External/securelens-backend
1
0
Fork 0
mirror of https://github.com/Rarebuffalo/securelens-backend.git synced 2026-06-19 07:00:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

added cli commands

Browse Source
This commit is contained in:
rarebuffalo
2026-05-22 21:46:56 +05:30
parent 7d3139863e
commit 5826119812
1 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
cli/securelens/cli.py
View File

@@ -179,9 +179,12 @@ async def _scan_async(path, model, output, max_files, ci, fail_on, no_ai):
"[2/4] Triaging with AI...", total=None, detail="" "[2/4] Triaging with AI...", total=None, detail=""
) )
if no_ai: if no_ai:
# In --no-ai mode just take the top N by sensitivity heuristic # In --no-ai mode: take sensitive files first, then fill the budget
# with remaining files sorted by name so we always return something.
from securelens.scanners import _is_always_scan from securelens.scanners import _is_always_scan
triaged = [p for p in candidates if _is_always_scan(p)][:cfg.max_files_to_scan] sensitive = [p for p in candidates if _is_always_scan(p)]
others = [p for p in candidates if not _is_always_scan(p)]
triaged = (sensitive + others)[:cfg.max_files_to_scan]
else: else:
triaged = await triage_files(candidates, root, cfg) triaged = await triage_files(candidates, root, cfg)
progress.update(task_triage, completed=100, total=100, progress.update(task_triage, completed=100, total=100,
@@ -236,15 +239,14 @@ async def _scan_async(path, model, output, max_files, ci, fail_on, no_ai):
if fmt in ("terminal", "all"): if fmt in ("terminal", "all"):
print_code_scan_report(result) print_code_scan_report(result)
if fmt in ("json",): if fmt == "json":
# json mode: print to stdout only — good for piping / CI
console.print(to_json(result, "code")) console.print(to_json(result, "code"))
return # skip REPL in pure JSON mode
if fmt in ("markdown", "all"): if fmt in ("markdown", "all"):
path_out = save_markdown(result, "code") path_out = save_markdown(result, "code")
if not ci: if not ci:
console.print(f" [green]✓ Markdown report saved:[/green] [dim]{path_out}[/dim]\n") console.print(f" [green]✓ Markdown report saved:[/green] [dim]{path_out}[/dim]\n")
if fmt == "json" and not ci:
path_out = save_json(result, "code")
console.print(f" [green]✓ JSON report saved:[/green] [dim]{path_out}[/dim]\n")
# ── CI exit code ───────────────────────────────────────────────────────── # ── CI exit code ─────────────────────────────────────────────────────────
if ci: if ci:
@@ -272,7 +274,8 @@ async def _scan_async(path, model, output, max_files, ci, fail_on, no_ai):
type=click.Choice(["terminal", "json", "markdown", "all"])) type=click.Choice(["terminal", "json", "markdown", "all"]))
@click.option("--ci", is_flag=True, help="CI mode — no REPL") @click.option("--ci", is_flag=True, help="CI mode — no REPL")
@click.option("--fail-on", default=None, @click.option("--fail-on", default=None,
type=click.Choice(["critical", "warning", "info"])) type=click.Choice(["critical", "high", "medium", "low"]),
help="Exit 1 if issues of this severity or above are found")
@click.option("--no-ai", is_flag=True, help="Skip AI summary") @click.option("--no-ai", is_flag=True, help="Skip AI summary")
def web(url, model, output, ci, fail_on, no_ai): def web(url, model, output, ci, fail_on, no_ai):
""" """
@@ -334,7 +337,9 @@ async def _web_async(url, model, output, ci, fail_on, no_ai):
if fmt in ("terminal", "all"): if fmt in ("terminal", "all"):
print_web_scan_report(result) print_web_scan_report(result)
if fmt == "json": if fmt == "json":
# json mode: print to stdout only — good for piping / CI
console.print(to_json(result, "web")) console.print(to_json(result, "web"))
return # skip REPL in pure JSON mode
if fmt in ("markdown", "all"): if fmt in ("markdown", "all"):
p = save_markdown(result, "web") p = save_markdown(result, "web")
if not ci: if not ci: