feat(sasts): add BinaryVersion requirement

Author: nolliv22

codesectools/sasts/core/sast/requirements.py

@@ -2,14 +2,16 @@
 
 from __future__ import annotations
 
+import re
 import shutil
 from abc import ABC, abstractmethod
 from typing import TYPE_CHECKING, Any, Literal
 
 import typer
+from packaging import version
 from rich import print
 
-from codesectools.utils import USER_CACHE_DIR, USER_CONFIG_DIR
+from codesectools.utils import USER_CACHE_DIR, USER_CONFIG_DIR, run_command
 
 if TYPE_CHECKING:
     from pathlib import Path
@@ -125,13 +127,47 @@ def is_fulfilled(self, **kwargs: Any) -> bool:
         return (USER_CONFIG_DIR / self.sast_name / self.name).is_file()
 
 
+class BinaryVersion:
+    """Represent a version requirement for a binary."""
+
+    def __init__(self, command_flag: str, pattern: str, expected: str) -> None:
+        """Initialize a Version instance.
+
+        Args:
+            command_flag: The command line flag to get the version string (e.g., '--version').
+            pattern: A regex pattern to extract the version number from the output.
+            expected: The minimum expected version string.
+
+        """
+        self.command_flag = command_flag
+        self.pattern = pattern
+        self.expected = version.parse(expected)
+
+    def check(self, binary: Binary) -> bool:
+        """Check if the binary's version meets the requirement.
+
+        Args:
+            binary: The Binary requirement object to check.
+
+        Returns:
+            True if the version is sufficient, False otherwise.
+
+        """
+        retcode, output = run_command([binary.name, self.command_flag])
+        if m := re.search(self.pattern, output):
+            detected_version = version.parse(m.group(1))
+            return detected_version >= self.expected
+        return False
+
+
 class Binary(SASTRequirement):
     """Represent a binary executable requirement for a SAST tool."""
 
     def __init__(
         self,
         name: str,
         depends_on: list[SASTRequirement] | None = None,
+        version: BinaryVersion | None = None,
         instruction: str | None = None,
         url: str | None = None,
         doc: bool = False,
@@ -141,6 +177,7 @@ def __init__(
         Args:
             name: The name of the requirement.
             depends_on: A list of other requirements that must be fulfilled first.
+            version: An optional BinaryVersion object to check for a minimum version.
             instruction: A short instruction on how to download the requirement.
             url: A URL for more detailed instructions.
             doc: A flag indicating if the instruction is available in the documentation.
@@ -149,10 +186,23 @@ def __init__(
         super().__init__(
             name=name, depends_on=depends_on, instruction=instruction, url=url, doc=doc
         )
+        self.version = version
+
+    def __repr__(self) -> str:
+        """Return a developer-friendly string representation of the requirement."""
+        if self.version:
+            return f"{self.__class__.__name__}({self.name}>={self.version.expected})"
+        else:
+            return super().__repr__()
 
     def is_fulfilled(self, **kwargs: Any) -> bool:
         """Check if the binary is available in the system's PATH."""
-        return bool(shutil.which(self.name))
+        if bool(shutil.which(self.name)):
+            if self.version:
+                return self.version.check(self)
+            return True
+        else:
+            return False
 
 
 class GitRepo(DownloadableRequirement):

pyproject.toml

@@ -15,6 +15,7 @@ dependencies = [
     "lxml>=6.0.2",
     "matplotlib>=3.10.3",
     "numpy>=2.3.1",
+    "packaging>=25.0",
     "python-on-whales>=0.79.0",
     "pyyaml>=6.0.2",
     "requests>=2.32.4",

requirements.txt

@@ -437,7 +437,9 @@ numpy==2.3.5 \
 packaging==25.0 \
     --hash=sha256:29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484 \
     --hash=sha256:d443872c98d677bf60f6a1f2f8c1cb748e8fe762d2bf9d3148b5599295b0fc4f
-    # via matplotlib
+    # via
+    #   codesectools
+    #   matplotlib
 pillow==11.3.0 \
     --hash=sha256:023f6d2d11784a465f09fd09a34b150ea4672e85fb3d05931d89f373ab14abb2 \
     --hash=sha256:02a723e6bf909e7cea0dac1b0e0310be9d7650cd66222a5f1c571455c0a45214 \