FilesExpand file tree

main

/

pyproject.toml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

119 lines (105 loc) · 3.64 KB

main

/

pyproject.toml

Copy path

Top

File metadata and controls

• Code
• Blame

119 lines (105 loc) · 3.64 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

[build-system]

requires = ["setuptools>=45", "wheel"]

build-backend = "setuptools.build_meta"

[project]

name = "codepathfinder"

version = "2.1.1"

description = "Python SDK for code-pathfinder static analysis for modern security teams"

readme = "README.md"

requires-python = ">=3.9"

license = {text = "Apache-2.0"}

authors = [{name = "code-pathfinder contributors"}]

keywords = ["sast", "security", "static-analysis", "codeql-alternative"]

classifiers = [

"Development Status :: 4 - Beta",

"Intended Audience :: Developers",

"License :: OSI Approved :: Apache Software License",

"Programming Language :: Python :: 3",

"Programming Language :: Python :: 3.9",

"Programming Language :: Python :: 3.10",

"Programming Language :: Python :: 3.11",

"Programming Language :: Python :: 3.12",

"Programming Language :: Python :: 3.13",

"Topic :: Security",

"Topic :: Software Development :: Testing",

"Typing :: Typed",

]

[project.scripts]

pathfinder = "codepathfinder.cli:main"

[project.urls]

Homepage = "https://codepathfinder.dev"

Repository = "https://github.com/shivasurya/code-pathfinder"

Documentation = "https://codepathfinder.dev"

[project.optional-dependencies]

dev = [

"pytest>=7.0.0",

"pytest-cov>=4.0.0",

"mypy>=1.0.0",

"ruff>=0.1.0",

]

[tool.pytest.ini_options]

testpaths = ["tests"]

python_files = "test_*.py"

python_functions = "test_*"

addopts = "--cov=codepathfinder --cov-report=term-missing --cov-report=html"

[tool.coverage.run]

source = ["codepathfinder"]

omit = ["tests/*", "setup.py"]

[tool.coverage.report]

exclude_lines = [

"pragma: no cover",

"def __repr__",

"raise AssertionError",

"raise NotImplementedError",

"if __name__ == .__main__.:",

]

[tool.ruff]

line-length = 88

target-version = "py39"

[tool.ruff.lint]

select = [

"E", # pycodestyle errors

"F", # pyflakes

"W", # pycodestyle warnings

"I", # isort

"B", # flake8-bugbear

"RUF", # ruff-specific rules

# "UP" (pyupgrade) is deliberately omitted for now: enabling it would

# rewrite ~120 type annotations (typing.List -> list, etc.) across the

# package in one go. Track that as a dedicated modernization pass.

]

# B008: function calls in argument defaults — used for `field(default_factory=...)`

# E501: line length is enforced by the formatter, not the linter

# RUF012: mutable class defaults — the QueryType DSL exposes `fqns = [...]` /

# `patterns = [...]` as the public API surface; ClassVar would obscure it

ignore = ["B008", "E501", "RUF012"]

[tool.ruff.lint.per-file-ignores]

# Handcrafted metadata dicts — very long strings/lines, no security cost.

"codepathfinder/python_rule_meta.py" = ["E501", "RUF"]

"codepathfinder/go_rule_meta.py" = ["E501", "RUF"]

# Tests may use builtin shadowing in fixtures, etc.

"tests/*" = ["B011"]

[tool.mypy]

# CI runs mypy on each Python in the matrix; let mypy infer python_version

# from the running interpreter instead of pinning here (mypy dropped 3.9 as

# a valid `python_version` setting in recent releases).

warn_return_any = true

warn_unused_configs = true

warn_redundant_casts = true

warn_unused_ignores = true

no_implicit_optional = true

check_untyped_defs = true

disallow_incomplete_defs = true

# Handcrafted metadata dicts (`SDK_META`) are intentionally `Dict[str, Any]`

# with nested arbitrary shapes. Strict checking would add noise without value.

[[tool.mypy.overrides]]

module = [

"codepathfinder.python_rule_meta",

"codepathfinder.go_rule_meta",

]

ignore_errors = true

[tool.setuptools.packages.find]

where = ["."]

include = ["codepathfinder*", "rules*"]

[tool.setuptools.package-data]

codepathfinder = ["bin/*", "py.typed"]