Skip to main content

Precaution security static analysis command line

Project description

Precaution CLI Build and Test

Precli is the core of the Precaution GitHub App and Action. It also serves as a command line interface to demonstate its functionality. It is designed to do static code analysis of source code with a number of rules covering the standard library for the corresponding programming language.

If your needs go beyond the analysis of just the standard library, consider upgrading to Precaution Professional to get access to finding and fixing security vulnerabilities in third-party libraries. See https://www.securesauce.dev/ for more details.

Quick Start

To install precli (requires Python 3.12):

pip install precli

Run precli on a single test example:

precli tests/unit/rules/python/stdlib/hmac/examples/hmac_timing_attack.py

Example code:

# level: ERROR
# start_line: 18
# end_line: 18
# start_column: 13
# end_column: 15
import hmac


received_digest = (
    b"\xe2\x93\x08\x19T8\xdc\x80\xef\x87\x90m\x1f\x9d\xf7\xf2"
    b"\xf5\x10>\xdbf\xa2\xaf\xf7x\xcdX\xdf"
)

key = b"my-super-duper-secret-key-string"
password = b"pass"
digest = hmac.digest(key, password, digest="sha224")

print(digest == received_digest)

Example result:

Example output

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

precli-0.6.7.tar.gz (375.9 kB view details)

Uploaded Source

Built Distribution

precli-0.6.7-py3-none-any.whl (157.0 kB view details)

Uploaded Python 3

File details

Details for the file precli-0.6.7.tar.gz.

File metadata

  • Download URL: precli-0.6.7.tar.gz
  • Upload date:
  • Size: 375.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.6.7.tar.gz
Algorithm Hash digest
SHA256 46e3c76a5b7198cd5ea054b7eebd554b4535ec5cd2c0ef012a4fb3d9f1021845
MD5 5851cb9b06a9eaa4de037a924211aa61
BLAKE2b-256 bb42196e2f26d95b608b4e1095438610d30923db870e946883cfa3628b9c60d4

See more details on using hashes here.

File details

Details for the file precli-0.6.7-py3-none-any.whl.

File metadata

  • Download URL: precli-0.6.7-py3-none-any.whl
  • Upload date:
  • Size: 157.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.6.7-py3-none-any.whl
Algorithm Hash digest
SHA256 f06fe75f1e3a5766ef9e60e403060c1abc8c8abf10e0b838e0a93e1ff9c31b76
MD5 154062587245226c73fd942499e9936c
BLAKE2b-256 8234b85d30700ea91576d6a91ae4c4bd07b4a384a7a0c9b1e11771405116b5cf

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page