sec-report-kit 0.2.2__tar.gz → 0.2.4__tar.gz

{sec_report_kit-0.2.2 → sec_report_kit-0.2.4}/.gitignore

@@ -36,6 +36,15 @@ pip-delete-this-directory.txt
 
 # Unit test / coverage reports
 htmlcov/
+class_index.html
+function_index.html
+index.html
+status.json
+coverage_html_*.js
+favicon_32_*.png
+keybd_closed_*.png
+style_*.css
+z_*.html
 .tox/
 .nox/
 .coverage
@@ -84,3 +93,4 @@ data/
 logs/
 security_reports/
 .tools/
+codeql-db/

sec_report_kit-0.2.4/CHANGELOG.md

@@ -0,0 +1,46 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+## 0.2.4 - 2026-05-14
+
+### Added
+- `scripts/install_external_clis.py` now supports `--tool` for targeted installs.
+- `scripts/install_external_clis.py` now supports `--force` to re-download tools even when already installed.
+- `README.md` now documents external CLI installer options and usage examples.
+
+### Changed
+- External CLI installer now skips already-installed tools by default.
+- CodeQL install handling on Windows now uses staged extraction and merge to avoid directory lock errors during reinstall.
+- `scripts/run_osv_scanner.bat` now auto-generates `requirements.txt` from installed packages when no supported lockfile is present.
+
+### Fixed
+- `scripts/run_codeql.bat` now repairs incomplete local CodeQL installs and validates SARIF output existence.
+- `scripts/run_codeql.sh` now validates SARIF output existence after analysis.
+- `scripts/run_trufflehog.bat` now writes scanner output via temp files to avoid self-scan file locking.
+- `scripts/run_trufflehog.bat` now writes `[]` when no findings are present.
+
+## 0.2.3 - 2026-05-13
+
+### Added
+- Safety CLI parser support and HTML rendering flow.
+- New CLI command: `srk render safety`.
+- MCP support for `source_type="safety"`.
+- Helper scripts for Safety scan and render:
+  - `scripts/run_safety.sh`
+  - `scripts/run_safety.bat`
+  - `scripts/render_safety_html.sh`
+  - `scripts/render_safety_html.bat`
+- Offline Safety DB download helpers:
+  - `scripts/download_safety_db.py`
+  - `scripts/download_safety_db.sh`
+  - `scripts/download_safety_db.bat`
+
+### Changed
+- Auto-detection now recognizes Safety JSON payloads.
+- Tool installation scripts now install Safety CLI in the app venv.
+- README updated with Safety usage and offline/local DB workflow guidance.
+
+### Fixed
+- Safety run scripts now avoid false success when network failures occur.
+- JSON output validation improved for Safety execution paths.

{sec_report_kit-0.2.2 → sec_report_kit-0.2.4}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: sec-report-kit
-Version: 0.2.2
-Summary: Generate HTML security reports from Trivy, pip-audit, Bandit, and Gitleaks JSON
+Version: 0.2.4
+Summary: Generate HTML security reports from Trivy, pip-audit, Safety, Bandit, and Gitleaks JSON
 Author: Ravi Konduru
 License: MIT
-Keywords: cli,mcp,pip-audit,report,security,trivy
+Keywords: cli,mcp,pip-audit,report,safety,security,trivy
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -29,10 +29,13 @@ Description-Content-Type: text/markdown
 
 Generate HTML vulnerability reports from multiple security tools (SAST, SCA, IaC, and secrets) with a CLI and MCP server.
 
+Release history: see `CHANGELOG.md`.
+
 Supported source types:
 
 - `trivy`
 - `pip-audit`
+- `safety`
 - `bandit`
 - `gitleaks`
 - `semgrep`
@@ -73,6 +76,12 @@ Render pip-audit JSON:
 srk render pip-audit --input pip-audit.json --output security_reports/report-pip-audit.html --target requirements.txt
 ```
 
+Render Safety JSON:
+
+```bash
+srk render safety --input security_reports/safety.json --output security_reports/report-safety.html --target requirements.txt
+```
+
 ## Helper Scripts (bat/sh)
 
 Cross-platform helper scripts are available in `scripts/`.
@@ -91,6 +100,31 @@ scripts\install_tools.bat
 
 After cloning on a new machine, run the install script above to recreate the local `.tools/` directory and install required external CLI binaries (`codeql`, `tfsec`, `gitleaks`, `trufflehog`, `osv-scanner`) alongside Python dependencies. The `.tools/` folder is intentionally not committed to git.
 
+Install or update external CLI binaries directly:
+
+```bash
+python scripts/install_external_clis.py --repo-root .
+```
+
+Default behavior skips tools that are already installed locally.
+
+Force re-download/reinstall for all supported external tools:
+
+```bash
+python scripts/install_external_clis.py --repo-root . --force
+```
+
+Install only selected tool(s) with `--tool` (can be repeated or comma-separated):
+
+```bash
+python scripts/install_external_clis.py --repo-root . --tool osv-scanner
+python scripts/install_external_clis.py --repo-root . --tool tfsec --tool gitleaks --force
+python scripts/install_external_clis.py --repo-root . --tool tfsec,gitleaks
+```
+
+Supported `--tool` values: `codeql`, `tfsec`, `gitleaks`, `trufflehog`, `osv-scanner`.
+For convenience, `ocs-scanner` is accepted as an alias for `osv-scanner`.
+
 Run all unit tests locally with coverage:
 
 ```bash
@@ -115,6 +149,39 @@ scripts\run_pip_audit.bat
 scripts\run_pip_audit.bat reports requirements.txt
 ```
 
+Run Safety CLI and write JSON output:
+
+```bash
+# Linux/macOS (optional args: <report_dir> <requirements_file>)
+bash scripts/run_safety.sh
+bash scripts/run_safety.sh security_reports requirements.txt
+
+# Windows (optional args: <report_dir> <requirements_file>)
+scripts\run_safety.bat
+scripts\run_safety.bat security_reports requirements.txt
+```
+
+> **Offline / local DB support**: Safety CLI requires network access by default. To enable offline scanning,
+> download the vulnerability DB while online and cache it locally:
+>
+> ```bash
+> # Linux/macOS — download once, reuse offline
+> bash scripts/download_safety_db.sh
+>
+> # Windows
+> scripts\download_safety_db.bat
+> ```
+>
+> ```bash
+> # Corporate/proxy environments with self-signed certificates
+> bash scripts/download_safety_db.sh .tools/safety-db --no-verify-ssl
+> scripts\download_safety_db.bat .tools\safety-db --no-verify-ssl
+> ```
+>
+> The DB is saved to `.tools/safety-db/`. Both `run_safety.sh` and `run_safety.bat` automatically detect
+> and use it on subsequent runs, skipping the network call. Re-run the download script periodically to
+> refresh the DB with the latest vulnerabilities.
+
 Run Bandit and write JSON output:
 
 ```bash
@@ -139,6 +206,18 @@ scripts\render_pip_audit_html.bat
 scripts\render_pip_audit_html.bat reports requirements.txt
 ```
 
+Convert Safety JSON report to HTML:
+
+```bash
+# Linux/macOS (optional args: <report_dir> <target_name>)
+bash scripts/render_safety_html.sh
+bash scripts/render_safety_html.sh security_reports requirements.txt
+
+# Windows (optional args: <report_dir> <target_name>)
+scripts\render_safety_html.bat
+scripts\render_safety_html.bat security_reports requirements.txt
+```
+
 These render helpers generate the HTML file and open it automatically in your default browser.
 
 Convert sample Trivy JSON report to HTML:
@@ -189,6 +268,7 @@ The table below reflects what is currently implemented in `scripts/`:
 | --- | --- | --- | --- |
 | Trivy | `run_trivy.(sh/bat)` | `render_trivy_html.(sh/bat)` | `security_reports/trivy-image-report-v1.0.21.json` |
 | pip-audit | `run_pip_audit.(sh/bat)` | `render_pip_audit_html.(sh/bat)` | `reports/pip-audit.json` |
+| Safety | `run_safety.(sh/bat)` | `render_safety_html.(sh/bat)` | `security_reports/safety.json` |
 | Bandit | `run_bandit.(sh/bat)` | `render_bandit_html.(sh/bat)` | `security_reports/bandit.json` |
 | Gitleaks | `run_gitleaks.(sh/bat)` | `render_gitleaks_html.(sh/bat)` | `security_reports/gitleaks.json` |
 | Semgrep | `run_semgrep.(sh/bat)` | `render_semgrep_html.(sh/bat)` | `security_reports/semgrep.json` |
@@ -217,6 +297,7 @@ scripts\render_bandit_html.bat security_reports my-python-project
 ```bash
 # Linux/macOS
 bash scripts/run_trivy.sh security_reports alpine:latest
+bash scripts/run_safety.sh security_reports requirements.txt
 bash scripts/run_gitleaks.sh security_reports .
 bash scripts/run_semgrep.sh security_reports .
 bash scripts/run_codeql.sh security_reports codeql-db codeql/python-queries
@@ -227,6 +308,7 @@ bash scripts/run_trufflehog.sh security_reports .
 
 # Windows
 scripts\run_trivy.bat security_reports alpine:latest
+scripts\run_safety.bat security_reports requirements.txt
 scripts\run_gitleaks.bat security_reports .
 scripts\run_semgrep.bat security_reports .
 scripts\run_codeql.bat security_reports codeql-db codeql/python-queries
@@ -262,6 +344,7 @@ Manual CLI render examples:
 srk render semgrep --input security_reports/semgrep.json --output security_reports/semgrep-report.html --target my-repo
 srk render codeql --input security_reports/codeql.sarif.json --output security_reports/codeql-report.html --target my-repo
 srk render osv-scanner --input security_reports/osv-scanner.json --output security_reports/osv-scanner-report.html --target requirements.txt
+srk render safety --input security_reports/safety.json --output security_reports/safety-report.html --target requirements.txt
 srk render checkov --input security_reports/checkov.json --output security_reports/checkov-report.html --target terraform
 srk render tfsec --input security_reports/tfsec.json --output security_reports/tfsec-report.html --target terraform
 srk render trufflehog --input security_reports/trufflehog.json --output security_reports/trufflehog-report.html --target my-repo
@@ -286,7 +369,7 @@ srk mcp serve --transport stdio
 | `render_report_from_json` | Parse JSON and render an HTML report to disk |
 | `validate_input` | Validate that a JSON file is parseable and return finding count |
 
-All tools accept `source_type` (`"trivy"`, `"pip-audit"`, `"bandit"`, `"gitleaks"`, `"semgrep"`, `"codeql"`, `"osv-scanner"`, `"checkov"`, `"tfsec"`, `"trufflehog"`, or `"auto"`) and `input_path` (absolute path to JSON file).
+All tools accept `source_type` (`"trivy"`, `"pip-audit"`, `"safety"`, `"bandit"`, `"gitleaks"`, `"semgrep"`, `"codeql"`, `"osv-scanner"`, `"checkov"`, `"tfsec"`, `"trufflehog"`, or `"auto"`) and `input_path` (absolute path to JSON file).
 
 ---
 

{sec_report_kit-0.2.2 → sec_report_kit-0.2.4}/README.md

@@ -2,10 +2,13 @@
 
 Generate HTML vulnerability reports from multiple security tools (SAST, SCA, IaC, and secrets) with a CLI and MCP server.
 
+Release history: see `CHANGELOG.md`.
+
 Supported source types:
 
 - `trivy`
 - `pip-audit`
+- `safety`
 - `bandit`
 - `gitleaks`
 - `semgrep`
@@ -46,6 +49,12 @@ Render pip-audit JSON:
 srk render pip-audit --input pip-audit.json --output security_reports/report-pip-audit.html --target requirements.txt
 ```
 
+Render Safety JSON:
+
+```bash
+srk render safety --input security_reports/safety.json --output security_reports/report-safety.html --target requirements.txt
+```
+
 ## Helper Scripts (bat/sh)
 
 Cross-platform helper scripts are available in `scripts/`.
@@ -64,6 +73,31 @@ scripts\install_tools.bat
 
 After cloning on a new machine, run the install script above to recreate the local `.tools/` directory and install required external CLI binaries (`codeql`, `tfsec`, `gitleaks`, `trufflehog`, `osv-scanner`) alongside Python dependencies. The `.tools/` folder is intentionally not committed to git.
 
+Install or update external CLI binaries directly:
+
+```bash
+python scripts/install_external_clis.py --repo-root .
+```
+
+Default behavior skips tools that are already installed locally.
+
+Force re-download/reinstall for all supported external tools:
+
+```bash
+python scripts/install_external_clis.py --repo-root . --force
+```
+
+Install only selected tool(s) with `--tool` (can be repeated or comma-separated):
+
+```bash
+python scripts/install_external_clis.py --repo-root . --tool osv-scanner
+python scripts/install_external_clis.py --repo-root . --tool tfsec --tool gitleaks --force
+python scripts/install_external_clis.py --repo-root . --tool tfsec,gitleaks
+```
+
+Supported `--tool` values: `codeql`, `tfsec`, `gitleaks`, `trufflehog`, `osv-scanner`.
+For convenience, `ocs-scanner` is accepted as an alias for `osv-scanner`.
+
 Run all unit tests locally with coverage:
 
 ```bash
@@ -88,6 +122,39 @@ scripts\run_pip_audit.bat
 scripts\run_pip_audit.bat reports requirements.txt
 ```
 
+Run Safety CLI and write JSON output:
+
+```bash
+# Linux/macOS (optional args: <report_dir> <requirements_file>)
+bash scripts/run_safety.sh
+bash scripts/run_safety.sh security_reports requirements.txt
+
+# Windows (optional args: <report_dir> <requirements_file>)
+scripts\run_safety.bat
+scripts\run_safety.bat security_reports requirements.txt
+```
+
+> **Offline / local DB support**: Safety CLI requires network access by default. To enable offline scanning,
+> download the vulnerability DB while online and cache it locally:
+>
+> ```bash
+> # Linux/macOS — download once, reuse offline
+> bash scripts/download_safety_db.sh
+>
+> # Windows
+> scripts\download_safety_db.bat
+> ```
+>
+> ```bash
+> # Corporate/proxy environments with self-signed certificates
+> bash scripts/download_safety_db.sh .tools/safety-db --no-verify-ssl
+> scripts\download_safety_db.bat .tools\safety-db --no-verify-ssl
+> ```
+>
+> The DB is saved to `.tools/safety-db/`. Both `run_safety.sh` and `run_safety.bat` automatically detect
+> and use it on subsequent runs, skipping the network call. Re-run the download script periodically to
+> refresh the DB with the latest vulnerabilities.
+
 Run Bandit and write JSON output:
 
 ```bash
@@ -112,6 +179,18 @@ scripts\render_pip_audit_html.bat
 scripts\render_pip_audit_html.bat reports requirements.txt
 ```
 
+Convert Safety JSON report to HTML:
+
+```bash
+# Linux/macOS (optional args: <report_dir> <target_name>)
+bash scripts/render_safety_html.sh
+bash scripts/render_safety_html.sh security_reports requirements.txt
+
+# Windows (optional args: <report_dir> <target_name>)
+scripts\render_safety_html.bat
+scripts\render_safety_html.bat security_reports requirements.txt
+```
+
 These render helpers generate the HTML file and open it automatically in your default browser.
 
 Convert sample Trivy JSON report to HTML:
@@ -162,6 +241,7 @@ The table below reflects what is currently implemented in `scripts/`:
 | --- | --- | --- | --- |
 | Trivy | `run_trivy.(sh/bat)` | `render_trivy_html.(sh/bat)` | `security_reports/trivy-image-report-v1.0.21.json` |
 | pip-audit | `run_pip_audit.(sh/bat)` | `render_pip_audit_html.(sh/bat)` | `reports/pip-audit.json` |
+| Safety | `run_safety.(sh/bat)` | `render_safety_html.(sh/bat)` | `security_reports/safety.json` |
 | Bandit | `run_bandit.(sh/bat)` | `render_bandit_html.(sh/bat)` | `security_reports/bandit.json` |
 | Gitleaks | `run_gitleaks.(sh/bat)` | `render_gitleaks_html.(sh/bat)` | `security_reports/gitleaks.json` |
 | Semgrep | `run_semgrep.(sh/bat)` | `render_semgrep_html.(sh/bat)` | `security_reports/semgrep.json` |
@@ -190,6 +270,7 @@ scripts\render_bandit_html.bat security_reports my-python-project
 ```bash
 # Linux/macOS
 bash scripts/run_trivy.sh security_reports alpine:latest
+bash scripts/run_safety.sh security_reports requirements.txt
 bash scripts/run_gitleaks.sh security_reports .
 bash scripts/run_semgrep.sh security_reports .
 bash scripts/run_codeql.sh security_reports codeql-db codeql/python-queries
@@ -200,6 +281,7 @@ bash scripts/run_trufflehog.sh security_reports .
 
 # Windows
 scripts\run_trivy.bat security_reports alpine:latest
+scripts\run_safety.bat security_reports requirements.txt
 scripts\run_gitleaks.bat security_reports .
 scripts\run_semgrep.bat security_reports .
 scripts\run_codeql.bat security_reports codeql-db codeql/python-queries
@@ -235,6 +317,7 @@ Manual CLI render examples:
 srk render semgrep --input security_reports/semgrep.json --output security_reports/semgrep-report.html --target my-repo
 srk render codeql --input security_reports/codeql.sarif.json --output security_reports/codeql-report.html --target my-repo
 srk render osv-scanner --input security_reports/osv-scanner.json --output security_reports/osv-scanner-report.html --target requirements.txt
+srk render safety --input security_reports/safety.json --output security_reports/safety-report.html --target requirements.txt
 srk render checkov --input security_reports/checkov.json --output security_reports/checkov-report.html --target terraform
 srk render tfsec --input security_reports/tfsec.json --output security_reports/tfsec-report.html --target terraform
 srk render trufflehog --input security_reports/trufflehog.json --output security_reports/trufflehog-report.html --target my-repo
@@ -259,7 +342,7 @@ srk mcp serve --transport stdio
 | `render_report_from_json` | Parse JSON and render an HTML report to disk |
 | `validate_input` | Validate that a JSON file is parseable and return finding count |
 
-All tools accept `source_type` (`"trivy"`, `"pip-audit"`, `"bandit"`, `"gitleaks"`, `"semgrep"`, `"codeql"`, `"osv-scanner"`, `"checkov"`, `"tfsec"`, `"trufflehog"`, or `"auto"`) and `input_path` (absolute path to JSON file).
+All tools accept `source_type` (`"trivy"`, `"pip-audit"`, `"safety"`, `"bandit"`, `"gitleaks"`, `"semgrep"`, `"codeql"`, `"osv-scanner"`, `"checkov"`, `"tfsec"`, `"trufflehog"`, or `"auto"`) and `input_path` (absolute path to JSON file).
 
 ---
 

sec_report_kit-0.2.4/check_assets.py

@@ -0,0 +1,63 @@
+import sys
+import os
+import json
+import re
+import urllib.request
+
+tool_matrix = {
+    "codeql": {
+        "repo": "github/codeql-action",
+        "patterns": [r"codeql-bundle-win64\.tar\.gz$", r"codeql-bundle-win64\.zip$"],
+    },
+    "tfsec": {
+        "repo": "aquasecurity/tfsec",
+        "patterns": [r"tfsec-windows-amd64(?:\.exe)?$"],
+    },
+    "gitleaks": {
+        "repo": "gitleaks/gitleaks",
+        "patterns": [r"gitleaks_.*_windows_x64\.zip$"],
+    },
+    "trufflehog": {
+        "repo": "trufflesecurity/trufflehog",
+        "patterns": [r"trufflehog_.*_windows_amd64\.tar\.gz$", r"trufflehog_.*_windows_amd64\.zip$"],
+    },
+    "osv-scanner": {
+        "repo": "google/osv-scanner",
+        "patterns": [r"osv-scanner_.*_windows_amd64(?:\.exe)?(?:\.zip)?$", r"osv-scanner-windows-amd64(?:\.exe)?$"],
+    },
+}
+
+def check_tools():
+    for tool_name, cfg in tool_matrix.items():
+        repo = cfg["repo"]
+        patterns = cfg["patterns"]
+        try:
+            req = urllib.request.Request(
+                f"https://api.github.com/repos/{repo}/releases/latest",
+                headers={"Accept": "application/vnd.github+json", "User-Agent": "python-check-script"},
+            )
+            with urllib.request.urlopen(req, timeout=30) as resp:
+                release = json.load(resp)
+            
+            assets = [a["name"] for a in release.get("assets", [])]
+            match_found = False
+            for pattern in patterns:
+                regex = re.compile(pattern)
+                for asset in assets:
+                    if regex.search(asset):
+                        print(f"{tool_name}: PASS (Matched asset: {asset})")
+                        match_found = True
+                        break
+                if match_found:
+                    break
+            
+            if not match_found:
+                print(f"{tool_name}: FAIL (No asset matched patterns)")
+                # Print available assets for debugging if call fails
+                # print(f"  Available: {assets[:3]}...") 
+                
+        except Exception as e:
+            print(f"{tool_name}: FAIL (Error: {e})")
+
+if __name__ == "__main__":
+    check_tools()

{sec_report_kit-0.2.2 → sec_report_kit-0.2.4}/pyproject.toml

@@ -4,13 +4,13 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sec-report-kit"
-version = "0.2.2"
-description = "Generate HTML security reports from Trivy, pip-audit, Bandit, and Gitleaks JSON"
+version = "0.2.4"
+description = "Generate HTML security reports from Trivy, pip-audit, Safety, Bandit, and Gitleaks JSON"
 readme = "README.md"
 requires-python = ">=3.10"
 license = { text = "MIT" }
 authors = [{ name = "Ravi Konduru" }]
-keywords = ["security", "trivy", "pip-audit", "mcp", "cli", "report"]
+keywords = ["security", "trivy", "pip-audit", "safety", "mcp", "cli", "report"]
 classifiers = [
   "Development Status :: 3 - Alpha",
   "Intended Audience :: Developers",

sec_report_kit-0.2.4/requirements.txt

@@ -0,0 +1,84 @@
+annotated-doc==0.0.4
+annotated-types==0.7.0
+anyio==4.13.0
+attrs==26.1.0
+bandit==1.9.4
+boolean.py==5.0
+build==1.5.0
+CacheControl==0.14.4
+certifi==2026.4.22
+cffi==2.0.0
+charset-normalizer==3.4.7
+click==8.3.3
+colorama==0.4.6
+coverage==7.14.0
+cryptography==47.0.0
+cyclonedx-python-lib==11.7.0
+defusedxml==0.7.1
+docutils==0.22.4
+filelock==3.29.0
+h11==0.16.0
+httpcore==1.0.9
+httpx==0.28.1
+httpx-sse==0.4.3
+id==1.6.1
+idna==3.13
+iniconfig==2.3.0
+jaraco.classes==3.4.0
+jaraco.context==6.1.2
+jaraco.functools==4.4.0
+jsonschema==4.26.0
+jsonschema-specifications==2025.9.1
+keyring==25.7.0
+license-expression==30.4.4
+markdown-it-py==4.0.0
+mcp==1.27.0
+mdurl==0.1.2
+more-itertools==11.0.2
+msgpack==1.1.2
+nh3==0.3.5
+packageurl-python==0.17.6
+packaging==26.2
+pip-api==0.0.34
+pip-requirements-parser==32.0.1
+pip_audit==2.10.0
+platformdirs==4.9.6
+pluggy==1.6.0
+py-serializable==2.1.0
+pycparser==3.0
+pydantic==2.13.3
+pydantic-settings==2.14.0
+pydantic_core==2.46.3
+pyfiglet==1.0.4
+Pygments==2.20.0
+PyJWT==2.12.1
+pyparsing==3.3.2
+pyproject_hooks==1.2.0
+pytest==9.0.3
+pytest-cov==7.1.0
+python-dotenv==1.2.2
+python-multipart==0.0.27
+pywin32==311
+pywin32-ctypes==0.2.3
+PyYAML==6.0.3
+readme_renderer==44.0
+referencing==0.37.0
+requests==2.33.1
+requests-toolbelt==1.0.0
+rfc3986==2.0.0
+rich==15.0.0
+rpds-py==0.30.0
+-e git+https://github.com/ShanKonduru/sec-report-kit.git@b6d196bac687e07189e884e2fe25af5c8842da1d#egg=sec_report_kit
+shellingham==1.5.4
+sortedcontainers==2.4.0
+sse-starlette==3.4.1
+starlette==1.0.0
+stevedore==5.7.0
+tomli==2.4.1
+tomli_w==1.2.0
+twine==6.2.0
+typer==0.25.1
+typing-inspection==0.4.2
+typing_extensions==4.15.0
+urllib3==2.6.3
+uvicorn==0.46.0

sec_report_kit-0.2.4/scripts/download_safety_db.bat

@@ -0,0 +1,13 @@
+@echo off
+setlocal
+
+set "PYTHON_BIN=python"
+if exist "%~dp0..\.venv\Scripts\python.exe" set "PYTHON_BIN=%~dp0..\.venv\Scripts\python.exe"
+
+set "OUTPUT_DIR=%~1"
+if "%OUTPUT_DIR%"=="" set "OUTPUT_DIR=.tools\safety-db"
+
+rem Pass remaining flags (e.g. --full, --no-verify-ssl) directly to the Python script
+"%PYTHON_BIN%" "%~dp0download_safety_db.py" --output-dir "%OUTPUT_DIR%" %2 %3 %4
+
+exit /b %ERRORLEVEL%