732642856
44 lines
1.4 KiB
Python
44 lines
1.4 KiB
Python
#!/usr/bin/env python3
|
|
"""Commercial privacy artifact gate.
|
|
|
|
This is a thin commercial wrapper around the existing public release privacy
|
|
scanner. It exists so CI/product checks can call a business-named gate without
|
|
duplicating privacy logic.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
import json
|
|
|
|
from public_release_privacy_scan import build_report
|
|
|
|
|
|
def commercial_report() -> dict[str, object]:
|
|
base = build_report()
|
|
return {
|
|
"scope": "commercial_privacy_artifact_scan",
|
|
"status": base["status"],
|
|
"finding_count": base["finding_count"],
|
|
"scanned_files": base["scanned_files"],
|
|
"privacy_boundary": "no_real_user_birth_data_private_cases_or_secret_values_in_public_artifacts",
|
|
"scanner_reuse": "scripts/public_release_privacy_scan.py",
|
|
"local_runtime_assets_not_committed": ["hip_main.dat", "hip_main.dat.download"],
|
|
"findings": base["findings"],
|
|
}
|
|
|
|
|
|
def main() -> int:
|
|
parser = argparse.ArgumentParser(description=__doc__)
|
|
parser.add_argument("--json", action="store_true", help="Emit JSON.")
|
|
args = parser.parse_args()
|
|
report = commercial_report()
|
|
if args.json:
|
|
print(json.dumps(report, ensure_ascii=False, indent=2, sort_keys=True))
|
|
else:
|
|
print(f"{report['status']}: {report['finding_count']} findings")
|
|
return 0 if report["status"] == "pass" else 1
|
|
|
|
|
|
if __name__ == "__main__":
|
|
raise SystemExit(main())
|