Add SPDX license identifier to each file (#651)

Add SPDX license short header to every source file. Also add any missing copyrights if necessary. Signed-off-by: Eric Brown <[email protected]>
securesauce · Oct 21, 2024 · 3c79016 · 3c79016
1 parent 24d5166
commit 3c79016
Show file tree

Hide file tree

Showing 161 changed files with 173 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -1,3 +1,6 @@
+# Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
+
 # Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,3 +1,5 @@
+# Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 exclude: ^(docs|tests|mkdocs.yml)
 repos:
 

diff --git a/.readthedocs.yaml b/.readthedocs.yaml
@@ -1,3 +1,5 @@
+# Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 version: 2
 
 build:

diff --git a/docs/requirements.txt b/docs/requirements.txt
@@ -1,3 +1,5 @@
+# Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 mkdocs
 mkdocstrings[python]
 mkdocs-material

diff --git a/mkdocs.yml b/mkdocs.yml
@@ -1,3 +1,5 @@
+# Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 site_name: Precli Documentation
 repo_url: https://github.com/securesauce/precli/
 edit_uri: blob/main/docs/

diff --git a/precli/__init__.py b/precli/__init__.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from datetime import datetime
 from importlib import metadata
 

diff --git a/precli/__main__.py b/precli/__main__.py
@@ -1,4 +1,6 @@
 #!/usr/bin/env python
+# Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from precli.cli import main
 
 main.main()
diff --git a/precli/cli/main.py b/precli/cli/main.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import argparse
 import logging
 import os

diff --git a/precli/core/argument.py b/precli/core/argument.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from typing import Optional
 
 from tree_sitter import Node

diff --git a/precli/core/artifact.py b/precli/core/artifact.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from typing import Optional
 
 

diff --git a/precli/core/call.py b/precli/core/call.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from typing import Optional
 
 from tree_sitter import Node

diff --git a/precli/core/comparison.py b/precli/core/comparison.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from tree_sitter import Node
 
 

diff --git a/precli/core/config.py b/precli/core/config.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from precli.core.level import Level
 
 

diff --git a/precli/core/cwe.py b/precli/core/cwe.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 
 
 class Cwe:

diff --git a/precli/core/fix.py b/precli/core/fix.py
@@ -1,4 +1,5 @@
 # Copyright 2023 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from typing import Optional
 
 from precli.core.location import Location

diff --git a/precli/core/kind.py b/precli/core/kind.py
@@ -1,4 +1,5 @@
 # Copyright 2023 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import enum
 
 

diff --git a/precli/core/level.py b/precli/core/level.py
@@ -1,4 +1,5 @@
 # Copyright 2023 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import enum
 
 

diff --git a/precli/core/linecache.py b/precli/core/linecache.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import linecache
 
 

diff --git a/precli/core/loader.py b/precli/core/loader.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import sys
 from importlib.metadata import entry_points
 

diff --git a/precli/core/location.py b/precli/core/location.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from typing import Optional
 
 from tree_sitter import Node

diff --git a/precli/core/metrics.py b/precli/core/metrics.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 
 
 class Metrics:

diff --git a/precli/core/redos.py b/precli/core/redos.py
@@ -1,5 +1,6 @@
 # Copyright 2024 Secure Sauce LLC
 # Copyright 2019 Duo Security
+# SPDX-License-Identifier: BUSL-1.1
 import collections
 import itertools
 import sys

diff --git a/precli/core/result.py b/precli/core/result.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from typing import Optional
 
 from precli.core.artifact import Artifact

diff --git a/precli/core/run.py b/precli/core/run.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import datetime
 import io
 import logging

diff --git a/precli/core/status.py b/precli/core/status.py
@@ -1,4 +1,5 @@
 # Copyright 2023 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import enum
 
 

diff --git a/precli/core/suppression.py b/precli/core/suppression.py
@@ -1,4 +1,5 @@
 # Copyright 2023 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from typing import Optional
 
 from precli.core.location import Location

diff --git a/precli/core/symtab.py b/precli/core/symtab.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import sys
 from typing import Optional
 

diff --git a/precli/core/tool.py b/precli/core/tool.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 class Tool:
     def __init__(
         self,

diff --git a/precli/core/utils.py b/precli/core/utils.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 
 
 def is_str(value) -> bool:

diff --git a/precli/parsers/go.py b/precli/parsers/go.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import ast
 import re
 from typing import Optional

diff --git a/precli/parsers/java.py b/precli/parsers/java.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import re
 from typing import Optional
 

diff --git a/precli/parsers/node_types.py b/precli/parsers/node_types.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 
 
 class NodeTypes:

diff --git a/precli/parsers/python.py b/precli/parsers/python.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import builtins
 import codecs
 import importlib

diff --git a/precli/renderers/detailed.py b/precli/renderers/detailed.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from rich import box
 from rich import syntax
 from rich.table import Table

diff --git a/precli/renderers/json.py b/precli/renderers/json.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import pathlib
 import sys
 import urllib.parse as urlparse

diff --git a/precli/renderers/markdown.py b/precli/renderers/markdown.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 import logging
 import sys
 

diff --git a/precli/renderers/plain.py b/precli/renderers/plain.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 from rich.padding import Padding
 
 from precli.core.level import Level

diff --git a/precli/rules/go/stdlib/crypto_weak_cipher.py b/precli/rules/go/stdlib/crypto_weak_cipher.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Use of a Broken or Risky Cryptographic Algorithm in `crypto` Package
 

diff --git a/precli/rules/go/stdlib/crypto_weak_hash.py b/precli/rules/go/stdlib/crypto_weak_hash.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Reversible One Way Hash in `crypto` Package
 

diff --git a/precli/rules/go/stdlib/crypto_weak_key.py b/precli/rules/go/stdlib/crypto_weak_key.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Inadequate Encryption Strength Using Weak Keys in `crypto` Package
 

diff --git a/precli/rules/go/stdlib/syscall_setuid_root.py b/precli/rules/go/stdlib/syscall_setuid_root.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Execution with Unnecessary Privileges using `syscall` Package
 

diff --git a/precli/rules/java/stdlib/java_net_insecure_cookie.py b/precli/rules/java/stdlib/java_net_insecure_cookie.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
 

diff --git a/precli/rules/java/stdlib/java_security_weak_hash.py b/precli/rules/java/stdlib/java_security_weak_hash.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Reversible One Way Hash in `java.security` Package
 

diff --git a/precli/rules/java/stdlib/java_security_weak_key.py b/precli/rules/java/stdlib/java_security_weak_key.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Inadequate Encryption Strength Using Weak Keys in `java.security` Package
 

diff --git a/precli/rules/java/stdlib/java_security_weak_random.py b/precli/rules/java/stdlib/java_security_weak_random.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Use of Cryptographically Weak Pseudo-Random Number Generator `SHA1PRNG`
 

diff --git a/precli/rules/java/stdlib/javax_crypto_weak_cipher.py b/precli/rules/java/stdlib/javax_crypto_weak_cipher.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Use of a Broken or Risky Cryptographic Algorithm in `javax.crypto` Package
 

diff --git a/precli/rules/java/stdlib/javax_servlet_http_insecure_cookie.py b/precli/rules/java/stdlib/javax_servlet_http_insecure_cookie.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
 

diff --git a/precli/rules/python/stdlib/argparse_sensitive_info.py b/precli/rules/python/stdlib/argparse_sensitive_info.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Invocation of Process Using Visible Sensitive Information in `argparse`
 

diff --git a/precli/rules/python/stdlib/assert.py b/precli/rules/python/stdlib/assert.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Improper Check Using `assert` Function
 

diff --git a/precli/rules/python/stdlib/crypt_weak_hash.py b/precli/rules/python/stdlib/crypt_weak_hash.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Reversible One Way Hash in `crypt` Module
 

diff --git a/precli/rules/python/stdlib/ftplib_cleartext.py b/precli/rules/python/stdlib/ftplib_cleartext.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Cleartext Transmission of Sensitive Information in the `ftplib` Module
 

diff --git a/precli/rules/python/stdlib/ftplib_no_timeout.py b/precli/rules/python/stdlib/ftplib_no_timeout.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Synchronous Access of `FTP` without Timeout
 

diff --git a/precli/rules/python/stdlib/ftplib_unverified_context.py b/precli/rules/python/stdlib/ftplib_unverified_context.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Improper Certificate Validation Using `ftplib`
 

diff --git a/precli/rules/python/stdlib/hashlib_improper_prng.py b/precli/rules/python/stdlib/hashlib_improper_prng.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Improper Randomness for Cryptographic `hashlib` Functions
 

diff --git a/precli/rules/python/stdlib/hashlib_weak_hash.py b/precli/rules/python/stdlib/hashlib_weak_hash.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Reversible One Way Hash in `hashlib` Module
 

diff --git a/precli/rules/python/stdlib/hmac_timing_attack.py b/precli/rules/python/stdlib/hmac_timing_attack.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 Observable Timing Discrepancy in `hmac` Module
 

diff --git a/precli/rules/python/stdlib/hmac_weak_hash.py b/precli/rules/python/stdlib/hmac_weak_hash.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Reversible One Way Hash in `hmac` Module
 

diff --git a/precli/rules/python/stdlib/hmac_weak_key.py b/precli/rules/python/stdlib/hmac_weak_key.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Insufficient `hmac` Key Size
 

diff --git a/precli/rules/python/stdlib/http_server_unrestricted_bind.py b/precli/rules/python/stdlib/http_server_unrestricted_bind.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Binding to an Unrestricted IP Address in `http.server` Module
 

diff --git a/precli/rules/python/stdlib/http_url_secret.py b/precli/rules/python/stdlib/http_url_secret.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Use of HTTP Request Method With Sensitive Query Strings
 

diff --git a/precli/rules/python/stdlib/imaplib_cleartext.py b/precli/rules/python/stdlib/imaplib_cleartext.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Cleartext Transmission of Sensitive Information in the `imaplib` Module
 

diff --git a/precli/rules/python/stdlib/imaplib_no_timeout.py b/precli/rules/python/stdlib/imaplib_no_timeout.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Synchronous Access of `IMAP4` without Timeout
 

diff --git a/precli/rules/python/stdlib/imaplib_unverified_context.py b/precli/rules/python/stdlib/imaplib_unverified_context.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Improper Certificate Validation Using `imaplib`
 

diff --git a/precli/rules/python/stdlib/json_load.py b/precli/rules/python/stdlib/json_load.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Deserialization of Untrusted Data in the `json` Module
 

diff --git a/precli/rules/python/stdlib/logging_insecure_listen_config.py b/precli/rules/python/stdlib/logging_insecure_listen_config.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Code Injection in Logging Config
 

diff --git a/precli/rules/python/stdlib/marshal_load.py b/precli/rules/python/stdlib/marshal_load.py
@@ -1,4 +1,5 @@
 # Copyright 2024 Secure Sauce LLC
+# SPDX-License-Identifier: BUSL-1.1
 r"""
 # Deserialization of Untrusted Data in the `marshal` Module