Cyclomatic complexity is a software metric used to indicate the complexity of a program.
#secure software is #simple software.
Check security and #complexity for #python #software with #python #code #audit github.com/nocomplexity...
#infosec #appsec #owasp #cyber #ai #oss
#secure software is #simple software.
Check security and #complexity for #python #software with #python #code #audit github.com/nocomplexity...
#infosec #appsec #owasp #cyber #ai #oss
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
October 6, 2025 at 7:23 PM
I finally had chance to configure a #SharePoint Library #Copilot agent.
It's impressively easy and powerful, complete with a seed prompt and question suggestions.
#Nocode #Nocomplexity; any site owner can do it, and share it outside SharePoint.
NB. Anyone who wants to use it needs a CP licence
It's impressively easy and powerful, complete with a seed prompt and question suggestions.
#Nocode #Nocomplexity; any site owner can do it, and share it outside SharePoint.
NB. Anyone who wants to use it needs a CP licence
November 2, 2024 at 8:34 PM
I finally had chance to configure a #SharePoint Library #Copilot agent.
It's impressively easy and powerful, complete with a seed prompt and question suggestions.
#Nocode #Nocomplexity; any site owner can do it, and share it outside SharePoint.
NB. Anyone who wants to use it needs a CP licence
It's impressively easy and powerful, complete with a seed prompt and question suggestions.
#Nocode #Nocomplexity; any site owner can do it, and share it outside SharePoint.
NB. Anyone who wants to use it needs a CP licence
Using importlib.util.spec_from_file_location() with importlib.util.module_from_spec can bypass the normal #Python import mechanism and allow arbitrary Python files to be executed.
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code security analyzer based on distrust.
Codeaudit - Modern Python source code security analyzer based on distrust. - nocomplexity/codeaudit
github.com
July 11, 2026 at 5:31 PM
Using importlib.util.spec_from_file_location() with importlib.util.module_from_spec can bypass the normal #Python import mechanism and allow arbitrary Python files to be executed.
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
I advocate for ‘simple’ Open Cybersecurity solutions. At minimum, this means #opensource software with maintainable code and a security.md file that makes reporting vulnerabilities possible in under 10 seconds!
github.com/nocomplexity...
#fosdem #security #pycon
github.com/nocomplexity...
#fosdem #security #pycon
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
January 15, 2026 at 8:02 PM
I advocate for ‘simple’ Open Cybersecurity solutions. At minimum, this means #opensource software with maintainable code and a security.md file that makes reporting vulnerabilities possible in under 10 seconds!
github.com/nocomplexity...
#fosdem #security #pycon
github.com/nocomplexity...
#fosdem #security #pycon
TAR.GZ archives can embed zip #bombs, path-traversal payloads (../), oversized members, symlinks, device nodes, or excessively deep directory trees.
So Validate files before you use them.
github.com/nocomplexity...
#python #pycon #infosec #appsec
So Validate files before you use them.
github.com/nocomplexity...
#python #pycon #infosec #appsec
GitHub - nocomplexity/fileaudit: Simplify building secure Python applications by default. Validate files before you use them.
Simplify building secure Python applications by default. Validate files before you use them. - nocomplexity/fileaudit
github.com
August 17, 2026 at 8:12 PM
Identifying data exfiltration in #Python code—specifically within telemetry, remote analytics, and SaaS integrations—is a critical step in mitigating #security risks.
github.com/nocomplexity...
#pycon #infosec #PyTorch
github.com/nocomplexity...
#pycon #infosec #PyTorch
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code security analyzer based on distrust.
Codeaudit - Modern Python source code security analyzer based on distrust. - nocomplexity/codeaudit
github.com
April 8, 2026 at 8:16 PM
#Code does not lie!
#Transparency helps to improve #cybersecurity. #Security by obscurity is generally a bad security practice.
Use github.com/nocomplexity...
#Transparency helps to improve #cybersecurity. #Security by obscurity is generally a bad security practice.
Use github.com/nocomplexity...
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
August 25, 2025 at 6:12 PM
#Code does not lie!
#Transparency helps to improve #cybersecurity. #Security by obscurity is generally a bad security practice.
Use github.com/nocomplexity...
#Transparency helps to improve #cybersecurity. #Security by obscurity is generally a bad security practice.
Use github.com/nocomplexity...
Standard security testing isn’t enough for Python.
Use securitytesting.nocomplexity.com and
github.com/nocomplexity...
#python #pycon #pydata #infosec
Use securitytesting.nocomplexity.com and
github.com/nocomplexity...
#python #pycon #pydata #infosec
April 30, 2026 at 5:49 AM
Standard security testing isn’t enough for Python.
Use securitytesting.nocomplexity.com and
github.com/nocomplexity...
#python #pycon #pydata #infosec
Use securitytesting.nocomplexity.com and
github.com/nocomplexity...
#python #pycon #pydata #infosec
The random module in Python is not for security or cryptographic purposes, such as generating session tokens,, or passwords.
Use the #free SAST Tool:
Python Code Audit - github.com/nocomplexity...
To check on use of the random module in #code
#pycon #owasp #random #infosec #cyber
Use the #free SAST Tool:
Python Code Audit - github.com/nocomplexity...
To check on use of the random module in #code
#pycon #owasp #random #infosec #cyber
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
November 10, 2025 at 8:39 PM
The #python Connection.recv() method unpickles the #data it receives, which can be a #security risk.
#python #Code #audit checks on the multiprocessing Connection.recv() in #python code.
Static application #security #testing (SAST) is a must do!
github.com/nocomplexity...
#owasp #infosec #cve
#python #Code #audit checks on the multiprocessing Connection.recv() in #python code.
Static application #security #testing (SAST) is a must do!
github.com/nocomplexity...
#owasp #infosec #cve
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
September 24, 2025 at 7:56 PM
#python os.system : executing OS things can be malware.
so test on clowns!
from os import system as clown
clown('hack.now -la')
#code #audit finds this #clown, so make sure you do #security #testing with github.com/nocomplexity...
#opensource #free #validate #cybersecutity #infosec
so test on clowns!
from os import system as clown
clown('hack.now -la')
#code #audit finds this #clown, so make sure you do #security #testing with github.com/nocomplexity...
#opensource #free #validate #cybersecutity #infosec
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
September 7, 2025 at 5:23 PM
#python os.system : executing OS things can be malware.
so test on clowns!
from os import system as clown
clown('hack.now -la')
#code #audit finds this #clown, so make sure you do #security #testing with github.com/nocomplexity...
#opensource #free #validate #cybersecutity #infosec
so test on clowns!
from os import system as clown
clown('hack.now -la')
#code #audit finds this #clown, so make sure you do #security #testing with github.com/nocomplexity...
#opensource #free #validate #cybersecutity #infosec
Most security tools only check KNOWN #vulnerabilities.
But #security scanning must be done on code! This to find #Python #code like:
import builtins
b = builtins
b.exec("2+2")
Python Code Audit finds vulnerabilities in your #Python code: github.com/nocomplexity...
#appsec #owasp #infosec #trust
But #security scanning must be done on code! This to find #Python #code like:
import builtins
b = builtins
b.exec("2+2")
Python Code Audit finds vulnerabilities in your #Python code: github.com/nocomplexity...
#appsec #owasp #infosec #trust
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
October 2, 2025 at 5:27 PM
Most security tools only check KNOWN #vulnerabilities.
But #security scanning must be done on code! This to find #Python #code like:
import builtins
b = builtins
b.exec("2+2")
Python Code Audit finds vulnerabilities in your #Python code: github.com/nocomplexity...
#appsec #owasp #infosec #trust
But #security scanning must be done on code! This to find #Python #code like:
import builtins
b = builtins
b.exec("2+2")
Python Code Audit finds vulnerabilities in your #Python code: github.com/nocomplexity...
#appsec #owasp #infosec #trust
We believe that #security testing of #Python code should be carried out more and to a higher standard — but it should also be extremely #simple for everyone to perform. Anyone should be able to run a #SAST test quickly and easily.
github.com/nocomplexity...
#infosec #pycon #owasp #appsec #cybersec
github.com/nocomplexity...
#infosec #pycon #owasp #appsec #cybersec
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code analyzer based on distrust.
Codeaudit - Modern Python source code analyzer based on distrust. - nocomplexity/codeaudit
github.com
October 14, 2025 at 7:57 PM
A #simple tool to find #security #issues in #Python code.
Check nocomplexity.com/codeaudit/
#cyber #infosec #devopsdec #freebsd ##gpl #nocomplexity #audit
Check nocomplexity.com/codeaudit/
#cyber #infosec #devopsdec #freebsd ##gpl #nocomplexity #audit
July 25, 2025 at 3:43 PM
A #simple tool to find #security #issues in #Python code.
Check nocomplexity.com/codeaudit/
#cyber #infosec #devopsdec #freebsd ##gpl #nocomplexity #audit
Check nocomplexity.com/codeaudit/
#cyber #infosec #devopsdec #freebsd ##gpl #nocomplexity #audit
Ross Bennett here—clear your mind, cut through clutter, and start winning each day with simple steps. Let’s go! 💪 #WinningMindset #ClearFocus #NoComplexity. coaching.winner1.com.au/private-grou...
January 28, 2026 at 11:14 PM
Ross Bennett here—clear your mind, cut through clutter, and start winning each day with simple steps. Let’s go! 💪 #WinningMindset #ClearFocus #NoComplexity. coaching.winner1.com.au/private-grou...
Every Python package that is able to dynamically load code is suspicious by default! Use github.com/nocomplexity... to check what happens.
#pycon #python #owasp #infosec #appsec #programming #sast
#pycon #python #owasp #infosec #appsec #programming #sast
November 24, 2025 at 7:31 PM
Every Python package that is able to dynamically load code is suspicious by default! Use github.com/nocomplexity... to check what happens.
#pycon #python #owasp #infosec #appsec #programming #sast
#pycon #python #owasp #infosec #appsec #programming #sast
Python security is gaining attention due to the still rising usage. Python can be considered a secure language, yet Python applications are susceptible to common security flaws.
github.com/nocomplexity...
#pycon #fosdem #owasp
github.com/nocomplexity...
#pycon #fosdem #owasp
January 5, 2026 at 6:25 PM
Python security is gaining attention due to the still rising usage. Python can be considered a secure language, yet Python applications are susceptible to common security flaws.
github.com/nocomplexity...
#pycon #fosdem #owasp
github.com/nocomplexity...
#pycon #fosdem #owasp
#Python #Code Audit includes the most comprehensive collection of #security rules for verifying secure use of Python Standard Library functions.
#free #free #free to use, it’s #oss #GPLisBack
Never #trust #python #modules, #verify #it
github.com/nocomplexity...
#PyCon #owasp
#free #free #free to use, it’s #oss #GPLisBack
Never #trust #python #modules, #verify #it
github.com/nocomplexity...
#PyCon #owasp
October 11, 2025 at 8:38 PM
The quality of modern #Python software relies heavily on the effective use of static code analysis tools.
Never trust, always verify!
So use the #FOSS #SAST #tool #Python #Code Audit - github.com/nocomplexity...
#pythonbrasil #hw_ioNL2025 #appsec #owasp #pycon #PyTorchCon #infosec
Never trust, always verify!
So use the #FOSS #SAST #tool #Python #Code Audit - github.com/nocomplexity...
#pythonbrasil #hw_ioNL2025 #appsec #owasp #pycon #PyTorchCon #infosec
October 20, 2025 at 6:17 PM
The quality of modern #Python software relies heavily on the effective use of static code analysis tools.
Never trust, always verify!
So use the #FOSS #SAST #tool #Python #Code Audit - github.com/nocomplexity...
#pythonbrasil #hw_ioNL2025 #appsec #owasp #pycon #PyTorchCon #infosec
Never trust, always verify!
So use the #FOSS #SAST #tool #Python #Code Audit - github.com/nocomplexity...
#pythonbrasil #hw_ioNL2025 #appsec #owasp #pycon #PyTorchCon #infosec
DO NOT rely on #SAST scanners that are powered by #AI-#agents / #LLM systems to solve your #cybersecurity problems!
Most are far from good enough.
In the best case, you’ll only be #disappointed. But the #risk of a false sense of #security is enormous.
github.com/nocomplexity...
Most are far from good enough.
In the best case, you’ll only be #disappointed. But the #risk of a false sense of #security is enormous.
github.com/nocomplexity...
August 5, 2025 at 6:13 PM
DO NOT rely on #SAST scanners that are powered by #AI-#agents / #LLM systems to solve your #cybersecurity problems!
Most are far from good enough.
In the best case, you’ll only be #disappointed. But the #risk of a false sense of #security is enormous.
github.com/nocomplexity...
Most are far from good enough.
In the best case, you’ll only be #disappointed. But the #risk of a false sense of #security is enormous.
github.com/nocomplexity...
Python does not implement privilege separation. Once an attacker is able to execute arbitrary Python code, the attacker gets the same privileges that is used to run the program.
So use Python Code Audit- an advanced SAST tool github.com/nocomplexity...
#owasp #pycon #appsec
So use Python Code Audit- an advanced SAST tool github.com/nocomplexity...
#owasp #pycon #appsec
a cat is looking up at the camera while standing on a bed
ALT: a cat is looking up at the camera while standing on a bed
media.tenor.com
November 9, 2025 at 6:54 PM
Python does not implement privilege separation. Once an attacker is able to execute arbitrary Python code, the attacker gets the same privileges that is used to run the program.
So use Python Code Audit- an advanced SAST tool github.com/nocomplexity...
#owasp #pycon #appsec
So use Python Code Audit- an advanced SAST tool github.com/nocomplexity...
#owasp #pycon #appsec
Using causal loop diagrams helps you manage and solve complexity issues.
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
September 8, 2026 at 8:15 PM
Using causal loop diagrams helps you manage and solve complexity issues.
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
Processing XML Files is dangerous. So protect against all types of xml bombs with one simple API call…
@validate_xml
github.com/nocomplexity...
@validate_xml
github.com/nocomplexity...
GitHub - nocomplexity/fileaudit: Simplify building secure Python applications by default. Validate files before you use them.
Simplify building secure Python applications by default. Validate files before you use them. - nocomplexity/fileaudit
github.com
August 25, 2026 at 6:25 PM
Processing XML Files is dangerous. So protect against all types of xml bombs with one simple API call…
@validate_xml
github.com/nocomplexity...
@validate_xml
github.com/nocomplexity...
loading csv files can result in a security nightmare. so check!
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
GitHub - nocomplexity/fileaudit: Simplify building secure Python applications by default. Validate files before you use them.
Simplify building secure Python applications by default. Validate files before you use them. - nocomplexity/fileaudit
github.com
August 21, 2026 at 6:24 AM
loading csv files can result in a security nightmare. so check!
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
#Python Code should not contain #obfuscated content, particularly code that uses base64 (and related encodings) for encoding or decoding data is always suspected.
So check your code, run a quick #security check
github.com/nocomplexity...
So check your code, run a quick #security check
github.com/nocomplexity...
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code security analyzer based on distrust.
Codeaudit - Modern Python source code security analyzer based on distrust. - nocomplexity/codeaudit
github.com
August 10, 2026 at 5:01 PM
#Python Code should not contain #obfuscated content, particularly code that uses base64 (and related encodings) for encoding or decoding data is always suspected.
So check your code, run a quick #security check
github.com/nocomplexity...
So check your code, run a quick #security check
github.com/nocomplexity...