Skip to main content
Ctrl+K

Python Security Code Audit

  • Introduction

Getting Started

  • Features
  • Installation
  • How to do a SAST test?
  • What is SAST Testing
  • Why Security Testing
  • Security Testing for Python
  • Security By Design
  • Python Security Handbook

User Guide

  • Security Validation
    • Command codeaudit overview
    • Command codeaudit filescan
    • Command codeaudit modulescan
    • Command codeaudit checks
  • Data Exfiltration Detection
    • How Egress Detection works
  • Solve security issues
  • Marking False Positives
  • Complexity Check
  • Python Warnings
  • Handling parsing errors
  • CI Integration
  • Security Validations
  • Detections & Mitigations
    • Assert Statement
    • Input Statement
    • Built-in Functions
    • Chmod Statement
    • Binding Statement
    • Directory Creation
    • Dynamic Import Statements
    • Exception Statements
    • TarFile Statement
    • Insecure hashing
    • FTP Statement
    • Marhal statement
    • Mktemp Statement
    • Subprocess Statement
    • OS System calls
    • Logging Statement
    • Base64 Statements
    • HTTP Server Use
    • Multiprocessing Statement
    • Pickle Statement
    • Random Statement
    • Shelve Statement
    • Sys Statements
    • XML security
    • Zipfiles extraction
    • Shutil Statement

Architecture

  • Architecture Overview
  • Development
  • Project Philosophy
  • Commands Overview
  • Change Log

API Documentation

  • APIs and Examples
    • Example:Security Weaknesses Overview
    • Example Code Risk Heatmap
    • Example Weaknesses Overview
    • Example: API to retrieve implemented checks
    • Example: Scanning Python packages using the API
    • Example:Save scan as JSON
    • Basic API functions usage
  • API Reference
    • Code Audit Public APIs

About

  • Help
  • Contribute
  • Sponsors
  • License
  • About NO|Complexity
  • Repository
  • Suggest edit
  • Open issue
  • .rst

API Reference

API Reference#

  • Code Audit Public APIs
    • Public Interfaces module
      • egress_check()
      • filescan()
      • get_construct_counts()
      • get_default_validations()
      • get_module_vulnerability_info()
      • get_modules()
      • get_overview()
      • get_psl_modules()
      • get_weakness_counts()
      • package_imports()
      • platform_info()
      • read_input_file()
      • save_to_json()
      • version()
      • ast_nodes_overview()
      • complexity_heatmap()
      • extract_altair_html()
      • issue_overview()
      • issue_plot()
      • lines_of_code_overview()
      • module_count_barchart()
      • module_distribution_view()
      • multi_bar_chart()
      • sast_files_overview()
      • weaknesses_overview()
      • weaknesses_radial_overview()

previous

Basic API functions usage

next

Code Audit Public APIs

By Maikel Mardjan (nocomplexity.com) and all contributors.

Last updated on Jul 31, 2026.

Creative Commons License This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.