Merge pull request #98 from inyeongjang/feat/language-python

Feat/language python : 분석 언어 변경

Author: inyeongjang

.env.example

@@ -6,11 +6,5 @@ DISCORD_WEBHOOK_URL=your-discord-webhook
 SLACK_WEBHOOK_URL=your-slack-webhook
 SNYK_TOKEN=your_token_here
 
-# File Extensions to collect from Github 
-GITHUB_EXTENSIONS=.js,.mjs,.jsx,.ts
-
-# Semgrep Rule (default : JavaScript)
-SEMGREP_RULE=p/javascript
-
 # Server URL
-LOG_API_URL=https://autofic-core-kmw6.onrender.com/
+LOG_API_URL=https://autofic-core-kmw6.onrender.com/

src/autofic_core/errors.py

@@ -55,7 +55,7 @@ def __init__(self, returncode, stdout=None, stderr=None):
 
 class SnykCodeErrorMessages:
     TOKEN_MISSING = "[ ERROR ] SNYK_TOKEN environment variable not set."
-    NO_JS_FILES_FOUND = "[ ERROR ] No JavaScript/TypeScript files found to analyze."
+    NO_PY_FILES_FOUND = "[ ERROR ] No Python files found to analyze."
     CLI_NOT_FOUND = "[ ERROR ] Unable to locate Snyk CLI. Please install or set SNYK_CMD_PATH."
 
 # prompt_generator.py

src/autofic_core/pipeline.py

@@ -82,7 +82,7 @@ def run(self):
             task = progress.add_task(description, total=100)
 
             start = time.time()
-            runner = SemgrepRunner(repo_path=str(self.repo_path), rule="p/javascript")
+            runner = SemgrepRunner(repo_path=str(self.repo_path), rule="p/python")
             result = runner.run_semgrep()
             end = time.time()
 

src/autofic_core/sast/codeql/runner.py

@@ -34,15 +34,15 @@ class CodeQLRunner:
 
     Attributes:
         repo_path (Path): Path to the cloned repository.
-        language (str): Programming language to analyze (default: "javascript").
-        query_pack (str): Query pack path (e.g., "codeql/javascript-queries").
+        language (str): Programming language to analyze (default: "python").
+        query_pack (str): Query pack path (e.g., "codeql/python-queries").
         db_path (Path): Path to the CodeQL database.
         result_dir (Path): Directory for storing analysis results.
         output_path (Path): Path to the generated SARIF report.
         log_path (Path): Path to the log file for subprocess outputs.
     """
 
-    def __init__(self, repo_path: Path, language: str = "javascript"):
+    def __init__(self, repo_path: Path, language: str = "python"):
         self.repo_path = Path(repo_path).resolve()
         self.language = language.lower()
         self.query_pack = f"codeql/{self.language}-queries"

src/autofic_core/sast/semgrep/runner.py

@@ -31,9 +31,8 @@ def run_semgrep(self) -> SemgrepResult:
             "semgrep",
             "--config", self.rule,
             "--json",
-            "--include", "*.js", 
-            "--include", "*.jsx", 
-            "--include", "*.mjs",
+            "--include", "*.pyi", 
+            "--include", "*.py", 
             self.repo_path
         ]
 

src/autofic_core/sast/snykcode/runner.py

@@ -76,7 +76,7 @@ def run_snykcode(self) -> SnykCodeResult:
         # Simulate `snyk auth`
         self._ensure_authenticated(snyk_cmd, env)
 
-        valid_exts = {".js", ".jsx", ".ts", ".mjs"}
+        valid_exts = {".py", ".pyi"}
         target_files = [
             p for p in self.repo_path.rglob("*")
             if p.suffix in valid_exts and p.is_file()
@@ -85,7 +85,7 @@ def run_snykcode(self) -> SnykCodeResult:
         if not target_files:
             return SnykCodeResult(
                 stdout="",
-                stderr=SnykCodeErrorMessages.NO_JS_FILES_FOUND,
+                stderr=SnykCodeErrorMessages.NO_PY_FILES_FOUND,
                 returncode=1
             )