LICENSE
README.md
pyproject.toml
cra_evidence_cli/__init__.py
cra_evidence_cli/__main__.py
cra_evidence_cli/ci_detect.py
cra_evidence_cli/cli.py
cra_evidence_cli/client.py
cra_evidence_cli/config.py
cra_evidence_cli/display.py
cra_evidence_cli/exceptions.py
cra_evidence_cli/ikconfig.py
cra_evidence_cli/repo_config.py
cra_evidence_cli/sbom_generator.py
cra_evidence_cli/sbom_signer.py
cra_evidence_cli/sbomqs_check.py
cra_evidence_cli/styles.py
cra_evidence_cli/assessment/__init__.py
cra_evidence_cli/assessment/config.py
cra_evidence_cli/assessment/detect.py
cra_evidence_cli/assessment/gate.py
cra_evidence_cli/assessment/matrix.py
cra_evidence_cli/assessment/requirements.py
cra_evidence_cli/assessment/select.py
cra_evidence_cli/assessment/templates.py
cra_evidence_cli/assessment/templates/consumer-iot.yaml
cra_evidence_cli/assessment/templates/library-sdk.yaml
cra_evidence_cli/assessment/templates/microcontroller.yaml
cra_evidence_cli/assessment/templates/operating-system.yaml
cra_evidence_cli/assessment/templates/router-gateway.yaml
cra_evidence_cli/assessment/templates/saas-service.yaml
cra_evidence_cli/assessment/templates/vpn.yaml
cra_evidence_cli/commands/__init__.py
cra_evidence_cli/commands/assessment.py
cra_evidence_cli/commands/check.py
cra_evidence_cli/commands/code_check.py
cra_evidence_cli/commands/compare.py
cra_evidence_cli/commands/components.py
cra_evidence_cli/commands/config_check.py
cra_evidence_cli/commands/db.py
cra_evidence_cli/commands/diagram.py
cra_evidence_cli/commands/distributor.py
cra_evidence_cli/commands/draft.py
cra_evidence_cli/commands/egress.py
cra_evidence_cli/commands/eol.py
cra_evidence_cli/commands/evidence.py
cra_evidence_cli/commands/export.py
cra_evidence_cli/commands/gemara.py
cra_evidence_cli/commands/maturity.py
cra_evidence_cli/commands/profile.py
cra_evidence_cli/commands/release.py
cra_evidence_cli/commands/scan.py
cra_evidence_cli/commands/secrets.py
cra_evidence_cli/commands/status.py
cra_evidence_cli/commands/upload.py
cra_evidence_cli/commands/validate.py
cra_evidence_cli/commands/verify.py
cra_evidence_cli/evidence_checker/__init__.py
cra_evidence_cli/evidence_checker/engine.py
cra_evidence_cli/local/__init__.py
cra_evidence_cli/local/annotations.py
cra_evidence_cli/local/config_audit.py
cra_evidence_cli/local/csaf.py
cra_evidence_cli/local/dbcache.py
cra_evidence_cli/local/disclaimer.py
cra_evidence_cli/local/egress.py
cra_evidence_cli/local/enrich.py
cra_evidence_cli/local/eol.py
cra_evidence_cli/local/mermaid.py
cra_evidence_cli/local/models.py
cra_evidence_cli/local/osv.py
cra_evidence_cli/local/policy.py
cra_evidence_cli/local/report.py
cra_evidence_cli/local/rules_pack.py
cra_evidence_cli/local/sast_scanner.py
cra_evidence_cli/local/sbom.py
cra_evidence_cli/local/scanner.py
cra_evidence_cli/local/secrets.py
cra_evidence_cli/local/securitytxt.py
cra_evidence_cli/local/signal.py
cra_evidence_cli/local/vex.py
cra_evidence_cli/local/rules/LICENSE
cra_evidence_cli/local/rules/README.md
cra_evidence_cli/local/rules/go/concurrency/cra-go-wrong-lock-unlock.yaml
cra_evidence_cli/local/rules/go/crypto/cra-go-hmac-reused-hash.yaml
cra_evidence_cli/local/rules/go/crypto/cra-go-hmac-timing.yaml
cra_evidence_cli/local/rules/go/crypto/cra-go-weak-hash.yaml
cra_evidence_cli/local/rules/go/integer/cra-go-parseint-downcast.yaml
cra_evidence_cli/local/rules/go/tls/cra-go-tls-insecure.yaml
cra_evidence_cli/local/rules/javascript/injection/cra-javascript-eval.yaml
cra_evidence_cli/local/rules/javascript/injection/cra-javascript-exec-injection.yaml
cra_evidence_cli/local/rules/python/deserialization/cra-python-pickle-loads.yaml
cra_evidence_cli/local/rules/python/deserialization/cra-python-yaml-load.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-allowed-hosts-wildcard.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-csrf-exempt.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-file-path-traversal.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-format-html-interpolated.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-hardcoded-secret-key.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-httpresponse-html-taint.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-mark-safe-request.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-open-redirect.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-queryset-extra-format.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-raw-sql-format.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-rawsql-expression.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-safe-filter-templatetag.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-session-cookie-insecure.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-settings-debug-true.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-signing-loads-untrusted.yaml
cra_evidence_cli/local/rules/python/django/cra-python-django-ssl-redirect-disabled.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-cors-wildcard-credentials.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-debug-true.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-hardcoded-secret-key.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-jsonify-request-reflect-secret.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-markup-untrusted.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-open-redirect.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-plaintext-password-compare.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-render-template-string-ssti.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-send-file-path-traversal.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-session-cookie-httponly-false.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-session-cookie-insecure-false.yaml
cra_evidence_cli/local/rules/python/flask/cra-python-flask-wtf-csrf-disabled.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-sql-injection.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-subprocess-shell.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-taint-eval-exec.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-taint-sql-inject.yaml
cra_evidence_cli/local/rules/python/injection/cra-python-taint-subprocess-shell.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-decode-alg-none.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-decode-missing-algorithms.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-decode-verify-disabled.yaml
cra_evidence_cli/local/rules/python/jwt/cra-python-jwt-hardcoded-secret.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-exec-driver-sql-interpolation.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-literal-column-dynamic.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-order-by-text-interpolation.yaml
cra_evidence_cli/local/rules/python/sqlalchemy/cra-python-sqlalchemy-text-interpolation.yaml
craevidence.egg-info/PKG-INFO
craevidence.egg-info/SOURCES.txt
craevidence.egg-info/dependency_links.txt
craevidence.egg-info/entry_points.txt
craevidence.egg-info/requires.txt
craevidence.egg-info/top_level.txt
tests/test_assessment.py
tests/test_check_multi_output.py
tests/test_ci_detect.py
tests/test_ci_wrappers.py
tests/test_client.py
tests/test_client_retry.py
tests/test_code_check_command.py
tests/test_compare_command.py
tests/test_components_command.py
tests/test_config.py
tests/test_config_check_command.py
tests/test_csaf_schema.py
tests/test_db_update.py
tests/test_diagram_command.py
tests/test_disclaimer.py
tests/test_doc_type_parity.py
tests/test_draft_command.py
tests/test_draft_scaffolds.py
tests/test_draft_threat_diagram.py
tests/test_egress_command.py
tests/test_eol_command.py
tests/test_evidence_checker.py
tests/test_evidence_command.py
tests/test_exceptions.py
tests/test_gemara_template_offline.py
tests/test_local_annotations.py
tests/test_local_check.py
tests/test_local_config_audit.py
tests/test_local_egress.py
tests/test_local_eol.py
tests/test_local_mermaid.py
tests/test_local_policy.py
tests/test_local_secrets.py
tests/test_local_securitytxt.py
tests/test_local_vex.py
tests/test_osv_fallback.py
tests/test_output_parent.py
tests/test_release_command.py
tests/test_repo_config.py
tests/test_report.py
tests/test_rulepack.py
tests/test_sarif_command.py
tests/test_sast_scanner.py
tests/test_sbom_signer.py
tests/test_sbomqs_check.py
tests/test_scan_command.py
tests/test_secrets_command.py
tests/test_status_command.py
tests/test_upload_command.py
tests/test_upload_defaults.py
tests/test_upload_hbom_csv.py