RepoAuditor 0.2.83__tar.gz → 0.2.84__tar.gz

{repoauditor-0.2.83 → repoauditor-0.2.84}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: RepoAuditor
-Version: 0.2.83
+Version: 0.2.84
 Summary: Add your description here
 Project-URL: Homepage, https://github.com/gt-sse-center/RepoAuditor
 Project-URL: Documentation, https://github.com/gt-sse-center/RepoAuditor

repoauditor-0.2.84/docs/config_file.md

@@ -0,0 +1,52 @@
+# Configuration File
+
+`RepoAuditor` accepts both a set of flags as well as a configuration YAML file.
+
+The configuration (or config) file can make usage easier by recording preferences as well as facilitating sharing of enforced requirements within an organization.
+We have provided a sample configuration file called [default_config.yaml](https://github.com/gt-sse-center/RepoAuditor/blob/main/default_config.yaml), which can be used as:
+
+```sh
+uvx RepoAuditor --config default_config.yaml
+```
+
+## Key Differences
+
+There are some differences between the flags used in the CLI and the options provided in the config file.
+
+### Multiple Values
+
+For example, to include multiple module on the CLI, the user would use the `--include` multiple times.
+
+```sh
+uvx RepoAuditor --include CommunityStandards --include GitHub
+```
+
+However, since the config file accepts a list of values, the corresponding option is `includes` (which is plural).
+
+```yaml
+includes: ["GitHub", "CommunityStandards"]
+```
+
+This is similarly the case for `--exclude` on the CLI and `excludes` in the config file.
+
+### Boolean Flags
+
+On the CLI, the existence of a boolean flag, e.g. `--GitHub-Description-allow-empty` is sufficient to indicate that we want this setting to be enabled.
+
+However since YAML files expect key-value pairs, in the config file, you will have to specify the same flag as:
+
+```yaml
+GitHub-Description-allow-empty: true
+```
+
+Similarly for the case where we wish to check a setting is turned off, we specify e.g. `--GitHub-no-MergeCommit` on the CLI, but in the config file, it would be
+
+```yaml
+GitHub-no-MergeCommit: true
+```
+
+Remember, to deactive a check, we have to add the `Module-Requirement` to the `excludes` list,
+
+```yaml
+excludes: ["GitHub-MergeCommit"]
+```

{repoauditor-0.2.83 → repoauditor-0.2.84}/mkdocs.yml

@@ -10,6 +10,11 @@ nav:
   - Troubleshooting: troubleshooting.md
 theme:
   name: material
+  palette:
+    scheme: slate
+    primary: teal
+    accent: lime
+
 
 # Extensions to render emojis
 markdown_extensions:

{repoauditor-0.2.83 → repoauditor-0.2.84}/src/RepoAuditor/Plugins/GitHub/DefaultBranchRequirements/Protected.py

@@ -76,7 +76,7 @@ class Protected(Requirement):
     ) -> Requirement.EvaluateImplResult:
         is_protected = query_data["default_branch_data"].get("protected", None)
         if is_protected is None:
-            return CreateIncompleteDataResult()
+            return CreateIncompleteDataResult(query_data["pat"] is not None)
 
         if requirement_args["no"]:
             expected_value = False

repoauditor-0.2.84/src/RepoAuditor/Plugins/GitHub/Impl/Common.py

@@ -0,0 +1,34 @@
+# -------------------------------------------------------------------------------
+# |
+# |  Copyright (c) 2024 Scientific Software Engineering Center at Georgia Tech
+# |  Distributed under the MIT License.
+# |
+# -------------------------------------------------------------------------------
+"""Contains common functionality that is used across different components."""
+
+from RepoAuditor.Requirement import EvaluateResult, Requirement
+
+
+# ----------------------------------------------------------------------
+def CreateIncompleteDataResult(pat_value_exists: bool) -> Requirement.EvaluateImplResult:  # noqa: FBT001
+    """Create an incomplete data result.
+
+    Checks if the PAT value is `None` to generate additional message info.
+
+    Args:
+        pat_value_exists (bool): The value of the Personal Access Token.
+
+    Returns:
+        Requirement.EvaluateImplResult: A warning result notifying the user of an incomplete result.
+
+    """
+    error_message = "Incomplete data was encountered."
+    if pat_value_exists:
+        error_message += "\nPlease update the permissions of the GitHub PAT."
+    else:
+        error_message += "\nGitHub PAT was not provided. Please provide the PAT."
+
+    return Requirement.EvaluateImplResult(
+        EvaluateResult.Warning,
+        error_message,
+    )

{repoauditor-0.2.83 → repoauditor-0.2.84}/src/RepoAuditor/Plugins/GitHub/Impl/EnableRequirementImpl.py

@@ -103,7 +103,7 @@ class EnableRequirementImpl(Requirement):
                 )
 
             if self.missing_value_is_warning:
-                return CreateIncompleteDataResult()
+                return CreateIncompleteDataResult(query_data["pat"] is not None)
 
             return Requirement.EvaluateImplResult(EvaluateResult.DoesNotApply, None)
 

{repoauditor-0.2.83 → repoauditor-0.2.84}/src/RepoAuditor/Plugins/GitHub/Impl/ValueRequirementImpl.py

@@ -90,7 +90,7 @@ class ValueRequirementImpl(Requirement):
         result = self.get_configuration_value_func(query_data)
         if result is None:
             if self.missing_value_is_warning:
-                return CreateIncompleteDataResult()
+                return CreateIncompleteDataResult(query_data["pat"] is not None)
 
             return Requirement.EvaluateImplResult(EvaluateResult.DoesNotApply, None)
 

{repoauditor-0.2.83 → repoauditor-0.2.84}/src/RepoAuditor/Plugins/GitHub/StandardRequirements/Private.py

@@ -77,7 +77,7 @@ class Private(Requirement):
         result = query_data["standard"].get("private", None)
 
         if result is None:
-            return CreateIncompleteDataResult()
+            return CreateIncompleteDataResult(query_data["pat"] is not None)
 
         if result != expect_private:
             return Requirement.EvaluateImplResult(

{repoauditor-0.2.83 → repoauditor-0.2.84}/src/RepoAuditor/__init__.py

@@ -2,4 +2,4 @@ APP_NAME = "RepoAuditor"
 
 # Note that the default value below will be used until the value
 # here is explicitly updated by the Continuous Integration system.
-__version__ = "0.2.83"
+__version__ = "0.2.84"

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/ClassicBranchProtectionRequirements/DismissStalePullRequestApprovals_UnitTest.py

@@ -14,19 +14,6 @@ from RepoAuditor.Plugins.GitHub.ClassicBranchProtectionRequirements.DismissStale
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "branch": "main",
-        "branch_protection_data": {
-            "required_pull_request_reviews": {
-                "dismiss_stale_reviews": True,
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return DismissStalePullRequestApprovals()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/ClassicBranchProtectionRequirements/EnsureStatusChecks_UnitTest.py

@@ -14,19 +14,6 @@ from RepoAuditor.Plugins.GitHub.ClassicBranchProtectionRequirements.EnsureStatus
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "branch": "main",
-        "branch_protection_data": {
-            "required_status_checks": {
-                "checks": ["check1", "check2"],
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return EnsureStatusChecks()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/ClassicBranchProtectionRequirements/RequireApprovalMostRecentPush_UnitTest.py

@@ -14,19 +14,6 @@ from RepoAuditor.Plugins.GitHub.ClassicBranchProtectionRequirements.RequireAppro
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "branch": "main",
-        "branch_protection_data": {
-            "required_pull_request_reviews": {
-                "require_last_push_approval": True,
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return RequireApprovalMostRecentPush()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/ClassicBranchProtectionRequirements/RequireApprovals_UnitTest.py

@@ -12,19 +12,6 @@ from RepoAuditor.Plugins.GitHub.ClassicBranchProtectionRequirements.RequireAppro
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "branch": "main",
-        "branch_protection_data": {
-            "required_pull_request_reviews": {
-                "required_approving_review_count": "1",
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return RequireApprovals()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/ClassicBranchProtectionRequirements/RequireCodeOwnerReview_UnitTest.py

@@ -14,19 +14,6 @@ from RepoAuditor.Plugins.GitHub.ClassicBranchProtectionRequirements.RequireCodeO
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "branch": "main",
-        "branch_protection_data": {
-            "required_pull_request_reviews": {
-                "require_code_owner_reviews": False,
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return RequireCodeOwnerReview()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/ClassicBranchProtectionRequirements/RequireUpToDateBranches_UnitTest.py

@@ -14,20 +14,6 @@ from RepoAuditor.Plugins.GitHub.ClassicBranchProtectionRequirements.RequireUpToD
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    """Sample query data fixture."""
-    return {
-        "session": session,
-        "branch": "main",
-        "branch_protection_data": {
-            "required_status_checks": {
-                "strict": False,
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     """RequireUpToDateBranches requirement fixture."""

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/DefaultBranchQueryRequirements/Protected_UnitTest.py

@@ -12,16 +12,6 @@ from RepoAuditor.Plugins.GitHub.DefaultBranchRequirements.Protected import Prote
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "default_branch_data": {
-            "protected": True,
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return Protected()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/DependabotSecurityUpdates_UnitTest.py

@@ -14,20 +14,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.DependabotSecurityUpdates i
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "security_and_analysis": {
-                "dependabot_security_updates": {
-                    "status": True,
-                },
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return DependabotSecurityUpdates()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/Description_UnitTest.py

@@ -12,16 +12,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.Description import Descript
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "description": "Description of repository",
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return Description()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/License_UnitTest.py

@@ -12,18 +12,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.License import License
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "license": {
-                "name": "MIT License",
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return License()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/MergeCommitMessage_UnitTest.py

@@ -12,17 +12,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.MergeCommitMessage import M
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "allow_merge_commit": True,
-            "merge_commit_message": "BLANK",
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return MergeCommitMessage()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/Private_UnitTest.py

@@ -12,16 +12,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.Private import Private
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "private": True,
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return Private()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/SecretScanningPushProtection_UnitTest.py

@@ -14,20 +14,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.SecretScanningPushProtectio
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "security_and_analysis": {
-                "secret_scanning_push_protection": {
-                    "status": True,
-                },
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return SecretScanningPushProtection()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/SecretScanning_UnitTest.py

@@ -12,20 +12,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.SecretScanning import Secre
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "security_and_analysis": {
-                "secret_scanning": {
-                    "status": True,
-                },
-            },
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return SecretScanning()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/StandardQueryRequirements/SquashMergeCommitMessage_UnitTest.py

@@ -14,17 +14,6 @@ from RepoAuditor.Plugins.GitHub.StandardRequirements.SquashMergeCommitMessage im
 from RepoAuditor.Requirement import EvaluateResult
 
 
-@pytest.fixture(name="query_data")
-def query_data_fixture(session):
-    return {
-        "session": session,
-        "standard": {
-            "allow_squash_merge": True,
-            "squash_merge_commit_message": "COMMIT_MESSAGES",
-        },
-    }
-
-
 @pytest.fixture(name="requirement")
 def requirement_fixture():
     return SquashMergeCommitMessage()

{repoauditor-0.2.83 → repoauditor-0.2.84}/tests/Plugins/GitHubModule/ValueRequrementImpl_UnitTest.py

@@ -41,7 +41,7 @@ class TestValueRequirementImpl:
 
     def test_ResultIsNone(self, requirement):
         """Test pathway where result value is None."""
-        query_data = {"result": None}
+        query_data = {"result": None, "pat": "github_pat_example"}
         requirement_args = {"value": 0}
         result = requirement.Evaluate(query_data, requirement_args)
         assert result.result == EvaluateResult.Warning

repoauditor-0.2.84/tests/Plugins/GitHubModule/fixtures.py

@@ -0,0 +1,77 @@
+# -------------------------------------------------------------------------------
+# |
+# |  Copyright (c) 2024 Scientific Software Engineering Center at Georgia Tech
+# |  Distributed under the MIT License.
+# |
+# -------------------------------------------------------------------------------
+"""
+Common fixtures for GitHubModule unit tests.
+The fixtures here are imported within the top-level conftest.py so that they are accessible everywhere.
+"""
+
+import pytest
+from dataclasses import dataclass
+
+
+@pytest.fixture(name="session")
+def session_fixture():
+    """Create a dummy GitHub API session object."""
+
+    @dataclass
+    class _GithubSession_:
+        github_url: str
+        pat: str
+        is_enterprise: bool
+
+    s = _GithubSession_(
+        "https://github.com/gt-sse-center/RepoAuditor",
+        pat="github_pat_dummy",
+        is_enterprise=False,
+    )
+    return s
+
+
+@pytest.fixture(name="query_data")
+def query_data_fixture(session):
+    return {
+        "session": session,
+        "branch": "main",
+        "branch_protection_data": {
+            "required_pull_request_reviews": {
+                "dismiss_stale_reviews": True,
+                "require_last_push_approval": True,
+                "required_approving_review_count": "1",
+                "require_code_owner_reviews": False,
+            },
+            "required_status_checks": {
+                "checks": ["check1", "check2"],
+                "strict": False,
+            },
+        },
+        "default_branch_data": {
+            "protected": True,
+        },
+        "standard": {
+            "description": "Description of repository",
+            "allow_merge_commit": True,
+            "merge_commit_message": "BLANK",
+            "allow_squash_merge": True,
+            "squash_merge_commit_message": "COMMIT_MESSAGES",
+            "security_and_analysis": {
+                "dependabot_security_updates": {
+                    "status": True,
+                },
+                "secret_scanning_push_protection": {
+                    "status": True,
+                },
+                "secret_scanning": {
+                    "status": True,
+                },
+            },
+            "private": True,
+            "license": {
+                "name": "MIT License",
+            },
+        },
+        "pat": "github_pat_abcdefgh",
+    }