Skip to content

Releases

SafeRun 0.0.3

SafeRun 0.0.3 Latest
Latest

Choose a tag to compare

View all tags
@vinay-repalle vinay-repalle released this 05 Nov 12:27
v0.0.3
87eca75

SafeRun 0.0.3 — Secrets scanning, new detection rules and a Python-only focus

SafeRun is a secure validation and sandboxed execution tool for Python scripts.

🌐 Website: https://safe-run.netlify.app/
📦 PyPI: https://pypi.org/project/saferun-cli/0.0.3/
💻 GitHub: https://github.com/vinay-repalle/saferun

Installation

pip install saferun-cli
saferun init
saferun doctor

To upgrade from 0.0.2: pip install --upgrade saferun-cli

What's new

Detection

  • Hardcoded-secrets scan using gitleaks, running inside the signed analyzer container
  • New rules for credential-file reads, persistence setup and hidden function lookups
  • Plain-English explanations on findings, so you can see why something was flagged
  • Fix-size label on dependency findings, plus an accept-risk file for risks you have reviewed
  • New check-names command: offline look-alike (typosquat) detection for dependency names

Signed analyzer

  • Updated signed analyzer image (analyzer-v1.2.0) that carries the new secrets scan and rules, verified by signature before use

Benchmarks

  • Benchmark of the scan against Bandit and pip-audit, with frozen labels and a dev/held-out split
  • A second benchmark sample set, with the baseline recorded for unchanged rules
  • Website updated with the new benchmark results

Python-only

  • JavaScript/Node support has been removed. SafeRun is Python-only.

Fixes

  • Sandbox out-of-memory tests no longer depend on Docker's unreliable OOMKilled flag
  • Fixed the gitleaks licence inventory test on Windows

Requirements

  • Python 3.12+
  • Docker

Note: This is an alpha release. It is not independently certified.

Full changelog: v0.0.2...v0.0.3

Assets 2
Loading

SafeRun 0.0.2

SafeRun 0.0.2

Choose a tag to compare

View all tags
@vinay-repalle vinay-repalle released this 01 Nov 01:48
v0.0.2
f419788

SafeRun 0.0.2 — First Public Release

SafeRun is a secure validation and sandboxed execution tool for Python scripts.

🌐 Website: https://safe-run.netlify.app/
📦 PyPI: https://pypi.org/project/saferun-cli/0.0.2/
💻 GitHub: https://github.com/vinay-repalle/saferun

Installation

pip install saferun-cli
saferun init
saferun doctor

Features

  • Static validation before execution
  • Sandboxed Python script execution
  • Dependency vulnerability scanning
  • Signed analyzer image verification
  • Offline OSV vulnerability database
  • Linux, Windows and macOS support

Requirements

  • Python 3.12+
  • Docker

Note: This is an alpha release. It is not independently certified.

Loading