Repository to Business Risk Translator - MVP

This MVP analyzes a Python code repository using Bandit, maps the findings to business risk categories, and generates an executive-friendly HTML report. It ships with a simple Streamlit UI.

Features

• Upload repo as a ZIP or provide a GitHub URL (ZIP download for public repos)
• Run Bandit security analysis (Python)
• Map findings to business risk categories via configurable JSON
• Generate an HTML report using Jinja2

Requirements

• Python 3.9+
• Windows/macOS/Linux

Setup

python -m venv .venv
.venv\Scripts\activate  # Windows
# source .venv/bin/activate  # macOS/Linux
pip install -r requirements.txt

Run the app

streamlit run app.py

Notes

• For GitHub URLs, the app attempts to download the default branch ZIP. Private repos are not supported in the MVP; use ZIP upload instead.
• PDF export is not included in the MVP; you can print the HTML report to PDF from your browser if needed.
• The risk mapping rules live in risk_mapping.json. Tweak them to fit your organization.