certifyclouds 1.3.3__tar.gz → 1.3.5__tar.gz

{certifyclouds-1.3.3 → certifyclouds-1.3.5}/.gitignore

@@ -176,3 +176,4 @@ scripts/lab/.cf-origin-certs/
 scripts/lab/.db-password-*.backup
 scripts/lab/.deploy-sso-secret
 scripts/lab/.cloud-creds/
+.preflight-venv/

{certifyclouds-1.3.3 → certifyclouds-1.3.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: certifyclouds
-Version: 1.3.3
+Version: 1.3.5
 Summary: Scan Azure Key Vaults for expiring secrets, certificates, and keys
 Project-URL: Homepage, https://certifyclouds.com/scanner
 Project-URL: Documentation, https://docs.certifyclouds.com/scanner
@@ -31,6 +31,7 @@ Requires-Dist: azure-keyvault-keys>=4.10
 Requires-Dist: azure-keyvault-secrets>=4.9
 Requires-Dist: azure-mgmt-keyvault>=14.0.1
 Requires-Dist: azure-mgmt-resource>=24.0
+Requires-Dist: azure-mgmt-subscription>=3.1
 Requires-Dist: click>=8.0
 Requires-Dist: httpx>=0.27
 Requires-Dist: rich>=15.0

{certifyclouds-1.3.3 → certifyclouds-1.3.5}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "certifyclouds"
-version = "1.3.3"
+version = "1.3.5"
 description = "Scan Azure Key Vaults for expiring secrets, certificates, and keys"
 readme = "README.md"
 license = { text = "Apache-2.0" }
@@ -27,6 +27,7 @@ classifiers = [
 dependencies = [
     "azure-identity>=1.20",
     "azure-mgmt-resource>=24.0",
+    "azure-mgmt-subscription>=3.1",
     "azure-mgmt-keyvault>=14.0.1",
     "azure-keyvault-secrets>=4.9",
     "azure-keyvault-certificates>=4.9",

{certifyclouds-1.3.3 → certifyclouds-1.3.5}/src/cc_scanner/__init__.py

@@ -1,3 +1,3 @@
 """CertifyClouds Scanner — scan Azure Key Vaults for expiring secrets, certificates, and keys."""
 
-__version__ = "1.3.3"
+__version__ = "1.3.5"

{certifyclouds-1.3.3 → certifyclouds-1.3.5}/src/cc_scanner/cli.py

@@ -268,7 +268,12 @@ def main(
             "keys": results.get("totalKeys", 0),
             "expired": sum(expiry_summary["expired"].values()),
             "expiringSoon": sum(expiry_summary["30_days"].values()),
-            "securityFindings": len(findings),
+            # Per fleet-telemetry decision (1.3.5 + main app 1.4.12): we
+            # no longer send `securityFindings` count. A customer's
+            # compliance-violation count is sensitive (it reveals the
+            # security posture of their estate to HC), and the count
+            # has zero customer-success value to HC anyway — only
+            # specifics could help, and we don't collect those.
             "vaultsWithErrors": results.get("vaultsWithErrors", 0),
             "scanDurationMs": scan_duration_ms,
         }

{certifyclouds-1.3.3 → certifyclouds-1.3.5}/src/cc_scanner/scanner.py

@@ -24,7 +24,7 @@ try:
     from azure.keyvault.keys import KeyClient  # type: ignore
     from azure.keyvault.secrets import SecretClient  # type: ignore
     from azure.mgmt.keyvault import KeyVaultManagementClient  # type: ignore
-    from azure.mgmt.resource import SubscriptionClient  # type: ignore
+    from azure.mgmt.subscription import SubscriptionClient  # type: ignore
 
     AZURE_SDK_AVAILABLE = True
 except ImportError: