ARTHEON-SAST
Static Application Security Testing tool for multiple programming languages
Supported Languages
- JavaScript (.js)
- Python (.py)
- Java (.java)
- C# (.cs)
Features
- 40 vulnerability rules (10 per language)
- 400+ regex patterns for detection
- HTML reports with severity levels
- Line-by-line vulnerability detection
- Automatic duplicate prevention
- Responsive design for desktop and mobile
Installation
From PyPI
pip install artheon-sast
Usage
Command Line
artheon-sast /path/to/your/project
Scans all source files, detects vulnerabilities, generates HTML report, and opens it in browser.
Python API
from language_analyzer import SecurityScanner
scanner = SecurityScanner("/path/to/project")
scanner.scan()
report_path = scanner.generate_html_report()
Vulnerability Categories by Language
JavaScript (10 rules)
| Category | Severity |
|---|---|
| eval() Usage | CRITICAL |
| Hardcoded Secrets | CRITICAL |
| SQL Injection | CRITICAL |
| Command Injection | CRITICAL |
| XSS Vulnerabilities | HIGH |
| Insecure Crypto | HIGH |
| Path Traversal | HIGH |
| Prototype Pollution | HIGH |
| No Input Validation | MEDIUM |
| Insecure CORS | MEDIUM |
Python (10 rules)
| Category | Severity |
|---|---|
| eval() and exec() Usage | CRITICAL |
| Hardcoded Secrets | CRITICAL |
| SQL Injection | CRITICAL |
| Command Injection | CRITICAL |
| Insecure Deserialization | CRITICAL |
| Insecure Crypto | HIGH |
| Path Traversal | HIGH |
| No Input Validation | MEDIUM |
| Insecure Dependencies | MEDIUM |
| XXE Injection | HIGH |
Java (10 rules)
| Category | Severity |
|---|---|
| SQL Injection | CRITICAL |
| Command Injection | CRITICAL |
| XXE Injection | CRITICAL |
| Hardcoded Secrets | CRITICAL |
| Insecure Deserialization | CRITICAL |
| Insecure Crypto | HIGH |
| Path Traversal | HIGH |
| XSS Vulnerabilities | HIGH |
| Insecure HTTP Headers | MEDIUM |
| Weak Authentication | HIGH |
C# (10 rules)
| Category | Severity |
|---|---|
| SQL Injection | CRITICAL |
| Command Injection | CRITICAL |
| Hardcoded Secrets | CRITICAL |
| Deserialization Vulnerability | CRITICAL |
| XXE Injection | HIGH |
| Insecure Crypto | HIGH |
| Path Traversal | HIGH |
| Weak Authentication | HIGH |
| Insecure HTTP Headers | MEDIUM |
| LINQ Injection | HIGH |
Report Format
HTML report includes:
- Summary metrics (total, critical, high, medium)
- Vulnerabilities grouped by file and language
- Code context for each finding
- Severity color coding
- Recommendations per vulnerability
Testing
pytest tests/ -v
Status: 6/6 tests passing
Requirements
- Python 3.8+
- No external dependencies
Authors
Dorian Tituaña, Ismael Toala
License
MIT
1 maintainer
Metadata
1 maintainer
Release files for artheon-sast 2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| artheon_sast-2.0.tar.gz | 21.8 kB | Without provenance | Details for artheon_sast-2.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| artheon_sast-2.0-py3-none-any.whl | Python 3 | none | any | Details for artheon_sast-2.0-py3-none-any.whl |
Total release size: 48.0 kB
Release files / artheon_sast-2.0.tar.gz
| Download URL | artheon_sast-2.0.tar.gz |
|---|---|
| Size | 21.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
5c90586c8e945cdfb489234e5c451f1b47c209ab2d1d18bc9c9c463edc0a14cb
|
|
BLAKE2b-256 checksum How to use checksums |
4c8da183501cdcc2d9ae2e36ebb0cd187c0bcdaaad896f3873c46b9d76a67043
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.0
|
Release files / artheon_sast-2.0-py3-none-any.whl
| Download URL | artheon_sast-2.0-py3-none-any.whl |
|---|---|
| Size | 26.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ef59efea9b10d5b9171a202649a8a51f07291a3e623fe7c642e7dcfd59ec6d9c
|
|
BLAKE2b-256 checksum How to use checksums |
34c3aa3549f7556af2cafa7614c735064d780e456390cb4f7d02a703ccdb563f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.0
|
Security for artheon-sast 2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
