certifyclouds 1.2.2__tar.gz → 1.3.4__tar.gz

{certifyclouds-1.2.2 → certifyclouds-1.3.4}/.gitignore

@@ -3,9 +3,17 @@
 .env.local
 .env.*.local
 .dev.vars
+.release-env
+.release-env.*
 *.pem
 *.key
 .mcp.json
+.eslintcache
+
+# Sensitive business data (GDPR)
+marketing/outreach/leads.json
+marketing/outreach/outreach_log.json
+marketing/outreach/CLIENTS.md
 
 # Local tools (MCP servers)
 tools/
@@ -13,6 +21,9 @@ tools/
 # Customer data
 customer-packages/
 
+# Local doc backups (created during cleanup work)
+.docs-backup-*/
+
 # Security scan reports (contain vulnerability details)
 security-reports/
 
@@ -86,6 +97,10 @@ e2e/node_modules/
 e2e/.playwright/
 e2e/e2e/.auth/
 
+# Auto-generated marketing screenshots (regenerated on every E2E run by
+# e2e/api/take-screenshots.spec.ts — should NOT be checked in)
+website/assets/screenshots/*.png
+
 # Video files (E2E recordings, demo outputs - all regenerated)
 *.webm
 *.mp4
@@ -98,8 +113,9 @@ e2e/e2e/.auth/
 *.temp
 .cache/
 
-# Claude Code (local configuration and session files)
-.claude/
+# Claude Code config (ignore all except dispatch context)
+.claude/*
+!.claude/dispatch-context.md
 .agents/
 claude-*.md
 
@@ -142,4 +158,21 @@ marketing/video/public/audio/tts_*.mp3
 reports/
 *.pdf
 
-DEPLOY_STHREE.md
+DEPLOY_STHREE.md
+# Lab — local secrets (never commit)
+scripts/lab/.lab-env.local
+scripts/lab/.deploy-aci-secret-key
+scripts/lab/.deploy-aci-mi-principal-id
+scripts/lab/.deploy-cae-secret-key
+scripts/lab/.deploy-cae-mi-principal-id
+scripts/lab/.deploy-aci-workdir/
+scripts/lab/.deploy-aci-private-ip
+scripts/lab/.deploy-cf-tunnel-id
+scripts/lab/.deploy-cf-tunnel-token
+scripts/lab/.deploy-cf-access-app-id
+scripts/lab/.deploy-cae-fqdn
+scripts/lab/.deploy-cae-workdir/
+scripts/lab/.cf-origin-certs/
+scripts/lab/.db-password-*.backup
+scripts/lab/.deploy-sso-secret
+scripts/lab/.cloud-creds/

{certifyclouds-1.2.2 → certifyclouds-1.3.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: certifyclouds
-Version: 1.2.2
+Version: 1.3.4
 Summary: Scan Azure Key Vaults for expiring secrets, certificates, and keys
 Project-URL: Homepage, https://certifyclouds.com/scanner
 Project-URL: Documentation, https://docs.certifyclouds.com/scanner
@@ -24,20 +24,21 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Security
 Classifier: Topic :: System :: Systems Administration
 Requires-Python: >=3.9
-Requires-Dist: azure-core>=1.30
+Requires-Dist: azure-core>=1.38.0
 Requires-Dist: azure-identity>=1.20
 Requires-Dist: azure-keyvault-certificates>=4.9
 Requires-Dist: azure-keyvault-keys>=4.10
 Requires-Dist: azure-keyvault-secrets>=4.9
-Requires-Dist: azure-mgmt-keyvault>=13.0
+Requires-Dist: azure-mgmt-keyvault>=14.0.1
 Requires-Dist: azure-mgmt-resource>=24.0
+Requires-Dist: azure-mgmt-subscription>=3.1
 Requires-Dist: click>=8.0
 Requires-Dist: httpx>=0.27
-Requires-Dist: rich>=13.0
+Requires-Dist: rich>=15.0
 Requires-Dist: tenacity>=9.0
 Provides-Extra: dev
 Requires-Dist: pytest-mock>=3.10; extra == 'dev'
-Requires-Dist: pytest>=7.0; extra == 'dev'
+Requires-Dist: pytest>=9.0.3; extra == 'dev'
 Description-Content-Type: text/markdown
 
 # certifyclouds

{certifyclouds-1.2.2 → certifyclouds-1.3.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "certifyclouds"
-version = "1.2.2"
+version = "1.3.4"
 description = "Scan Azure Key Vaults for expiring secrets, certificates, and keys"
 readme = "README.md"
 license = { text = "Apache-2.0" }
@@ -27,20 +27,21 @@ classifiers = [
 dependencies = [
     "azure-identity>=1.20",
     "azure-mgmt-resource>=24.0",
-    "azure-mgmt-keyvault>=13.0",
+    "azure-mgmt-subscription>=3.1",
+    "azure-mgmt-keyvault>=14.0.1",
     "azure-keyvault-secrets>=4.9",
     "azure-keyvault-certificates>=4.9",
     "azure-keyvault-keys>=4.10",
-    "azure-core>=1.30",
+    "azure-core>=1.38.0",
     "tenacity>=9.0",
     "click>=8.0",
-    "rich>=13.0",
+    "rich>=15.0",
     "httpx>=0.27",
 ]
 
 [project.optional-dependencies]
 dev = [
-    "pytest>=7.0",
+    "pytest>=9.0.3",
     "pytest-mock>=3.10",
 ]
 

{certifyclouds-1.2.2 → certifyclouds-1.3.4}/src/cc_scanner/__init__.py

@@ -1,3 +1,3 @@
 """CertifyClouds Scanner — scan Azure Key Vaults for expiring secrets, certificates, and keys."""
 
-__version__ = "1.2.2"
+__version__ = "1.3.4"

{certifyclouds-1.2.2 → certifyclouds-1.3.4}/src/cc_scanner/scanner.py

@@ -24,7 +24,7 @@ try:
     from azure.keyvault.keys import KeyClient  # type: ignore
     from azure.keyvault.secrets import SecretClient  # type: ignore
     from azure.mgmt.keyvault import KeyVaultManagementClient  # type: ignore
-    from azure.mgmt.resource import SubscriptionClient  # type: ignore
+    from azure.mgmt.subscription import SubscriptionClient  # type: ignore
 
     AZURE_SDK_AVAILABLE = True
 except ImportError:

{certifyclouds-1.2.2 → certifyclouds-1.3.4}/src/cc_scanner/security.py

@@ -40,6 +40,9 @@ def analyze(results: dict[str, Any]) -> list[dict[str, Any]]:
             for cert in vault.get("certificates", []):
                 _check_asset_expiry(cert, "certificate", vault_name, sub_name, now, findings)
 
+            for key in vault.get("keys", []):
+                _check_asset_expiry(key, "key", vault_name, sub_name, now, findings)
+
     # Sort by severity
     findings.sort(key=lambda f: SEVERITY_ORDER.get(f["severity"], 99))
     return findings