sec-report-kit 0.2.6__tar.gz → 0.2.7__tar.gz

{sec_report_kit-0.2.6 → sec_report_kit-0.2.7}/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.2.7 - 2026-05-17
+
+### Added
+- Test coverage now includes the consolidated date-filter helpers, Safety parser fallback branches, and consolidated HTML dashboard visibility paths, bringing enforced suite coverage to 100%.
+
+### Fixed
+- `requirements.txt` now pins `urllib3==2.7.0` to resolve the Trivy-reported CVEs affecting `2.6.3`.
+
 ## 0.2.6 - 2026-05-17
 
 ### Added

{sec_report_kit-0.2.6 → sec_report_kit-0.2.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sec-report-kit
-Version: 0.2.6
+Version: 0.2.7
 Summary: Generate HTML security reports from Trivy, pip-audit, Safety, Bandit, and Gitleaks JSON
 Author: Ravi Konduru
 License: MIT

{sec_report_kit-0.2.6 → sec_report_kit-0.2.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sec-report-kit"
-version = "0.2.6"
+version = "0.2.7"
 description = "Generate HTML security reports from Trivy, pip-audit, Safety, Bandit, and Gitleaks JSON"
 readme = "README.md"
 requires-python = ">=3.10"

{sec_report_kit-0.2.6 → sec_report_kit-0.2.7}/requirements.txt

@@ -80,5 +80,5 @@ twine==6.2.0
 typer==0.25.1
 typing-inspection==0.4.2
 typing_extensions==4.15.0
-urllib3==2.6.3
+urllib3==2.7.0
 uvicorn==0.46.0

{sec_report_kit-0.2.6 → sec_report_kit-0.2.7}/src/sec_report_kit/__init__.py

@@ -1,4 +1,4 @@
 """sec_report_kit package."""
 
 __all__ = ["__version__"]
-__version__ = "0.2.6"
+__version__ = "0.2.7"

{sec_report_kit-0.2.6 → sec_report_kit-0.2.7}/tests/test_cli.py

@@ -8,7 +8,7 @@ from unittest.mock import patch
 import pytest
 from typer.testing import CliRunner
 
-from sec_report_kit.cli import _write_report, app
+from sec_report_kit.cli import _parse_modified_since, _parse_modified_until, _write_report, app
 
 runner = CliRunner()
 
@@ -666,6 +666,77 @@ def test_generate_consolidated_wrapper_invokes_cli(monkeypatch, tmp_path):
     )
 
 
+def test_parse_modified_since_supports_named_ranges():
+    today = _parse_modified_since("today")
+    yesterday = _parse_modified_since("yesterday")
+    last_week = _parse_modified_since("last-week")
+
+    assert today.hour == 0
+    assert today.minute == 0
+    assert yesterday.hour == 0
+    assert yesterday.minute == 0
+    assert yesterday < today
+    assert last_week < today
+
+
+def test_parse_modified_since_supports_iso_inputs_and_raises_for_invalid():
+    naive = _parse_modified_since("2026-05-10")
+    aware = _parse_modified_since("2026-05-10T09:00:00Z")
+
+    assert naive.year == 2026
+    assert naive.month == 5
+    assert naive.day == 10
+    assert naive.tzinfo is not None
+    assert aware.tzinfo is not None
+
+    import typer
+
+    with pytest.raises(typer.BadParameter):
+        _parse_modified_since("not-a-date")
+
+
+def test_parse_modified_until_supports_named_and_date_only_inputs():
+    today = _parse_modified_until("today")
+    yesterday = _parse_modified_until("yesterday")
+    date_only = _parse_modified_until("2026-05-10")
+    datetime_value = _parse_modified_until("2026-05-10T09:15:00")
+
+    assert today.hour == 23
+    assert today.minute == 59
+    assert today.second == 59
+    assert today.microsecond == 999999
+    assert yesterday.hour == 23
+    assert yesterday.minute == 59
+    assert date_only.hour == 23
+    assert date_only.minute == 59
+    assert datetime_value.hour == 9
+    assert datetime_value.minute == 15
+
+
+def test_generate_consolidated_wrapper_module_main(monkeypatch, tmp_path):
+    input_dir = tmp_path / "reports"
+    output_dir = tmp_path / "out"
+    input_dir.mkdir()
+
+    monkeypatch.setattr(
+        "sys.argv",
+        [
+            "generate_consolidated_security_report.py",
+            "--input",
+            str(input_dir),
+            "--output",
+            str(output_dir),
+        ],
+    )
+
+    with patch("sec_report_kit.cli.render_consolidated") as mock_render:
+        with pytest.raises(SystemExit) as exc:
+            runpy.run_module("sec_report_kit.generate_consolidated_security_report", run_name="__main__")
+
+    assert exc.value.code == 0
+    mock_render.assert_called_once()
+
+
 def test_consolidated_helper_scripts_exist():
     assert Path("scripts/render_consolidated_html.bat").exists()
     assert Path("scripts/render_consolidated_html.sh").exists()

sec_report_kit-0.2.7/tests/test_html_renderer.py

@@ -0,0 +1,166 @@
+from sec_report_kit.models import Finding
+from sec_report_kit.report.html_renderer import render_consolidated_dashboard_report, render_html_report
+
+
+EMPTY_COUNTS = {"CRITICAL": 0, "HIGH": 0, "MEDIUM": 0, "LOW": 0, "UNKNOWN": 0}
+
+
+def _finding(severity="HIGH", primary_url="https://example.com"):
+    return Finding(
+        source_type="test",
+        target="myimage:1",
+        severity=severity,
+        vulnerability_id="CVE-2024-0001",
+        package="openssl",
+        installed_version="1.0",
+        fixed_version="1.1",
+        title="Test vuln",
+        primary_url=primary_url,
+    )
+
+
+def test_render_html_with_finding_with_url():
+    counts = {**EMPTY_COUNTS, "HIGH": 1}
+    html = render_html_report(
+        target_ref="myimage:1",
+        source_label="trivy",
+        findings=[_finding(primary_url="https://example.com")],
+        counts=counts,
+    )
+    assert "CVE-2024-0001" in html
+    assert "https://example.com" in html
+    assert "openssl" in html
+    assert "This report is generated by" in html
+    assert ">sec-report-kit<" in html
+    assert "Connect with the developer:" in html
+    assert ">Shan Konduru<" in html
+    assert "https://www.linkedin.com/in/shankonduru/" in html
+
+
+def test_render_html_with_finding_no_url():
+    counts = {**EMPTY_COUNTS, "HIGH": 1}
+    html = render_html_report(
+        target_ref="myimage:1",
+        source_label="trivy",
+        findings=[_finding(primary_url="")],
+        counts=counts,
+    )
+    assert "CVE-2024-0001" in html
+    # no anchor tag when url is empty
+    assert 'href=""' not in html
+
+
+def test_render_html_no_findings():
+    html = render_html_report(
+        target_ref="myimage:1",
+        source_label="trivy",
+        findings=[],
+        counts=EMPTY_COUNTS,
+    )
+    assert "No vulnerabilities found" in html
+
+
+def test_render_html_escapes_special_chars():
+    finding = Finding(
+        source_type="test",
+        target='target<script>alert(1)</script>',
+        severity="LOW",
+        vulnerability_id="CVE-X",
+        package='pkg"quoted"',
+        installed_version="1.0",
+        fixed_version="-",
+        title="<b>bold</b>",
+        primary_url="",
+    )
+    counts = {**EMPTY_COUNTS, "LOW": 1}
+    html = render_html_report(
+        target_ref="ref",
+        source_label="test",
+        findings=[finding],
+        counts=counts,
+    )
+    assert "<script>alert(1)</script>" not in html
+    assert "&lt;script&gt;alert(1)&lt;/script&gt;" in html
+
+
+def test_render_consolidated_dashboard_with_available_and_missing_reports(tmp_path):
+    reports_dir = tmp_path / "reports"
+    output_dir = tmp_path / "out"
+    reports_dir.mkdir()
+    output_dir.mkdir()
+
+    (reports_dir / "bandit-report.html").write_text("<html>bandit</html>", encoding="utf-8")
+    (output_dir / "trivy-report.html").write_text("<html>trivy</html>", encoding="utf-8")
+
+    findings = [
+        Finding(
+            source_type="bandit",
+            target="src/app.py",
+            severity="HIGH",
+            vulnerability_id="B101",
+            package="-",
+            installed_version="-",
+            fixed_version="-",
+            title="Assert used",
+            primary_url="",
+        ),
+        Finding(
+            source_type="trivy",
+            target="requirements.txt",
+            severity="CRITICAL",
+            vulnerability_id="CVE-1",
+            package="urllib3",
+            installed_version="2.6.3",
+            fixed_version="2.7.0",
+            title="Critical vuln",
+            primary_url="",
+        ),
+        Finding(
+            source_type="pip-audit",
+            target="requirements.txt",
+            severity="MEDIUM",
+            vulnerability_id="GHSA-1",
+            package="requests",
+            installed_version="2.0.0",
+            fixed_version="2.1.0",
+            title="Dependency finding",
+            primary_url="",
+        ),
+    ]
+
+    html = render_consolidated_dashboard_report(
+        target_ref="repo-root",
+        findings=findings,
+        counts={"CRITICAL": 1, "HIGH": 1, "MEDIUM": 1, "LOW": 0, "UNKNOWN": 0},
+        reports_dir=reports_dir,
+        output_dir=output_dir,
+    )
+
+    assert 'href="../reports/bandit-report.html"' in html
+    assert 'src="trivy-report.html"' in html
+    assert "Open Full Report" in html
+    assert "Generate this report first using scripts/render_pip_audit_html.sh or scripts/render_pip_audit_html.bat." in html
+    assert "scripts/render_pip_audit_html.sh" in html
+    assert "Bandit Report" in html
+    assert "Trivy Report" in html
+    assert "Reports available:" in html
+
+
+def test_render_consolidated_dashboard_shows_all_tools_when_no_visible_tools(tmp_path):
+    reports_dir = tmp_path / "reports"
+    output_dir = tmp_path / "out"
+    reports_dir.mkdir()
+    output_dir.mkdir()
+
+    html = render_consolidated_dashboard_report(
+        target_ref="repo-root",
+        findings=[],
+        counts={"CRITICAL": 0, "HIGH": 0, "MEDIUM": 0, "LOW": 0, "UNKNOWN": 0},
+        reports_dir=reports_dir,
+        output_dir=output_dir,
+    )
+
+    assert "pip-audit Report" in html
+    assert "GitLeaks Report" in html
+    assert "TruffleHog Report" in html
+    assert "Generate this report first using scripts/render_trivy_html.sh or scripts/render_trivy_html.bat." in html

{sec_report_kit-0.2.6 → sec_report_kit-0.2.7}/tests/test_parsers.py

@@ -88,6 +88,79 @@ def test_parse_safety_json_basic():
     assert findings[0].fixed_version == "1.26.19"
 
 
+def test_parse_safety_json_list_payload_and_helper_fallbacks():
+    payload = [
+        {
+            "id": "CVE-2026-1",
+            "package": "requests",
+            "installed_version": "2.0.0",
+            "fixed_version": "2.1.0",
+            "description": "Fallback description",
+            "url": "https://example.com/safety/url",
+        },
+        {
+            "CVE": "CVE-2026-2",
+            "package_name": "urllib3",
+            "analyzed_version": "1.0.0",
+            "fix_versions": ["1.1.0", "1.2.0"],
+            "summary": "Summary title",
+            "references": [{"url": "https://example.com/safety/ref"}],
+            "severity": {"name": "medium"},
+        },
+        {
+            "vulnerability_id": "CVE-2026-3",
+            "package_name": "idna",
+            "analyzed_version": "3.0",
+            "fixed_versions": [],
+            "references": ["https://example.com/safety/list-ref"],
+            "severity": {"value": "low"},
+        },
+    ]
+
+    findings = parse_safety_json(payload)
+
+    assert len(findings) == 3
+    assert findings[0].severity == "UNKNOWN"
+    assert findings[0].fixed_version == "2.1.0"
+    assert findings[0].title == "Fallback description"
+    assert findings[0].primary_url == "https://example.com/safety/url"
+    assert findings[1].severity == "MEDIUM"
+    assert findings[1].vulnerability_id == "CVE-2026-2"
+    assert findings[1].fixed_version == "1.1.0, 1.2.0"
+    assert findings[1].title == "Summary title"
+    assert findings[1].primary_url == "https://example.com/safety/ref"
+    assert findings[2].severity == "LOW"
+    assert findings[2].fixed_version == "-"
+    assert findings[2].title == "Safety finding"
+    assert findings[2].primary_url == "https://example.com/safety/list-ref"
+
+
+def test_parse_safety_json_dict_filters_non_dict_items_and_handles_unknown_severity():
+    payload = {
+        "vulnerabilities": [
+            "skip-me",
+            {"package_name": "pkg", "severity": {"other": "none"}},
+        ]
+    }
+
+    findings = parse_safety_json(payload)
+
+    assert len(findings) == 1
+    assert findings[0].severity == "UNKNOWN"
+    assert findings[0].vulnerability_id == "-"
+    assert findings[0].package == "pkg"
+
+
+def test_detect_source_type_safety_from_scanned_packages_metadata():
+    payload = {"scanned_packages": [], "vulnerabilities": []}
+    assert detect_source_type(payload) == "safety"
+
+
+def test_detect_source_type_safety_from_cve_sample():
+    payload = {"vulnerabilities": [{"CVE": "CVE-2026-1000"}]}
+    assert detect_source_type(payload) == "safety"
+
+
 def test_count_by_severity_unknown_when_missing():
     payload = {
         "dependencies": [

sec_report_kit-0.2.6/tests/test_html_renderer.py

@@ -1,83 +0,0 @@
-from sec_report_kit.models import Finding
-from sec_report_kit.report.html_renderer import render_html_report
-
-
-EMPTY_COUNTS = {"CRITICAL": 0, "HIGH": 0, "MEDIUM": 0, "LOW": 0, "UNKNOWN": 0}
-
-
-def _finding(severity="HIGH", primary_url="https://example.com"):
-    return Finding(
-        source_type="test",
-        target="myimage:1",
-        severity=severity,
-        vulnerability_id="CVE-2024-0001",
-        package="openssl",
-        installed_version="1.0",
-        fixed_version="1.1",
-        title="Test vuln",
-        primary_url=primary_url,
-    )
-
-
-def test_render_html_with_finding_with_url():
-    counts = {**EMPTY_COUNTS, "HIGH": 1}
-    html = render_html_report(
-        target_ref="myimage:1",
-        source_label="trivy",
-        findings=[_finding(primary_url="https://example.com")],
-        counts=counts,
-    )
-    assert "CVE-2024-0001" in html
-    assert "https://example.com" in html
-    assert "openssl" in html
-    assert "This report is generated by" in html
-    assert ">sec-report-kit<" in html
-    assert "Connect with the developer:" in html
-    assert ">Shan Konduru<" in html
-    assert "https://www.linkedin.com/in/shankonduru/" in html
-
-
-def test_render_html_with_finding_no_url():
-    counts = {**EMPTY_COUNTS, "HIGH": 1}
-    html = render_html_report(
-        target_ref="myimage:1",
-        source_label="trivy",
-        findings=[_finding(primary_url="")],
-        counts=counts,
-    )
-    assert "CVE-2024-0001" in html
-    # no anchor tag when url is empty
-    assert 'href=""' not in html
-
-
-def test_render_html_no_findings():
-    html = render_html_report(
-        target_ref="myimage:1",
-        source_label="trivy",
-        findings=[],
-        counts=EMPTY_COUNTS,
-    )
-    assert "No vulnerabilities found" in html
-
-
-def test_render_html_escapes_special_chars():
-    finding = Finding(
-        source_type="test",
-        target='target<script>alert(1)</script>',
-        severity="LOW",
-        vulnerability_id="CVE-X",
-        package='pkg"quoted"',
-        installed_version="1.0",
-        fixed_version="-",
-        title="<b>bold</b>",
-        primary_url="",
-    )
-    counts = {**EMPTY_COUNTS, "LOW": 1}
-    html = render_html_report(
-        target_ref="ref",
-        source_label="test",
-        findings=[finding],
-        counts=counts,
-    )
-    assert "<script>alert(1)</script>" not in html
-    assert "&lt;script&gt;alert(1)&lt;/script&gt;" in html