Python Security Auth and Crypto Audit Bundle
Run a read-only Python security audit focused on credentials, secrets, authentication, authorization tokens, cookies, LDAP, cryptography, password handling, randomness, and TLS configuration.
This bundle runs 24 read-only Python security audit codemods. It is part of the split Python security audit set; run the other Python security audit bundles when you need broader coverage.
Included Codemods
- @codemod/detect-missing-httponly-cookie-flag@0.1.0
- @codemod/flask-secret-key-hardcoding-audit@0.1.0
- @codemod/python-anonymous-ldap-bind@0.1.0
- @codemod/python-cbc-predictable-iv-mining@0.1.0
- @codemod/python-cookie-missing-secure-flag@0.1.0
- @codemod/python-detect-hardcoded-aws-keys@0.1.0
- @codemod/python-embedded-secrets-detection@0.1.0
- @codemod/python-hardcoded-credentials-audit@0.1.0
- @codemod/python-hardcoded-credentials-detect@0.1.0
- @codemod/python-hardcoded-db-weak-password@0.1.0
- @codemod/python-hardcoded-jwt-secret-detection@0.1.0
- @codemod/python-insecure-cipher-mode-padding-usage@0.1.0
- @codemod/python-insecure-prng-security-use@0.1.0
- @codemod/python-insecure-xml-signature-validation@0.1.0
- @codemod/python-jwt-missing-signature-checks@0.1.0
- @codemod/python-ldap-query-construction-risk@0.1.0
- @codemod/python-password-hash-predictable-salt@0.1.0
- @codemod/python-password-storage-weak-hash-scan@0.1.0
- @codemod/python-query-params-sensitive-data-audit@0.1.0
- @codemod/python-tls-hostname-check-bypass-audit@0.1.0
- @codemod/python-untrusted-session-cookie-input@0.1.0
- @codemod/python-weak-hash-algorithm-detection@0.1.0
- @codemod/python-weak-key-generation-params@0.1.0
- @codemod/python-weak-tls-protocol-usage@0.1.0