sec-report-kit 0.2.5__tar.gz → 0.2.7__tar.gz

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.2.7 - 2026-05-17
+
+### Added
+- Test coverage now includes the consolidated date-filter helpers, Safety parser fallback branches, and consolidated HTML dashboard visibility paths, bringing enforced suite coverage to 100%.
+
+### Fixed
+- `requirements.txt` now pins `urllib3==2.7.0` to resolve the Trivy-reported CVEs affecting `2.6.3`.
+
+## 0.2.6 - 2026-05-17
+
+### Added
+- Consolidated report rendering now supports bounded file pickup with `--modified-until`, enabling date-range selection when combined with `--modified-since`.
+
+### Changed
+- README examples now document both date-range filtering and "from date until today" usage for consolidated report generation.
+
+### Fixed
+- `scripts/render_consolidated_html.bat` no longer forwards the first two positional arguments as unexpected extras on Windows.
+
 ## 0.2.5 - 2026-05-17
 
 ### Added

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sec-report-kit
-Version: 0.2.5
+Version: 0.2.7
 Summary: Generate HTML security reports from Trivy, pip-audit, Safety, Bandit, and Gitleaks JSON
 Author: Ravi Konduru
 License: MIT
@@ -252,6 +252,36 @@ scripts\render_consolidated_html.bat
 scripts\render_consolidated_html.bat security_reports sec-report-kit
 ```
 
+You can also restrict which report files are picked up by modification time and cap how many of the newest files are included:
+
+```bash
+# Only files modified today
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since today
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since today
+
+# Since yesterday
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since yesterday
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since yesterday
+
+# Last 7 days
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since last-7-days
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since last-7-days
+
+# Since a fixed date and only the 10 newest matching files
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since 2026-05-01 --limit 10
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since 2026-05-01 --limit 10
+
+# Between two dates
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since 2026-05-01 --modified-until 2026-05-10
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since 2026-05-01 --modified-until 2026-05-10
+
+# From a fixed date until today
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since 2026-05-01
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since 2026-05-01
+```
+
+`--modified-since` accepts ISO dates/datetimes plus `today`, `yesterday`, `last-week`, and `last-7-days`. `--modified-until` accepts ISO dates/datetimes plus `today` and `yesterday`. Use `--modified-since` by itself for "from date until now", or combine both options for a bounded date range. When `--limit` is used, the newest matching files are selected first.
+
 Convert sample Bandit JSON report to HTML:
 
 ```bash

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/README.md

@@ -225,6 +225,36 @@ scripts\render_consolidated_html.bat
 scripts\render_consolidated_html.bat security_reports sec-report-kit
 ```
 
+You can also restrict which report files are picked up by modification time and cap how many of the newest files are included:
+
+```bash
+# Only files modified today
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since today
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since today
+
+# Since yesterday
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since yesterday
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since yesterday
+
+# Last 7 days
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since last-7-days
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since last-7-days
+
+# Since a fixed date and only the 10 newest matching files
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since 2026-05-01 --limit 10
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since 2026-05-01 --limit 10
+
+# Between two dates
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since 2026-05-01 --modified-until 2026-05-10
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since 2026-05-01 --modified-until 2026-05-10
+
+# From a fixed date until today
+bash scripts/render_consolidated_html.sh security_reports sec-report-kit --modified-since 2026-05-01
+scripts\render_consolidated_html.bat security_reports sec-report-kit --modified-since 2026-05-01
+```
+
+`--modified-since` accepts ISO dates/datetimes plus `today`, `yesterday`, `last-week`, and `last-7-days`. `--modified-until` accepts ISO dates/datetimes plus `today` and `yesterday`. Use `--modified-since` by itself for "from date until now", or combine both options for a bounded date range. When `--limit` is used, the newest matching files are selected first.
+
 Convert sample Bandit JSON report to HTML:
 
 ```bash

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sec-report-kit"
-version = "0.2.5"
+version = "0.2.7"
 description = "Generate HTML security reports from Trivy, pip-audit, Safety, Bandit, and Gitleaks JSON"
 readme = "README.md"
 requires-python = ">=3.10"

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/requirements.txt

@@ -80,5 +80,5 @@ twine==6.2.0
 typer==0.25.1
 typing-inspection==0.4.2
 typing_extensions==4.15.0
-urllib3==2.6.3
+urllib3==2.7.0
 uvicorn==0.46.0

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/scripts/render_consolidated_html.bat

@@ -10,6 +10,17 @@ if "%REPORT_DIR%"=="" set "REPORT_DIR=security_reports"
 set "TARGET_NAME=%~2"
 if "%TARGET_NAME%"=="" for %%I in ("%~dp0..") do set "TARGET_NAME=%%~nxI"
 
+if not "%~1"=="" shift
+if not "%~1"=="" shift
+
+set "EXTRA_ARGS="
+:collect_args
+if "%~1"=="" goto after_collect_args
+set "EXTRA_ARGS=%EXTRA_ARGS% "%~1""
+shift
+goto collect_args
+:after_collect_args
+
 if not exist "%REPORT_DIR%" (
   echo Missing input directory: %REPORT_DIR%
   exit /b 1
@@ -17,7 +28,7 @@ if not exist "%REPORT_DIR%" (
 
 set "OUT_HTML=%REPORT_DIR%\consolidated-security-report.html"
 
-"%PYTHON_BIN%" -m sec_report_kit render consolidated --input "%REPORT_DIR%" --output "%REPORT_DIR%" --target "%TARGET_NAME%"
+"%PYTHON_BIN%" -m sec_report_kit render consolidated --input "%REPORT_DIR%" --output "%REPORT_DIR%" --target "%TARGET_NAME%" %EXTRA_ARGS%
 if errorlevel 1 exit /b 1
 
 echo HTML report written to %OUT_HTML%

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/scripts/render_consolidated_html.sh

@@ -11,6 +11,13 @@ ROOT_NAME="$(basename "$(cd "$(dirname "$0")/.." && pwd)")"
 TARGET_NAME="${2:-${ROOT_NAME}}"
 OUT_HTML="${REPORT_DIR}/consolidated-security-report.html"
 
+if [[ $# -gt 0 ]]; then
+  shift
+fi
+if [[ $# -gt 0 ]]; then
+  shift
+fi
+
 open_html() {
   if command -v xdg-open >/dev/null 2>&1; then
     xdg-open "$1" >/dev/null 2>&1 &
@@ -28,7 +35,7 @@ if [[ ! -d "${REPORT_DIR}" ]]; then
   exit 1
 fi
 
-"${PYTHON_BIN}" -m sec_report_kit render consolidated --input "${REPORT_DIR}" --output "${REPORT_DIR}" --target "${TARGET_NAME}"
+"${PYTHON_BIN}" -m sec_report_kit render consolidated --input "${REPORT_DIR}" --output "${REPORT_DIR}" --target "${TARGET_NAME}" "$@"
 
 echo "HTML report written to ${OUT_HTML}"
 open_html "${OUT_HTML}"

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/src/sec_report_kit/__init__.py

@@ -1,4 +1,4 @@
 """sec_report_kit package."""
 
 __all__ = ["__version__"]
-__version__ = "0.2.5"
+__version__ = "0.2.7"

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/src/sec_report_kit/cli.py

@@ -1,5 +1,6 @@
 from __future__ import annotations
 
+import datetime as dt
 import json
 from pathlib import Path
 from typing import Any
@@ -18,7 +19,7 @@ from sec_report_kit.parsers.semgrep import parse_semgrep_json
 from sec_report_kit.parsers.tfsec import parse_tfsec_json
 from sec_report_kit.parsers.trivy import parse_trivy_json
 from sec_report_kit.parsers.trufflehog import parse_trufflehog_json
-from sec_report_kit.report.html_renderer import render_html_report
+from sec_report_kit.report.html_renderer import render_consolidated_dashboard_report, render_html_report
 from sec_report_kit.services.summarize import count_by_severity, sort_findings
 
 app = typer.Typer(help="Security report kit CLI")
@@ -28,6 +29,90 @@ app.add_typer(render_app, name="render")
 app.add_typer(mcp_app, name="mcp")
 
 
+def _parse_modified_since(value: str) -> dt.datetime:
+    local_tz = dt.datetime.now().astimezone().tzinfo or dt.timezone.utc
+    now = dt.datetime.now(local_tz)
+    normalized = value.strip().lower()
+
+    if normalized == "today":
+        return now.replace(hour=0, minute=0, second=0, microsecond=0)
+    if normalized == "yesterday":
+        return (now - dt.timedelta(days=1)).replace(hour=0, minute=0, second=0, microsecond=0)
+    if normalized in {"last-week", "last-7-days"}:
+        return now - dt.timedelta(days=7)
+
+    try:
+        parsed = dt.datetime.fromisoformat(value.replace("Z", "+00:00"))
+    except ValueError as exc:
+        raise typer.BadParameter(
+            "Use ISO date/datetime or one of: today, yesterday, last-week, last-7-days"
+        ) from exc
+
+    if parsed.tzinfo is None:
+        return parsed.replace(tzinfo=local_tz)
+    return parsed.astimezone(local_tz)
+
+
+def _parse_modified_until(value: str) -> dt.datetime:
+    local_tz = dt.datetime.now().astimezone().tzinfo or dt.timezone.utc
+    normalized = value.strip().lower()
+
+    if normalized == "today":
+        return dt.datetime.now(local_tz).replace(hour=23, minute=59, second=59, microsecond=999999)
+    if normalized == "yesterday":
+        return (dt.datetime.now(local_tz) - dt.timedelta(days=1)).replace(
+            hour=23,
+            minute=59,
+            second=59,
+            microsecond=999999,
+        )
+
+    parsed = _parse_modified_since(value)
+    if "T" not in value and " " not in value:
+        return parsed.replace(hour=23, minute=59, second=59, microsecond=999999)
+    return parsed
+
+
+def _collect_consolidated_candidates(
+    input_dir: Path,
+    modified_since: str | None,
+    modified_until: str | None,
+    limit: int | None,
+) -> list[Path]:
+    candidates = [
+        path
+        for path in input_dir.iterdir()
+        if path.is_file()
+        and (
+            path.suffix.lower() in {".json", ".sarif", ".ndjson", ".jsonl"}
+            or path.name.lower().endswith(".sarif.json")
+        )
+    ]
+
+    if modified_since:
+        cutoff = _parse_modified_since(modified_since)
+        candidates = [
+            path
+            for path in candidates
+            if dt.datetime.fromtimestamp(path.stat().st_mtime, tz=cutoff.tzinfo) >= cutoff
+        ]
+
+    if modified_until:
+        cutoff = _parse_modified_until(modified_until)
+        candidates = [
+            path
+            for path in candidates
+            if dt.datetime.fromtimestamp(path.stat().st_mtime, tz=cutoff.tzinfo) <= cutoff
+        ]
+
+    candidates.sort(key=lambda path: (-path.stat().st_mtime, path.name.lower()))
+
+    if limit is not None:
+        candidates = candidates[:limit]
+
+    return candidates
+
+
 def _load_json(path: Path) -> Any:
     # Accept both UTF-8 and UTF-8 BOM encoded JSON files.
     raw = path.read_text(encoding="utf-8-sig")
@@ -227,18 +312,29 @@ def render_consolidated(
         help="Output folder where consolidated HTML will be written",
     ),
     target: str = typer.Option("consolidated-scan", "--target", help="Consolidated target label"),
+    modified_since: str | None = typer.Option(
+        None,
+        "--modified-since",
+        help="Only include files modified on or after this time. Accepts ISO date/datetime or: today, yesterday, last-week, last-7-days",
+    ),
+    modified_until: str | None = typer.Option(
+        None,
+        "--modified-until",
+        help="Only include files modified on or before this time. Accepts ISO date/datetime, today, or yesterday. Combine with --modified-since for a date range.",
+    ),
+    limit: int | None = typer.Option(
+        None,
+        "--limit",
+        min=1,
+        help="Maximum number of most recently modified report files to include after filtering",
+    ),
 ) -> None:
     """Render a consolidated HTML report from all supported report files in a directory."""
-    candidates = sorted(
-        [
-            path
-            for path in input.iterdir()
-            if path.is_file()
-            and (
-                path.suffix.lower() in {".json", ".sarif", ".ndjson", ".jsonl"}
-                or path.name.lower().endswith(".sarif.json")
-            )
-        ]
+    candidates = _collect_consolidated_candidates(
+        input_dir=input,
+        modified_since=modified_since,
+        modified_until=modified_until,
+        limit=limit,
     )
 
     all_findings = []
@@ -258,11 +354,12 @@ def render_consolidated(
 
     all_findings = sort_findings(all_findings)
     counts = count_by_severity(all_findings)
-    report_html = render_html_report(
+    report_html = render_consolidated_dashboard_report(
         target_ref=target,
-        source_label="consolidated",
         findings=all_findings,
         counts=counts,
+        reports_dir=input,
+        output_dir=output,
     )
 
     output.mkdir(parents=True, exist_ok=True)
@@ -271,6 +368,12 @@ def render_consolidated(
 
     typer.echo(f"[OK] Report generated: {output_file}")
     typer.echo(f"[INFO] Input directory: {input}")
+    if modified_since:
+        typer.echo(f"[INFO] Modified since filter: {modified_since}")
+    if modified_until:
+        typer.echo(f"[INFO] Modified until filter: {modified_until}")
+    if limit is not None:
+        typer.echo(f"[INFO] File limit: {limit}")
     typer.echo(f"[INFO] Files included: {included_files}")
     typer.echo(f"[INFO] Files skipped: {skipped_files}")
     typer.echo(f"[INFO] Total findings: {len(all_findings)}")

{sec_report_kit-0.2.5 → sec_report_kit-0.2.7}/src/sec_report_kit/generate_consolidated_security_report.py

@@ -13,12 +13,28 @@ def main() -> int:
     parser.add_argument("--input", required=True, help="Input folder containing report files")
     parser.add_argument("--output", required=True, help="Output folder for generated HTML")
     parser.add_argument("--target", default="consolidated-scan", help="Target label used in HTML report")
+    parser.add_argument(
+        "--modified-since",
+        help="Only include files modified on or after this time. Accepts ISO date/datetime or: today, yesterday, last-week, last-7-days",
+    )
+    parser.add_argument(
+        "--modified-until",
+        help="Only include files modified on or before this time. Accepts ISO date/datetime, today, or yesterday. Combine with --modified-since for a date range.",
+    )
+    parser.add_argument(
+        "--limit",
+        type=int,
+        help="Maximum number of most recently modified report files to include after filtering",
+    )
     args = parser.parse_args()
 
     render_consolidated(
         input=Path(args.input),
         output=Path(args.output),
         target=args.target,
+        modified_since=args.modified_since,
+        modified_until=args.modified_until,
+        limit=args.limit,
     )
     return 0