scitex-audit 0.1.7

Unified security scanning by orchestrating bandit, shellcheck, pip-audit, and GitHub alerts

scitex-audit

Unified security scanning: bandit + shellcheck + pip-audit + GitHub advisories in one report.

Full Documentation · uv pip install scitex-audit[all]

---

Problem and Solution

#	Problem	Solution
1	Security scanning requires 4 tools run separately — bandit (py) + shellcheck (sh) + pip-audit (deps) + GH Advisories — each with different output format	scitex-audit . — runs all four, merges findings into one JSON report; ideal for CI pre-release gates

Installation

pip install scitex-audit
# With all scanner backends:
pip install scitex-audit[all]

Architecture

src/scitex_audit/
├── _runner.py        # orchestrates checks, aggregates results
├── _bandit.py        # Python security scanner (bandit)
├── _pip_audit.py     # dependency CVE scanner (pip-audit)
├── _shellcheck.py    # shell script linter (shellcheck)
├── _format.py        # human + JSON output formatting
├── _github.py        # GitHub Actions annotation emitter
└── _skills/          # SciTeX skills metadata

Demo

flowchart LR
    Repo[(repo)] --> Runner[scitex_audit.audit]
    Runner --> B[bandit - Python]
    Runner --> P[pip-audit - deps]
    Runner --> S[shellcheck - shell]
    B & P & S --> Fmt[_format] --> Out[CLI / JSON / GitHub annotations]

Quick Start

from scitex_audit import audit

results = audit(".")
results = audit(".", checks=["python", "shell"])

2 Interfaces

Python API

from scitex_audit import audit

# Run all enabled scanners and merge results.
results = audit(".")

# Run only specific scanners.
results = audit(".", checks=["python", "shell"])

CLI

scitex-audit .                          # all scanners
scitex-audit . --checks python,shell    # subset
scitex-audit . --json                   # machine-readable

Part of SciTeX

scitex-audit is part of SciTeX. Install via the umbrella with pip install scitex[audit] to use as scitex.audit (Python) or scitex audit ... (CLI).

Four Freedoms for Research

0. The freedom to run your research anywhere — your machine, your terms.
1. The freedom to study how every step works — from raw data to final manuscript.
2. The freedom to redistribute your workflows, not just your papers.
3. The freedom to modify any module and share improvements with the community.

AGPL-3.0 — because we believe research infrastructure deserves the same freedoms as the software it runs on.

License

AGPL-3.0 — see LICENSE for details.

---