mirror of
https://github.com/trustedsec/hate_crack.git
synced 2026-07-28 14:47:22 -07:00
Justin BollingerandClaude
4418c4e4d6
Adds the gates the hashview repo runs, adapted to hate_crack's uv toolchain: - ruff format --check as a CI step + a ruff-format prek pre-push hook (the package was reformatted in the preceding commit). - Bandit SAST vs a committed baseline (.bandit-baseline.json, 114 reviewed low-severity subprocess/shlex findings); [tool.bandit] config in pyproject.toml; CI job + prek pre-push hook. Only NEW findings fail. - pip-audit dependency-CVE gate (CI job). PYSEC-2026-2447 (diskcache 5.6.3, transitive via instructor -> atomic-agents) is ignored — no upstream fix. - Hygiene pre-commit hooks (trailing-whitespace, end-of-file-fixer, check-yaml, check-merge-conflict, check-added-large-files) via the pre-commit-hooks repo. - CLAUDE.md updated: lint/security commands, prek install (+pre-commit hook type), and the active-hooks list. Co-Authored-By: Claude <noreply@anthropic.com>
104 lines
2.3 KiB
TOML
104 lines
2.3 KiB
TOML
[build-system]
|
|
requires = ["setuptools>=69", "setuptools-scm>=8"]
|
|
build-backend = "setuptools.build_meta"
|
|
|
|
[project]
|
|
name = "hate_crack"
|
|
dynamic = ["version"]
|
|
description = "Menu driven Python wrapper for hashcat"
|
|
readme = "README.md"
|
|
requires-python = ">=3.13"
|
|
dependencies = [
|
|
"requests>=2.34.2",
|
|
"beautifulsoup4>=4.12.0",
|
|
"openpyxl>=3.0.0",
|
|
"packaging>=26.2",
|
|
"simple-term-menu==1.6.6",
|
|
"click>=8.4.2",
|
|
"atomic-agents>=2.0.0",
|
|
# Imported directly by hate_crack/llm.py; declared explicitly rather than
|
|
# relying on atomic-agents pulling them in transitively.
|
|
"instructor>=1.14.5",
|
|
"openai>=2.48.0",
|
|
"pydantic>=2.13.4",
|
|
]
|
|
|
|
[project.scripts]
|
|
hate_crack = "hate_crack.__main__:main"
|
|
|
|
[tool.setuptools.packages.find]
|
|
include = ["hate_crack*"]
|
|
|
|
[tool.setuptools.package-data]
|
|
hate_crack = [
|
|
"config.json.example",
|
|
]
|
|
|
|
[tool.setuptools_scm]
|
|
version_scheme = "no-guess-dev"
|
|
local_scheme = "no-local-version"
|
|
|
|
[tool.ruff]
|
|
exclude = [
|
|
"build",
|
|
"dist",
|
|
"PACK",
|
|
"hashcat-utils",
|
|
"omen",
|
|
"princeprocessor",
|
|
"wordlists",
|
|
"rules",
|
|
]
|
|
|
|
[tool.bandit]
|
|
# hate_crack shells out to hashcat and its helper binaries extensively, so the
|
|
# scan produces many low-severity subprocess/shlex findings. These are reviewed
|
|
# and captured in .bandit-baseline.json; CI compares against that baseline so
|
|
# only NEW findings fail the build (mirrors the hashview approach). Scan the
|
|
# first-party package only — bundled third-party trees are excluded.
|
|
exclude_dirs = [
|
|
"tests",
|
|
".venv",
|
|
"build",
|
|
"dist",
|
|
"PACK",
|
|
"hashcat-utils",
|
|
"omen",
|
|
"princeprocessor",
|
|
]
|
|
|
|
[tool.ty.src]
|
|
exclude = [
|
|
"build/",
|
|
"dist/",
|
|
"PACK/",
|
|
"wordlists/",
|
|
"HashcatRosetta/",
|
|
"hashcat-utils/",
|
|
"omen/",
|
|
"princeprocessor/",
|
|
]
|
|
|
|
[tool.ty.rules]
|
|
# Module-level globals in main.py are assigned at runtime
|
|
unresolved-reference = "warn"
|
|
# Optional deps (hashcat_rosetta) not always installed
|
|
unresolved-import = "warn"
|
|
# BeautifulSoup union types and module-level globals
|
|
unresolved-attribute = "warn"
|
|
invalid-argument-type = "warn"
|
|
|
|
[tool.pytest.ini_options]
|
|
testpaths = [
|
|
"tests",
|
|
]
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"ty==0.0.17",
|
|
"ruff==0.15.1",
|
|
"pytest==9.0.3",
|
|
"pytest-cov==7.1.0",
|
|
"pytest-timeout>=2.4.0",
|
|
]
|