7ee5300d43
AST-aware, stdlib-only static checks: swallowed-exception-around-write (C1), undefined-name (C2), hardcoded-secret-literal (C3), fail-open-flag (C4), rotated-secret-captured-once (C5). Tests + CI + examples included. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
16 lines
620 B
Python
16 lines
620 B
Python
"""bugclass-detectors — AST-aware static checks for the silent-failure bug classes
|
|
that AI-generated and fast-moving code keeps reintroducing.
|
|
|
|
Public API:
|
|
from bugclass_detectors import run, CHECKS
|
|
findings = run(["./src"], checks=["C1", "C2", "C3", "C4", "C5"])
|
|
|
|
Each finding is a uniform dict:
|
|
{"check", "severity", "file", "lineno", "snippet", "why"}
|
|
|
|
Every check is READ-ONLY (reads files only), AST/tokenizer-aware (avoids the
|
|
false positives of blind grep), and dependency-free (Python stdlib only).
|
|
"""
|
|
from .core import run, CHECKS, F, __version__
|
|
|
|
__all__ = ["run", "CHECKS", "F", "__version__"]
|