ai-rsk 0.7.2

Security gate for AI-generated code - blocks the build until vulnerabilities are fixed
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99

use crate::types::Ecosystem;
use std::path::Path;

/// Detect which ecosystems are present in the project by checking for marker files.
/// A project can have multiple ecosystems (e.g., monorepo with JS + Python).
pub fn detect_ecosystems(project_path: &Path) -> Vec<Ecosystem> {
    let mut ecosystems = Vec::new();

    // JavaScript/TypeScript: package.json
    if project_path.join("package.json").exists() {
        ecosystems.push(Ecosystem::JavaScript);
    }

    // Python: requirements.txt, pyproject.toml, setup.py, setup.cfg, Pipfile, or requirements/ dir
    if project_path.join("requirements.txt").exists()
        || project_path.join("pyproject.toml").exists()
        || project_path.join("setup.py").exists()
        || project_path.join("setup.cfg").exists()
        || project_path.join("Pipfile").exists()
        || project_path.join("requirements").is_dir()
    {
        ecosystems.push(Ecosystem::Python);
    }

    // Go: go.mod
    if project_path.join("go.mod").exists() {
        ecosystems.push(Ecosystem::Go);
    }

    // Rust: Cargo.toml
    if project_path.join("Cargo.toml").exists() {
        ecosystems.push(Ecosystem::Rust);
    }

    ecosystems
}

#[cfg(test)]
mod tests {
    use super::*;
    use std::fs;
    use tempfile::TempDir;

    #[test]
    fn test_detect_javascript() {
        let dir = TempDir::new().expect("Failed to create temp dir");
        fs::write(dir.path().join("package.json"), "{}").expect("Failed to write");
        let ecosystems = detect_ecosystems(dir.path());
        assert_eq!(ecosystems, vec![Ecosystem::JavaScript]);
    }

    #[test]
    fn test_detect_python_requirements() {
        let dir = TempDir::new().expect("Failed to create temp dir");
        fs::write(dir.path().join("requirements.txt"), "flask").expect("Failed to write");
        let ecosystems = detect_ecosystems(dir.path());
        assert_eq!(ecosystems, vec![Ecosystem::Python]);
    }

    #[test]
    fn test_detect_python_pyproject() {
        let dir = TempDir::new().expect("Failed to create temp dir");
        fs::write(dir.path().join("pyproject.toml"), "[project]").expect("Failed to write");
        let ecosystems = detect_ecosystems(dir.path());
        assert_eq!(ecosystems, vec![Ecosystem::Python]);
    }

    #[test]
    fn test_detect_go() {
        let dir = TempDir::new().expect("Failed to create temp dir");
        fs::write(dir.path().join("go.mod"), "module example").expect("Failed to write");
        let ecosystems = detect_ecosystems(dir.path());
        assert_eq!(ecosystems, vec![Ecosystem::Go]);
    }

    #[test]
    fn test_detect_rust() {
        let dir = TempDir::new().expect("Failed to create temp dir");
        fs::write(dir.path().join("Cargo.toml"), "[package]").expect("Failed to write");
        let ecosystems = detect_ecosystems(dir.path());
        assert_eq!(ecosystems, vec![Ecosystem::Rust]);
    }

    #[test]
    fn test_detect_multiple_ecosystems() {
        let dir = TempDir::new().expect("Failed to create temp dir");
        fs::write(dir.path().join("package.json"), "{}").expect("Failed to write");
        fs::write(dir.path().join("requirements.txt"), "flask").expect("Failed to write");
        let ecosystems = detect_ecosystems(dir.path());
        assert_eq!(ecosystems, vec![Ecosystem::JavaScript, Ecosystem::Python]);
    }

    #[test]
    fn test_detect_empty_project() {
        let dir = TempDir::new().expect("Failed to create temp dir");
        let ecosystems = detect_ecosystems(dir.path());
        assert!(ecosystems.is_empty());
    }
}