securesauce/precli

Issues

• Ability give a project on PyPI as a target

  #540 opened 11 days ago by ericwb
  0

• Use plugin model for targets

  #539 opened 12 days ago by ericwb
  1

• Global timeout should support multi-file analysis

  #611 opened a month ago by ericwb
  0

• New rule to check for network clients without a timeout

  #519 opened 2 months ago by ericwb
  0

• Add swift as a supported language to analyze

  #597 opened 2 months ago by ericwb
  0

• Use asciicast to create animated gifs for the example output in the docs

  #596 opened 2 months ago by ericwb
  0

• New rules to check for os.setuid(0)

  #587 opened 2 months ago by ericwb
  0

• augmented_assignment node not handled

  #510 opened 2 months ago by ericwb
  0

• Package precli into a binary

  #583 opened 2 months ago by ericwb
  0

• Utilize AI to review the fix suggestion

  #551 opened 3 months ago by ericwb
  0

• Redo renderers to be extensions entry_points

  #541 opened 3 months ago by ericwb
  0

• Add executable code examples as part of docs

  #524 opened 4 months ago by ericwb
  0

• Error when invalid rule ID or category name given for enable/disable

  #536 opened 4 months ago by ericwb
  2

• Support using ranges for the rule enable/disable argument

  #531 opened 4 months ago by ericwb
  0

• Mult-line underlining not working properly in plain renderer

  #529 opened 4 months ago by ericwb
  0

• New rules for an anonymous LDAP bind

  #444 opened 7 months ago by ericwb
  1

• Suggest fix of 127.0.0.1 for binding to all interfaces

  #445 opened 5 months ago by ericwb
  0

• Add —token to argparse rule

  #503 opened 5 months ago by ericwb
  0

• Traceback when targeting a file that doesn't exist

  #497 opened 5 months ago by ericwb
  0

• RecursionError: maximum recursion depth exceeded

  #471 opened 6 months ago by ericwb
  1

• Traceback when using plain output

  #493 opened 6 months ago by ericwb
  0

• Use multiprocessing in the file discovery

  #492 opened 6 months ago by ericwb
  0

• LookupError: unknown encoding: uft-8

  #480 opened 6 months ago by ericwb
  0

• ValueError: invalid literal for int() with base 10: 'n'

  #470 opened 6 months ago by ericwb
  1

• UnicodeDecodeError: 'utf-8' codec can't decode byte 0xf6 in position 2: invalid start byte

  #472 opened 6 months ago by ericwb
  0

• ValueError: invalid literal for int() with base 10: 'nbytes'

  #474 opened 6 months ago by ericwb
  0

• UnicodeDecodeError: 'utf-8' while scanning cpython

  #468 opened 6 months ago by ericwb
  0

• UnicodeDecodeError: 'utf-8' codec can't decode byte 0xf0 in position 1: invalid continuation byte

  #473 opened 6 months ago by ericwb
  0

• java.lang classes don't require import to resolve

  #455 opened 6 months ago by ericwb
  0

• Use taxa instead of tags to associate CWE in SARIF renderer

  #446 opened 7 months ago by ericwb
  0

• Java Rule for PBEKeySpec where iterations less than 1000

  #443 opened 7 months ago by ericwb
  0

• Insecure Cookie rule for Python code

  #442 opened 7 months ago by ericwb
  0

• Add rules for hardcoded passwords used in various functions

  #429 opened 7 months ago by ericwb
  0

• Add Java parser and example rule

  #413 opened 7 months ago by ericwb
  0

• Use version standard for --version output

  #409 opened 7 months ago by ericwb
  0

• Traceback on expression list assignment

  #407 opened 7 months ago by ericwb
  0

• Traceback on usage of importlib

  #405 opened 7 months ago by ericwb
  0

• CGIHTTPRequestHandler not intended for production

  #400 opened 7 months ago by ericwb
  0

• Rule check on SimpleXMLRPCServer.register_instance with allow_dotted_names parameter

  #399 opened 7 months ago by ericwb
  0

• False positive if parameter is zipped dictionary

  #398 opened 7 months ago by ericwb
  0

• Collate many results of the same rule ID

  #397 opened 7 months ago by ericwb
  0

• Add 'md5-sha1' to hashlib_weak_hash and hmac_digest_weak

  #382 opened 8 months ago by ericwb
  1

• Support parsing of Jupyter notebooks

  #381 opened 8 months ago by ericwb
  0

• New rule to detect regex denial-of-service

  #371 opened 8 months ago by ericwb
  0

• Add ability to automatically open an issue in the precli GitHub

  #370 opened 8 months ago by ericwb
  0

• Extra text appended to doc for for ssl_create_unverified_context

  #354 opened 8 months ago by ericwb
  0

• Add new rule to check for context=None in smtp.starttls or SMTP_SSL

  #342 opened 8 months ago by ericwb
  0

• Add new rule to check for context=None in stls or POP3_SSL

  #344 opened 8 months ago by ericwb
  0

• Add new rule to check for context=None in nntp.starttls or NNTP_SSL

  #343 opened 8 months ago by ericwb
  0

• Add new rule to check for context=None in starttls or IMAP4_SSL

  #345 opened 8 months ago by ericwb
  0