Require encoded exfil Rust extension

Signed-off-by: lucarlig <luca.carlig@ibm.com>

Author: lucarlig

plugins/rust/python-package/encoded_exfil_detection/cpex_encoded_exfil_detection/encoded_exfil_detection.py

@@ -34,17 +34,10 @@
     ToolPostInvokePayload,
     ToolPostInvokeResult,
 )
-
-try:
-    from cpex_encoded_exfil_detection.encoded_exfil_detection_rust import (
-        ExfilDetectorEngine,
-        py_scan_container as _py_scan_container,
-    )
-    _RUST_IMPORT_ERROR: ImportError | None = None
-except ImportError as _err:
-    ExfilDetectorEngine = None  # type: ignore[assignment,misc]
-    _py_scan_container = None  # type: ignore[assignment]
-    _RUST_IMPORT_ERROR = _err
+from cpex_encoded_exfil_detection.encoded_exfil_detection_rust import (
+    ExfilDetectorEngine,
+    py_scan_container as _py_scan_container,
+)
 
 logger = logging.getLogger(__name__)
 
@@ -136,10 +129,6 @@ def _scan_container(
     path: str = "",
 ) -> tuple[int, Any, list[dict[str, Any]]]:
     """Scan a container for encoded exfiltration patterns via the Rust engine."""
-    if _RUST_IMPORT_ERROR is not None:
-        raise ImportError(
-            "Rust extension not built — run 'make install' before using this plugin"
-        ) from _RUST_IMPORT_ERROR
     count, redacted, findings = _py_scan_container(container, cfg)
     normalized = _prefix_finding_paths(
         [f for f in findings if isinstance(f, dict)],
@@ -168,10 +157,6 @@ def __init__(self, config: PluginConfig) -> None:
             config: Plugin configuration.
         """
         super().__init__(config)
-        if _RUST_IMPORT_ERROR is not None:
-            raise ImportError(
-                "Rust extension not built — run 'make install' before using this plugin"
-            ) from _RUST_IMPORT_ERROR
         self._cfg = EncodedExfilDetectorConfig(**(config.config or {}))
         try:
             self._rust_engine = ExfilDetectorEngine(self._cfg)

plugins/tests/encoded_exfil_detection/test_integration.py

@@ -4,7 +4,6 @@
 # Standard
 import base64
 import logging
-import os
 from pathlib import Path
 
 # Third-Party
@@ -32,13 +31,7 @@
     EncodedExfilDetectorConfig,
     EncodedExfilDetectorPlugin,
 )
-
-
-try:
-    import cpex_encoded_exfil_detection.encoded_exfil_detection_rust  # noqa: F401
-    RUST_AVAILABLE = True
-except ImportError:
-    RUST_AVAILABLE = False
+import cpex_encoded_exfil_detection.encoded_exfil_detection_rust  # noqa: F401
 
 
 def test_imports_with_real_cpex_package() -> None:
@@ -55,9 +48,7 @@ def test_imports_with_real_cpex_package() -> None:
             "from cpex_encoded_exfil_detection.encoded_exfil_detection import EncodedExfilDetectorConfig, EncodedExfilDetectorPlugin",
         ],
     )
-    # Fail in CI if Rust plugins are required
-    if not RUST_AVAILABLE and os.environ.get("REQUIRE_RUST") == "1":
-        raise ImportError("Rust plugin 'encoded_exfil_detection' is required in CI but not available")
+
 
 class TestEncodedDetectionScan:
     """Validate scanner behavior."""