veritensor 1.6.2__tar.gz → 1.7.0__tar.gz

{veritensor-1.6.2/src/veritensor.egg-info → veritensor-1.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: veritensor
-Version: 1.6.2
+Version: 1.7.0
 Summary: Antivirus for the AI Supply Chain. Scans models, datasets, notebooks, and RAG documents for threats.
 Author-email: Arsenii Brazhnyk <veritensor@gmail.com>
 License: Apache-2.0
@@ -27,6 +27,8 @@ Requires-Dist: requests>=2.31.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: huggingface_hub>=0.19.0
 Requires-Dist: cyclonedx-python-lib>=6.0.0
+Requires-Dist: jinja2>=3.1.0
+Requires-Dist: pillow>=12.2.0
 Provides-Extra: test
 Requires-Dist: pytest>=7.0.0; extra == "test"
 Requires-Dist: pytest-mock>=3.10.0; extra == "test"
@@ -92,7 +94,7 @@ Unlike standard SAST tools (which focus on code), Veritensor understands the bin
 *   **De-obfuscation Engine:** Automatically detects and decodes **Base64** strings to uncover hidden payloads (e.g., `SWdub3Jl...` -> `Ignore previous instructions`).
 *   **Magic Number Validation:** Detects malware masquerading as safe files (e.g., an `.exe` renamed to `invoice.pdf`).
 *   **Smart Filtering & Entropy Analysis:** Drastically reduces false positives in Jupyter Notebooks. Uses Shannon Entropy to find real, unknown API keys (WandB, Pinecone, Telegram) while ignoring safe UUIDs and standard imports.
-
+*   **CISO-Ready HTML Reports:** Generate beautiful, standalone HTML security reports with interactive charts and severity breakdowns using the `--html` flag.
 ---
 
 ## 📦 Installation
@@ -175,6 +177,12 @@ Check code cells, markdown, and saved outputs for threats:
 veritensor scan ./research/experiment.ipynb
 ```
 
+### 10. Generate a CISO-Friendly HTML Report
+Create a standalone, interactive HTML dashboard of your scan results:
+```bash
+veritensor scan ./project --html
+```
+
 **Example Output:**
 ```Text
 ╭────────────────────────────────╮
@@ -296,17 +304,23 @@ with DAG('secure_rag_ingestion', start_date=datetime(2026, 1, 1)) as dag:
 
 Veritensor supports industry-standard formats for integration with security dashboards and audit tools.
 
-### 1. GitHub Security (SARIF)
+### 1. Interactive HTML Dashboard
+Generate a visually rich, standalone HTML report designed for CISOs and security audits. Includes severity breakdowns, charts, and easy copy-to-clipboard functionality for Jira tickets.
+```bash
+veritensor scan ./models --html
+```
+
+### 2. GitHub Security (SARIF)
 Generate a report compatible with GitHub Code Scanning:
 ```bash
 veritensor scan ./models --sarif > veritensor-report.sarif
 ```
-### 2. Software Bill of Materials (SBOM)
+### 3. Software Bill of Materials (SBOM)
 Generate a CycloneDX v1.5 SBOM to inventory your AI assets:
 ```bash
 veritensor scan ./models --sbom > sbom.json
 ```
-### 3. Raw JSON
+### 4. Raw JSON
 For custom parsers and SOAR automation:
 ```bash
 veritensor scan ./models --json
@@ -360,7 +374,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Veritensor Scan
-        uses: arsbr/Veritensor@v1.6.2 
+        uses: arsbr/Veritensor@v1.7.0 
         with:
           path: '.'
           jobs: '4'
@@ -371,7 +385,7 @@ Prevent committing malicious models to your repository. Add this to .pre-commit-
 ```yaml
 repos:
   - repo: https://github.com/arsbr/Veritensor
-    rev: v1.6.2
+    rev: v1.7.0
     hooks:
       - id: veritensor-scan
 ```
@@ -399,8 +413,8 @@ veritensor_audit:
 | **Datasets** | `.parquet`, `.csv`, `.tsv`, `.jsonl`, `.ndjson`, `.ldjson` | Streaming Regex Scan (URLs, Injections, PII) |
 | **Notebooks** | `.ipynb` | JSON Structure Analysis + Code AST + Markdown Phishing |
 | **Documents** | `.pdf`, `.docx`, `.pptx`, `.txt`, `.md`, `.html` | DOM Extraction, Stealth/CSS Detection, PII |
-| **Archives** | `.zip`, `.tar`, `.gz`, `.tgz`, `.whl` | Recursive In-Memory Inspection |
-| **RAG Docs** | `requirements.txt`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
+| **Media & Archives** | `.png`, `.jpg`, `.zip`, `.tar`, `.gz`, `.whl` | EasyOCR, LSB Steganography, YARA (Enterprise) |
+| **Supply Chain** | `requirements.txt`, `pyproject.toml`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
 
 ---
 

{veritensor-1.6.2 → veritensor-1.7.0}/README.md

@@ -34,7 +34,7 @@ Unlike standard SAST tools (which focus on code), Veritensor understands the bin
 *   **De-obfuscation Engine:** Automatically detects and decodes **Base64** strings to uncover hidden payloads (e.g., `SWdub3Jl...` -> `Ignore previous instructions`).
 *   **Magic Number Validation:** Detects malware masquerading as safe files (e.g., an `.exe` renamed to `invoice.pdf`).
 *   **Smart Filtering & Entropy Analysis:** Drastically reduces false positives in Jupyter Notebooks. Uses Shannon Entropy to find real, unknown API keys (WandB, Pinecone, Telegram) while ignoring safe UUIDs and standard imports.
-
+*   **CISO-Ready HTML Reports:** Generate beautiful, standalone HTML security reports with interactive charts and severity breakdowns using the `--html` flag.
 ---
 
 ## 📦 Installation
@@ -117,6 +117,12 @@ Check code cells, markdown, and saved outputs for threats:
 veritensor scan ./research/experiment.ipynb
 ```
 
+### 10. Generate a CISO-Friendly HTML Report
+Create a standalone, interactive HTML dashboard of your scan results:
+```bash
+veritensor scan ./project --html
+```
+
 **Example Output:**
 ```Text
 ╭────────────────────────────────╮
@@ -238,17 +244,23 @@ with DAG('secure_rag_ingestion', start_date=datetime(2026, 1, 1)) as dag:
 
 Veritensor supports industry-standard formats for integration with security dashboards and audit tools.
 
-### 1. GitHub Security (SARIF)
+### 1. Interactive HTML Dashboard
+Generate a visually rich, standalone HTML report designed for CISOs and security audits. Includes severity breakdowns, charts, and easy copy-to-clipboard functionality for Jira tickets.
+```bash
+veritensor scan ./models --html
+```
+
+### 2. GitHub Security (SARIF)
 Generate a report compatible with GitHub Code Scanning:
 ```bash
 veritensor scan ./models --sarif > veritensor-report.sarif
 ```
-### 2. Software Bill of Materials (SBOM)
+### 3. Software Bill of Materials (SBOM)
 Generate a CycloneDX v1.5 SBOM to inventory your AI assets:
 ```bash
 veritensor scan ./models --sbom > sbom.json
 ```
-### 3. Raw JSON
+### 4. Raw JSON
 For custom parsers and SOAR automation:
 ```bash
 veritensor scan ./models --json
@@ -302,7 +314,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Veritensor Scan
-        uses: arsbr/Veritensor@v1.6.2 
+        uses: arsbr/Veritensor@v1.7.0 
         with:
           path: '.'
           jobs: '4'
@@ -313,7 +325,7 @@ Prevent committing malicious models to your repository. Add this to .pre-commit-
 ```yaml
 repos:
   - repo: https://github.com/arsbr/Veritensor
-    rev: v1.6.2
+    rev: v1.7.0
     hooks:
       - id: veritensor-scan
 ```
@@ -341,8 +353,8 @@ veritensor_audit:
 | **Datasets** | `.parquet`, `.csv`, `.tsv`, `.jsonl`, `.ndjson`, `.ldjson` | Streaming Regex Scan (URLs, Injections, PII) |
 | **Notebooks** | `.ipynb` | JSON Structure Analysis + Code AST + Markdown Phishing |
 | **Documents** | `.pdf`, `.docx`, `.pptx`, `.txt`, `.md`, `.html` | DOM Extraction, Stealth/CSS Detection, PII |
-| **Archives** | `.zip`, `.tar`, `.gz`, `.tgz`, `.whl` | Recursive In-Memory Inspection |
-| **RAG Docs** | `requirements.txt`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
+| **Media & Archives** | `.png`, `.jpg`, `.zip`, `.tar`, `.gz`, `.whl` | EasyOCR, LSB Steganography, YARA (Enterprise) |
+| **Supply Chain** | `requirements.txt`, `pyproject.toml`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
 
 ---
 

{veritensor-1.6.2 → veritensor-1.7.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "veritensor"
-version = "1.6.2"
+version = "1.7.0"
 description = "Antivirus for the AI Supply Chain. Scans models, datasets, notebooks, and RAG documents for threats."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -32,6 +32,8 @@ dependencies = [
     "pyyaml>=6.0",
     "huggingface_hub>=0.19.0",
     "cyclonedx-python-lib>=6.0.0",
+    "jinja2>=3.1.0",
+    "pillow>=12.2.0",
     # Fickling removed from here to avoid installing PyTorch (800MB+) for regular users
 ]
 

veritensor-1.7.0/src/veritensor/__init__.py

@@ -0,0 +1,2 @@
+__version__ = "1.7.0"
+