=5bCrC n d dl Z d dlZd dlZd dlmZ dd ej d ej dej feffZdd ej d ej d
ffd d ej d
fdd ej d ffZ dd ej d fdd ej d ffZ
d Z d Z d Z
dS ) N)partialaws_secret_keyz Amazon Web Services secret keyz (\'|")[A-Za-z0-9\\\+]{40}(\'|")z(\b|_)AWS(\b|_)diffzPossible SCM diff in codez ^<<<<<<< .*$z ^>>>>>>> .*$ssh_rsa_private_keyzPossible SSH private keyz+^-{5}(BEGIN|END)\s+RSA\s+PRIVATE\s+KEY-{5}$ssh_rsa_public_keyzPossible SSH public keyz7^ssh-rsa\s+AAAA[0-9A-Za-z+/]+[=]{0,3}\s*([^@]+@[^@]+)?$passwordzPossible hardcoded passwordzA(\b|[A-Z0-9_]*_)PASSWORD(_[A-Z0-9_]*|\b)\s*=\s(\'|")[^\'"]+(\'|")secretz Possible hardcoded secret keyz?(\b|[A-Z0-9_]*_)SECRET(_[A-Z0-9_]*|\b)\s*=\s(\'|")[^\'"]+(\'|")c g }|D ]w}t | dk r|\ }}}t }n|\ }}}}t |t t f s|g} | fd|D r| ||f x|S )N c : g | ]}| S )search).0regexplines ^/builddir/build/BUILD/cloudlinux-venv-1.0.10/venv/lib/python3.11/site-packages/dodgy/checks.py
z check_line..@ s% ;;; t$$;;; )lenany
isinstancelisttupleappend)r
check_listmessagestupkeymsgregexpsconds ` r
check_liner" 4 s H
(
( s88q== # CgDD&) #Cgt'D%=11 iG 4;;;;7;;; < < ( OOS#J ' ' ' Or c * | d r t t j d }nt t j d } || d 5 }t | cd d d S # 1 swxY w Y d S )Nz.gzrt)moderzutf-8)encoding)endswithr gzipopencodecscheck_file_contentsread)filepathfopento_checks r
check_filer1 F s / --- #... x' * * * 4h"8==??334 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4s !BB B c g }t | d D ];\ }t t t fD ]!}|fdt || D z
}"<|S )N
c & g | ]
\ }}d z ||fS ) r
)r r r line_number0s r r z'check_file_contents..V s9 C !3, r ) enumeratesplit STRING_VALS LINE_VALS VAR_NAMESr" )
file_contentsr r r r6 s @r r, r, Q s H '
(;(;D(A(A B B d& 9= J *4 < <
HH Or )r+ r) re functoolsr compile
IGNORECASEallr9 r: r; r" r1 r, r
r r rB s^
( BJ9 : : BJ)2= 9 9
# O $ $jbj &A&AB "
ABB !
MNN
( %
P
'
UVV
$4 4 4
r