presidio-v/presidio-hardened-scoutsuite

presidio-scout-validate (offline curated-ruleset check: baselines vs checked-in rule manifests) for aws, azure, gcp, aliyun, oci; all rules present

cd <host-path> && git log -1 --format=%H 2>/dev/null; ls -la; cat README.md 2>/dev/null | head -200
cd <host-path> && ls -la .github/workflows 2>/dev/null; cat pyproject.toml setup.py requirements*.txt 2>/dev/null | head -80; which python3 pip3; python3 --version
cd <host-path> && grep -n -i -E "^#|validate|dry-run|pip install|python -m|make " README.md | head -150
cd <host-path> && sed -n 660,695p README.md; sed -n 765,780p README.md; sed -n 89,128p README.md | head -5
cd /tmp && python3 -m venv <host-path> && <host-path> install -q --upgrade pip 2>&1 | tail -3; cd <host-path> && <host-path> install -q . 2>&1 | tail -15; echo rc=$?; <host-path> presidio-scout-validate 2>/dev/null; ls <host-path> | grep presidio | head -3
rm -rf <host-path>; (sudo apt-get update -qq && sudo apt-get install -y -qq python3.12-venv) >/tmp/apt.log 2>&1; echo apt=$?; cd /tmp && python3 -m venv <host-path> && cd <host-path> && <host-path> install -q . 2>&1 | tail -15; echo pip=$?; ls <host-path> | grep presidio
cd <host-path> && <host-path>; echo rc=$?
cd <host-path> && ls -la .coldpass 2>/dev/null; mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<host-path>"}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","operation":"presidio-scout-validate (offline curated-ruleset check: baselines vs checked-in rule manifests) for aws, azure, gcp, aliyun, oci; all rules present","operation_scope":"Offline validation only. Does not run a cloud audit (requires AWS/Azure/GCP credentials and the upstream ScoutSuite scout CLI, neither of which is set up here). ScoutSuite itself not installed.","steps":["Read README.md (Install, CLI usage, Curated rulesets, Running tests sections)","python3 -m venv <host-path> (after apt install python3.12-venv)","<host-path> install . from <host-path> (README 'Install' wrapper-only option)","<host-path> (README 'Curated rulesets' offline check) -> rc 0, all 5 providers ok"],"deviations":["README 'Install' assumes a working venv; guest lacked ensurepip, so ran `sudo apt-get install python3.12-venv` first.","Used `pip install .` (non-editable) instead of README 'Running tests' `pip install -e \".[dev]\"`, because the test/lint suites were excluded by the task."],"stuck_step":null,"main_blocker":null,"suggested_fix":null}
EOF
<env-var>=<host-path> python3 -I <host-path> --validate