bugbounty-ctf/pyproject.toml at main · TrueNix/bugbounty-ctf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[project]
name = "bugbounty-ctf"
version = "7.0.0"
description = "CTF challenges and authorized bug bounty hunting — methodology, payload library, and automated testing engine"
readme = "README.md"
license = "MIT"
requires-python = ">=3.10"
authors = [{ name = "TrueNix" }]
keywords = ["ctf", "bug-bounty", "security", "pentesting", "exploit", "web-hacking", "vulnerability-research"]
classifiers = [
    "Development Status :: 4 - Beta",
    "Intended Audience :: Information Technology",
    "License :: OSI Approved :: MIT License",
    "Operating System :: POSIX :: Linux",
    "Operating System :: MacOS",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Topic :: Security",
    "Topic :: Software Development :: Testing",
]
dependencies = [
    "requests>=2.28",
]

[project.optional-dependencies]
pdf = ["pymupdf>=1.24"]
pwn = ["pwntools>=4.10"]
yaml = ["pyyaml>=6.0"]
embed = ["sentence-transformers>=2.0"]
ner = ["spacy>=3.7"]
dev = [
    "build>=1.0",
    "hatchling>=1.0",
    "pytest>=7.0",
    "pytest-cov>=4.0",
    "responses>=0.24",
    "ruff>=0.1",
    "mypy>=1.7",
]

[project.scripts]
kalibox = "bugbounty_ctf.kalibox:main"

[project.urls]
Homepage = "https://github.com/TrueNix/bugbounty-ctf"
Repository = "https://github.com/TrueNix/bugbounty-ctf"
Issues = "https://github.com/TrueNix/bugbounty-ctf/issues"

[tool.hatch.build.targets.wheel]
packages = ["src/bugbounty_ctf"]
# Ship package-owned wordlists and data through `artifacts` so they remain
# package data after `pip install` and the Hermes skill copy. They already live
# under `src/bugbounty_ctf`, so they must not also be listed in `force-include`;
# top-level `references/` lives outside the package and is intentionally
# force-included below.
artifacts = ["src/bugbounty_ctf/wordlists/*.txt", "src/bugbounty_ctf/data/*.json"]

[tool.hatch.build.targets.wheel.force-include]
"references" = "bugbounty_ctf/references"

[tool.hatch.build.targets.sdist]
include = ["src", "tests", "references", "templates", "SKILL.md", "README.md"]

[tool.ruff]
line-length = 100
target-version = "py310"
src = ["src", "tests"]

[tool.ruff.lint]
select = ["E", "F", "W", "I", "B", "UP", "SIM", "RUF"]
ignore = ["E501"]  # line length handled by formatter

[tool.ruff.lint.per-file-ignores]
"tests/*" = ["S101"]  # asserts ok in tests

[tool.mypy]
python_version = "3.10"
strict = true
ignore_missing_imports = true
files = ["src/bugbounty_ctf"]

[tool.pytest.ini_options]
testpaths = ["tests"]
addopts = "-ra --strict-markers"
norecursedirs = ["src", "build", "dist", ".git", "references", "templates"]
python_files = ["test_*.py"]
python_functions = ["test_*"]
markers = [
    "unit: unit tests with mocked HTTP",
    "integration: tests that hit real endpoints (deselect by default)",
    "slow: slower smoke or end-to-end tests that still pass in the default run",
]

[tool.coverage.run]
source = ["src/bugbounty_ctf"]
branch = true

[tool.coverage.report]
show_missing = true
# Actual coverage is ~81%; keep a floor just below it so regressions fail CI
# while leaving headroom for minor per-version fluctuation.
fail_under = 78