shivasurya
diff --git a/‎.gitignore‎
Lines changed: 9 additions & 0 deletions b/‎.gitignore‎
Lines changed: 9 additions & 0 deletions
diff --git a/‎package.json‎
Lines changed: 1 addition & 1 deletion b/‎package.json‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎python-dsl/codepathfinder/__init__.py‎
Lines changed: 1 addition & 1 deletion b/‎python-dsl/codepathfinder/__init__.py‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎python-dsl/codepathfinder/cli/__init__.py‎
Lines changed: 9 additions & 5 deletions b/‎python-dsl/codepathfinder/cli/__init__.py‎
Lines changed: 9 additions & 5 deletions
diff --git a/‎python-dsl/compile_container_rules.py‎
Lines changed: 1 addition & 0 deletions b/‎python-dsl/compile_container_rules.py‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎python-dsl/pyproject.toml‎
Lines changed: 1 addition & 1 deletion b/‎python-dsl/pyproject.toml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎python-dsl/rules/container_combinators.py‎
Lines changed: 21 additions & 33 deletions b/‎python-dsl/rules/container_combinators.py‎
Lines changed: 21 additions & 33 deletions
diff --git a/‎python-dsl/rules/container_decorators.py‎
Lines changed: 10 additions & 4 deletions b/‎python-dsl/rules/container_decorators.py‎
Lines changed: 10 additions & 4 deletions
diff --git a/‎python-dsl/rules/container_ir.py‎
Lines changed: 1 addition & 1 deletion b/‎python-dsl/rules/container_ir.py‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎python-dsl/rules/container_matchers.py‎
Lines changed: 4 additions & 4 deletions b/‎python-dsl/rules/container_matchers.py‎
Lines changed: 4 additions & 4 deletions
@@ -34,4 +34,13 @@ docs/public/rules/*.json
 node_modules
 __pycache__/
 compiled_rules.json
+
+# test coverage
+*.coverage
+.coverage
+coverage.out
+htmlcov/
+
+# output files
+result.json
 scan.json
@@ -1,6 +1,6 @@
 {
     "name": "codepathfinder",
-    "version": "1.1.3",
+    "version": "1.1.5",
     "description": "DEPRECATED - Use 'pip install codepathfinder' instead. See https://codepathfinder.dev/install",
     "deprecated": "This package is deprecated. Please use 'pip install codepathfinder' for the complete installation including both CLI and Python DSL.",
     "goBinary": {
 
@@ -22,7 +22,7 @@
         ... )
 """
 
-__version__ = "1.1.3"
+__version__ = "1.1.5"
 
 from .matchers import calls, variable
 from .decorators import rule
 
@@ -3,6 +3,7 @@
 This module provides the entry point for the `pathfinder` command.
 It locates and executes the bundled Go binary, passing through all arguments.
 """
+
 import os
 import sys
 import subprocess
@@ -49,6 +50,7 @@ def get_binary_path() -> Path:
 
     # 2. Check PATH (development mode or manual install)
     import shutil
+
     path_binary = shutil.which("pathfinder")
     if path_binary:
         return Path(path_binary)
@@ -60,13 +62,13 @@ def get_binary_path() -> Path:
 def _is_musl() -> bool:
     """Detect if running on musl libc (Alpine Linux, etc.)."""
     try:
-        result = subprocess.run(['ldd', '--version'], capture_output=True, text=True)
-        return 'musl' in result.stderr.lower() or 'musl' in result.stdout.lower()
+        result = subprocess.run(["ldd", "--version"], capture_output=True, text=True)
+        return "musl" in result.stderr.lower() or "musl" in result.stdout.lower()
     except Exception:
         try:
-            with open('/etc/os-release') as f:
+            with open("/etc/os-release") as f:
                 content = f.read().lower()
-                return 'alpine' in content
+                return "alpine" in content
         except Exception:
             return False
 
@@ -155,7 +157,9 @@ def _download_binary(bin_dir: Path, binary_name: str) -> Path:
             if archive_ext == ".tar.gz":
                 with tarfile.open(tmp.name, "r:gz") as tar:
                     for member in tar.getmembers():
-                        if member.name == "pathfinder" or member.name.endswith("/pathfinder"):
+                        if member.name == "pathfinder" or member.name.endswith(
+                            "/pathfinder"
+                        ):
                             member.name = binary_name
                             tar.extract(member, bin_dir)
                             break
 
@@ -58,6 +58,7 @@ def discover_and_import_rules(rules_dir: Path, rule_type: str):
         except Exception as e:
             print(f"  ✗ Failed to import {rule_file.name}: {e}")
             import traceback
+
             traceback.print_exc()
 
     return imported_count
 
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "codepathfinder"
-version = "1.1.3"
+version = "1.1.5"
 description = "Python DSL for code-pathfinder security patterns"
 readme = "README.md"
 requires-python = ">=3.8"
 
@@ -10,29 +10,26 @@
 @dataclass
 class CombinatorMatcher:
     """Represents a logic combinator (AND, OR, NOT)."""
+
     combinator_type: str  # "all_of", "any_of", "none_of"
-    conditions: List[Union[Matcher, 'CombinatorMatcher', Dict, Callable]]
+    conditions: List[Union[Matcher, "CombinatorMatcher", Dict, Callable]]
 
     def to_dict(self) -> Dict[str, Any]:
         """Convert to JSON IR."""
         serialized_conditions = []
         for cond in self.conditions:
-            if hasattr(cond, 'to_dict'):
+            if hasattr(cond, "to_dict"):
                 serialized_conditions.append(cond.to_dict())
             elif isinstance(cond, dict):
                 serialized_conditions.append(cond)
             elif callable(cond):
-                serialized_conditions.append({
-                    "type": "custom_function",
-                    "has_callable": True
-                })
+                serialized_conditions.append(
+                    {"type": "custom_function", "has_callable": True}
+                )
             else:
                 serialized_conditions.append(cond)
 
-        return {
-            "type": self.combinator_type,
-            "conditions": serialized_conditions
-        }
+        return {"type": self.combinator_type, "conditions": serialized_conditions}
 
 
 def all_of(*conditions: Union[Matcher, Dict, Callable]) -> CombinatorMatcher:
@@ -47,10 +44,7 @@ def all_of(*conditions: Union[Matcher, Dict, Callable]) -> CombinatorMatcher:
             instruction(type="RUN", contains="sudo")
         )
     """
-    return CombinatorMatcher(
-        combinator_type="all_of",
-        conditions=list(conditions)
-    )
+    return CombinatorMatcher(combinator_type="all_of", conditions=list(conditions))
 
 
 def any_of(*conditions: Union[Matcher, Dict, Callable]) -> CombinatorMatcher:
@@ -65,10 +59,7 @@ def any_of(*conditions: Union[Matcher, Dict, Callable]) -> CombinatorMatcher:
             instruction(type="FROM", base_image="scratch")
         )
     """
-    return CombinatorMatcher(
-        combinator_type="any_of",
-        conditions=list(conditions)
-    )
+    return CombinatorMatcher(combinator_type="any_of", conditions=list(conditions))
 
 
 def none_of(*conditions: Union[Matcher, Dict, Callable]) -> CombinatorMatcher:
@@ -83,26 +74,25 @@ def none_of(*conditions: Union[Matcher, Dict, Callable]) -> CombinatorMatcher:
             instruction(type="USER", user_name_not="root")
         )
     """
-    return CombinatorMatcher(
-        combinator_type="none_of",
-        conditions=list(conditions)
-    )
+    return CombinatorMatcher(combinator_type="none_of", conditions=list(conditions))
 
 
 @dataclass
 class SequenceMatcher:
     """Represents instruction sequence validation."""
+
     sequence_type: str  # "after" or "before"
     instruction: Union[str, Matcher, Dict]
     reference: Union[str, Matcher, Dict]
     not_followed_by: bool = False
 
     def to_dict(self) -> Dict[str, Any]:
         """Convert to JSON IR."""
+
         def serialize_ref(ref):
             if isinstance(ref, str):
                 return {"instruction": ref}
-            elif hasattr(ref, 'to_dict'):
+            elif hasattr(ref, "to_dict"):
                 return ref.to_dict()
             elif isinstance(ref, dict):
                 return ref
@@ -112,14 +102,14 @@ def serialize_ref(ref):
             "type": f"instruction_{self.sequence_type}",
             "instruction": serialize_ref(self.instruction),
             "reference": serialize_ref(self.reference),
-            "not_followed_by": self.not_followed_by
+            "not_followed_by": self.not_followed_by,
         }
 
 
 def instruction_after(
     instruction: Union[str, Matcher],
     after: Union[str, Matcher],
-    not_followed_by: bool = False
+    not_followed_by: bool = False,
 ) -> SequenceMatcher:
     """
     Check that an instruction appears after another.
@@ -138,14 +128,14 @@ def instruction_after(
         sequence_type="after",
         instruction=instruction,
         reference=after,
-        not_followed_by=not_followed_by
+        not_followed_by=not_followed_by,
     )
 
 
 def instruction_before(
     instruction: Union[str, Matcher],
     before: Union[str, Matcher],
-    not_followed_by: bool = False
+    not_followed_by: bool = False,
 ) -> SequenceMatcher:
     """
     Check that an instruction appears before another.
@@ -157,21 +147,19 @@ def instruction_before(
         sequence_type="before",
         instruction=instruction,
         reference=before,
-        not_followed_by=not_followed_by
+        not_followed_by=not_followed_by,
     )
 
 
 @dataclass
 class StageMatcher:
     """Matcher for multi-stage build stage queries."""
+
     stage_type: str
     params: Dict[str, Any] = field(default_factory=dict)
 
     def to_dict(self) -> Dict[str, Any]:
-        return {
-            "type": f"stage_{self.stage_type}",
-            **self.params
-        }
+        return {"type": f"stage_{self.stage_type}", **self.params}
 
 
 def stage(
@@ -213,7 +201,7 @@ def final_stage_has(
     if instruction is not None:
         if isinstance(instruction, str):
             params["instruction"] = instruction
-        elif hasattr(instruction, 'to_dict'):
+        elif hasattr(instruction, "to_dict"):
             params["instruction"] = instruction.to_dict()
     if missing_instruction is not None:
         params["missing_instruction"] = missing_instruction
 
@@ -12,6 +12,7 @@
 @dataclass
 class RuleMetadata:
     """Metadata for a container security rule."""
+
     id: str
     name: str = ""
     severity: str = "MEDIUM"
@@ -24,6 +25,7 @@ class RuleMetadata:
 @dataclass
 class DockerfileRuleDefinition:
     """Complete definition of a Dockerfile rule."""
+
     metadata: RuleMetadata
     matcher: Dict[str, Any]
     rule_function: Callable
@@ -32,6 +34,7 @@ class DockerfileRuleDefinition:
 @dataclass
 class ComposeRuleDefinition:
     """Complete definition of a docker-compose rule."""
+
     metadata: RuleMetadata
     matcher: Dict[str, Any]
     rule_function: Callable
@@ -63,6 +66,7 @@ def _output_rules():
 
         # Compile rules to JSON IR format
         from . import container_ir
+
         compiled = container_ir.compile_all_rules()
 
         # Output to stdout for Go loader to capture
@@ -100,12 +104,13 @@ def dockerfile_rule(
         def container_runs_as_root():
             return missing(instruction="USER")
     """
+
     def decorator(func: Callable) -> Callable:
         # Get matcher from function
         matcher_result = func()
 
         # Convert to dict if it's a Matcher object
-        if hasattr(matcher_result, 'to_dict'):
+        if hasattr(matcher_result, "to_dict"):
             matcher_dict = matcher_result.to_dict()
         elif isinstance(matcher_result, dict):
             matcher_dict = matcher_result
@@ -115,7 +120,7 @@ def decorator(func: Callable) -> Callable:
         # Create rule definition
         metadata = RuleMetadata(
             id=id,
-            name=name or func.__name__.replace('_', ' ').title(),
+            name=name or func.__name__.replace("_", " ").title(),
             severity=severity,
             category=category,
             cwe=cwe,
@@ -154,10 +159,11 @@ def compose_rule(
         def privileged_service():
             return service_has(key="privileged", equals=True)
     """
+
     def decorator(func: Callable) -> Callable:
         matcher_result = func()
 
-        if hasattr(matcher_result, 'to_dict'):
+        if hasattr(matcher_result, "to_dict"):
             matcher_dict = matcher_result.to_dict()
         elif isinstance(matcher_result, dict):
             matcher_dict = matcher_result
@@ -166,7 +172,7 @@ def decorator(func: Callable) -> Callable:
 
         metadata = RuleMetadata(
             id=id,
-            name=name or func.__name__.replace('_', ' ').title(),
+            name=name or func.__name__.replace("_", " ").title(),
             severity=severity,
             category=category,
             cwe=cwe,
 
@@ -100,5 +100,5 @@ def write_ir_file(filepath: str, pretty: bool = True):
         pretty: If True, format with indentation.
     """
     json_str = compile_to_json(pretty=pretty)
-    with open(filepath, 'w') as f:
+    with open(filepath, "w") as f:
         f.write(json_str)
@@ -9,19 +9,18 @@
 @dataclass
 class Matcher:
     """Base class for all matchers."""
+
     type: str
     params: Dict[str, Any] = field(default_factory=dict)
 
     def to_dict(self) -> Dict[str, Any]:
         """Convert matcher to dictionary for JSON IR."""
-        return {
-            "type": self.type,
-            **self.params
-        }
+        return {"type": self.type, **self.params}
 
 
 # --- Dockerfile Matchers ---
 
+
 def instruction(
     type: str,
     # FROM instruction
@@ -158,6 +157,7 @@ def missing(
 
 # --- docker-compose Matchers ---
 
+
 def service_has(
     key: str,
     equals: Optional[Any] = None,
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "codepathfinder",`
`3`		`- "version": "1.1.3",`
	`3`	`+ "version": "1.1.5",`
`4`	`4`	`"description": "DEPRECATED - Use 'pip install codepathfinder' instead. See https://codepathfinder.dev/install",`
`5`	`5`	`"deprecated": "This package is deprecated. Please use 'pip install codepathfinder' for the complete installation including both CLI and Python DSL.",`
`6`	`6`	`"goBinary": {`