Metadata-Version: 2.4
Name: verinfast
Version: 0.7.6
Summary: This tool safely and securely analyzes applications for benchmarking.
Project-URL: Homepage, https://github.com/VerinFast/verinfast
Project-URL: Bug Tracker, https://github.com/VerinFast/verinfast/issues
Project-URL: Source, https://github.com/VerinFast/verinfast
Author-email: Jason Nichols <github@verinfast.com>, Sean Conrad <github@verinfast.com>
License-File: LICENSE
Classifier: License :: Free for non-commercial use
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Requires-Python: <=3.14,>=3.11
Requires-Dist: azure-identity~=1.25.0
Requires-Dist: azure-mgmt-compute~=37.2.0
Requires-Dist: azure-mgmt-monitor~=7.0.0
Requires-Dist: azure-mgmt-network~=30.2.0
Requires-Dist: azure-mgmt-resource~=25.0.0
Requires-Dist: azure-mgmt-storage~=24.0.0
Requires-Dist: azure-monitor-query~=1.4.0
Requires-Dist: boto3~=1.42.0
Requires-Dist: defusedxml~=0.7.1
Requires-Dist: gemfileparser~=0.8.0
Requires-Dist: google-cloud-compute>=1.14.0
Requires-Dist: google-cloud-monitoring>=2.15.0
Requires-Dist: google-cloud-storage>=2.10.0
Requires-Dist: httpx[http2]~=0.28.1
Requires-Dist: jinja2==3.1.6
Requires-Dist: johnnydep~=1.20.6
Requires-Dist: modernmetric>=1.5.9
Requires-Dist: psutil~=7.2.0
Requires-Dist: pygments-tsx>=1.0.1
Requires-Dist: pyyaml~=6.0.2
Requires-Dist: semgrep==1.136.0; python_version == '3.9'
Requires-Dist: semgrep==1.152.0; python_version != '3.9'
Requires-Dist: tomli>=2.0.0; python_version < '3.11'
Requires-Dist: windows-curses~=2.4.0; sys_platform == 'win32'
Provides-Extra: dev
Requires-Dist: black>=26.1.0; extra == 'dev'
Requires-Dist: coverage; extra == 'dev'
Requires-Dist: pytest; extra == 'dev'
Requires-Dist: pytest-cov; extra == 'dev'
Requires-Dist: pytest-xdist; extra == 'dev'
Description-Content-Type: text/markdown

[![Python Release](https://github.com/StartupOS/verinfast/actions/workflows/release.yml/badge.svg?event=release)](https://github.com/StartupOS/verinfast/actions/workflows/release.yml)
[![codecov](https://codecov.io/gh/StartupOS/verinfast/graph/badge.svg?token=IECR8RD60P)](https://codecov.io/gh/StartupOS/verinfast)
[![Contributor Covenant](https://img.shields.io/badge/Contributor%20Covenant-2.1-4baaaa.svg)](code_of_conduct.md)
# VerinFast™

Scan your codebase to reveal language breakdown, dependencies, OWASP vulnerabilities, cloud costs, and exactly what AI is adding to your application.

## Installation

### pip

```sh
pip install verinfast
```

### pipx

```sh
pipx install verinfast
```

### Poetry

```sh
poetry add verinfast
```

### Docker

```sh
docker build -t verinfast .
docker run --rm -v $(pwd):/usr/src/app verinfast
```

## Requirements

- Python 3.9+ (test with `python3 --version`)
- SSH access to code repositories (test with `git status`)
- Command line tool access to cloud hosting providers (AWS CLI, Azure CLI, or gcloud)
- Your dependency management tools (e.g. `npm`, `yarn`, `maven`, `pip`, `poetry`)
- Outbound internet access (for posting results and fetching dependency metadata)

## Usage

```sh
# Run in a directory with a config.yaml file
verinfast

# Point to a specific config file
verinfast --config=/path/to/config.yaml

# Set a custom output directory
verinfast --output=/path/to/output

# Check the installed version
verinfast --version
```

## Config Options

If you want to check the output for yourself you can set `should_upload: false`, and use the flag `--output=/path/to/dir`. This will give you the chance to inspect what we collect before uploading. For large repositories, it is a lot of information, but we never upload your code or any credentials, just the summary data we collect.

## Troubleshooting

### Python
- Run `python3 -m pip install --upgrade pip setuptools wheel`

### git
- Run `which git`, `git --version`
- Run `ssh -vT git@github.com` to test access to GitHub

### AWS
- Run `which aws`, `aws --version`

### Azure
- Run `az login`, `az --version`
- Run `az account subscription list` to check subscription ID

### GCP
- Run `which gcloud`, `gcloud --version`

### Semgrep
- Run `which semgrep`, `semgrep --version`

Copyright ©2023-2026 Startos Inc.
