certifyclouds 1.2.0__tar.gz → 1.2.2__tar.gz

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: certifyclouds
-Version: 1.2.0
+Version: 1.2.2
 Summary: Scan Azure Key Vaults for expiring secrets, certificates, and keys
 Project-URL: Homepage, https://certifyclouds.com/scanner
 Project-URL: Documentation, https://docs.certifyclouds.com/scanner
@@ -40,15 +40,15 @@ Requires-Dist: pytest-mock>=3.10; extra == 'dev'
 Requires-Dist: pytest>=7.0; extra == 'dev'
 Description-Content-Type: text/markdown
 
-# cc-scanner
+# certifyclouds
 
 **Do you know which Azure secrets expire this month?**
 
 Scan all your Azure Key Vaults across every subscription in 30 seconds. Free, open source, works in Azure Cloud Shell.
 
 ```
-pip install cc-scanner
-cc-scan
+pip install certifyclouds                              # or: pipx install certifyclouds
+cc-scan                                                # or: brew tap certifyclouds/certifyclouds && brew install certifyclouds
 ```
 
 ## What you get
@@ -62,8 +62,11 @@ cc-scan
 ## Quick Start
 
 ```bash
-# 1. Install
-pip install cc-scanner
+# 1. Install (pick one)
+pip install certifyclouds              # pip
+pipx install certifyclouds             # pipx (isolated install)
+brew tap certifyclouds/certifyclouds   # Homebrew (macOS/Linux)
+brew install certifyclouds
 
 # 2. Authenticate (skip in Azure Cloud Shell)
 az login
@@ -77,7 +80,7 @@ On first run, you'll be prompted to register with your email (free, takes 10 sec
 ## Output
 
 ```
-CertifyClouds Scanner v1.2.0
+CertifyClouds Scanner v1.2.2
 Authenticated as: you@company.com
 
 Scanning Azure subscriptions...
@@ -170,7 +173,7 @@ AZURE_TENANT_ID=...
 | 0 | Scan completed, no critical/high findings |
 | 1 | Scan completed, critical or high findings detected |
 | 2 | Scan failed (auth error, network error, timeout) |
-| 3 | Registration required / invalid API key |
+| 3 | Registration required (no key found or registration failed) |
 
 Non-zero exit codes make this CI/cron-friendly: `cc-scan || notify-team`.
 
@@ -215,7 +218,7 @@ CertifyClouds Scanner sends **aggregate usage statistics** to improve the produc
 
 **Never sent:** Vault names or URIs, secret/certificate/key names, secret values, subscription IDs or names, Azure tenant IDs, resource group names, tags, certificate subjects or thumbprints.
 
-Use `--offline` to disable all network calls to the license server. The scan works fully offline.
+Use `--offline` to skip license server validation calls (key telemetry and version checks). Azure SDK calls are unaffected — the scanner still requires Azure connectivity to read Key Vault data.
 
 Source code is open and auditable: [codeberg.org/hus/cc/scanner](https://codeberg.org/hus/cc)
 

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/README.md

@@ -1,12 +1,12 @@
-# cc-scanner
+# certifyclouds
 
 **Do you know which Azure secrets expire this month?**
 
 Scan all your Azure Key Vaults across every subscription in 30 seconds. Free, open source, works in Azure Cloud Shell.
 
 ```
-pip install cc-scanner
-cc-scan
+pip install certifyclouds                              # or: pipx install certifyclouds
+cc-scan                                                # or: brew tap certifyclouds/certifyclouds && brew install certifyclouds
 ```
 
 ## What you get
@@ -20,8 +20,11 @@ cc-scan
 ## Quick Start
 
 ```bash
-# 1. Install
-pip install cc-scanner
+# 1. Install (pick one)
+pip install certifyclouds              # pip
+pipx install certifyclouds             # pipx (isolated install)
+brew tap certifyclouds/certifyclouds   # Homebrew (macOS/Linux)
+brew install certifyclouds
 
 # 2. Authenticate (skip in Azure Cloud Shell)
 az login
@@ -35,7 +38,7 @@ On first run, you'll be prompted to register with your email (free, takes 10 sec
 ## Output
 
 ```
-CertifyClouds Scanner v1.2.0
+CertifyClouds Scanner v1.2.2
 Authenticated as: you@company.com
 
 Scanning Azure subscriptions...
@@ -128,7 +131,7 @@ AZURE_TENANT_ID=...
 | 0 | Scan completed, no critical/high findings |
 | 1 | Scan completed, critical or high findings detected |
 | 2 | Scan failed (auth error, network error, timeout) |
-| 3 | Registration required / invalid API key |
+| 3 | Registration required (no key found or registration failed) |
 
 Non-zero exit codes make this CI/cron-friendly: `cc-scan || notify-team`.
 
@@ -173,7 +176,7 @@ CertifyClouds Scanner sends **aggregate usage statistics** to improve the produc
 
 **Never sent:** Vault names or URIs, secret/certificate/key names, secret values, subscription IDs or names, Azure tenant IDs, resource group names, tags, certificate subjects or thumbprints.
 
-Use `--offline` to disable all network calls to the license server. The scan works fully offline.
+Use `--offline` to skip license server validation calls (key telemetry and version checks). Azure SDK calls are unaffected — the scanner still requires Azure connectivity to read Key Vault data.
 
 Source code is open and auditable: [codeberg.org/hus/cc/scanner](https://codeberg.org/hus/cc)
 

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "certifyclouds"
-version = "1.2.0"
+version = "1.2.2"
 description = "Scan Azure Key Vaults for expiring secrets, certificates, and keys"
 readme = "README.md"
 license = { text = "Apache-2.0" }

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/src/cc_scanner/__init__.py

@@ -1,3 +1,3 @@
 """CertifyClouds Scanner — scan Azure Key Vaults for expiring secrets, certificates, and keys."""
 
-__version__ = "1.2.0"
+__version__ = "1.2.2"

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/src/cc_scanner/auth.py

@@ -22,11 +22,14 @@ REQUEST_TIMEOUT = 10.0
 class ValidationResult:
     """Result of a key validation call."""
     def __init__(self, valid: bool, error: str | None = None,
-                 latest_version: str | None = None, offline: bool = False):
+                 latest_version: str | None = None, offline: bool = False,
+                 release_notes: str | None = None, download_url: str | None = None):
         self.valid = valid
         self.error = error
         self.latest_version = latest_version
         self.offline = offline
+        self.release_notes = release_notes
+        self.download_url = download_url
 
 
 def validate_key(key: str, stats: dict[str, Any] | None = None) -> ValidationResult:
@@ -72,9 +75,12 @@ def validate_key(key: str, stats: dict[str, Any] | None = None) -> ValidationRes
 
         # Valid — update cache
         cfg.update_last_validated()
+        version_data = data.get("latestVersionData") or {}
         return ValidationResult(
             valid=True,
             latest_version=data.get("latestVersion"),
+            release_notes=version_data.get("release_notes") or None,
+            download_url=version_data.get("download_url") or None,
         )
 
     except (httpx.ConnectError, httpx.TimeoutException, httpx.HTTPError) as exc:

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/src/cc_scanner/cli.py

@@ -162,8 +162,20 @@ def main(
     # Resolve settings: flag > env var > default
     fmt = fmt or os.environ.get("CC_SCAN_FORMAT", "table")
     auth_method = auth_method or os.environ.get("CC_SCAN_AUTH", "cli")
-    workers = workers or int(os.environ.get("CC_SCAN_WORKERS", "5"))
-    timeout = timeout or int(os.environ.get("CC_SCAN_TIMEOUT", "300"))
+    if not workers:
+        raw_workers = os.environ.get("CC_SCAN_WORKERS", "5")
+        try:
+            workers = int(raw_workers)
+        except ValueError:
+            print(f"Error: CC_SCAN_WORKERS must be an integer, got {raw_workers!r}")
+            sys.exit(2)
+    if not timeout:
+        raw_timeout = os.environ.get("CC_SCAN_TIMEOUT", "300")
+        try:
+            timeout = int(raw_timeout)
+        except ValueError:
+            print(f"Error: CC_SCAN_TIMEOUT must be an integer, got {raw_timeout!r}")
+            sys.exit(2)
     offline = offline or os.environ.get("CC_SCAN_OFFLINE", "").lower() in ("true", "1")
     workers = min(max(workers, 1), 20)
 
@@ -223,6 +235,11 @@ def main(
             get_formatter("json")(results, [], output_file)
         sys.exit(2)
 
+    if results.get("timed_out"):
+        if fmt == "table":
+            console.print(f"[yellow]Warning: {results['error']}. Results below are partial.[/yellow]")
+            console.print()
+
     # Apply filters
     apply_filters(results, expiring_days=expiring, expired_only=expired, asset_type=asset_type)
 
@@ -266,7 +283,9 @@ def main(
             elif validation.offline and validation.error:
                 console.print(f"[dim]{validation.error}. Scanning in offline mode.[/dim]")
             elif validation.latest_version and validation.latest_version != __version__:
-                console.print(f"[dim]Update available: cc-scan {__version__} → {validation.latest_version} — pip install --upgrade cc-scanner[/dim]")
+                console.print(f"[dim]Update available: cc-scan {__version__} → {validation.latest_version} — pip install --upgrade certifyclouds[/dim]")
+                if validation.release_notes:
+                    console.print(f"[dim]  What's new: {validation.release_notes}[/dim]")
 
     # CTA (table format only, after version nudge per plan section 11.3)
     if fmt == "table":
@@ -278,6 +297,8 @@ def main(
         console.print()
 
     # Exit code
+    if results.get("timed_out"):
+        sys.exit(2)
     if has_critical_or_high(findings):
         sys.exit(1)
     sys.exit(0)

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/src/cc_scanner/registration.py

@@ -77,15 +77,11 @@ def register() -> str | None:
 
         return key
 
-    except httpx.ConnectError:
-        console.print("[red]Failed: could not reach license.certifyclouds.com[/red]")
-        console.print("  Check your internet connection and try again.")
-        console.print("  If you're behind a proxy, set HTTPS_PROXY in your environment.")
-        return None
-    except httpx.TimeoutException:
-        console.print("[red]Failed: request timed out.[/red]")
-        console.print("  Check your internet connection and try again.")
-        return None
+    except (httpx.ConnectError, httpx.TimeoutException):
+        console.print("[yellow]Could not reach license server — continuing in offline mode.[/yellow]")
+        offline_key = f"offline-{email}"
+        cfg.save_registration(offline_key, email)
+        return offline_key
     except Exception as exc:
         console.print(f"[red]Failed: {exc}[/red]")
         return None

{certifyclouds-1.2.0 → certifyclouds-1.2.2}/src/cc_scanner/scanner.py

@@ -164,7 +164,7 @@ def scan(
             "totalCertificates": 0,
             "totalKeys": 0,
             "vaultsWithErrors": 0,
-            "error": "Azure SDK not installed. Run: pip install --force-reinstall cc-scanner",
+            "error": "Azure SDK not installed. Run: pip install --force-reinstall certifyclouds",
         }
 
     try:
@@ -524,23 +524,28 @@ def scan(
         # Execute subscription scans in parallel
         worker_count = min(max_workers, len(subs_to_scan)) if subs_to_scan else 1
 
-        with concurrent.futures.ThreadPoolExecutor(max_workers=worker_count) as executor:
-            future_to_sub = {executor.submit(scan_subscription, sub): sub for sub in subs_to_scan}
+        try:
+            with concurrent.futures.ThreadPoolExecutor(max_workers=worker_count) as executor:
+                future_to_sub = {executor.submit(scan_subscription, sub): sub for sub in subs_to_scan}
 
-            for future in concurrent.futures.as_completed(future_to_sub, timeout=timeout):
-                try:
-                    sub_entry = future.result()
-                    results["subscriptions"].append(sub_entry)
-                    results["totalVaults"] += len(sub_entry["vaults"])
-                    for vault in sub_entry["vaults"]:
-                        results["totalSecrets"] += len(vault.get("secrets", []))
-                        results["totalCertificates"] += len(vault.get("certificates", []))
-                        results["totalKeys"] += len(vault.get("keys", []))
-                        if vault.get("error"):
-                            results["vaultsWithErrors"] += 1
-                except Exception as exc:
-                    sub = future_to_sub[future]
-                    logger.error("Scan failed for subscription %s: %s", getattr(sub, "display_name", sub.subscription_id), exc)
+                for future in concurrent.futures.as_completed(future_to_sub, timeout=timeout):
+                    try:
+                        sub_entry = future.result()
+                        results["subscriptions"].append(sub_entry)
+                        results["totalVaults"] += len(sub_entry["vaults"])
+                        for vault in sub_entry["vaults"]:
+                            results["totalSecrets"] += len(vault.get("secrets", []))
+                            results["totalCertificates"] += len(vault.get("certificates", []))
+                            results["totalKeys"] += len(vault.get("keys", []))
+                            if vault.get("error"):
+                                results["vaultsWithErrors"] += 1
+                    except Exception as exc:
+                        sub = future_to_sub[future]
+                        logger.error("Scan failed for subscription %s: %s", getattr(sub, "display_name", sub.subscription_id), exc)
+        except concurrent.futures.TimeoutError:
+            logger.error("Scan timed out after %s seconds; returning partial results", timeout)
+            results["timed_out"] = True
+            results["error"] = f"Scan timed out after {timeout} seconds"
 
         return results