Skip to main content

Precaution security static analysis command line

Project description

Precaution CLI Build and Test Latest Version Python Versions PyPI - Downloads

Precli is the core of the Precaution App and Precaution Action. It also serves as a command line interface to demonstate its functionality. It is designed to do static code analysis of source code with a number of rules covering the standard library for the corresponding programming language.

If your needs go beyond the analysis of just the standard library, consider upgrading to Precaution Professional to get access to finding and fixing security vulnerabilities in third-party libraries. See https://www.securesauce.dev/ for more details.

Quick Start

To install:

pip install precli

Run precli on a single test example:

precli tests/unit/rules/python/stdlib/hmac/examples/hmac_timing_attack.py

Example code:

# level: ERROR
# start_line: 18
# end_line: 18
# start_column: 13
# end_column: 15
import hmac


received_digest = (
    b"\xe2\x93\x08\x19T8\xdc\x80\xef\x87\x90m\x1f\x9d\xf7\xf2"
    b"\xf5\x10>\xdbf\xa2\xaf\xf7x\xcdX\xdf"
)

key = b"my-super-duper-secret-key-string"
password = b"pass"
digest = hmac.digest(key, password, digest="sha224")

print(digest == received_digest)

Example result:

Example output

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

precli-0.7.6.tar.gz (382.0 kB view details)

Uploaded Source

Built Distribution

precli-0.7.6-py3-none-any.whl (165.7 kB view details)

Uploaded Python 3

File details

Details for the file precli-0.7.6.tar.gz.

File metadata

  • Download URL: precli-0.7.6.tar.gz
  • Upload date:
  • Size: 382.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.6.tar.gz
Algorithm Hash digest
SHA256 3a94bea935ab59ea8efc43fa5bbb4d2add034f44544740e2db0c18d197a1d346
MD5 ebfd5f0900bf4899398139511a7842cf
BLAKE2b-256 e0bc2dc1a49299af38916c4755f277227b98986ae7b7c6adb42b6583da875c2b

See more details on using hashes here.

File details

Details for the file precli-0.7.6-py3-none-any.whl.

File metadata

  • Download URL: precli-0.7.6-py3-none-any.whl
  • Upload date:
  • Size: 165.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for precli-0.7.6-py3-none-any.whl
Algorithm Hash digest
SHA256 0e9e0e9015713215495d5a6fee03e89d543686c57ca54b50867ad60bf05ac63d
MD5 db7127415f06f28b238df44ec7c60cc0
BLAKE2b-256 f05c6af58212139ab75f3a72f94a957337554e926b9dc9f8fe530ea022aaee29

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page