Skip to main content

Precaution security static analysis command line

Project description

Precaution CLI Build and Test Latest Version Python Versions PyPI - Downloads

Precli is the core of the Precaution App and Precaution Action. It also serves as a command line interface to demonstate its functionality. It is designed to do static code analysis of source code with a number of rules covering the standard library for the corresponding programming language.

If your needs go beyond the analysis of just the standard library, consider upgrading to Precaution Professional to get access to finding and fixing security vulnerabilities in third-party libraries. See https://www.securesauce.dev/ for more details.

Quick Start

To install precli (requires Python 3.12):

pip install precli

Run precli on a single test example:

precli tests/unit/rules/python/stdlib/hmac/examples/hmac_timing_attack.py

Example code:

# level: ERROR
# start_line: 18
# end_line: 18
# start_column: 13
# end_column: 15
import hmac


received_digest = (
    b"\xe2\x93\x08\x19T8\xdc\x80\xef\x87\x90m\x1f\x9d\xf7\xf2"
    b"\xf5\x10>\xdbf\xa2\xaf\xf7x\xcdX\xdf"
)

key = b"my-super-duper-secret-key-string"
password = b"pass"
digest = hmac.digest(key, password, digest="sha224")

print(digest == received_digest)

Example result:

Example output

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

precli-0.7.1.tar.gz (377.1 kB view details)

Uploaded Source

Built Distribution

precli-0.7.1-py3-none-any.whl (157.5 kB view details)

Uploaded Python 3

File details

Details for the file precli-0.7.1.tar.gz.

File metadata

  • Download URL: precli-0.7.1.tar.gz
  • Upload date:
  • Size: 377.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.1.tar.gz
Algorithm Hash digest
SHA256 d0272c4b95d909c140cf0af39ed97aedbba6e24a789c3da3601f0a31716747e6
MD5 3f6dd5b76baaad7d32be6db4ddb4937a
BLAKE2b-256 d3b209712c21108b1b8192343649beab54234fd4b140d5a7e7c76af48a869078

See more details on using hashes here.

File details

Details for the file precli-0.7.1-py3-none-any.whl.

File metadata

  • Download URL: precli-0.7.1-py3-none-any.whl
  • Upload date:
  • Size: 157.5 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.1-py3-none-any.whl
Algorithm Hash digest
SHA256 6fd81872590cf9e6e4156af14d2a8c6a945044709721ac3aad1c4324f93ff497
MD5 04d54b1e486d1ce576e23defdcf9ded4
BLAKE2b-256 5803b3f6d2537f34a7ef663ccc4c9746423e8410769484d6b588307f56d02ad6

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page