sarand report — hybrid-project

Generated 2026-01-01 12:00:00 on kali · scan engine: Rust core

Python — workspace (pip + cargo + go mod)
Languages: Python, Rust, Go
Entry points: src/main.py, src/lib.rs, cmd/server/main.go
Assembly dialects: x86 (NASM): 2 file(s), ARM: 1 file(s)

76.0/100 (C)

Check coverage: 9 ran, 1 skipped (tool not installed), confidence 90%

Tests	18.0
Quality	15.0
Security	12.0
Git	10.0
Code	11.0
Tooling	10.0

Critical:

1 potential secret was found in tracked source

Recommendations:

Fix the failing cargo test
Rotate the leaked credential

⚠ Secrets

Excluded (credential-shaped filenames, never read — AGENTS.md §4.10):

.env

Excluded (content matched a secret pattern — see findings below):

config/secrets.env

File	Line	Pattern
`config/secrets.env`	3	AWS Secret Key
`tests/fixtures/dummy_key.py`	1	Generic API Key

Project statistics

Total files: 196 · LOC: 12000
By extension: .ext0 (12), .ext1 (11), .ext2 (10), .ext3 (9), .ext4 (8), .ext5 (7), .ext6 (6), .ext7 (5), .ext8 (4), .ext9 (3)
Binary: 2 · Hidden: 3 · Empty: 1 · Broken symlinks: 1

AI Summary

This is a hybrid Python/Rust/Go workspace with one failing test.

Test results

pytest PASS

120 passed

cargo test FAIL

1 failed, 40 passed

Full output

test add ... FAILED
thread 'main' panicked

go test SKIP

go not installed

Quality checks

ruff PASS

All checks passed!

cargo clippy FAIL

2 warnings

Full output

warning: unused import
warning: needless clone

Security checks

bandit PASS

No issues identified.

gitleaks FAIL

1 leak found

Full output

1 leak found

Errors detected (2)

Source	Message
cargo test	`add() off by one`
gitleaks	`possible API key`

Warnings detected (3)

Source	Message
ruff	`line too long`
clippy	`unused import`
clippy	`needless clone`

Project tree

hybrid-project/
├── src/
│   ├── main.py
│   └── lib.rs
└── README.md

Included files (3 included / 1 skipped / 2 excluded)

src/main.py (28.0 B)

def main():
    print("hi")

src/lib.rs (48.0 B)

pub fn add(a: i32, b: i32) -> i32 {
    a + b
}

README.md (14.0 B)

# Hybrid demo