mycop 0.3.1

AI Code Security Scanner — detect vulnerabilities in AI-generated code
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148

use schemars::JsonSchema;
use serde::{Deserialize, Serialize};

// ---- Scan Tool ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ScanParams {
    /// A single file or directory path to scan (use this OR paths, not both)
    #[serde(default)]
    pub path: Option<String>,
    /// Multiple files or directories to scan (use this OR path, not both)
    #[serde(default)]
    pub paths: Option<Vec<String>>,
    /// Minimum severity to report: "critical", "high", "medium", "low", "info"
    #[serde(default)]
    pub severity: Option<String>,
    /// Only scan files changed in git diff
    #[serde(default)]
    pub diff: Option<bool>,
    /// Maximum number of findings to return (default: 50)
    #[serde(default)]
    pub max_results: Option<usize>,
}

impl ScanParams {
    /// Resolve path/paths into a single Vec<String>. Defaults to "." if neither is provided.
    pub fn resolved_paths(&self) -> Vec<String> {
        if let Some(p) = &self.path {
            return vec![p.clone()];
        }
        if let Some(ps) = &self.paths {
            if !ps.is_empty() {
                return ps.clone();
            }
        }
        vec![".".to_string()]
    }
}

#[derive(Debug, Serialize)]
pub struct ScanResult {
    pub total_findings: usize,
    pub files_scanned: usize,
    pub rules_loaded: usize,
    pub findings: Vec<FindingOutput>,
}

#[derive(Debug, Serialize)]
pub struct FindingOutput {
    pub rule_id: String,
    pub rule_name: String,
    pub severity: String,
    pub file: String,
    pub line: usize,
    pub column: usize,
    pub matched_text: String,
    pub message: String,
    pub description: String,
    pub fix_hint: Option<String>,
    pub cwe: Option<String>,
    pub owasp: Option<String>,
    pub references: Vec<String>,
    pub context_before: Vec<String>,
    pub context_after: Vec<String>,
}

// ---- List Rules Tool ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ListRulesParams {
    /// Filter by language: "python", "javascript"
    #[serde(default)]
    pub language: Option<String>,
    /// Filter by minimum severity: "critical", "high", "medium", "low"
    #[serde(default)]
    pub severity: Option<String>,
    /// Search term to filter rules by name, id, or description
    #[serde(default)]
    pub search: Option<String>,
}

#[derive(Debug, Serialize)]
pub struct ListRulesResult {
    pub total: usize,
    pub rules: Vec<RuleOutput>,
}

#[derive(Debug, Serialize)]
pub struct RuleOutput {
    pub id: String,
    pub name: String,
    pub severity: String,
    pub language: String,
    pub description: String,
    pub cwe: Option<String>,
    pub owasp: Option<String>,
    pub fix_hint: Option<String>,
    pub references: Vec<String>,
}

// ---- Explain Finding Tool ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ExplainFindingParams {
    /// The absolute file path containing the vulnerability
    #[serde(alias = "file", alias = "filePath", alias = "file_path", alias = "target")]
    pub path: String,
    /// The line number of the finding
    pub line: usize,
    /// The rule ID (e.g., "PY-SEC-001")
    pub rule_id: String,
    /// Override AI provider: "claude-cli", "anthropic", "openai", "ollama", "none"
    #[serde(default)]
    pub ai_provider: Option<String>,
}

// ---- Review Tool ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ReviewParams {
    /// The absolute file path to review for security vulnerabilities
    #[serde(alias = "file", alias = "filePath", alias = "file_path", alias = "target")]
    pub path: String,
    /// Override AI provider
    #[serde(default)]
    pub ai_provider: Option<String>,
}

// ---- Check Deps Tool ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct CheckDepsParams {
    /// Path to project directory, requirements.txt, or package.json (defaults to ".")
    #[serde(default = "default_dot")]
    pub path: String,
}

fn default_dot() -> String {
    ".".to_string()
}

#[derive(Debug, Serialize)]
pub struct CheckDepsResult {
    pub files_checked: Vec<String>,
    pub python_packages: Vec<String>,
    pub npm_packages: Vec<String>,
    pub npm_dev_packages: Vec<String>,
}