.dockerignore
.gitattributes
.gitignore
.pre-commit-hooks.yaml
CHANGELOG.md
CONTRIBUTING.md
Dockerfile
LICENSE
MANIFEST.in
README.md
SECURITY.md
action.yml
mkdocs.yml
pyproject.toml
.github/CODEOWNERS
.github/dependabot.yml
.github/trustcheck-action-fail-policy.json
.github/ISSUE_TEMPLATE/general.yml
.github/workflows/acceptance-matrix.yml
.github/workflows/action-integration.yml
.github/workflows/bandit.yml
.github/workflows/benchmarks.yml
.github/workflows/binary-security.yml
.github/workflows/ci.yml
.github/workflows/codeql.yml
.github/workflows/docs.yml
.github/workflows/fuzz.yml
.github/workflows/live-integration.yml
.github/workflows/mutation.yml
.github/workflows/plagiarism-scan.yml
.github/workflows/post-release-parity.yml
.github/workflows/publish.yml
.github/workflows/sarif-integration.yml
.github/workflows/semgrep.yml
.github/workflows/source-build.yml
benchmarks/README.md
benchmarks/benchmark_against_pip_audit.py
benchmarks/measure_command.py
benchmarks/corpus/corpus.json
benchmarks/corpus/malicious-calibration.json
benchmarks/corpus/pdm.lock
benchmarks/corpus/poetry.lock
benchmarks/corpus/pylock.toml
benchmarks/corpus/requirements-hashed.txt
benchmarks/corpus/requirements-main.txt
benchmarks/corpus/requirements-malformed.txt
benchmarks/corpus/requirements-markers-extras.txt
benchmarks/corpus/requirements-private-index.txt
benchmarks/corpus/requirements-profiles.txt
benchmarks/corpus/requirements-resolution.txt
benchmarks/corpus/requirements-vcs-editable.txt
benchmarks/corpus/requirements.txt
benchmarks/corpus/truth-public-key.pem
benchmarks/corpus/truth.json
benchmarks/corpus/truth.json.sig
benchmarks/corpus/uv.lock
benchmarks/results/benchmark-public-key.pem
benchmarks/results/latest.json
benchmarks/results/latest.json.sig
docs/changelog.md
docs/index.md
docs/assets/images/logo-bg-less.png
docs/assets/images/logo.png
docs/assets/javascripts/disable-search-shortcut.js
docs/cli/configuration.md
docs/cli/exit-codes.md
docs/cli/index.md
docs/cli/policies.md
docs/getting-started/installation.md
docs/getting-started/quickstart.md
docs/guides/ci-integration.md
docs/reference/benchmarks.md
docs/reference/compatibility.md
docs/reference/industry-formats.md
docs/reference/json-contract.md
docs/reference/malicious-package-detection.md
docs/reference/performance-extensibility.md
docs/reference/python-api.md
docs/reference/recommendations.md
docs/reference/remediation.md
docs/reference/trust-model.md
fuzz/README.md
fuzz/fuzz_artifacts.py
fuzz/fuzz_exports.py
fuzz/fuzz_indexes.py
fuzz/fuzz_lockfiles.py
fuzz/fuzz_provenance.py
fuzz/fuzz_requirements.py
requirements/action.lock
requirements/ci.in
requirements/ci.lock
requirements/fuzz.in
requirements/fuzz.lock
requirements/runtime.in
requirements/runtime.lock
requirements/semgrep.in
requirements/semgrep.lock
scripts/acceptance_matrix.py
scripts/benchmark_signature.py
scripts/build_msix_layout.py
scripts/build_standalone.py
scripts/check_mutation_score.py
scripts/dependency_bounds.py
scripts/export_homebrew_tap.py
scripts/github_plagiarism_scan.py
scripts/smoke_test_distribution.py
scripts/trustcheck_binary.py
scripts/update_benchmark_table.py
scripts/update_coverage_badge.py
scripts/validate_sarif.py
scripts/verify_release_channels.py
scripts/verify_release_version.py
snap/README.md
snap/snapcraft.yaml
snap/gui/icon.png
src/trustcheck/__init__.py
src/trustcheck/__main__.py
src/trustcheck/_resolver_guard.py
src/trustcheck/_version.py
src/trustcheck/advisories.py
src/trustcheck/artifacts.py
src/trustcheck/attestations.py
src/trustcheck/cache.py
src/trustcheck/cli.py
src/trustcheck/cli_models.py
src/trustcheck/cli_render.py
src/trustcheck/cli_runtime.py
src/trustcheck/cli_targets.py
src/trustcheck/contract.py
src/trustcheck/diff.py
src/trustcheck/doctor.py
src/trustcheck/dynamic.py
src/trustcheck/export_models.py
src/trustcheck/export_xml.py
src/trustcheck/exports.py
src/trustcheck/github_action.py
src/trustcheck/impact.py
src/trustcheck/indexes.py
src/trustcheck/lockfiles.py
src/trustcheck/malicious.py
src/trustcheck/manifest.py
src/trustcheck/models.py
src/trustcheck/plugins.py
src/trustcheck/policy.py
src/trustcheck/pre_commit.py
src/trustcheck/provenance.py
src/trustcheck/py.typed
src/trustcheck/pypi.py
src/trustcheck/remediation.py
src/trustcheck/remediation_models.py
src/trustcheck/remediation_render.py
src/trustcheck/resolver.py
src/trustcheck/resume.py
src/trustcheck/schemas.py
src/trustcheck/service.py
src/trustcheck/service_state.py
src/trustcheck/service_urls.py
src/trustcheck/snapshots.py
src/trustcheck/workspace.py
src/trustcheck.egg-info/PKG-INFO
src/trustcheck.egg-info/SOURCES.txt
src/trustcheck.egg-info/dependency_links.txt
src/trustcheck.egg-info/entry_points.txt
src/trustcheck.egg-info/requires.txt
src/trustcheck.egg-info/top_level.txt
src/trustcheck/cli_commands/__init__.py
src/trustcheck/cli_commands/context.py
src/trustcheck/cli_commands/diff.py
src/trustcheck/cli_commands/doctor.py
src/trustcheck/cli_commands/environment.py
src/trustcheck/cli_commands/impact.py
src/trustcheck/cli_commands/inspect.py
src/trustcheck/cli_commands/install.py
src/trustcheck/cli_commands/manifest.py
src/trustcheck/cli_commands/scan.py
tests/test_advisories.py
tests/test_artifacts.py
tests/test_attestations.py
tests/test_benchmark_results.py
tests/test_binary_security_workflow.py
tests/test_ci_workflow.py
tests/test_cli.py
tests/test_contract.py
tests/test_dependency_bounds.py
tests/test_diff.py
tests/test_docker_workflows.py
tests/test_doctor.py
tests/test_dynamic.py
tests/test_edge_cases.py
tests/test_exports.py
tests/test_github_action.py
tests/test_homebrew_tap_export.py
tests/test_impact.py
tests/test_indexes.py
tests/test_install_command.py
tests/test_integration_live.py
tests/test_lockfiles.py
tests/test_malicious.py
tests/test_manifest.py
tests/test_msix_packaging.py
tests/test_mutation_score.py
tests/test_performance_extensibility.py
tests/test_plagiarism_scan.py
tests/test_plugin_security.py
tests/test_pre_commit.py
tests/test_property_invariants.py
tests/test_provenance.py
tests/test_public_api.py
tests/test_pypi.py
tests/test_release_channels.py
tests/test_release_executable.py
tests/test_release_readiness.py
tests/test_release_version.py
tests/test_remediation.py
tests/test_resolver.py
tests/test_resolver_guard.py
tests/test_sarif_validation.py
tests/test_scan_profiles.py
tests/test_service.py
tests/test_snap_packaging.py
tests/test_workspace.py
tests/_tmp/bad-scan.toml
tests/_tmp/config_non_object.json
tests/_tmp/empty-scan.toml
tests/_tmp/empty-scan.txt
tests/_tmp/invalid-scan.txt
tests/_tmp/policy_non_object.json
tests/_tmp/scan-poetry.toml
tests/_tmp/scan-project.toml
tests/_tmp/cache/5e491d79f8ba9e36d864ae50c690989677616cd509e5b99abb9272c8ad976435.json
tests/fixtures/client_config.json
tests/fixtures/policy_require_expected_repo.json
tests/fixtures/requirements-vulnerable.txt
tests/snapshots/contract_schema.json
tests/snapshots/report_minimal.json
tests/snapshots/report_verified.json