Skip to main content

Precaution security static analysis command line

Project description

Precaution CLI Build and Test Latest Version Python Versions PyPI - Downloads

Precli is the core of the Precaution App and Precaution Action. It also serves as a command line interface to demonstate its functionality. It is designed to do static code analysis of source code with a number of rules covering the standard library for the corresponding programming language.

If your needs go beyond the analysis of just the standard library, consider upgrading to Precaution Professional to get access to finding and fixing security vulnerabilities in third-party libraries. See https://www.securesauce.dev/ for more details.

Quick Start

To install precli (requires Python 3.10+):

pip install precli

Run precli on a single test example:

precli tests/unit/rules/python/stdlib/hmac/examples/hmac_timing_attack.py

Example code:

# level: ERROR
# start_line: 18
# end_line: 18
# start_column: 13
# end_column: 15
import hmac


received_digest = (
    b"\xe2\x93\x08\x19T8\xdc\x80\xef\x87\x90m\x1f\x9d\xf7\xf2"
    b"\xf5\x10>\xdbf\xa2\xaf\xf7x\xcdX\xdf"
)

key = b"my-super-duper-secret-key-string"
password = b"pass"
digest = hmac.digest(key, password, digest="sha224")

print(digest == received_digest)

Example result:

Example output

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

precli-0.7.3.tar.gz (377.3 kB view details)

Uploaded Source

Built Distribution

precli-0.7.3-py3-none-any.whl (158.4 kB view details)

Uploaded Python 3

File details

Details for the file precli-0.7.3.tar.gz.

File metadata

  • Download URL: precli-0.7.3.tar.gz
  • Upload date:
  • Size: 377.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.3.tar.gz
Algorithm Hash digest
SHA256 ac9c9f6636ddc8a06efc2494a03e8ecc6c1721a94754ab46dbbe2b44b5f4842f
MD5 a96ed3ee9b34b1f8d899275e3a0f8255
BLAKE2b-256 547ff4239d89a21f4a4dabd325cf9f2acd4dc85fc6e64d3624103760c035ad59

See more details on using hashes here.

File details

Details for the file precli-0.7.3-py3-none-any.whl.

File metadata

  • Download URL: precli-0.7.3-py3-none-any.whl
  • Upload date:
  • Size: 158.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.3-py3-none-any.whl
Algorithm Hash digest
SHA256 78a8968d66d76fc051b3873342cd3568f27732728467c588ee73c87131076de2
MD5 f9fe08c6e144907ed774f2dc8fa8498f
BLAKE2b-256 df5750489a52f28884483f90261eaec4972fc9df841f61fa83b3cadc9a899118

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page