LICENSE
README.md
pyproject.toml
cra_evidence_cli/__init__.py
cra_evidence_cli/__main__.py
cra_evidence_cli/ci_detect.py
cra_evidence_cli/cli.py
cra_evidence_cli/client.py
cra_evidence_cli/config.py
cra_evidence_cli/display.py
cra_evidence_cli/engine.py
cra_evidence_cli/exceptions.py
cra_evidence_cli/ikconfig.py
cra_evidence_cli/repo_config.py
cra_evidence_cli/sbom_generator.py
cra_evidence_cli/sbom_signer.py
cra_evidence_cli/sbomqs_check.py
cra_evidence_cli/styles.py
cra_evidence_cli/_engine/__init__.py
cra_evidence_cli/_engine/opengrep-release.json
cra_evidence_cli/assessment/__init__.py
cra_evidence_cli/assessment/config.py
cra_evidence_cli/assessment/detect.py
cra_evidence_cli/assessment/gate.py
cra_evidence_cli/assessment/matrix.py
cra_evidence_cli/assessment/requirements.py
cra_evidence_cli/assessment/select.py
cra_evidence_cli/assessment/templates.py
cra_evidence_cli/assessment/templates/consumer-iot.yaml
cra_evidence_cli/assessment/templates/library-sdk.yaml
cra_evidence_cli/assessment/templates/microcontroller.yaml
cra_evidence_cli/assessment/templates/operating-system.yaml
cra_evidence_cli/assessment/templates/router-gateway.yaml
cra_evidence_cli/assessment/templates/saas-service.yaml
cra_evidence_cli/assessment/templates/vpn.yaml
cra_evidence_cli/commands/__init__.py
cra_evidence_cli/commands/assessment.py
cra_evidence_cli/commands/check.py
cra_evidence_cli/commands/code_check.py
cra_evidence_cli/commands/code_evidence.py
cra_evidence_cli/commands/compare.py
cra_evidence_cli/commands/components.py
cra_evidence_cli/commands/config_check.py
cra_evidence_cli/commands/create_version.py
cra_evidence_cli/commands/db.py
cra_evidence_cli/commands/diagram.py
cra_evidence_cli/commands/distributor.py
cra_evidence_cli/commands/draft.py
cra_evidence_cli/commands/egress.py
cra_evidence_cli/commands/eol.py
cra_evidence_cli/commands/evidence.py
cra_evidence_cli/commands/export.py
cra_evidence_cli/commands/gemara.py
cra_evidence_cli/commands/maturity.py
cra_evidence_cli/commands/profile.py
cra_evidence_cli/commands/ra.py
cra_evidence_cli/commands/release.py
cra_evidence_cli/commands/scan.py
cra_evidence_cli/commands/secrets.py
cra_evidence_cli/commands/status.py
cra_evidence_cli/commands/trust.py
cra_evidence_cli/commands/upload.py
cra_evidence_cli/commands/validate.py
cra_evidence_cli/commands/verify.py
cra_evidence_cli/evidence_checker/__init__.py
cra_evidence_cli/evidence_checker/engine.py
cra_evidence_cli/local/__init__.py
cra_evidence_cli/local/annotations.py
cra_evidence_cli/local/c_semantic_analyzer.py
cra_evidence_cli/local/c_semantic_evidence.schema.json
cra_evidence_cli/local/config_audit.py
cra_evidence_cli/local/cpp_semantic_evidence.schema.json
cra_evidence_cli/local/csaf.py
cra_evidence_cli/local/csharp_semantic_evidence.schema.json
cra_evidence_cli/local/csharp_symbol_analyzer.cs
cra_evidence_cli/local/cyclonedx_vex.py
cra_evidence_cli/local/dbcache.py
cra_evidence_cli/local/disclaimer.py
cra_evidence_cli/local/egress.py
cra_evidence_cli/local/enrich.py
cra_evidence_cli/local/eol.py
cra_evidence_cli/local/java_semantic_evidence.schema.json
cra_evidence_cli/local/java_symbol_analyzer.java
cra_evidence_cli/local/mermaid.py
cra_evidence_cli/local/models.py
cra_evidence_cli/local/osv.py
cra_evidence_cli/local/policy.py
cra_evidence_cli/local/report.py
cra_evidence_cli/local/rules_pack.py
cra_evidence_cli/local/rust_semantic_analyzer.py
cra_evidence_cli/local/rust_semantic_evidence.schema.json
cra_evidence_cli/local/sast_scanner.py
cra_evidence_cli/local/sbom.py
cra_evidence_cli/local/scanner.py
cra_evidence_cli/local/secrets.py
cra_evidence_cli/local/securitytxt.py
cra_evidence_cli/local/semantic-evidence-NOTICE
cra_evidence_cli/local/semantic_evidence.py
cra_evidence_cli/local/semantic_evidence.schema.json
cra_evidence_cli/local/signal.py
cra_evidence_cli/local/vex.py
cra_evidence_cli/local/rules/LICENSE
cra_evidence_cli/local/rules/README.md
cra_evidence_cli/local/rules/c/filesystem/cra-c-insecure-temp-name.yaml
cra_evidence_cli/local/rules/c/format/cra-c-printf-argv-format.yaml
cra_evidence_cli/local/rules/c/injection/cra-c-system-argv.yaml
cra_evidence_cli/local/rules/c/injection/cra-c-system-getenv-taint.yaml
cra_evidence_cli/local/rules/c/memory/cra-c-fixed-array-literal-oob-write.yaml
cra_evidence_cli/local/rules/c/memory/cra-c-strcpy-argv.yaml
cra_evidence_cli/local/rules/c/tls/cra-c-curl-verification-disabled.yaml
cra_evidence_cli/local/rules/cpp/filesystem/cra-cpp-insecure-temp-name.yaml
cra_evidence_cli/local/rules/cpp/format/cra-cpp-printf-argv-format.yaml
cra_evidence_cli/local/rules/cpp/injection/cra-cpp-system-argv.yaml
cra_evidence_cli/local/rules/cpp/injection/cra-cpp-system-getenv-taint.yaml
cra_evidence_cli/local/rules/cpp/memory/cra-cpp-fixed-array-literal-oob-write.yaml
cra_evidence_cli/local/rules/cpp/memory/cra-cpp-strcpy-argv.yaml
cra_evidence_cli/local/rules/cpp/tls/cra-cpp-curl-verification-disabled.yaml
cra_evidence_cli/local/rules/csharp/crypto/cra-csharp-framework-md5-create.yaml
cra_evidence_cli/local/rules/csharp/crypto/cra-csharp-weak-hash.yaml
cra_evidence_cli/local/rules/csharp/deserialization/cra-csharp-binaryformatter-deserialize.yaml
cra_evidence_cli/local/rules/csharp/injection/cra-csharp-process-request-taint.yaml
cra_evidence_cli/local/rules/csharp/injection/cra-csharp-sql-request-taint.yaml
cra_evidence_cli/local/rules/csharp/path/cra-csharp-file-request-taint.yaml
cra_evidence_cli/local/rules/csharp/secrets/cra-csharp-jwt-hardcoded-secret.yaml
cra_evidence_cli/local/rules/csharp/ssrf/cra-csharp-httpclient-request-taint.yaml
cra_evidence_cli/local/rules/csharp/tls/cra-csharp-certificate-callback-accept-all.yaml
cra_evidence_cli/local/rules/csharp/tls/cra-csharp-framework-dangerous-certificate-validator.yaml
cra_evidence_cli/local/rules/go/concurrency/cra-go-wrong-lock-unlock.yaml
cra_evidence_cli/local/rules/go/crypto/cra-go-hmac-reused-hash.yaml
cra_evidence_cli/local/rules/go/crypto/cra-go-hmac-timing.yaml
cra_evidence_cli/local/rules/go/crypto/cra-go-weak-hash.yaml
cra_evidence_cli/local/rules/go/injection/cra-go-shell-command-injection.yaml
cra_evidence_cli/local/rules/go/integer/cra-go-parseint-downcast.yaml
cra_evidence_cli/local/rules/go/tls/cra-go-tls-direct-dial-insecure.yaml
cra_evidence_cli/local/rules/go/tls/cra-go-tls-insecure.yaml
cra_evidence_cli/local/rules/java/crypto/cra-java-jdk-weak-message-digest-literal.yaml
cra_evidence_cli/local/rules/java/crypto/cra-java-weak-message-digest.yaml
cra_evidence_cli/local/rules/java/deserialization/cra-java-objectinputstream-readobject.yaml
cra_evidence_cli/local/rules/java/injection/cra-java-runtime-exec-request.yaml
cra_evidence_cli/local/rules/java/injection/cra-java-sql-request-taint.yaml
cra_evidence_cli/local/rules/java/path/cra-java-file-request-taint.yaml
cra_evidence_cli/local/rules/java/ssrf/cra-java-url-request-taint.yaml
cra_evidence_cli/local/rules/java/tls/cra-java-hostname-verifier-accept-all.yaml
cra_evidence_cli/local/rules/java/xml/cra-java-xxe-doctype-enabled.yaml
cra_evidence_cli/local/rules/javascript/injection/cra-javascript-eval.yaml
cra_evidence_cli/local/rules/javascript/injection/cra-javascript-exec-injection.yaml
cra_evidence_cli/local/rules/javascript/integer/cra-javascript-odd-unsafe-integer-literal.yaml
cra_evidence_cli/local/rules/php/crypto/cra-php-superglobal-password-md5.yaml
cra_evidence_cli/local/rules/php/deserialization/cra-php-global-unserialize-superglobal.yaml
cra_evidence_cli/local/rules/php/deserialization/cra-php-unserialize-superglobal.yaml
cra_evidence_cli/local/rules/php/injection/cra-php-command-superglobal.yaml
cra_evidence_cli/local/rules/php/injection/cra-php-sql-superglobal-taint.yaml
cra_evidence_cli/local/rules/php/path/cra-php-file-superglobal-taint.yaml
cra_evidence_cli/local/rules/php/ssrf/cra-php-curl-url-superglobal-taint.yaml
cra_evidence_cli/local/rules/php/xss/cra-php-echo-superglobal-taint.yaml
cra_evidence_cli/local/rules/python/deserialization/cra-python-pickle-loads.yaml
cra_evidence_cli/local/rules/python/deserialization/cra-python-yaml-load.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-allowed-hosts-wildcard.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-csrf-exempt.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-file-path-traversal.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-format-html-interpolated.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-hardcoded-secret-key.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-httpresponse-html-taint.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-mark-safe-request.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-open-redirect.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-queryset-extra-format.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-raw-sql-format.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-rawsql-expression.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-safe-filter-templatetag.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-session-cookie-insecure.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-settings-debug-true.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-signing-loads-untrusted.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-ssl-redirect-disabled.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-cors-wildcard-credentials.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-debug-true.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-hardcoded-secret-key.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-jsonify-request-reflect-secret.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-markup-untrusted.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-open-redirect.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-plaintext-password-compare.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-render-template-string-ssti.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-response-html-taint.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-send-file-path-traversal.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-session-cookie-httponly-false.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-session-cookie-insecure-false.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-wtf-csrf-disabled.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-sql-injection.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-subprocess-shell.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-taint-eval-exec.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-taint-sql-inject.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-taint-subprocess-shell.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-decode-alg-none.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-decode-missing-algorithms.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-decode-verify-disabled.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-hardcoded-secret.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-exec-driver-sql-interpolation.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-literal-column-dynamic.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-order-by-text-interpolation.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-text-interpolation.yaml
cra_evidence_cli/local/rules/rust/crypto/cra-rust-weak-digest.yaml
cra_evidence_cli/local/rules/rust/injection/cra-rust-shell-command-env-args.yaml
cra_evidence_cli/local/rules/rust/injection/cra-rust-sqlx-query-env-taint.yaml
cra_evidence_cli/local/rules/rust/path/cra-rust-file-env-taint.yaml
cra_evidence_cli/local/rules/rust/secrets/cra-rust-jsonwebtoken-hardcoded-secret.yaml
cra_evidence_cli/local/rules/rust/ssrf/cra-rust-reqwest-env-taint.yaml
cra_evidence_cli/local/rules/rust/tls/cra-rust-cratesio-reqwest-invalid-certs.yaml
cra_evidence_cli/local/rules/rust/tls/cra-rust-reqwest-invalid-certs.yaml
craevidence.egg-info/PKG-INFO
craevidence.egg-info/SOURCES.txt
craevidence.egg-info/dependency_links.txt
craevidence.egg-info/entry_points.txt
craevidence.egg-info/requires.txt
craevidence.egg-info/top_level.txt
tests/test_assessment.py
tests/test_build_engine_distributions.py
tests/test_check_dhi_base.py
tests/test_check_dist.py
tests/test_check_multi_output.py
tests/test_ci_detect.py
tests/test_ci_wrappers.py
tests/test_client.py
tests/test_client_retry.py
tests/test_code_check_command.py
tests/test_code_evidence_command.py
tests/test_compare_command.py
tests/test_components_command.py
tests/test_config.py
tests/test_config_check_command.py
tests/test_container_semantic_frontend.py
tests/test_create_version_command.py
tests/test_csaf_schema.py
tests/test_cyclonedx_vex_builder.py
tests/test_db_update.py
tests/test_diagram_command.py
tests/test_disclaimer.py
tests/test_doc_type_parity.py
tests/test_draft_command.py
tests/test_draft_scaffolds.py
tests/test_draft_threat_diagram.py
tests/test_egress_command.py
tests/test_engine.py
tests/test_eol_command.py
tests/test_evidence_checker.py
tests/test_evidence_command.py
tests/test_exceptions.py
tests/test_fetch_opengrep_release.py
tests/test_fixture_semantics.py
tests/test_gemara_template_offline.py
tests/test_local_annotations.py
tests/test_local_check.py
tests/test_local_config_audit.py
tests/test_local_egress.py
tests/test_local_eol.py
tests/test_local_mermaid.py
tests/test_local_policy.py
tests/test_local_secrets.py
tests/test_local_securitytxt.py
tests/test_local_vex.py
tests/test_osv_fallback.py
tests/test_output_parent.py
tests/test_plain_language_guard.py
tests/test_prepare_release_dist.py
tests/test_profile_command.py
tests/test_ra_command.py
tests/test_ra_review_command.py
tests/test_reconcile_release_sboms.py
tests/test_recover_pypi_attestations.py
tests/test_registry_crane.py
tests/test_release_command.py
tests/test_repo_config.py
tests/test_report.py
tests/test_rulepack.py
tests/test_rulepack_evidence.py
tests/test_sarif_command.py
tests/test_sast_scanner.py
tests/test_sbom_signer.py
tests/test_sbomqs_check.py
tests/test_scan_command.py
tests/test_secrets_command.py
tests/test_semantic_evidence.py
tests/test_status_command.py
tests/test_trust_attestation_key_command.py
tests/test_upload_command.py
tests/test_upload_defaults.py
tests/test_upload_hbom_csv.py
tests/test_validate_command.py
tests/test_validate_release_sboms.py
tests/test_verify_pypi_release.py