CVS commit: pkgsrc/security

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Mar  1 18:20:23 UTC 2023

Modified Files:
        pkgsrc/security: Makefile
Added Files:
        pkgsrc/security/py-bandit: ALTERNATIVES DESCR Makefile PLIST distinfo

Log Message:
py-bandit: added version 1.7.4

Bandit is a tool designed to find common security issues in Python code. To do
this Bandit processes each file, builds an AST from it, and runs appropriate
plugins against the AST nodes. Once Bandit has finished scanning all the files
it generates a report.


To generate a diff of this commit:
cvs rdiff -u -r1.887 -r1.888 pkgsrc/security/Makefile
cvs rdiff -u -r0 -r1.1 pkgsrc/security/py-bandit/ALTERNATIVES \
    pkgsrc/security/py-bandit/DESCR pkgsrc/security/py-bandit/Makefile \
    pkgsrc/security/py-bandit/PLIST pkgsrc/security/py-bandit/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/Makefile
diff -u pkgsrc/security/Makefile:1.887 pkgsrc/security/Makefile:1.888
--- pkgsrc/security/Makefile:1.887      Tue Feb 21 14:05:56 2023
+++ pkgsrc/security/Makefile    Wed Mar  1 18:20:23 2023
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.887 2023/02/21 14:05:56 jperkin Exp $
+# $NetBSD: Makefile,v 1.888 2023/03/01 18:20:23 adam Exp $
 #
 
 COMMENT=       Security and cryptography tools and libraries
@@ -426,6 +426,7 @@ SUBDIR+=    py-asn1crypto
 SUBDIR+=       py-asyncssh
 SUBDIR+=       py-authlib
 SUBDIR+=       py-backports.ssl_match_hostname
+SUBDIR+=       py-bandit
 SUBDIR+=       py-bcrypt
 SUBDIR+=       py-certbot
 SUBDIR+=       py-certbot-apache

Added files:

Index: pkgsrc/security/py-bandit/ALTERNATIVES
diff -u /dev/null pkgsrc/security/py-bandit/ALTERNATIVES:1.1
--- /dev/null   Wed Mar  1 18:20:23 2023
+++ pkgsrc/security/py-bandit/ALTERNATIVES      Wed Mar  1 18:20:23 2023
@@ -0,0 +1,3 @@
+bin/bandit @PREFIX@/bin/bandit-@PYVERSSUFFIX@
+bin/bandit-baseline @PREFIX@/bin/bandit-baseline-@PYVERSSUFFIX@
+bin/bandit-config-generator @PREFIX@/bin/bandit-config-generator-@PYVERSSUFFIX@
Index: pkgsrc/security/py-bandit/DESCR
diff -u /dev/null pkgsrc/security/py-bandit/DESCR:1.1
--- /dev/null   Wed Mar  1 18:20:23 2023
+++ pkgsrc/security/py-bandit/DESCR     Wed Mar  1 18:20:23 2023
@@ -0,0 +1,4 @@
+Bandit is a tool designed to find common security issues in Python code. To do
+this Bandit processes each file, builds an AST from it, and runs appropriate
+plugins against the AST nodes. Once Bandit has finished scanning all the files
+it generates a report.
Index: pkgsrc/security/py-bandit/Makefile
diff -u /dev/null pkgsrc/security/py-bandit/Makefile:1.1
--- /dev/null   Wed Mar  1 18:20:23 2023
+++ pkgsrc/security/py-bandit/Makefile  Wed Mar  1 18:20:23 2023
@@ -0,0 +1,36 @@
+# $NetBSD: Makefile,v 1.1 2023/03/01 18:20:23 adam Exp $
+
+DISTNAME=      bandit-1.7.4
+PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
+CATEGORIES=    security python
+MASTER_SITES=  ${MASTER_SITE_PYPI:=b/bandit/}
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://github.com/PyCQA/bandit
+COMMENT=       Security oriented static analyser for Python code
+LICENSE=       apache-2.0
+
+TOOL_DEPENDS+= ${PYPKGPREFIX}-pbr>=2.0.0:../../devel/py-pbr
+DEPENDS+=      ${PYPKGPREFIX}-gitpython>=1.0.1:../../devel/py-gitpython
+DEPENDS+=      ${PYPKGPREFIX}-stevedore>=1.20.0:../../devel/py-stevedore
+DEPENDS+=      ${PYPKGPREFIX}-yaml>=5.3.1:../../textproc/py-yaml
+TEST_DEPENDS+= ${PYPKGPREFIX}-testscenarios>=0.5.0:../../devel/py-testscenarios
+TEST_DEPENDS+= ${PYPKGPREFIX}-testtools>=2.3.0:../../devel/py-testtools
+
+USE_LANGUAGES= # none
+
+USE_PKG_RESOURCES=     yes
+
+PYTHON_VERSIONS_INCOMPATIBLE=  27
+
+post-install:
+.for bin in bandit bandit-baseline bandit-config-generator
+       cd ${DESTDIR}${PREFIX}/bin && \
+       ${MV} ${bin} ${bin}-${PYVERSSUFFIX} || ${TRUE}
+.endfor
+
+do-test:
+       cd ${WRKSRC} && ${SETENV} ${TEST_ENV} ${PYTHONBIN} -m unittest discover -v
+
+.include "../../lang/python/egg.mk"
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/py-bandit/PLIST
diff -u /dev/null pkgsrc/security/py-bandit/PLIST:1.1
--- /dev/null   Wed Mar  1 18:20:23 2023
+++ pkgsrc/security/py-bandit/PLIST     Wed Mar  1 18:20:23 2023
@@ -0,0 +1,195 @@
+@comment $NetBSD: PLIST,v 1.1 2023/03/01 18:20:23 adam Exp $
+bin/bandit-${PYVERSSUFFIX}
+bin/bandit-baseline-${PYVERSSUFFIX}
+bin/bandit-config-generator-${PYVERSSUFFIX}
+${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
+${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
+${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
+${PYSITELIB}/${EGG_INFODIR}/entry_points.txt
+${PYSITELIB}/${EGG_INFODIR}/not-zip-safe
+${PYSITELIB}/${EGG_INFODIR}/pbr.json
+${PYSITELIB}/${EGG_INFODIR}/requires.txt
+${PYSITELIB}/${EGG_INFODIR}/top_level.txt
+${PYSITELIB}/bandit/__init__.py
+${PYSITELIB}/bandit/__init__.pyc
+${PYSITELIB}/bandit/__init__.pyo
+${PYSITELIB}/bandit/__main__.py
+${PYSITELIB}/bandit/__main__.pyc
+${PYSITELIB}/bandit/__main__.pyo
+${PYSITELIB}/bandit/blacklists/__init__.py
+${PYSITELIB}/bandit/blacklists/__init__.pyc
+${PYSITELIB}/bandit/blacklists/__init__.pyo
+${PYSITELIB}/bandit/blacklists/calls.py
+${PYSITELIB}/bandit/blacklists/calls.pyc
+${PYSITELIB}/bandit/blacklists/calls.pyo
+${PYSITELIB}/bandit/blacklists/imports.py
+${PYSITELIB}/bandit/blacklists/imports.pyc
+${PYSITELIB}/bandit/blacklists/imports.pyo
+${PYSITELIB}/bandit/blacklists/utils.py
+${PYSITELIB}/bandit/blacklists/utils.pyc
+${PYSITELIB}/bandit/blacklists/utils.pyo
+${PYSITELIB}/bandit/cli/__init__.py
+${PYSITELIB}/bandit/cli/__init__.pyc
+${PYSITELIB}/bandit/cli/__init__.pyo
+${PYSITELIB}/bandit/cli/baseline.py
+${PYSITELIB}/bandit/cli/baseline.pyc
+${PYSITELIB}/bandit/cli/baseline.pyo
+${PYSITELIB}/bandit/cli/config_generator.py
+${PYSITELIB}/bandit/cli/config_generator.pyc
+${PYSITELIB}/bandit/cli/config_generator.pyo
+${PYSITELIB}/bandit/cli/main.py
+${PYSITELIB}/bandit/cli/main.pyc
+${PYSITELIB}/bandit/cli/main.pyo
+${PYSITELIB}/bandit/core/__init__.py
+${PYSITELIB}/bandit/core/__init__.pyc
+${PYSITELIB}/bandit/core/__init__.pyo
+${PYSITELIB}/bandit/core/blacklisting.py
+${PYSITELIB}/bandit/core/blacklisting.pyc
+${PYSITELIB}/bandit/core/blacklisting.pyo
+${PYSITELIB}/bandit/core/config.py
+${PYSITELIB}/bandit/core/config.pyc
+${PYSITELIB}/bandit/core/config.pyo
+${PYSITELIB}/bandit/core/constants.py
+${PYSITELIB}/bandit/core/constants.pyc
+${PYSITELIB}/bandit/core/constants.pyo
+${PYSITELIB}/bandit/core/context.py
+${PYSITELIB}/bandit/core/context.pyc
+${PYSITELIB}/bandit/core/context.pyo
+${PYSITELIB}/bandit/core/docs_utils.py
+${PYSITELIB}/bandit/core/docs_utils.pyc
+${PYSITELIB}/bandit/core/docs_utils.pyo
+${PYSITELIB}/bandit/core/extension_loader.py
+${PYSITELIB}/bandit/core/extension_loader.pyc
+${PYSITELIB}/bandit/core/extension_loader.pyo
+${PYSITELIB}/bandit/core/issue.py
+${PYSITELIB}/bandit/core/issue.pyc
+${PYSITELIB}/bandit/core/issue.pyo
+${PYSITELIB}/bandit/core/manager.py
+${PYSITELIB}/bandit/core/manager.pyc
+${PYSITELIB}/bandit/core/manager.pyo
+${PYSITELIB}/bandit/core/meta_ast.py
+${PYSITELIB}/bandit/core/meta_ast.pyc
+${PYSITELIB}/bandit/core/meta_ast.pyo
+${PYSITELIB}/bandit/core/metrics.py
+${PYSITELIB}/bandit/core/metrics.pyc
+${PYSITELIB}/bandit/core/metrics.pyo
+${PYSITELIB}/bandit/core/node_visitor.py
+${PYSITELIB}/bandit/core/node_visitor.pyc
+${PYSITELIB}/bandit/core/node_visitor.pyo
+${PYSITELIB}/bandit/core/test_properties.py
+${PYSITELIB}/bandit/core/test_properties.pyc
+${PYSITELIB}/bandit/core/test_properties.pyo
+${PYSITELIB}/bandit/core/test_set.py
+${PYSITELIB}/bandit/core/test_set.pyc
+${PYSITELIB}/bandit/core/test_set.pyo
+${PYSITELIB}/bandit/core/tester.py
+${PYSITELIB}/bandit/core/tester.pyc
+${PYSITELIB}/bandit/core/tester.pyo
+${PYSITELIB}/bandit/core/utils.py
+${PYSITELIB}/bandit/core/utils.pyc
+${PYSITELIB}/bandit/core/utils.pyo
+${PYSITELIB}/bandit/formatters/__init__.py
+${PYSITELIB}/bandit/formatters/__init__.pyc
+${PYSITELIB}/bandit/formatters/__init__.pyo
+${PYSITELIB}/bandit/formatters/csv.py
+${PYSITELIB}/bandit/formatters/csv.pyc
+${PYSITELIB}/bandit/formatters/csv.pyo
+${PYSITELIB}/bandit/formatters/custom.py
+${PYSITELIB}/bandit/formatters/custom.pyc
+${PYSITELIB}/bandit/formatters/custom.pyo
+${PYSITELIB}/bandit/formatters/html.py
+${PYSITELIB}/bandit/formatters/html.pyc
+${PYSITELIB}/bandit/formatters/html.pyo
+${PYSITELIB}/bandit/formatters/json.py
+${PYSITELIB}/bandit/formatters/json.pyc
+${PYSITELIB}/bandit/formatters/json.pyo
+${PYSITELIB}/bandit/formatters/screen.py
+${PYSITELIB}/bandit/formatters/screen.pyc
+${PYSITELIB}/bandit/formatters/screen.pyo
+${PYSITELIB}/bandit/formatters/text.py
+${PYSITELIB}/bandit/formatters/text.pyc
+${PYSITELIB}/bandit/formatters/text.pyo
+${PYSITELIB}/bandit/formatters/utils.py
+${PYSITELIB}/bandit/formatters/utils.pyc
+${PYSITELIB}/bandit/formatters/utils.pyo
+${PYSITELIB}/bandit/formatters/xml.py
+${PYSITELIB}/bandit/formatters/xml.pyc
+${PYSITELIB}/bandit/formatters/xml.pyo
+${PYSITELIB}/bandit/formatters/yaml.py
+${PYSITELIB}/bandit/formatters/yaml.pyc
+${PYSITELIB}/bandit/formatters/yaml.pyo
+${PYSITELIB}/bandit/plugins/__init__.py
+${PYSITELIB}/bandit/plugins/__init__.pyc
+${PYSITELIB}/bandit/plugins/__init__.pyo
+${PYSITELIB}/bandit/plugins/app_debug.py
+${PYSITELIB}/bandit/plugins/app_debug.pyc
+${PYSITELIB}/bandit/plugins/app_debug.pyo
+${PYSITELIB}/bandit/plugins/asserts.py
+${PYSITELIB}/bandit/plugins/asserts.pyc
+${PYSITELIB}/bandit/plugins/asserts.pyo
+${PYSITELIB}/bandit/plugins/crypto_request_no_cert_validation.py
+${PYSITELIB}/bandit/plugins/crypto_request_no_cert_validation.pyc
+${PYSITELIB}/bandit/plugins/crypto_request_no_cert_validation.pyo
+${PYSITELIB}/bandit/plugins/django_sql_injection.py
+${PYSITELIB}/bandit/plugins/django_sql_injection.pyc
+${PYSITELIB}/bandit/plugins/django_sql_injection.pyo
+${PYSITELIB}/bandit/plugins/django_xss.py
+${PYSITELIB}/bandit/plugins/django_xss.pyc
+${PYSITELIB}/bandit/plugins/django_xss.pyo
+${PYSITELIB}/bandit/plugins/exec.py
+${PYSITELIB}/bandit/plugins/exec.pyc
+${PYSITELIB}/bandit/plugins/exec.pyo
+${PYSITELIB}/bandit/plugins/general_bad_file_permissions.py
+${PYSITELIB}/bandit/plugins/general_bad_file_permissions.pyc
+${PYSITELIB}/bandit/plugins/general_bad_file_permissions.pyo
+${PYSITELIB}/bandit/plugins/general_bind_all_interfaces.py
+${PYSITELIB}/bandit/plugins/general_bind_all_interfaces.pyc
+${PYSITELIB}/bandit/plugins/general_bind_all_interfaces.pyo
+${PYSITELIB}/bandit/plugins/general_hardcoded_password.py
+${PYSITELIB}/bandit/plugins/general_hardcoded_password.pyc
+${PYSITELIB}/bandit/plugins/general_hardcoded_password.pyo
+${PYSITELIB}/bandit/plugins/general_hardcoded_tmp.py
+${PYSITELIB}/bandit/plugins/general_hardcoded_tmp.pyc
+${PYSITELIB}/bandit/plugins/general_hardcoded_tmp.pyo
+${PYSITELIB}/bandit/plugins/hashlib_insecure_functions.py
+${PYSITELIB}/bandit/plugins/hashlib_insecure_functions.pyc
+${PYSITELIB}/bandit/plugins/hashlib_insecure_functions.pyo
+${PYSITELIB}/bandit/plugins/injection_paramiko.py
+${PYSITELIB}/bandit/plugins/injection_paramiko.pyc
+${PYSITELIB}/bandit/plugins/injection_paramiko.pyo
+${PYSITELIB}/bandit/plugins/injection_shell.py
+${PYSITELIB}/bandit/plugins/injection_shell.pyc
+${PYSITELIB}/bandit/plugins/injection_shell.pyo
+${PYSITELIB}/bandit/plugins/injection_sql.py
+${PYSITELIB}/bandit/plugins/injection_sql.pyc
+${PYSITELIB}/bandit/plugins/injection_sql.pyo
+${PYSITELIB}/bandit/plugins/injection_wildcard.py
+${PYSITELIB}/bandit/plugins/injection_wildcard.pyc
+${PYSITELIB}/bandit/plugins/injection_wildcard.pyo
+${PYSITELIB}/bandit/plugins/insecure_ssl_tls.py
+${PYSITELIB}/bandit/plugins/insecure_ssl_tls.pyc
+${PYSITELIB}/bandit/plugins/insecure_ssl_tls.pyo
+${PYSITELIB}/bandit/plugins/jinja2_templates.py
+${PYSITELIB}/bandit/plugins/jinja2_templates.pyc
+${PYSITELIB}/bandit/plugins/jinja2_templates.pyo
+${PYSITELIB}/bandit/plugins/mako_templates.py
+${PYSITELIB}/bandit/plugins/mako_templates.pyc
+${PYSITELIB}/bandit/plugins/mako_templates.pyo
+${PYSITELIB}/bandit/plugins/snmp_security_check.py
+${PYSITELIB}/bandit/plugins/snmp_security_check.pyc
+${PYSITELIB}/bandit/plugins/snmp_security_check.pyo
+${PYSITELIB}/bandit/plugins/ssh_no_host_key_verification.py
+${PYSITELIB}/bandit/plugins/ssh_no_host_key_verification.pyc
+${PYSITELIB}/bandit/plugins/ssh_no_host_key_verification.pyo
+${PYSITELIB}/bandit/plugins/try_except_continue.py
+${PYSITELIB}/bandit/plugins/try_except_continue.pyc
+${PYSITELIB}/bandit/plugins/try_except_continue.pyo
+${PYSITELIB}/bandit/plugins/try_except_pass.py
+${PYSITELIB}/bandit/plugins/try_except_pass.pyc
+${PYSITELIB}/bandit/plugins/try_except_pass.pyo
+${PYSITELIB}/bandit/plugins/weak_cryptographic_key.py
+${PYSITELIB}/bandit/plugins/weak_cryptographic_key.pyc
+${PYSITELIB}/bandit/plugins/weak_cryptographic_key.pyo
+${PYSITELIB}/bandit/plugins/yaml_load.py
+${PYSITELIB}/bandit/plugins/yaml_load.pyc
+${PYSITELIB}/bandit/plugins/yaml_load.pyo
Index: pkgsrc/security/py-bandit/distinfo
diff -u /dev/null pkgsrc/security/py-bandit/distinfo:1.1
--- /dev/null   Wed Mar  1 18:20:23 2023
+++ pkgsrc/security/py-bandit/distinfo  Wed Mar  1 18:20:23 2023
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2023/03/01 18:20:23 adam Exp $
+
+BLAKE2s (bandit-1.7.4.tar.gz) = f8f379ae1f855cbdcd062c10a0c973c231672fc70718ceff3f10a77438ef70e2
+SHA512 (bandit-1.7.4.tar.gz) = 93e1a25fd41e9409971f4cbac2ff73971ba270936a6b2aeecb3e0a2aa2015bcefd5eaab3cc94b2d9d96e4604d1a39c5ca1150c9eadd073357a90c5265c592407
+Size (bandit-1.7.4.tar.gz) = 495104 bytes