Uploaded

Author: Sovereign Map Test Suite

.github/workflows/ci.yml

@@ -18,16 +18,20 @@ jobs:
     runs-on: ubuntu-latest
     env:
       OQS_INSTALL_PATH: /usr/local
+    
     steps:
       - uses: actions/checkout@v4
+      
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
           python-version: '3.12'
+      
       - name: Install system deps
         run: |
           sudo apt-get update
           sudo apt-get install -y build-essential cmake libssl-dev pkg-config
+      
       - name: Optionally build liboqs
         if: github.event_name == 'workflow_dispatch' && inputs.build_liboqs || vars.BUILD_LIBOQS == 'true'
         run: |
@@ -38,10 +42,46 @@ jobs:
           sudo make install
           sudo ldconfig
           python -m pip install liboqs-python
+      
       - name: Install Python deps
         run: |
           python -m pip install --upgrade pip
           pip install -r prototype/requirements.txt
+          pip install bandit safety pre-commit
+      
+      - name: Run security scan (Bandit)
+        run: |
+          bandit -r prototype/ -f json -o bandit-report.json
+          echo "Bandit report saved to bandit-report.json"
+      
+      - name: Check for vulnerable dependencies (Safety)
+        run: |
+          safety check --json > security-report.json || true
+          echo "Safety report saved to security-report.json"
+      
+      - name: Run pre-commit hooks
+        run: |
+          pre-commit install
+          pre-commit run --all-files
+      
       - name: Run tests
         run: |
-          pytest -q
+          pytest -q prototype/test_security_fixes.py prototype/test_oqs_hybrid.py prototype/test_secure_hybrid_integration.py prototype/test_concurrency_smoke.py prototype/test_secure_run.py -v
+      
+      - name: Upload security reports
+        uses: actions/upload-artifact@v3
+        with:
+          name: security-reports
+          path: |
+            bandit-report.json
+            security-report.json
+
+  build:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Build Docker images
+        run: |
+          docker-compose -f docker-compose.dev.yml build

.gitignore

@@ -1,10 +1,71 @@
-.venv/
+# Python
 __pycache__/
-*.pyc
-.pytest_cache/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+
+# Virtual environments
+venv/
+ENV/
+env/
+.venv
+
+# IDE
 .vscode/
+.idea/
+*.swp
+*.swo
+*~
+.project
+.pydevproject
+.settings/
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/
+.tox/
+.nox/
+.coverage.*
+*.egg-info/
+
+# Environment
 .env
-dist/
-build/
-/.pytest_cache/
-*.egg-info/
+.venv
+env/
+ENV/
+
+# OS files
+.DS_Store
+Thumbs.db
+*.log
+
+# Mohawk-specific
+__pycache__/
+*.pkl
+*.pickle
+*.pt
+*.pth
+
+# Docker volumes (if any)
+.docker-volume/
+
+# Local configuration
+.local/
+.cache/

.pre-commit-config.yaml

@@ -0,0 +1,40 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.5.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-json
+      - id: check-added-large-files
+        args: [--max-size=500MB]
+
+  - repo: https://github.com/psf/black
+    rev: 23.12.1
+    hooks:
+      - id: black
+        language_version: python3
+
+  - repo: https://github.com/pycqa/isort
+    rev: 5.12.0
+    hooks:
+      - id: isort
+        args: [--profile=black]
+
+  - repo: https://github.com/pycqa/flake8
+    rev: 6.1.0
+    hooks:
+      - id: flake8
+        additional_dependencies:
+          - flake8-bugbear
+          - flake8-comprehensions
+          - flake8-import-order
+
+  - repo: https://github.com/pre-commit/mirrors-mypy
+    rev: v1.7.1
+    hooks:
+      - id: mypy
+        additional_dependencies:
+          - numpy
+          - types-requests
+        args: [--ignore-missing-imports]