MCP Observatory
54s ago Tracked 52,799 Last 54s ago 24h 2,818
github Python analyzed 27b435e

S-Borna/codetrust

github

AI Governance Enforcement Platform — governs what AI coding agents can do, before they do it.

maintainer
S-Borna
license
NOASSERTION
first seen
2026-08-15
last seen
2026-08-15
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in S-Borna/codetrust
  2. HIGH code analysis flagged committed secret in S-Borna/codetrust
capabilities 43 tools
transport stdio · http counts 43 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • codetrust_approve_action
  • codetrust_ast_scan
  • codetrust_attribute
  • codetrust_audit_history
  • codetrust_begin_trusted_session
  • codetrust_benchmark
  • codetrust_compliance_report
  • codetrust_create_file
  • codetrust_cross_file_taint
  • codetrust_cross_language_taint
  • codetrust_deep_scan
  • codetrust_edit_notebook
  • codetrust_governance_integrity
  • codetrust_governance_posture
  • codetrust_governance_status
  • codetrust_hallucination_scan
  • codetrust_integrity_check
  • codetrust_license_check
  • codetrust_list_exceptions
  • codetrust_list_gateway_rules
  • codetrust_list_rules
  • codetrust_mcp_audit
  • codetrust_post_action
  • codetrust_pre_action
  • codetrust_replace_string_in_file
  • codetrust_revoke_exception
  • codetrust_risk_profile
  • codetrust_run_dod
  • codetrust_run_in_terminal
  • codetrust_sandbox_run
  • codetrust_sarif_export
  • codetrust_shadow_scan
  • codetrust_simulate_policy
  • codetrust_static_scan
  • codetrust_taint_verify
  • codetrust_validate_command
  • codetrust_validate_file_delete
  • codetrust_validate_file_write
  • codetrust_validate_package
  • codetrust_verify_claim
  • codetrust_verify_dockerfile
  • codetrust_verify_imports
  • codetrust_vulnerability_scan
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 27b435e · analyzer v33 · 2w ago

skills & prompt files 4

danger signals3

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 376

filesystem 101

  • fs S-Borna-codetrust-27b435e/action/scan.py :19 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/action/scan_runner.py :13 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/hooks/codetrust_pre_commit.py :22 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/scripts/build_compiled.py :34 import shutil
  • fs (weak) S-Borna-codetrust-27b435e/scripts/export_openapi.py :10 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/scripts/generate_metrics.py :18 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/scripts/release_security_gate.py :20 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/scripts/sync_platforms.py :18 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/scripts/validate_readme_metrics.py :15 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/scripts/verify_publish.py :19 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/api.py :20 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/cli.py :22 import shutil
  • fs S-Borna-codetrust-27b435e/src/gateway/approvals.py :12 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/gateway/audit.py :18 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/gateway/custom_rules.py :29 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/gateway/policies.py :22 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/gateway/policy_integrity.py :16 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/gateway/server.py :37 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/gateway/siem.py :209 with open(path, "w", encoding="utf-8") as f:
  • fs S-Borna-codetrust-27b435e/src/rules/anti_patterns.py :2631 "message": "open() with user-controlled path enables path traversal — validate and sanitize path",
  • fs S-Borna-codetrust-27b435e/src/rules/taint_rules.py :157 TaintSink("open", "open(", CATEGORY_PATH_TRAVERSAL, Language.PYTHON),
  • fs S-Borna-codetrust-27b435e/src/server.py :8 import pathlib
  • fs S-Borna-codetrust-27b435e/src/services/ai_attribution.py :19 from pathlib import Path # noqa: TC003 — used at runtime
  • fs S-Borna-codetrust-27b435e/src/services/baseline.py :48 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/commit_policy.py :14 from pathlib import Path # noqa: TC003 — used at runtime
  • fs S-Borna-codetrust-27b435e/src/services/conformity_assessment.py :16 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/cost_storage.py :14 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/cost_tracker.py :20 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/custom_rules.py :32 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/data_classifier.py :20 from pathlib import Path # noqa: TC003 — used at runtime in classify_file()
  • fs S-Borna-codetrust-27b435e/src/services/definition_of_done.py :17 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/detection_benchmark.py :19 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/developer_risk.py :16 from pathlib import Path # noqa: TC003 — used at runtime
  • fs S-Borna-codetrust-27b435e/src/services/gdpr.py :259 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/governance_report.py :18 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/import_verifier.py :15 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/license_guard.py :25 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/llm_benchmark.py :14 from pathlib import Path # noqa: TC003 — used at runtime
  • fs S-Borna-codetrust-27b435e/src/services/mcp_discovery.py :14 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/metrics_report.py :12 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/model_router.py :20 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/pii_detector.py :18 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/red_team.py :15 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/risk_map.py :12 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/risk_register.py :14 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/rule_delivery.py :26 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/sandbox.py :12 import shutil
  • fs S-Borna-codetrust-27b435e/src/services/shadow_ai.py :12 import shutil
  • fs S-Borna-codetrust-27b435e/src/services/static_analyzer.py :8 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/services/treatment_plan.py :14 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/shield/config.py :8 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/shield/daemon.py :19 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/shield/file_watcher.py :18 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/shield/shell_wrapper.py :19 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/telemetry_client.py :16 from pathlib import Path
  • fs S-Borna-codetrust-27b435e/src/templates/posttooluse_dod_hook.py :20 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_ai_attribution.py :6 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_audit_log_contract.py :22 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_baseline.py :8 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_baseline_mode_field.py :16 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_cli.py :9 import shutil
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_cli_commands_extra.py :11 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_cli_coverage.py :15 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_cli_pr_risk.py :4 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_cmd_fix_reduced_mode.py :19 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_cmd_today_quota.py :19 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_commit_policy.py :5 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_cost_tracker.py :10 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_data_classifier.py :7 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_definition_of_done.py :7 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_extension_rule_parity.py :24 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_fp_regression.py :359 """open() inside with-statement should NOT trigger."""
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_gateway.py :5 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_github_action.py :4 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_governance_report.py :3 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_hallucination_baseline.py :18 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_hallucination_taint.py :119 open(safe_path)
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_hook_integration.py :11 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_integration_smoke.py :16 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_integrity_calibration.py :12 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_license_guard.py :9 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_mcp_discovery.py :6 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_moat.py :9 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_model_router.py :7 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_parity.py :23 with open(path, "w", encoding="utf-8") as f:
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_pii_detector.py :7 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_reduced_mode_e2e.py :22 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_risk_register.py :3 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_rule_delivery.py :9 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_sandbox.py :549 patch("src.services.sandbox.shutil.rmtree") as mock_rmtree,
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_sarif_output.py :4 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_scan_gate.py :18 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_setup_command.py :8 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_shadow_ai.py :5 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_shield.py :9 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_siem.py :288 with open(outfile) as f:
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_sql_rules.py :226 with open(self.SQL_FILE) as f:
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_static.py :4 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_taint.py :64 """Detect tainted data flowing to open()."""
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_telemetry_client.py :9 from pathlib import Path
  • fs (weak) S-Borna-codetrust-27b435e/tests/test_treatment_plan.py :4 from pathlib import Path

shell / exec 30

  • shell S-Borna-codetrust-27b435e/action/scan_runner.py :12 import subprocess
  • shell S-Borna-codetrust-27b435e/hooks/codetrust_pre_commit.py :19 import subprocess
  • shell (weak) S-Borna-codetrust-27b435e/scripts/build_compiled.py :35 import subprocess
  • shell (weak) S-Borna-codetrust-27b435e/scripts/generate_metrics.py :15 import subprocess
  • shell (weak) S-Borna-codetrust-27b435e/scripts/release_security_gate.py :18 import subprocess
  • shell (weak) S-Borna-codetrust-27b435e/scripts/verify_publish.py :15 import subprocess
  • shell S-Borna-codetrust-27b435e/src/cli.py :23 import subprocess
  • shell S-Borna-codetrust-27b435e/src/gateway/interceptor.py :114 (re.compile(r"os\.system\s*\("), "os.system() call"),
  • shell S-Borna-codetrust-27b435e/src/rules/anti_patterns.py :1027 "Replace `subprocess.run('cmd arg1 arg2', shell=True)` with "
  • shell S-Borna-codetrust-27b435e/src/rules/taint_rules.py :149 TaintSink("os.system", "os.system(", CATEGORY_COMMAND_INJECTION, Language.PYTHON),
  • shell S-Borna-codetrust-27b435e/src/services/ai_attribution.py :17 import subprocess
  • shell S-Borna-codetrust-27b435e/src/services/autofix_recipes.py :835 """Replace os.system() with subprocess.run().
  • shell S-Borna-codetrust-27b435e/src/services/conformity_assessment.py :13 import subprocess
  • shell S-Borna-codetrust-27b435e/src/services/cost_tracker.py :16 import subprocess
  • shell S-Borna-codetrust-27b435e/src/services/definition_of_done.py :15 import subprocess
  • shell S-Borna-codetrust-27b435e/src/services/developer_risk.py :14 import subprocess
  • shell S-Borna-codetrust-27b435e/src/services/red_team.py :12 import subprocess
  • shell S-Borna-codetrust-27b435e/src/shield/file_watcher.py :14 import subprocess
  • shell S-Borna-codetrust-27b435e/src/templates/posttooluse_dod_hook.py :18 import subprocess
  • shell S-Borna-codetrust-27b435e/src/templates/pretooluse_gateway_hook.py :79 (re.compile(r"os\.system\s*\("), "os.system() call"),
  • shell (weak) S-Borna-codetrust-27b435e/tests/load/locustfile.py :44 "import subprocess\n\n"
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_autofix_recipes.py :253 code = "subprocess.run('cmd', shell=True)"
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_cli.py :11 import subprocess
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_gateway.py :304 content = "subprocess.run('cat " + "<" + "<EOF', shell=True)"
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_gateway_server.py :519 result = await validate_command('python3 -c "import os; os.system(\'rm -rf /\')"')
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_hallucination_taint.py :43 os.system(safe_cmd)
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_hook_integration.py :10 import subprocess
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_moat.py :339 r = gw.check_file_write("run.py", 'subprocess.run(cmd, shell=True)')
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_static.py :92 code = "subprocess.run('ls -la', shell=True)"
  • shell (weak) S-Borna-codetrust-27b435e/tests/test_taint.py :40 """Detect tainted data flowing to os.system()."""

network 66

  • net S-Borna-codetrust-27b435e/action/scan.py :190 import httpx
  • net S-Borna-codetrust-27b435e/action/scan_runner.py :247 import httpx
  • net S-Borna-codetrust-27b435e/src/api.py :22 import httpx
  • net S-Borna-codetrust-27b435e/src/cli.py :1146 import httpx
  • net S-Borna-codetrust-27b435e/src/gateway/webhooks.py :25 import urllib.request
  • net S-Borna-codetrust-27b435e/src/rules/anti_patterns.py :639 "Add explicit timeout to every connection: `httpx.AsyncClient(timeout=30.0)`, `psycopg2.connect(connect_timeout=10)`, `redis.Redis(socket_timeout=5)`. Without timeout, a stalled server hangs your proc
  • net S-Borna-codetrust-27b435e/src/rules/taint_rules.py :166 TaintSink("requests.get", "requests.get(", CATEGORY_SSRF, Language.PYTHON),
  • net S-Borna-codetrust-27b435e/src/server.py :12 import httpx
  • net S-Borna-codetrust-27b435e/src/services/ast_analyzer.py :434 Returns the full dotted name (e.g. ``httpx.AsyncClient``).
  • net S-Borna-codetrust-27b435e/src/services/auth.py :8 import httpx
  • net S-Borna-codetrust-27b435e/src/services/autofix.py :22 import httpx
  • net S-Borna-codetrust-27b435e/src/services/autofix_recipes.py :730 if "httpx." in line and "Client(" in line and "timeout" not in line:
  • net S-Borna-codetrust-27b435e/src/services/cache.py :7 from urllib.parse import urlsplit, urlunsplit
  • net S-Borna-codetrust-27b435e/src/services/cross_language_taint.py :87 Represents e.g. fetch("/api/users"), requests.post("/api/users", data=x),
  • net S-Borna-codetrust-27b435e/src/services/docker_verify.py :7 import httpx
  • net S-Borna-codetrust-27b435e/src/services/github_app.py :14 import httpx
  • net S-Borna-codetrust-27b435e/src/services/import_verifier.py :17 import httpx
  • net S-Borna-codetrust-27b435e/src/services/license_checker.py :19 import httpx
  • net S-Borna-codetrust-27b435e/src/services/license_guard.py :28 import httpx
  • net S-Borna-codetrust-27b435e/src/services/public_stats.py :16 import httpx
  • net S-Borna-codetrust-27b435e/src/services/registry.py :7 import httpx
  • net S-Borna-codetrust-27b435e/src/services/rule_delivery.py :28 import httpx
  • net S-Borna-codetrust-27b435e/src/services/signature_validator.py :6 1. Functions that don't exist in a module (e.g. requests.get_async)
  • net S-Borna-codetrust-27b435e/src/services/sso.py :34 from urllib.parse import urlencode
  • net S-Borna-codetrust-27b435e/src/services/telemetry.py :20 import httpx
  • net S-Borna-codetrust-27b435e/src/services/vulnerability.py :17 import httpx
  • net S-Borna-codetrust-27b435e/src/telemetry_client.py :18 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/conftest.py :4 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_api_coverage.py :15 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_api_endpoints.py :8 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_ast.py :469 """httpx.AsyncClient() without timeout is flagged."""
  • net (weak) S-Borna-codetrust-27b435e/tests/test_auth_service.py :6 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_autofix_recipes.py :358 code = "requests.get('url')"
  • net (weak) S-Borna-codetrust-27b435e/tests/test_cross_language_taint.py :133 """Detect requests.get() calls in Python."""
  • net (weak) S-Borna-codetrust-27b435e/tests/test_devops_rules.py :46 code = "http = httpx.AsyncClient()"
  • net (weak) S-Borna-codetrust-27b435e/tests/test_docker.py :3 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_e2e_integration.py :36 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_enterprise_features.py :16 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_github_action.py :482 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_github_app.py :8 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_go_rust_registry.py :4 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_governance_endpoints.py :6 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_import_verifier.py :48 code = "# import requests\nimport requests\n"
  • net (weak) S-Borna-codetrust-27b435e/tests/test_ip_rate_limit.py :9 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_license_checker.py :7 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_license_guard.py :11 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_moat.py :323 r = gw.check_file_write("client.py", "requests.get(url, verify=False)")
  • net (weak) S-Borna-codetrust-27b435e/tests/test_oidc_integration.py :18 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_parity.py :232 code = "import httpx\nclient = httpx.Client()\n"
  • net (weak) S-Borna-codetrust-27b435e/tests/test_parsers.py :24 code = "import requests\nimport flask\n"
  • net (weak) S-Borna-codetrust-27b435e/tests/test_public_stats.py :1 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_registry.py :5 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_ruby_php_registry.py :4 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_sandbox.py :740 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_sbom.py :6 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_server_deep_scan.py :209 "import requests\nprint('hi')\n",
  • net (weak) S-Borna-codetrust-27b435e/tests/test_signature_validator.py :30 code = "import requests"
  • net (weak) S-Borna-codetrust-27b435e/tests/test_static.py :452 code = "response = requests.get(url, verify=False)"
  • net (weak) S-Borna-codetrust-27b435e/tests/test_taint.py :52 """Detect tainted data flowing to requests.get()."""
  • net (weak) S-Borna-codetrust-27b435e/tests/test_telemetry_client.py :142 monkeypatch.setattr("src.telemetry_client.httpx.post", mock_post)
  • net (weak) S-Borna-codetrust-27b435e/tests/test_telemetry_public_stats.py :3 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_unified_session.py :6 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_user_quota_endpoint.py :21 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_vulnerability.py :10 import httpx
  • net (weak) S-Borna-codetrust-27b435e/tests/test_webhooks.py :220 @patch("src.gateway.webhooks.urllib.request.urlopen")
  • net (weak) S-Borna-codetrust-27b435e/tests/test_workspace_registry.py :6 import httpx

secrets 9

  • secrets S-Borna-codetrust-27b435e/action/scan.py :307 api_key = os.environ.get("CODETRUST_API_KEY", "")
  • secrets S-Borna-codetrust-27b435e/action/scan_runner.py :235 token = os.environ.get("GITHUB_TOKEN", "").strip()
  • secrets S-Borna-codetrust-27b435e/src/api.py :3301 github_token = os.environ.get("CODETRUST_GITHUB_TOKEN", "")
  • secrets S-Borna-codetrust-27b435e/src/cli.py :2588 os.environ.get("CODETRUST_RULES_HMAC_SECRET")
  • secrets S-Borna-codetrust-27b435e/src/gateway/server.py :102 if os.environ.get("CLAUDE_CODE") or os.environ.get("ANTHROPIC_API_KEY"):
  • secrets S-Borna-codetrust-27b435e/src/rules/anti_patterns.py :65 "2. Reference via os.environ['KEY'] (Python), process.env.KEY (JS/TS), or os.Getenv('KEY') (Go). "
  • secrets S-Borna-codetrust-27b435e/src/services/autofix_recipes.py :415 """Replace os.environ['KEY'] with os.environ.get('KEY', '') for safety.
  • secrets S-Borna-codetrust-27b435e/src/services/database.py :144 password = os.environ.get("CODETRUST_FEEDBACK_SMTP_PASSWORD", "")
  • secrets (weak) S-Borna-codetrust-27b435e/tests/test_billing.py :12 _STRIPE_TEST_KEY = os.environ.get("CODETRUST_STRIPE_SECRET_KEY", "")

database 20

  • db S-Borna-codetrust-27b435e/alembic/env.py :4 from sqlalchemy import engine_from_config
  • db S-Borna-codetrust-27b435e/alembic/versions/7e0e30d20d6a_add_telemetry_events.py :11 import sqlalchemy as sa
  • db S-Borna-codetrust-27b435e/alembic/versions/9c1f6d1a2b44_add_telemetry_raw_and_metrics_counters.py :11 import sqlalchemy as sa
  • db S-Borna-codetrust-27b435e/alembic/versions/a1b2c3d4e5f6_widen_api_keys_prefix_column.py :11 import sqlalchemy as sa
  • db S-Borna-codetrust-27b435e/alembic/versions/b74aff4dff57_initial_schema_users_api_keys_scan_logs_.py :11 import sqlalchemy as sa
  • db S-Borna-codetrust-27b435e/alembic/versions/d4c7a6f31b2e_fix_counter_snapshots_schema.py :11 import sqlalchemy as sa
  • db S-Borna-codetrust-27b435e/src/models/database.py :8 from sqlalchemy import JSON, BigInteger, DateTime, Float, ForeignKey, Integer, String, Text, func
  • db S-Borna-codetrust-27b435e/src/rules/anti_patterns.py :10073 "simultaneous connections. Use a pool: from psycopg2.pool import ThreadedConnectionPool; "
  • db S-Borna-codetrust-27b435e/src/server.py :1982 Example: {"app.py": "from flask import...", "db.py": "import sqlite3..."}
  • db S-Borna-codetrust-27b435e/src/services/cache.py :9 import redis.asyncio as redis
  • db S-Borna-codetrust-27b435e/src/services/database.py :14 from sqlalchemy import func, select
  • db S-Borna-codetrust-27b435e/src/services/gdpr.py :21 from sqlalchemy import delete, select
  • db S-Borna-codetrust-27b435e/src/services/team.py :19 from sqlalchemy import select
  • db S-Borna-codetrust-27b435e/src/services/telemetry.py :21 import redis.asyncio as redis
  • db (weak) S-Borna-codetrust-27b435e/tests/test_ast.py :485 code = "from sqlalchemy import create_engine\nengine = create_engine('sqlite:///:memory:')\n"
  • db (weak) S-Borna-codetrust-27b435e/tests/test_database.py :6 from sqlalchemy import text
  • db (weak) S-Borna-codetrust-27b435e/tests/test_e2e_mcp.py :26 import sqlite3
  • db (weak) S-Borna-codetrust-27b435e/tests/test_enterprise_features.py :597 from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker, create_async_engine
  • db (weak) S-Borna-codetrust-27b435e/tests/test_import_verifier.py :435 import sqlalchemy
  • db (weak) S-Borna-codetrust-27b435e/tests/test_mcp_taint_tools.py :68 import sqlite3

tool registrations 43

  • codetrust_validate_command S-Borna-codetrust-27b435e/src/gateway/server.py :570
  • codetrust_validate_file_write S-Borna-codetrust-27b435e/src/gateway/server.py :627
  • codetrust_validate_file_delete S-Borna-codetrust-27b435e/src/gateway/server.py :671
  • codetrust_validate_package S-Borna-codetrust-27b435e/src/gateway/server.py :703
  • codetrust_run_in_terminal S-Borna-codetrust-27b435e/src/gateway/server.py :822
  • codetrust_create_file S-Borna-codetrust-27b435e/src/gateway/server.py :878
  • codetrust_replace_string_in_file S-Borna-codetrust-27b435e/src/gateway/server.py :936
  • codetrust_edit_notebook S-Borna-codetrust-27b435e/src/gateway/server.py :1000
  • codetrust_governance_status S-Borna-codetrust-27b435e/src/gateway/server.py :1158
  • codetrust_audit_history S-Borna-codetrust-27b435e/src/gateway/server.py :1208
  • codetrust_list_gateway_rules S-Borna-codetrust-27b435e/src/gateway/server.py :1271
  • codetrust_begin_trusted_session S-Borna-codetrust-27b435e/src/gateway/server.py :1296
  • codetrust_approve_action S-Borna-codetrust-27b435e/src/gateway/server.py :1346
  • codetrust_list_exceptions S-Borna-codetrust-27b435e/src/gateway/server.py :1409
  • codetrust_revoke_exception S-Borna-codetrust-27b435e/src/gateway/server.py :1420
  • codetrust_simulate_policy S-Borna-codetrust-27b435e/src/gateway/server.py :1433
  • codetrust_governance_posture S-Borna-codetrust-27b435e/src/gateway/server.py :1497
  • codetrust_governance_integrity S-Borna-codetrust-27b435e/src/gateway/server.py :1503
  • codetrust_verify_claim S-Borna-codetrust-27b435e/src/gateway/server.py :1555
  • codetrust_integrity_check S-Borna-codetrust-27b435e/src/gateway/server.py :1681
  • codetrust_run_dod S-Borna-codetrust-27b435e/src/gateway/server.py :1765
  • codetrust_static_scan S-Borna-codetrust-27b435e/src/server.py :174
  • codetrust_pre_action S-Borna-codetrust-27b435e/src/server.py :229
  • codetrust_post_action S-Borna-codetrust-27b435e/src/server.py :306
  • codetrust_list_rules S-Borna-codetrust-27b435e/src/server.py :393
  • codetrust_verify_imports S-Borna-codetrust-27b435e/src/server.py :659
  • codetrust_verify_dockerfile S-Borna-codetrust-27b435e/src/server.py :838
  • codetrust_ast_scan S-Borna-codetrust-27b435e/src/server.py :924
  • codetrust_sandbox_run S-Borna-codetrust-27b435e/src/server.py :1004
  • codetrust_sarif_export S-Borna-codetrust-27b435e/src/server.py :1098
  • codetrust_deep_scan S-Borna-codetrust-27b435e/src/server.py :1168
  • codetrust_taint_verify S-Borna-codetrust-27b435e/src/server.py :1587
  • codetrust_vulnerability_scan S-Borna-codetrust-27b435e/src/server.py :1732
  • codetrust_license_check S-Borna-codetrust-27b435e/src/server.py :1820
  • codetrust_hallucination_scan S-Borna-codetrust-27b435e/src/server.py :1899
  • codetrust_cross_file_taint S-Borna-codetrust-27b435e/src/server.py :1971
  • codetrust_cross_language_taint S-Borna-codetrust-27b435e/src/server.py :2039
  • codetrust_mcp_audit S-Borna-codetrust-27b435e/src/server.py :2121
  • codetrust_shadow_scan S-Borna-codetrust-27b435e/src/server.py :2143
  • codetrust_attribute S-Borna-codetrust-27b435e/src/server.py :2163
  • codetrust_risk_profile S-Borna-codetrust-27b435e/src/server.py :2186
  • codetrust_benchmark S-Borna-codetrust-27b435e/src/server.py :2206
  • codetrust_compliance_report S-Borna-codetrust-27b435e/src/server.py :2224

declared dependencies 39

  • mcp@>=1.0.0,<2.0.0
  • pydantic@>=2.0.0
  • pydantic-settings@>=2.0.0
  • fastapi@>=0.115.0
  • uvicorn@>=0.30.0
  • httpx@>=0.27.0
  • redis@>=5.0.0
  • structlog@>=24.0.0
  • tree-sitter@>=0.23.0
  • tree-sitter-python@>=0.23.0
  • tree-sitter-javascript@>=0.23.0
  • tree-sitter-go@>=0.23.0
  • tree-sitter-rust@>=0.23.0
  • tree-sitter-typescript@>=0.23.0
  • tree-sitter-java@>=0.23.0
  • tree-sitter-c-sharp@>=0.23.0
  • tree-sitter-cpp@>=0.23.0
  • tree-sitter-ruby@>=0.23.0
  • tree-sitter-php@>=0.23.0
  • sqlalchemy@>=2.0.0
  • asyncpg@>=0.29.0
  • stripe@>=7.0.0
  • PyJWT@>=2.8.0
  • alembic@>=1.13.0
  • psycopg2-binary@>=2.9.0
  • pytest@>=8.0.0
  • pytest-asyncio@>=0.24.0
  • pytest-httpx@>=0.30.0
  • pytest-cov@>=5.0.0
  • jsonschema@>=4.23.0
  • fakeredis@>=2.20.0
  • ruff@>=0.5.0
  • aiosqlite@>=0.20.0
  • langchain@>=0.1.0
  • crewai@>=0.1.0
  • openai-agents@>=0.1.0
  • com.google.code.gson:gson@2.11.0
  • com.squareup.okhttp3:okhttp@4.12.0
  • junit:junit@4.13.2

jetbrains-plugin 1

  • opaque (low) S-Borna-codetrust-27b435e/jetbrains-plugin/src/main/resources/META-INF/plugin.xml bundled JetBrains plugin "CodeTrust" (S-Borna-codetrust-27b435e/jetbrains-plugin/src/main/resources/META-INF/plugin.xml) — presence-detected; review the plugin descriptor

transport_posture 1

  • network-listening, binds all interfaces, no auth detected S-Borna-codetrust-27b435e/tests/test_static.py :403 code = "app.run(host='0.0.0.0', debug=True)"