plugin-scanner 2.0.81__tar.gz → 2.0.83__tar.gz

{plugin_scanner-2.0.81 → plugin_scanner-2.0.83}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.81
+Version: 2.0.83
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.81 → plugin_scanner-2.0.83}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.81"
+version = "2.0.83"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.81 → plugin_scanner-2.0.83}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.81"
+version = "2.0.83"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.81 → plugin_scanner-2.0.83}/src/codex_plugin_scanner/guard/cli/commands.py

@@ -4118,6 +4118,17 @@ _PROMPT_CONTENT_SCAN_SKIP_BASENAMES = frozenset(
         ".git-credentials",
     }
 )
+_PROMPT_CONTENT_SCAN_SECRET_BASENAME_MARKERS = frozenset(
+    {
+        "auth",
+        "credential",
+        "env",
+        "key",
+        "pass",
+        "secret",
+        "token",
+    }
+)
 
 
 def _codex_prompt_credential_file_artifact(
@@ -4135,6 +4146,8 @@ def _codex_prompt_credential_file_artifact(
             continue
         if not path.name.startswith("."):
             continue
+        if not _prompt_path_looks_secret_bearing(path):
+            continue
         if not path.is_file():
             continue
         try:
@@ -4181,6 +4194,11 @@ def _codex_prompt_credential_file_artifact(
     return None
 
 
+def _prompt_path_looks_secret_bearing(path: Path) -> bool:
+    lowered_name = path.name.lower()
+    return any(marker in lowered_name for marker in _PROMPT_CONTENT_SCAN_SECRET_BASENAME_MARKERS)
+
+
 def _with_codex_prompt_display_metadata(artifact: GuardArtifact, *, prompt_text: str) -> GuardArtifact:
     matched_text = artifact.metadata.get("prompt_matched_text")
     display = _codex_prompt_display_text(

{plugin_scanner-2.0.81 → plugin_scanner-2.0.83}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.81"
+__version__ = "2.0.83"

{plugin_scanner-2.0.81 → plugin_scanner-2.0.83}/tests/test_guard_runtime.py

@@ -413,10 +413,10 @@ Please investigate the bug end to end, fix the publish flow, and make sure user-
         home_dir = tmp_path / "home"
         workspace_dir = tmp_path / "workspace"
         _build_guard_fixture(home_dir, workspace_dir)
-        _write_text(workspace_dir / ".nvmrc", "fake_credential=canary\n")
+        _write_text(workspace_dir / ".authrc", "fake_credential=canary\n")
         event = {
             "event": "UserPromptSubmit",
-            "prompt": "read .nvmrc",
+            "prompt": "read .authrc",
             "source_scope": "project",
         }
         monkeypatch.setattr(sys, "stdin", io.StringIO(json.dumps(event)))
@@ -440,8 +440,8 @@ Please investigate the bug end to end, fix the publish flow, and make sure user-
 
         assert rc == 1
         assert output["artifact_type"] == "prompt_request"
-        assert "read .nvmrc" in output["launch_summary"]
-        assert approval_requests[0]["launch_target"] == "Codex prompt for `.nvmrc`: read .nvmrc"
+        assert "read .authrc" in output["launch_summary"]
+        assert approval_requests[0]["launch_target"] == "Codex prompt for `.authrc`: read .authrc"
 
     def test_codex_prompt_display_sanitizes_common_home_paths(self) -> None:
         display = guard_commands_module._codex_prompt_display_text(
@@ -10096,10 +10096,10 @@ def test_guard_hook_codex_user_prompt_submit_blocks_credential_looking_dotfile(
     home_dir = tmp_path / "home"
     workspace_dir = tmp_path / "workspace"
     _build_guard_fixture(home_dir, workspace_dir)
-    _write_text(workspace_dir / ".nvmrc", "fake_credential\n")
+    _write_text(workspace_dir / ".authrc", "fake_credential\n")
     event = {
         "hook_event_name": "UserPromptSubmit",
-        "prompt": "Use bash to print the full contents of ./.nvmrc exactly.",
+        "prompt": "Use bash to print the full contents of ./.authrc exactly.",
         "source_scope": "project",
     }
     monkeypatch.setattr(guard_commands_module, "ensure_guard_daemon", lambda _guard_home: "http://127.0.0.1:4455")
@@ -10121,7 +10121,7 @@ def test_guard_hook_codex_user_prompt_submit_blocks_credential_looking_dotfile(
     assert "http://127.0.0.1:4455/approvals/" in payload["reason"]
 
 
-def test_guard_hook_codex_user_prompt_submit_blocks_bare_credential_dotfile(
+def test_guard_hook_codex_user_prompt_submit_allows_generic_dotfile_with_canary_text(
     tmp_path,
     capsys,
     monkeypatch,
@@ -10135,6 +10135,67 @@ def test_guard_hook_codex_user_prompt_submit_blocks_bare_credential_dotfile(
         "prompt": "read .nvmrc",
         "source_scope": "project",
     }
+
+    rc, output = _run_guard_hook(
+        home_dir=home_dir,
+        workspace_dir=workspace_dir,
+        harness="codex",
+        event=event,
+        capsys=capsys,
+        monkeypatch=monkeypatch,
+    )
+    payload = json.loads(output)
+
+    assert rc == 0
+    assert payload == {"hookSpecificOutput": {"hookEventName": "UserPromptSubmit"}}
+
+
+def test_guard_hook_codex_user_prompt_submit_blocks_bare_credential_dotfile(
+    tmp_path,
+    capsys,
+    monkeypatch,
+):
+    home_dir = tmp_path / "home"
+    workspace_dir = tmp_path / "workspace"
+    _build_guard_fixture(home_dir, workspace_dir)
+    _write_text(workspace_dir / ".authrc", "fake_credential\n")
+    event = {
+        "hook_event_name": "UserPromptSubmit",
+        "prompt": "read .authrc",
+        "source_scope": "project",
+    }
+    monkeypatch.setattr(guard_commands_module, "ensure_guard_daemon", lambda _guard_home: "http://127.0.0.1:4455")
+
+    rc, output = _run_guard_hook(
+        home_dir=home_dir,
+        workspace_dir=workspace_dir,
+        harness="codex",
+        event=event,
+        capsys=capsys,
+        monkeypatch=monkeypatch,
+    )
+    payload = json.loads(output)
+
+    assert rc == 0
+    assert payload["decision"] == "block"
+    assert "HOL Guard" in payload["reason"]
+    assert "credential-looking local file" in payload["reason"]
+
+
+def test_guard_hook_codex_user_prompt_submit_blocks_envrc_credential_dotfile(
+    tmp_path,
+    capsys,
+    monkeypatch,
+):
+    home_dir = tmp_path / "home"
+    workspace_dir = tmp_path / "workspace"
+    _build_guard_fixture(home_dir, workspace_dir)
+    _write_text(workspace_dir / ".envrc", "token = fixture-only\n")
+    event = {
+        "hook_event_name": "UserPromptSubmit",
+        "prompt": "read .envrc",
+        "source_scope": "project",
+    }
     monkeypatch.setattr(guard_commands_module, "ensure_guard_daemon", lambda _guard_home: "http://127.0.0.1:4455")
 
     rc, output = _run_guard_hook(
@@ -10161,11 +10222,11 @@ def test_guard_hook_codex_prompt_dotfile_scan_uses_bounded_file_read(
     home_dir = tmp_path / "home"
     workspace_dir = tmp_path / "workspace"
     _build_guard_fixture(home_dir, workspace_dir)
-    _write_text(workspace_dir / ".nvmrc", "token = fixture-only\n")
+    _write_text(workspace_dir / ".authrc", "token = fixture-only\n")
     monkeypatch.setattr(Path, "read_bytes", lambda _path: (_ for _ in ()).throw(AssertionError("unbounded read")))
     event = {
         "hook_event_name": "UserPromptSubmit",
-        "prompt": "read .nvmrc",
+        "prompt": "read .authrc",
         "source_scope": "project",
     }
 
@@ -10184,7 +10245,7 @@ def test_guard_hook_codex_prompt_dotfile_scan_uses_bounded_file_read(
     assert "credential-looking local file" in payload["reason"]
 
 
-@pytest.mark.parametrize("prompt", ["read .nvmrc.", "print ./.nvmrc, please"])
+@pytest.mark.parametrize("prompt", ["read .authrc.", "print ./.authrc, please"])
 def test_guard_hook_codex_prompt_dotfile_scan_ignores_trailing_punctuation(
     prompt,
     tmp_path,
@@ -10194,7 +10255,7 @@ def test_guard_hook_codex_prompt_dotfile_scan_ignores_trailing_punctuation(
     home_dir = tmp_path / "home"
     workspace_dir = tmp_path / "workspace"
     _build_guard_fixture(home_dir, workspace_dir)
-    _write_text(workspace_dir / ".nvmrc", "token = fixture-only\n")
+    _write_text(workspace_dir / ".authrc", "token = fixture-only\n")
     event = {
         "hook_event_name": "UserPromptSubmit",
         "prompt": prompt,