provide-testkit 2025-11-17
Migrate security scanners to foundation.run with comprehensive tests
22 files · 3,836+ · 437-

Security scanner migration to foundation.run

6 files changed
  • scanner.py Migrated base scanner to use foundation.run and absolute imports
  • gitleaks_scanner.py Updated gitleaks scanner
  • pip_audit_scanner.py Updated pip-audit scanner
  • safety_scanner.py Updated safety scanner
  • semgrep_scanner.py Updated semgrep scanner
  • trufflehog_scanner.py Updated trufflehog scanner
  • Migrated all security scanners to foundation.run subprocess execution with absolute imports decouple behavioral
    3 files
    • scanner.py
    • gitleaks_scanner.py
    • pip_audit_scanner.py
  • Fixed SecurityScanner noise and path handling issues remediate behavioral
    1 file
    • scanner.py
  • Removed Checkov scanner due to networkx dependency conflict deprecate behavioral
    1 file
    • checkov_scanner.py

Security scanner test coverage

5 files changed
  • test_gitleaks_scanner.py Comprehensive gitleaks scanner tests
  • test_pip_audit_scanner.py Pip-audit scanner tests
  • test_safety_scanner.py Safety scanner tests
  • test_semgrep_scanner.py Semgrep scanner tests
  • test_trufflehog_scanner.py Trufflehog scanner tests
  • Added comprehensive tests for all security scanners achieving 88% overall coverage qualify behavioral
    5 files
    • test_gitleaks_scanner.py
    • test_pip_audit_scanner.py
    • test_safety_scanner.py
    • test_semgrep_scanner.py
    • test_trufflehog_scanner.py

Security scanner documentation

2 files changed
  • SECURITY_SCANNERS.md Comprehensive security scanner documentation
  • security_scan_example.py Example demonstrating security scanner usage
  • Added comprehensive documentation and usage examples for security scanners specify internal
    2 files
    • SECURITY_SCANNERS.md
    • security_scan_example.py