security-use 0.1.1__py3-none-any.whl → 0.2.9__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. security_use/__init__.py +9 -1
  2. security_use/auth/__init__.py +16 -0
  3. security_use/auth/client.py +223 -0
  4. security_use/auth/config.py +177 -0
  5. security_use/auth/oauth.py +317 -0
  6. security_use/cli.py +699 -34
  7. security_use/compliance/__init__.py +10 -0
  8. security_use/compliance/mapper.py +275 -0
  9. security_use/compliance/models.py +50 -0
  10. security_use/dependency_scanner.py +76 -30
  11. security_use/fixers/iac_fixer.py +173 -95
  12. security_use/iac/rules/azure.py +246 -0
  13. security_use/iac/rules/gcp.py +255 -0
  14. security_use/iac/rules/kubernetes.py +429 -0
  15. security_use/iac/rules/registry.py +56 -0
  16. security_use/parsers/__init__.py +18 -0
  17. security_use/parsers/base.py +2 -0
  18. security_use/parsers/composer.py +101 -0
  19. security_use/parsers/conda.py +97 -0
  20. security_use/parsers/dotnet.py +89 -0
  21. security_use/parsers/gradle.py +90 -0
  22. security_use/parsers/maven.py +108 -0
  23. security_use/parsers/npm.py +196 -0
  24. security_use/parsers/yarn.py +108 -0
  25. security_use/reporter.py +29 -1
  26. security_use/sbom/__init__.py +10 -0
  27. security_use/sbom/generator.py +340 -0
  28. security_use/sbom/models.py +40 -0
  29. security_use/scanner.py +15 -2
  30. security_use/sensor/__init__.py +125 -0
  31. security_use/sensor/alert_queue.py +207 -0
  32. security_use/sensor/config.py +217 -0
  33. security_use/sensor/dashboard_alerter.py +246 -0
  34. security_use/sensor/detector.py +415 -0
  35. security_use/sensor/endpoint_analyzer.py +339 -0
  36. security_use/sensor/middleware.py +521 -0
  37. security_use/sensor/models.py +140 -0
  38. security_use/sensor/webhook.py +227 -0
  39. security_use-0.2.9.dist-info/METADATA +531 -0
  40. security_use-0.2.9.dist-info/RECORD +60 -0
  41. security_use-0.2.9.dist-info/licenses/LICENSE +21 -0
  42. security_use-0.1.1.dist-info/METADATA +0 -92
  43. security_use-0.1.1.dist-info/RECORD +0 -30
  44. {security_use-0.1.1.dist-info → security_use-0.2.9.dist-info}/WHEEL +0 -0
  45. {security_use-0.1.1.dist-info → security_use-0.2.9.dist-info}/entry_points.txt +0 -0
@@ -1,92 +0,0 @@
1
- Metadata-Version: 2.4
2
- Name: security-use
3
- Version: 0.1.1
4
- Summary: Security scanning tool for dependencies and Infrastructure as Code
5
- Project-URL: Homepage, https://github.com/security-use/security-use
6
- Project-URL: Repository, https://github.com/security-use/security-use
7
- Project-URL: Issues, https://github.com/security-use/security-use/issues
8
- Author-email: Security Use <security@example.com>
9
- License-Expression: MIT
10
- Keywords: cloudformation,dependencies,iac,scanner,security,terraform,vulnerability
11
- Classifier: Development Status :: 3 - Alpha
12
- Classifier: Environment :: Console
13
- Classifier: Intended Audience :: Developers
14
- Classifier: License :: OSI Approved :: MIT License
15
- Classifier: Operating System :: OS Independent
16
- Classifier: Programming Language :: Python :: 3
17
- Classifier: Programming Language :: Python :: 3.10
18
- Classifier: Programming Language :: Python :: 3.11
19
- Classifier: Programming Language :: Python :: 3.12
20
- Classifier: Topic :: Security
21
- Classifier: Topic :: Software Development :: Quality Assurance
22
- Requires-Python: >=3.10
23
- Requires-Dist: click>=8.0.0
24
- Requires-Dist: httpx>=0.25.0
25
- Requires-Dist: packaging>=23.0
26
- Requires-Dist: python-hcl2>=4.3.0
27
- Requires-Dist: pyyaml>=6.0
28
- Requires-Dist: rich>=13.0.0
29
- Requires-Dist: tomli>=2.0.0; python_version < '3.11'
30
- Provides-Extra: dev
31
- Requires-Dist: mypy>=1.0.0; extra == 'dev'
32
- Requires-Dist: pytest-asyncio>=0.21.0; extra == 'dev'
33
- Requires-Dist: pytest>=7.0.0; extra == 'dev'
34
- Requires-Dist: ruff>=0.1.0; extra == 'dev'
35
- Requires-Dist: types-pyyaml>=6.0.0; extra == 'dev'
36
- Description-Content-Type: text/markdown
37
-
38
- # security-use
39
-
40
- A security scanning library for Python projects. Provides vulnerability scanning for dependencies and Infrastructure as Code (IaC) files.
41
-
42
- ## Features
43
-
44
- - **Dependency Scanning**: Detect known vulnerabilities (CVEs) in Python packages
45
- - **IaC Scanning**: Find security misconfigurations in Terraform, CloudFormation, and other IaC formats
46
- - **Automated Fixes**: Generate and apply fixes for detected issues
47
-
48
- ## Installation
49
-
50
- ```bash
51
- pip install security-use
52
- ```
53
-
54
- ## Usage
55
-
56
- ### Command Line
57
-
58
- ```bash
59
- # Scan dependencies
60
- security-use scan deps /path/to/project
61
-
62
- # Scan IaC files
63
- security-use scan iac /path/to/terraform
64
-
65
- # Scan everything
66
- security-use scan all /path/to/project
67
-
68
- # Auto-fix vulnerable dependencies
69
- security-use fix /path/to/project
70
- ```
71
-
72
- ### Python API
73
-
74
- ```python
75
- from security_use import scan_dependencies, scan_iac
76
-
77
- # Scan dependencies
78
- result = scan_dependencies("/path/to/project")
79
-
80
- for vuln in result.vulnerabilities:
81
- print(f"{vuln.package}: {vuln.severity.value}")
82
-
83
- # Scan IaC
84
- result = scan_iac("/path/to/terraform")
85
-
86
- for finding in result.iac_findings:
87
- print(f"{finding.rule_id}: {finding.title}")
88
- ```
89
-
90
- ## License
91
-
92
- MIT
@@ -1,30 +0,0 @@
1
- security_use/__init__.py,sha256=Gtd1i9N9-ryLly2_BgS8zhlXdpibWZ_bBKmNbUuNwxU,376
2
- security_use/cli.py,sha256=8kniz6b4FQaUZfFTP0Wvf1X3tcTqa9hXH-ALBrdx8Mo,10329
3
- security_use/dependency_scanner.py,sha256=dCBeM3oESywlQK2idfC1eQG-s9SaY2WkLvrFL8VXgwk,5678
4
- security_use/iac_scanner.py,sha256=ObnVJU74nSS9OoAZmhJOA79_FcvlzIgxOcuWAMkSliA,6714
5
- security_use/models.py,sha256=0vvcV-Cyn_0-Itn0c-apsWz3GBGqN1BMPZeP_MxlXb8,4092
6
- security_use/osv_client.py,sha256=yKJVTbKU3fP0QM69KMYWA2xTDOAfKmEQOn5BLhQ8lY8,13380
7
- security_use/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
8
- security_use/reporter.py,sha256=hBdJ0mEKwWVqc7gxx3WuaM2ryiu25_nQndNoo0Iga1I,12613
9
- security_use/scanner.py,sha256=bclsLKPUNPPD6vLN2pBycw_gUkvA74QiOERnut2uK5w,2209
10
- security_use/fixers/__init__.py,sha256=pBcjyXWiRznnrLyWr2-eXs_4eaAh9L9UJyqGigM1X8c,206
11
- security_use/fixers/dependency_fixer.py,sha256=zDJadR3ExQ_vqaRgVMZSWqskLRjlf14dk3usNmwTqsM,6415
12
- security_use/fixers/iac_fixer.py,sha256=f7VKXkkvhBsq90E04QoG7V277Ljj48qORJc3Yoqy3lk,6514
13
- security_use/iac/__init__.py,sha256=MmabfNA36rJvtWgOUWaq5VJf2TPNWXyhMmVuI8qVHV4,238
14
- security_use/iac/base.py,sha256=8lrOIwlRbDJYIzb4Epfn1OA91UUjhXHxo61ACwFkhmE,1810
15
- security_use/iac/cloudformation.py,sha256=6E1fE6xFW4uMlFmuD2cEiubUaOzMlqdcpwWsMfAzJ_c,8197
16
- security_use/iac/terraform.py,sha256=-0PY-Dw5qpKKn28BliwNv8yRkGp5eGKACwrZVaQ9u80,6191
17
- security_use/iac/rules/__init__.py,sha256=RfFXACozqDYqV4EYgmRxsvk6rERZP_0qN1L9gZlG5TE,711
18
- security_use/iac/rules/aws.py,sha256=9KjHv5v3ppanuFOJ-p-_qv-CiehxHBAuwFSF_IL5qOM,12152
19
- security_use/iac/rules/base.py,sha256=C-LgpwIUIBAyoPwL-tC_ioF6opbmSk-nRWB_vfM22ec,2567
20
- security_use/iac/rules/registry.py,sha256=s8SNKR3FRY44kwo8Uh3Gcu8t-c1GQB6Cg3bkuO_b8DE,3055
21
- security_use/parsers/__init__.py,sha256=zYVpwqZOH1M0n8WCLPkb5uhcjr-ID4TSQa32BKLuplI,491
22
- security_use/parsers/base.py,sha256=hA0w9GIlIAsYifsNuKOlh1thh5u08PBo92afoU2PnFk,1119
23
- security_use/parsers/pipfile.py,sha256=1cginV92IWvaT4A19ScaLUBy4y3fS5mEXtFpurxFPLI,3800
24
- security_use/parsers/poetry_lock.py,sha256=OipaEBr03Kkfgt5bTFXCswbiAFcVXEzcz-e-N5jeGWk,1167
25
- security_use/parsers/pyproject.py,sha256=Tjmb-EZnp22RPsIgFiznSwMXrktLb-_CpT5o7RbXcWc,5407
26
- security_use/parsers/requirements.py,sha256=slenW0vs1Hd5J7ZOI1YAd9Ha3qV1Fzt_PZ7gErzhha8,2687
27
- security_use-0.1.1.dist-info/METADATA,sha256=OtpUH2Kb7ZkWJM9UojP5wZlq4QWusfNnfDZiePytpuE,2727
28
- security_use-0.1.1.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
29
- security_use-0.1.1.dist-info/entry_points.txt,sha256=PSZqVVwt2h3HFeoFQCCoscMsJD6C5r3HQGzqcBYCRMM,55
30
- security_use-0.1.1.dist-info/RECORD,,