Guardian/pyproject.toml at main · prithvee07/Guardian · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
[build-system]
requires = ["setuptools>=68.0.0", "wheel"]
build-backend = "setuptools.build_meta"

[project]
name = "guardian-cli"
version = "0.1.0"
description = "AI-Powered Penetration Testing Automation CLI Tool"
readme = "README.md"
requires-python = ">=3.11"
license = {text = "MIT"}
authors = [
    {name = "Guardian Team"}
]
keywords = ["penetration-testing", "security", "ai", "automation", "cli"]
classifiers = [
    "Development Status :: 4 - Beta",
    "Intended Audience :: Developers",
    "Intended Audience :: Information Technology",
    "License :: OSI Approved :: MIT License",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Topic :: Security",
]

dependencies = [
    "typer[all]>=0.24.1,<1",
    "rich>=15.0.0,<16",
    "langchain>=1.2.15,<2",
    "langchain-google-genai>=4.2.1,<5",
    "langchain-openai>=1.1.12,<2",
    "langchain-anthropic>=1.4.0,<2",
    "pyyaml>=6.0.3,<7",
    "python-dotenv>=1.2.2,<2",
    "pydantic>=2.12.5,<3",
    "aiofiles>=25.1.0,<26",
    "jinja2>=3.1.6,<4",
    "defusedxml>=0.7.1,<1",
]

# Release builds should be produced from a reviewed, hash-locked dependency
# set. Keep direct dependency bounds constrained to avoid unreviewed majors.

[project.optional-dependencies]
dev = [
    "pytest>=9.0.3",
    "pytest-asyncio>=1.3.0",
    "pytest-cov>=6.0.0",
    "black>=26.3.1",
    "ruff>=0.15.10",
    "bandit[toml]>=1.8.0",
    "pip-audit>=2.7.0",
]

[project.scripts]
guardian = "cli.main:app"

[tool.setuptools]
packages = ["cli", "core", "ai", "tools", "reports", "utils", "workflows"]

[tool.pytest.ini_options]
asyncio_mode = "auto"
testpaths = ["tests"]
addopts = "-v --tb=short"

[tool.coverage.run]
source = ["ai", "cli", "core", "tools", "utils"]
omit = ["*/venv/*", "*/tests/*", "*/__pycache__/*"]

[tool.coverage.report]
show_missing = true
skip_covered = false
# Coverage is reported in CI but is not yet a release gate. Raise this threshold
# incrementally as the currently untested command/provider integrations gain tests.
fail_under = 0

[tool.black]
line-length = 100
target-version = ["py311"]

[tool.ruff]
line-length = 100
target-version = "py311"
exclude = ["venv", ".venv", "build", "dist"]

[tool.ruff.lint]
select = ["E", "F", "W", "I", "N", "S"]
ignore = [
    "E501",   # Black deliberately leaves long strings and comments intact
    "N806",   # Existing local constants use uppercase names intentionally
    "W293",   # Preserve whitespace embedded in report templates
    "S101",   # assert statements in tests
    "S603",   # subprocess without shell=True is fine
    "S607",   # partial executable path — tool wrappers use bare names intentionally
    "S104",   # binding to all interfaces — not applicable
]

[tool.ruff.lint.per-file-ignores]
"tests/*" = ["S105", "S108"]

[tool.bandit]
exclude_dirs = ["venv", "tests", "docs"]
skips = ["B101", "B603", "B607"]   # match ruff ignores above