`gj(dZddlmZddlmZddZy)z``hermes security`` subcommand parser. Extracted verbatim from ``hermes_cli/main.py:main()`` (god-file Phase 2). Handler injected to avoid importing ``main``. ) annotations)Callablec|jddd}|jdd}|jdd d }|jd d d |jddgdd|jdd d|jdd d|jdd d|j||j|y)z5Attach the ``security`` subcommand to ``subparsers``.securityz?Supply-chain audit (OSV.dev) for venv, plugins, and MCP serversa On-demand vulnerability scan against OSV.dev. Covers the Hermes venv (installed PyPI dists), Python deps declared by plugins under ~/.hermes/plugins/, and pinned npx/uvx MCP servers in config.yaml. Does NOT scan globally-installed packages or editor/browser extensions.)help descriptionsecurity_commandz )destmetavarauditz!Run a one-shot supply-chain auditz@Query OSV.dev for known vulnerabilities in installed components.z--json store_truez9Emit machine-readable JSON instead of human-readable text)actionrz --fail-oncritical)lowmoderatehighrzFExit non-zero when any finding meets this severity (default: critical))defaultchoicesrz --skip-venvz$Skip scanning the Hermes Python venvz--skip-pluginsz'Skip scanning plugin requirements filesz --skip-mcpz/Skip scanning pinned MCP servers in config.yaml)funcN) add_parseradd_subparsers add_argument set_defaults) subparsers cmd_securitysecurity_parsersecurity_subparsers audit_parsers R/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/subcommands/security.pybuild_security_parserr s !++ N V , O*88 9 '11 0V2L  H 7 U   3  6  > <0  l 3N)rrreturnNone)__doc__ __future__rtypingrr r!rr(s #24r!