prismor 0.1.0__tar.gz → 0.1.2__tar.gz

{prismor-0.1.0/prismor.egg-info → prismor-0.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: prismor
-Version: 0.1.0
+Version: 0.1.2
 Summary: A CLI tool for scanning GitHub repositories for vulnerabilities, secrets, and generating SBOMs
 Home-page: https://github.com/PrismorSec/prismor-cli
 Author: Prismor

{prismor-0.1.0 → prismor-0.1.2}/prismor/__init__.py

@@ -1,6 +1,6 @@
 """Prismor CLI - Security scanning tool for GitHub repositories."""
 
-__version__ = "0.1.0"
+__version__ = "0.1.2"
 __author__ = "Prismor"
 __description__ = "A CLI tool for scanning GitHub repositories for vulnerabilities, secrets, and generating SBOMs"
 

prismor-0.1.2/prismor/api.py

@@ -0,0 +1,242 @@
+"""API client for Prismor security scanning service."""
+
+import os
+import requests
+from typing import Optional, Dict, Any
+
+
+class PrismorAPIError(Exception):
+    """Custom exception for Prismor API errors."""
+    pass
+
+
+class PrismorClient:
+    """Client for interacting with Prismor API."""
+    
+    def __init__(self, api_key: Optional[str] = None):
+        """Initialize the Prismor API client.
+        
+        Args:
+            api_key: Prismor API key. If not provided, will look for PRISMOR_API_KEY env var.
+        """
+        self.api_key = api_key or os.environ.get("PRISMOR_API_KEY")
+        if not self.api_key:
+            raise PrismorAPIError(
+                "PRISMOR_API_KEY environment variable is not set. "
+                "Please set it with: export PRISMOR_API_KEY=your_api_key"
+            )
+        
+        # self.base_url = "http://localhost:3000"
+        self.base_url = "https://prismor.dev"
+        self.headers = {
+            "Authorization": f"Bearer {self.api_key}",
+            "Content-Type": "application/json"
+        }
+    
+    def authenticate(self) -> Dict[str, Any]:
+        """Authenticate with the Prismor API using the API key.
+        
+        Returns:
+            Dictionary containing user information and repositories
+            
+        Raises:
+            PrismorAPIError: If authentication fails
+        """
+        try:
+            response = requests.post(
+                f"{self.base_url}/api/cli/auth",
+                json={"apiKey": self.api_key},
+                headers={"Content-Type": "application/json"},
+                timeout=30
+            )
+            
+            if response.status_code == 401:
+                raise PrismorAPIError("Invalid API key. Please check your PRISMOR_API_KEY.")
+            
+            if response.status_code == 400:
+                raise PrismorAPIError("API key is required.")
+            
+            if response.status_code >= 400:
+                error_msg = response.json().get("error", "Authentication failed")
+                raise PrismorAPIError(f"Authentication error: {error_msg}")
+            
+            response.raise_for_status()
+            return response.json()
+            
+        except requests.exceptions.Timeout:
+            raise PrismorAPIError("Authentication request timed out.")
+        except requests.exceptions.ConnectionError:
+            raise PrismorAPIError(
+                "Failed to connect to Prismor API. Please check your internet connection."
+            )
+        except requests.exceptions.RequestException as e:
+            raise PrismorAPIError(f"Authentication request failed: {str(e)}")
+    
+    def normalize_repo_url(self, repo: str) -> str:
+        """Normalize repository input to a full GitHub URL.
+        
+        Args:
+            repo: Repository in format 'username/repo' or full GitHub URL
+            
+        Returns:
+            Full GitHub repository URL
+        """
+        if repo.startswith("http://") or repo.startswith("https://"):
+            return repo
+        
+        # Assume it's in username/repo format
+        if "/" in repo:
+            return f"https://github.com/{repo}"
+        
+        raise PrismorAPIError(
+            f"Invalid repository format: {repo}. "
+            "Please use 'username/repo' or full GitHub URL"
+        )
+    
+    def scan(
+        self,
+        repo: str,
+        vex: bool = False,
+        sbom: bool = False,
+        detect_secret: bool = False,
+        fullscan: bool = False,
+        branch: Optional[str] = None
+    ) -> Dict[str, Any]:
+        """Perform security scan on a GitHub repository.
+        
+        Args:
+            repo: Repository URL or username/repo format
+            vex: Enable vulnerability scanning
+            sbom: Enable SBOM generation
+            detect_secret: Enable secret detection
+            fullscan: Enable all scan types
+            branch: Specific branch to scan (defaults to main/master)
+            
+        Returns:
+            Dictionary containing scan results
+        """
+        repo_url = self.normalize_repo_url(repo)
+        
+        # First authenticate to get user info
+        auth_response = self.authenticate()
+        user_info = auth_response.get("user", {})
+        
+        # Prepare request payload for CLI scan
+        payload = {
+            "repo_url": repo_url,
+            "api_key": self.api_key,
+            "vex": vex or fullscan,
+            "sbom": sbom or fullscan,
+            "detect_secret": detect_secret or fullscan,
+            "fullscan": fullscan,
+            "branch": branch
+        }
+        
+        try:
+            response = requests.post(
+                f"{self.base_url}/api/cli/scan",
+                json=payload,
+                headers={"Content-Type": "application/json"},
+                timeout=300  # 5 minute timeout
+            )
+            
+            if response.status_code == 401:
+                error_data = response.json()
+                if error_data.get("action") == "integrate_github":
+                    raise PrismorAPIError(
+                        f"{error_data.get('message', 'GitHub integration required')}\n"
+                        f"Please visit: {error_data.get('integration_url', 'https://prismor.dev/dashboard')}"
+                    )
+                raise PrismorAPIError("Invalid API key. Please check your PRISMOR_API_KEY.")
+            
+            if response.status_code == 404:
+                raise PrismorAPIError("CLI scan endpoint not found. Please check if CLI endpoints are available.")
+            
+            if response.status_code >= 400:
+                error_msg = response.json().get("error", "Unknown error")
+                raise PrismorAPIError(f"API error: {error_msg}")
+            
+            response.raise_for_status()
+            result = response.json()
+            
+            # Handle the new response format from CLI endpoint
+            if result.get("ok") and "results" in result:
+                return result["results"]
+            return result
+            
+        except requests.exceptions.Timeout:
+            raise PrismorAPIError(
+                "Request timed out. The repository scan is taking longer than expected."
+            )
+        except requests.exceptions.ConnectionError:
+            raise PrismorAPIError(
+                "Failed to connect to Prismor API. Please check your internet connection."
+            )
+        except requests.exceptions.RequestException as e:
+            raise PrismorAPIError(f"Request failed: {str(e)}")
+    
+    def get_repositories(self) -> Dict[str, Any]:
+        """Get user's repositories.
+        
+        Returns:
+            Dictionary containing user repositories
+            
+        Raises:
+            PrismorAPIError: If request fails
+        """
+        auth_response = self.authenticate()
+        user_info = auth_response.get("user", {})
+        return {
+            "repositories": user_info.get("repositories", []),
+            "user": {
+                "id": user_info.get("id"),
+                "email": user_info.get("email"),
+                "name": user_info.get("name")
+            }
+        }
+    
+    def get_repository_by_name(self, repo_name: str) -> Dict[str, Any]:
+        """Get repository ID by repository name.
+        
+        Args:
+            repo_name: Repository name (e.g., "username/repo")
+            
+        Returns:
+            Dictionary containing repository information including ID
+            
+        Raises:
+            PrismorAPIError: If request fails
+        """
+        try:
+            response = requests.post(
+                f"{self.base_url}/api/repositories/by-name",
+                json={
+                    "apiKey": self.api_key,
+                    "repoName": repo_name
+                },
+                headers={"Content-Type": "application/json"},
+                timeout=30
+            )
+            
+            if response.status_code == 401:
+                raise PrismorAPIError("Invalid API key. Please check your PRISMOR_API_KEY.")
+            
+            if response.status_code == 404:
+                raise PrismorAPIError(f"Repository '{repo_name}' not found.")
+            
+            if response.status_code >= 400:
+                error_msg = response.json().get("error", "Unknown error")
+                raise PrismorAPIError(f"API error: {error_msg}")
+            
+            response.raise_for_status()
+            return response.json()
+            
+        except requests.exceptions.Timeout:
+            raise PrismorAPIError("Request timed out.")
+        except requests.exceptions.ConnectionError:
+            raise PrismorAPIError(
+                "Failed to connect to Prismor API. Please check your internet connection."
+            )
+        except requests.exceptions.RequestException as e:
+            raise PrismorAPIError(f"Request failed: {str(e)}")
+

prismor-0.1.2/prismor/cli.py

@@ -0,0 +1,351 @@
+"""Command-line interface for Prismor security scanning tool."""
+
+import sys
+import json
+import click
+from typing import Optional
+from .api import PrismorClient, PrismorAPIError
+
+
+def print_success(message: str):
+    """Print success message in green."""
+    click.secho(f"✓ {message}", fg="green")
+
+
+def print_error(message: str):
+    """Print error message in red."""
+    click.secho(f"✗ {message}", fg="red", err=True)
+
+
+def print_info(message: str):
+    """Print info message in blue."""
+    click.secho(f"ℹ {message}", fg="blue")
+
+
+def print_warning(message: str):
+    """Print warning message in yellow."""
+    click.secho(f"⚠ {message}", fg="yellow")
+
+
+def format_scan_results(results: dict, scan_type: str):
+    """Format and display scan results."""
+    click.echo("\n" + "=" * 60)
+    click.secho(f"  Scan Results - {scan_type}", fg="cyan", bold=True)
+    click.echo("=" * 60 + "\n")
+    
+    # Display repository information
+    if "repository" in results:
+        click.secho("Repository:", fg="yellow", bold=True)
+        click.echo(f"  {results['repository']}\n")
+    
+    if "branch" in results:
+        click.secho("Branch:", fg="yellow", bold=True)
+        click.echo(f"  {results['branch']}\n")
+    
+    if "commit_sha" in results:
+        click.secho("Commit SHA:", fg="yellow", bold=True)
+        click.echo(f"  {results['commit_sha']}\n")
+    
+    # Display scan results for each scan type
+    if "scans" in results:
+        scans = results["scans"]
+        
+        # Vulnerability scan results
+        if "vulnerability" in scans:
+            vuln_scan = scans["vulnerability"]
+            click.secho("Vulnerability Scan:", fg="yellow", bold=True)
+            status_color = "green" if vuln_scan.get("status") == "success" else "red"
+            click.secho(f"  Status: {vuln_scan.get('status', 'unknown')}", fg=status_color)
+            
+            if "scan_results" in vuln_scan:
+                scan_data = vuln_scan["scan_results"]
+                if "vulnerabilities" in scan_data or "Results" in scan_data:
+                    vuln_data = scan_data.get("vulnerabilities", scan_data.get("Results", []))
+                    if isinstance(vuln_data, list):
+                        click.echo(f"  Vulnerabilities Found: {len(vuln_data)}")
+                    else:
+                        click.echo(f"  Vulnerabilities: Data available")
+            
+            if "public_url" in vuln_scan:
+                click.echo(f"  Results URL: {vuln_scan['public_url']}")
+            click.echo()
+        
+        # SBOM results
+        if "sbom" in scans:
+            sbom_scan = scans["sbom"]
+            click.secho("SBOM Generation:", fg="yellow", bold=True)
+            status_color = "green" if sbom_scan.get("status") == "success" else "red"
+            click.secho(f"  Status: {sbom_scan.get('status', 'unknown')}", fg=status_color)
+            
+            if "sbom" in sbom_scan:
+                sbom_data = sbom_scan["sbom"]
+                if isinstance(sbom_data, list):
+                    click.echo(f"  Artifacts Found: {len(sbom_data)}")
+                else:
+                    click.echo(f"  SBOM: Data available")
+            
+            if "public_url" in sbom_scan:
+                click.echo(f"  Results URL: {sbom_scan['public_url']}")
+            click.echo()
+        
+        # Secret scan results
+        if "secret" in scans:
+            secret_scan = scans["secret"]
+            click.secho("Secret Detection:", fg="yellow", bold=True)
+            status_color = "green" if secret_scan.get("status") == "success" else "red"
+            click.secho(f"  Status: {secret_scan.get('status', 'unknown')}", fg=status_color)
+            
+            if "summary" in secret_scan:
+                summary = secret_scan["summary"]
+                if isinstance(summary, dict):
+                    for key, value in summary.items():
+                        click.echo(f"  {key}: {value}")
+                else:
+                    click.echo(f"  Summary: {summary}")
+            
+            if "public_url" in secret_scan:
+                click.echo(f"  Results URL: {secret_scan['public_url']}")
+            click.echo()
+    
+    # Display scan timestamp
+    if "scanned_at" in results:
+        click.secho("Scanned At:", fg="yellow", bold=True)
+        click.echo(f"  {results['scanned_at']}\n")
+    
+    click.echo("=" * 60 + "\n")
+
+
+@click.group(invoke_without_command=True)
+@click.option(
+    "--scan",
+    type=str,
+    help="Repository to scan (username/repo or full GitHub URL)"
+)
+@click.option("--vex", is_flag=True, help="Perform vulnerability scanning")
+@click.option("--sbom", is_flag=True, help="Generate Software Bill of Materials")
+@click.option("--detect-secret", is_flag=True, help="Detect secrets in repository")
+@click.option("--fullscan", is_flag=True, help="Perform all scan types")
+@click.option("--branch", type=str, help="Specific branch to scan (defaults to main/master)")
+@click.option("--json", "output_json", is_flag=True, help="Output results in JSON format")
+@click.version_option(version="0.1.2", prog_name="prismor")
+@click.pass_context
+def cli(ctx, scan: Optional[str], vex: bool, sbom: bool, detect_secret: bool, 
+        fullscan: bool, branch: Optional[str], output_json: bool):
+    """Prismor CLI - Security scanning tool for GitHub repositories.
+    
+    Examples:
+        prismor --scan username/repo --vex
+        prismor --scan username/repo --fullscan
+        prismor --scan https://github.com/username/repo --detect-secret
+        prismor --scan username/repo --sbom --branch develop
+        prismor status
+        prismor repos
+    """
+    # If no command and no scan option, show help
+    if ctx.invoked_subcommand is None and not scan:
+        click.echo(ctx.get_help())
+        return
+    
+    # If scan option is provided, perform the scan
+    if scan:
+        # Check if at least one scan type is selected
+        if not any([vex, sbom, detect_secret, fullscan]):
+            print_error("Please specify at least one scan type: --vex, --sbom, --detect-secret, or --fullscan")
+            sys.exit(1)
+        
+        try:
+            # Initialize API client
+            print_info(f"Initializing Prismor scan for: {scan}")
+            client = PrismorClient()
+            
+            # Determine scan type for display
+            scan_types = []
+            if fullscan:
+                scan_types.append("Full Scan (VEX + SBOM + Secret Detection)")
+            else:
+                if vex:
+                    scan_types.append("VEX")
+                if sbom:
+                    scan_types.append("SBOM")
+                if detect_secret:
+                    scan_types.append("Secret Detection")
+            
+            print_info(f"Scan type: {', '.join(scan_types)}")
+            print_info("Starting scan... (this may take a few minutes)")
+            
+            # Perform scan
+            results = client.scan(
+                repo=scan,
+                vex=vex,
+                sbom=sbom,
+                detect_secret=detect_secret,
+                fullscan=fullscan,
+                branch=branch
+            )
+            
+            # Output results
+            if output_json:
+                click.echo(json.dumps(results, indent=2))
+            else:
+                print_success("Scan completed successfully!")
+                format_scan_results(results, ', '.join(scan_types))
+                
+                # Try to get repository ID and display dashboard link
+                try:
+                    # Extract repo name from scan input
+                    repo_name = scan
+                    if scan.startswith("http://") or scan.startswith("https://"):
+                        # Extract from GitHub URL
+                        if "github.com/" in scan:
+                            repo_name = scan.split("github.com/")[1].rstrip("/")
+                    
+                    # Get repository ID
+                    repo_info = client.get_repository_by_name(repo_name)
+                    if repo_info.get("success") and "repository" in repo_info:
+                        repo_id = repo_info["repository"]["id"]
+                        dashboard_url = f"https://prismor.dev/repositories/{repo_id}"
+                        
+                        click.echo("\n" + "=" * 60)
+                        click.secho("  📊 Dashboard Analysis", fg="cyan", bold=True)
+                        click.echo("=" * 60)
+                        click.secho(f"🔗 View detailed analysis and insights:", fg="blue")
+                        click.secho(f"   {dashboard_url}", fg="green", bold=True)
+                        click.echo("\n💡 The dashboard provides:")
+                        click.echo("   • Interactive visualizations and charts")
+                        click.echo("   • Historical vulnerability trends")
+                        click.echo("   • Detailed security reports")
+                        click.echo("   • Team collaboration features")
+                        click.echo("   • Export capabilities")
+                        click.echo("=" * 60 + "\n")
+                        
+                except PrismorAPIError as e:
+                    # Repository might not be found, continue without dashboard link
+                    print_warning(f"Could not generate dashboard link: {str(e)}")
+                except Exception as e:
+                    # Any other error, continue without dashboard link
+                    print_warning(f"Could not generate dashboard link: {str(e)}")
+            
+        except PrismorAPIError as e:
+            print_error(str(e))
+            sys.exit(1)
+        except Exception as e:
+            print_error(f"Unexpected error: {str(e)}")
+            sys.exit(1)
+
+
+@cli.command()
+def version():
+    """Display the version of Prismor CLI."""
+    click.echo("Prismor CLI v0.1.0")
+
+
+@cli.command()
+def config():
+    """Display current configuration."""
+    import os
+    
+    click.echo("\n" + "=" * 60)
+    click.secho("  Prismor CLI Configuration", fg="cyan", bold=True)
+    click.echo("=" * 60 + "\n")
+    
+    # Check API key
+    api_key = os.environ.get("PRISMOR_API_KEY")
+    if api_key:
+        # Show only first and last 4 characters
+        masked_key = f"{api_key[:4]}...{api_key[-4:]}" if len(api_key) > 8 else "***"
+        print_success(f"PRISMOR_API_KEY: {masked_key}")
+    else:
+        print_error("PRISMOR_API_KEY: Not set")
+        click.echo("\nTo set your API key, run:")
+        click.echo("  export PRISMOR_API_KEY=your_api_key")
+    
+    # click.echo("\nAPI Endpoint: http://localhost:3000")
+    click.echo("=" * 60 + "\n")
+
+
+@cli.command()
+def repos():
+    """List your connected repositories."""
+    try:
+        client = PrismorClient()
+        repos_data = client.get_repositories()
+        
+        click.echo("\n" + "=" * 60)
+        click.secho("  Your Repositories", fg="cyan", bold=True)
+        click.echo("=" * 60 + "\n")
+        
+        user_info = repos_data.get("user", {})
+        if user_info:
+            click.secho(f"User: {user_info.get('name', 'Unknown')} ({user_info.get('email', 'No email')})", fg="yellow")
+            click.echo()
+        
+        repositories = repos_data.get("repositories", [])
+        if repositories:
+            for repo in repositories:
+                click.secho(f"• {repo.get('name', 'Unknown')}", fg="green")
+                click.echo(f"  URL: {repo.get('htmlUrl', 'No URL')}")
+                click.echo(f"  Owner: {repo.get('githubOwner', 'Unknown')}")
+                click.echo()
+        else:
+            print_warning("No repositories found. Connect repositories through the web interface.")
+        
+        click.echo("=" * 60 + "\n")
+        
+    except PrismorAPIError as e:
+        print_error(str(e))
+        sys.exit(1)
+    except Exception as e:
+        print_error(f"Unexpected error: {str(e)}")
+        sys.exit(1)
+
+
+@cli.command()
+def status():
+    """Check your account status and GitHub integration."""
+    try:
+        client = PrismorClient()
+        auth_data = client.authenticate()
+        
+        click.echo("\n" + "=" * 60)
+        click.secho("  Account Status", fg="cyan", bold=True)
+        click.echo("=" * 60 + "\n")
+        
+        user_info = auth_data.get("user", {})
+        if user_info:
+            click.secho(f"User: {user_info.get('name', 'Unknown')} ({user_info.get('email', 'No email')})", fg="yellow")
+            click.echo()
+            
+            repositories = user_info.get("repositories", [])
+            click.secho(f"Connected Repositories: {len(repositories)}", fg="green")
+            
+            if repositories:
+                click.echo("\nRepository List:")
+                for repo in repositories:
+                    click.echo(f"  • {repo.get('name', 'Unknown')} ({repo.get('htmlUrl', 'No URL')})")
+            else:
+                print_warning("No repositories connected.")
+                click.echo("\nTo connect repositories:")
+                click.echo("  1. Visit https://prismor.dev/dashboard")
+                click.echo("  2. Connect your GitHub account")
+                click.echo("  3. Select repositories to scan")
+        else:
+            print_error("Failed to retrieve account information.")
+        
+        click.echo("\n" + "=" * 60 + "\n")
+        
+    except PrismorAPIError as e:
+        print_error(str(e))
+        sys.exit(1)
+    except Exception as e:
+        print_error(f"Unexpected error: {str(e)}")
+        sys.exit(1)
+
+
+def main():
+    """Entry point for the CLI."""
+    cli()
+
+
+if __name__ == "__main__":
+    main()
+

{prismor-0.1.0 → prismor-0.1.2/prismor.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: prismor
-Version: 0.1.0
+Version: 0.1.2
 Summary: A CLI tool for scanning GitHub repositories for vulnerabilities, secrets, and generating SBOMs
 Home-page: https://github.com/PrismorSec/prismor-cli
 Author: Prismor

{prismor-0.1.0 → prismor-0.1.2}/setup.py

@@ -17,7 +17,7 @@ if os.path.exists("README.md"):
 
 setup(
     name="prismor",
-    version="0.1.0",
+    version="0.1.2",
     author="Prismor",
     author_email="support@prismor.dev",
     description="A CLI tool for scanning GitHub repositories for vulnerabilities, secrets, and generating SBOMs",

prismor-0.1.0/prismor/api.py

@@ -1,118 +0,0 @@
-"""API client for Prismor security scanning service."""
-
-import os
-import requests
-from typing import Optional, Dict, Any
-
-
-class PrismorAPIError(Exception):
-    """Custom exception for Prismor API errors."""
-    pass
-
-
-class PrismorClient:
-    """Client for interacting with Prismor API."""
-    
-    def __init__(self, api_key: Optional[str] = None):
-        """Initialize the Prismor API client.
-        
-        Args:
-            api_key: Prismor API key. If not provided, will look for PRISMOR_API_KEY env var.
-        """
-        self.api_key = api_key or os.environ.get("PRISMOR_API_KEY")
-        if not self.api_key:
-            raise PrismorAPIError(
-                "PRISMOR_API_KEY environment variable is not set. "
-                "Please set it with: export PRISMOR_API_KEY=your_api_key"
-            )
-        
-        self.base_url = "https://api.prismor.dev"
-        self.headers = {
-            "Authorization": f"Bearer {self.api_key}",
-            "Content-Type": "application/json"
-        }
-    
-    def normalize_repo_url(self, repo: str) -> str:
-        """Normalize repository input to a full GitHub URL.
-        
-        Args:
-            repo: Repository in format 'username/repo' or full GitHub URL
-            
-        Returns:
-            Full GitHub repository URL
-        """
-        if repo.startswith("http://") or repo.startswith("https://"):
-            return repo
-        
-        # Assume it's in username/repo format
-        if "/" in repo:
-            return f"https://github.com/{repo}"
-        
-        raise PrismorAPIError(
-            f"Invalid repository format: {repo}. "
-            "Please use 'username/repo' or full GitHub URL"
-        )
-    
-    def scan(
-        self,
-        repo: str,
-        vex: bool = False,
-        sbom: bool = False,
-        detect_secret: bool = False,
-        fullscan: bool = False
-    ) -> Dict[str, Any]:
-        """Perform security scan on a GitHub repository.
-        
-        Args:
-            repo: Repository URL or username/repo format
-            vex: Enable vulnerability scanning
-            sbom: Enable SBOM generation
-            detect_secret: Enable secret detection
-            fullscan: Enable all scan types
-            
-        Returns:
-            Dictionary containing scan results
-        """
-        repo_url = self.normalize_repo_url(repo)
-        
-        # Prepare request payload
-        payload = {
-            "repo_url": repo_url,
-            "vex": vex or fullscan,
-            "sbom": sbom or fullscan,
-            "detect_secret": detect_secret or fullscan,
-            "fullscan": fullscan
-        }
-        
-        try:
-            response = requests.post(
-                f"{self.base_url}/scan",
-                json=payload,
-                headers=self.headers,
-                timeout=300  # 5 minute timeout
-            )
-            
-            if response.status_code == 401:
-                raise PrismorAPIError("Invalid API key. Please check your PRISMOR_API_KEY.")
-            
-            if response.status_code == 404:
-                raise PrismorAPIError("API endpoint not found. Please check the API URL.")
-            
-            if response.status_code >= 400:
-                error_msg = response.json().get("error", "Unknown error")
-                raise PrismorAPIError(f"API error: {error_msg}")
-            
-            response.raise_for_status()
-            return response.json()
-            
-        except requests.exceptions.Timeout:
-            raise PrismorAPIError(
-                "Request timed out. The repository scan is taking longer than expected."
-            )
-        except requests.exceptions.ConnectionError:
-            raise PrismorAPIError(
-                "Failed to connect to Prismor API. Please check your internet connection."
-            )
-        except requests.exceptions.RequestException as e:
-            raise PrismorAPIError(f"Request failed: {str(e)}")
-

prismor-0.1.0/prismor/cli.py

@@ -1,210 +0,0 @@
-"""Command-line interface for Prismor security scanning tool."""
-
-import sys
-import json
-import click
-from typing import Optional
-from .api import PrismorClient, PrismorAPIError
-
-
-def print_success(message: str):
-    """Print success message in green."""
-    click.secho(f"✓ {message}", fg="green")
-
-
-def print_error(message: str):
-    """Print error message in red."""
-    click.secho(f"✗ {message}", fg="red", err=True)
-
-
-def print_info(message: str):
-    """Print info message in blue."""
-    click.secho(f"ℹ {message}", fg="blue")
-
-
-def print_warning(message: str):
-    """Print warning message in yellow."""
-    click.secho(f"⚠ {message}", fg="yellow")
-
-
-def format_scan_results(results: dict, scan_type: str):
-    """Format and display scan results."""
-    click.echo("\n" + "=" * 60)
-    click.secho(f"  Scan Results - {scan_type}", fg="cyan", bold=True)
-    click.echo("=" * 60 + "\n")
-    
-    # Display repository information
-    if "repository" in results:
-        click.secho("Repository:", fg="yellow", bold=True)
-        click.echo(f"  {results['repository']}\n")
-    
-    # Display scan status
-    if "status" in results:
-        status_color = "green" if results["status"] == "success" else "red"
-        click.secho(f"Status: ", fg="yellow", bold=True, nl=False)
-        click.secho(results["status"], fg=status_color)
-        click.echo()
-    
-    # Display scan results based on type
-    if "scan_results" in results:
-        scan_data = results["scan_results"]
-        
-        # Vulnerability scan results
-        if "vulnerabilities" in scan_data or "Results" in scan_data:
-            click.secho("Vulnerabilities Found:", fg="yellow", bold=True)
-            vuln_data = scan_data.get("vulnerabilities", scan_data.get("Results", []))
-            if isinstance(vuln_data, list):
-                click.echo(f"  Total: {len(vuln_data)}")
-            else:
-                click.echo(f"  Data available in detailed output")
-            click.echo()
-        
-        # Secret scan results
-        if "secrets" in scan_data or "findings_summary" in scan_data:
-            click.secho("Secrets Detected:", fg="yellow", bold=True)
-            secrets = scan_data.get("secrets", scan_data.get("findings_summary", {}))
-            if isinstance(secrets, dict):
-                for key, value in secrets.items():
-                    click.echo(f"  {key}: {value}")
-            else:
-                click.echo(f"  {len(secrets) if isinstance(secrets, list) else 'Data available'}")
-            click.echo()
-        
-        # SBOM results
-        if "sbom" in scan_data or "artifacts" in scan_data:
-            click.secho("SBOM Generated:", fg="yellow", bold=True)
-            sbom_data = scan_data.get("sbom", scan_data.get("artifacts", []))
-            if isinstance(sbom_data, list):
-                click.echo(f"  Total artifacts: {len(sbom_data)}")
-            else:
-                click.echo(f"  SBOM data available")
-            click.echo()
-    
-    # Display result URLs if available
-    if "public_url" in results:
-        click.secho("Results URL:", fg="yellow", bold=True)
-        click.echo(f"  {results['public_url']}\n")
-    
-    if "presigned_url" in results:
-        click.secho("Download URL:", fg="yellow", bold=True)
-        click.echo(f"  {results['presigned_url']}\n")
-    
-    click.echo("=" * 60 + "\n")
-
-
-@click.group(invoke_without_command=True)
-@click.option(
-    "--scan",
-    type=str,
-    help="Repository to scan (username/repo or full GitHub URL)"
-)
-@click.option("--vex", is_flag=True, help="Perform vulnerability scanning")
-@click.option("--sbom", is_flag=True, help="Generate Software Bill of Materials")
-@click.option("--detect-secret", is_flag=True, help="Detect secrets in repository")
-@click.option("--fullscan", is_flag=True, help="Perform all scan types")
-@click.option("--json", "output_json", is_flag=True, help="Output results in JSON format")
-@click.version_option(version="0.1.0", prog_name="prismor")
-@click.pass_context
-def cli(ctx, scan: Optional[str], vex: bool, sbom: bool, detect_secret: bool, 
-        fullscan: bool, output_json: bool):
-    """Prismor CLI - Security scanning tool for GitHub repositories.
-    
-    Examples:
-        prismor --scan username/repo --vex
-        prismor --scan username/repo --fullscan
-        prismor --scan https://github.com/username/repo --detect-secret
-    """
-    # If no command and no scan option, show help
-    if ctx.invoked_subcommand is None and not scan:
-        click.echo(ctx.get_help())
-        return
-    
-    # If scan option is provided, perform the scan
-    if scan:
-        # Check if at least one scan type is selected
-        if not any([vex, sbom, detect_secret, fullscan]):
-            print_error("Please specify at least one scan type: --vex, --sbom, --detect-secret, or --fullscan")
-            sys.exit(1)
-        
-        try:
-            # Initialize API client
-            print_info(f"Initializing Prismor scan for: {scan}")
-            client = PrismorClient()
-            
-            # Determine scan type for display
-            scan_types = []
-            if fullscan:
-                scan_types.append("Full Scan (VEX + SBOM + Secret Detection)")
-            else:
-                if vex:
-                    scan_types.append("VEX")
-                if sbom:
-                    scan_types.append("SBOM")
-                if detect_secret:
-                    scan_types.append("Secret Detection")
-            
-            print_info(f"Scan type: {', '.join(scan_types)}")
-            print_info("Starting scan... (this may take a few minutes)")
-            
-            # Perform scan
-            results = client.scan(
-                repo=scan,
-                vex=vex,
-                sbom=sbom,
-                detect_secret=detect_secret,
-                fullscan=fullscan
-            )
-            
-            # Output results
-            if output_json:
-                click.echo(json.dumps(results, indent=2))
-            else:
-                print_success("Scan completed successfully!")
-                format_scan_results(results, ', '.join(scan_types))
-            
-        except PrismorAPIError as e:
-            print_error(str(e))
-            sys.exit(1)
-        except Exception as e:
-            print_error(f"Unexpected error: {str(e)}")
-            sys.exit(1)
-
-
-@cli.command()
-def version():
-    """Display the version of Prismor CLI."""
-    click.echo("Prismor CLI v0.1.0")
-
-
-@cli.command()
-def config():
-    """Display current configuration."""
-    import os
-    
-    click.echo("\n" + "=" * 60)
-    click.secho("  Prismor CLI Configuration", fg="cyan", bold=True)
-    click.echo("=" * 60 + "\n")
-    
-    # Check API key
-    api_key = os.environ.get("PRISMOR_API_KEY")
-    if api_key:
-        # Show only first and last 4 characters
-        masked_key = f"{api_key[:4]}...{api_key[-4:]}" if len(api_key) > 8 else "***"
-        print_success(f"PRISMOR_API_KEY: {masked_key}")
-    else:
-        print_error("PRISMOR_API_KEY: Not set")
-        click.echo("\nTo set your API key, run:")
-        click.echo("  export PRISMOR_API_KEY=your_api_key")
-    
-    click.echo("\nAPI Endpoint: https://api.prismor.dev")
-    click.echo("=" * 60 + "\n")
-
-
-def main():
-    """Entry point for the CLI."""
-    cli()
-
-
-if __name__ == "__main__":
-    main()
-