact(
     home_dir: Path,
     workspace_dir: Path,
     trust_attestation_context: Mapping[str, object] | None = None,
+    cisco_runs: tuple[object, ...] = (),
 ) -> Any:
     detection = HarnessDetection(
         harness="codex",
@@ -85,6 +88,7 @@ def _snapshot_for_artifact(
         home_dir=home_dir,
         workspace_dir=workspace_dir,
         trust_attestation_context=trust_attestation_context,
+        cisco_runs=cisco_runs,
     )
 
 
@@ -183,6 +187,10 @@ def test_inventory_snapshot_attaches_local_plugin_trust_resolution(tmp_path: Pat
     assert components
 
 
+def test_guard_evidence_hash_is_stable_across_key_order() -> None:
+    assert guard_evidence_hash({"b": 2, "a": 1}) == guard_evidence_hash({"a": 1, "b": 2})
+
+
 def test_inventory_skill_trust_enrichment_disables_cisco_scan(
     monkeypatch,
     tmp_path: Path,
@@ -537,34 +545,78 @@ def test_inventory_snapshot_signs_local_trust_metadata_with_workspace_device_bin
     )
 
 
+def test_local_skill_security_emits_shared_evidence_hash(tmp_path: Path) -> None:
+    skill_dir = tmp_path / "skill"
+    skill_dir.mkdir()
+    (skill_dir / "SKILL.md").write_text("---\nname: Deploy Kit\n---\n# Skill\n", encoding="utf-8")
+
+    cisco_run = CiscoInventoryRun(
+        source="cisco-skill-scanner",
+        status="enabled",
+        message="cisco skill scan",
+        findings=(),
+        duration_ms=0,
+        metadata={
+            "target": str(skill_dir),
+            "findingsBySeverity": {"critical": 0, "high": 0, "medium": 0, "low": 0},
+            "skillsScanned": 1,
+        },
+    )
+
+    snapshot = _snapshot_for_artifact(
+        artifact=GuardArtifact(
+            artifact_id="codex:project:skill:deploy-kit",
+            name="deploy-kit",
+            harness="codex",
+            artifact_type="skill",
+            source_scope="project",
+            config_path=str(skill_dir),
+        ),
+        generated_at="2026-06-10T12:00:00+00:00",
+        home_dir=tmp_path,
+        workspace_dir=skill_dir,
+        trust_attestation_context=None,
+        cisco_runs=(cisco_run,),
+    )
+
+    skill_item = next(item for item in snapshot.items if item.item_kind == "skill")
+    local_security = skill_item.metadata.get("localSecurity")
+    assert isinstance(local_security, dict)
+    metadata = local_security.get("metadata")
+    assert isinstance(metadata, dict)
+    evidence_hash = metadata.get("evidenceHash")
+    assert isinstance(evidence_hash, str)
+    assert len(evidence_hash) == 64
+
+
 def test_p384_key_is_rejected_for_p256_attestation() -> None:
     private_key = ec.generate_private_key(ec.SECP384R1())
     private_key_pem = private_key.private_bytes(
         encoding=serialization.Encoding.PEM,
         format=serialization.PrivateFormat.PKCS8,
         encryption_algorithm=serialization.NoEncryption(),
-    ).decode("ascii")
+    ).decode('ascii')
 
-    with pytest.raises(ValueError, match="P-256"):
+    with pytest.raises(ValueError, match='P-256'):
         sign_trust_attestation(
             payload=build_trust_attestation_payload(
-                agent_id="agent-1",
-                item_id="plugin:trust-demo",
-                item_kind="plugin",
-                content_hash="sha256:plugin-local",
-                captured_at="2026-06-10T12:00:00+00:00",
-                evidence_hash="resolution-hash",
-                scope="trust_resolution",
-                workspace_id="workspace-alpha",
-                device_id="device-alpha",
+                agent_id='agent-1',
+                item_id='plugin:trust-demo',
+                item_kind='plugin',
+                content_hash='sha256:plugin-local',
+                captured_at='2026-06-10T12:00:00+00:00',
+                evidence_hash='resolution-hash',
+                scope='trust_resolution',
+                workspace_id='workspace-alpha',
+                device_id='device-alpha',
             ),
             config=GuardTrustAttestationSigningConfig(
-                active_key_id="p384-key",
+                active_key_id='p384-key',
                 private_key_pem=private_key_pem,
-                public_jwk_thumbprint="p384-key",
+                public_jwk_thumbprint='p384-key',
                 signature_algorithm=GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
             ),
-            signed_at="2026-06-10T12:00:00+00:00",
+            signed_at='2026-06-10T12:00:00+00:00',
         )