Project Files

.pydev-tools

_ast

describe.py

do_work.py

docstrings.py

extract_function.py

extract.py

legacy_handler_2.py

legacy_handler_3.py

legacy_handler.py

migration.py

reference.py

rename.py

workspace_description.md

prompt_examples

dependency_version_migration.txt

hotfix_rework.txt

new_project.txt

performance_optimization.txt

refactory.txt

security_hardening.txt

source_tree_analysis.txt

test_coverage_expansion.txt

scripts

e2e_runPytest_test.cjs

setupVenv.mjs

smokeNew6Tools.ts

smokeNewTools.ts

verify_testfile_fix.ts

verifySetupVenv.ts

skills

pydev-mcp.md

src

tools

_profiling_worker_main.py

analyzeImportsAndDependencies.ts

buildPythonPackage.ts

checkForBugs.ts

checkForBugsInFile.ts

createProjectStructure.ts

createTestFileTool.ts

editTextFile.ts

editTextFileByLine.ts

findFiles.ts

generateRequirementsTxtTool.ts

getSetupStatusTool.ts

getWorkspaceRootTool.ts

inspectEnvironmentTool.ts

installModule.ts

listDirectory.ts

listTools.ts

profileProject.ts

pydevAuditDocstringsTool.ts

pydevDescribeWorkspaceTool.ts

pydevExtractFunctionTool.ts

pydevGenerateReferenceTool.ts

pydevMigrationAuditTool.ts

pydevSafeRenameTool.ts

readTextFile.ts

runLinterAndFormatter.ts

runLinterAndFormatterInFile.ts

runProjectCoverage.ts

runPython.ts

runPythonFile.ts

runPythonFileInteractive.ts

runPythonInteractive.ts

runRepl.ts

runTests.ts

runWithDebuggerTool.ts

saveTextFile.ts

scanProjectSecurity.ts

searchDirectory.ts

setupVenvTool.ts

switchPythonVersion.ts

typeCheckProjectTool.ts

uninstallModule.ts

config.ts

index.ts

test

run_tests.cjs

tools.test.cjs

manifest.json

package-lock.json

package.json

professor_headache.jpg

README.md

setup-venv.sh

tsconfig.json

prompt_examples / security_hardening.txt

Use the `pydev-mcp` MCP tools to perform security hardening on the codebase based on the following priority: [INSERT SECURITY GOALS].

Follow these steps in order:

1. **Vulnerability Scan**:
   - Run `pydev_scan_security` across the entire workspace.
   - Review the findings, specifically focusing on `HIGH` and `MEDIUM` severity issues.
2. **Triage & Repair**:
   - For each identified high-severity issue:
     - Read the affected file using `pydev_read_text_file`.
     - Apply a security fix using `pydev_edit_text_file`.
     - Run `pydev_run_linter_and_formatter_in_file` to verify the fix.
3. **Verification**:
   - Run `pydev_run_tests` to ensure security patches haven't introduced functional regressions.
   - Re-run `pydev_scan_security` to confirm the specific vulnerabilities are resolved.
4. **Reporting**:
   - Create `doc/PROJECT-REPORT.md` with a "Security Audit" section:
     - List all resolved vulnerabilities.
     - Document any remaining `LOW` or `INFO` issues with justifications for delayed fixes.

Do not skip any step. Confirm the result of each step before proceeding to the next one.