Skip to main content

Precaution security static analysis command line

Project description

Precaution CLI Build and Test Latest Version Python Versions PyPI - Downloads

Precli is the core of the Precaution App and Precaution Action. It also serves as a command line interface to demonstate its functionality. It is designed to do static code analysis of source code with a number of rules covering the standard library for the corresponding programming language.

If your needs go beyond the analysis of just the standard library, consider upgrading to Precaution Professional to get access to finding and fixing security vulnerabilities in third-party libraries. See https://www.securesauce.dev/ for more details.

Quick Start

To install precli (requires Python 3.10+):

pip install precli

Run precli on a single test example:

precli tests/unit/rules/python/stdlib/hmac/examples/hmac_timing_attack.py

Example code:

# level: ERROR
# start_line: 18
# end_line: 18
# start_column: 13
# end_column: 15
import hmac


received_digest = (
    b"\xe2\x93\x08\x19T8\xdc\x80\xef\x87\x90m\x1f\x9d\xf7\xf2"
    b"\xf5\x10>\xdbf\xa2\xaf\xf7x\xcdX\xdf"
)

key = b"my-super-duper-secret-key-string"
password = b"pass"
digest = hmac.digest(key, password, digest="sha224")

print(digest == received_digest)

Example result:

Example output

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

precli-0.7.2.tar.gz (377.2 kB view details)

Uploaded Source

Built Distribution

precli-0.7.2-py3-none-any.whl (157.6 kB view details)

Uploaded Python 3

File details

Details for the file precli-0.7.2.tar.gz.

File metadata

  • Download URL: precli-0.7.2.tar.gz
  • Upload date:
  • Size: 377.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.2.tar.gz
Algorithm Hash digest
SHA256 1f08741c5dc5dcfbba67e745a025b99126c86ada1a1a8b91e459f072ad09207d
MD5 03c90b3a9cfaeb78dbc87dcc76440868
BLAKE2b-256 5fb8b2b54e890d86638408bc1008b78d232cdb64a32a168fca7b67db443d8ce7

See more details on using hashes here.

File details

Details for the file precli-0.7.2-py3-none-any.whl.

File metadata

  • Download URL: precli-0.7.2-py3-none-any.whl
  • Upload date:
  • Size: 157.6 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.2-py3-none-any.whl
Algorithm Hash digest
SHA256 4537e66b7d577547f6574652f6b2755ee8464fb482b43508b269a4e1f33114c5
MD5 7c1f6127adac71a6d2c185906324c5ed
BLAKE2b-256 b7dfc3f5e1c3a94510adfbd1b450d76a30e3e79e7ff92edf7b4ca7f1a0f7c479

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page