certifyclouds 1.3.5__tar.gz → 1.3.6__tar.gz

{certifyclouds-1.3.5 → certifyclouds-1.3.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: certifyclouds
-Version: 1.3.5
+Version: 1.3.6
 Summary: Scan Azure Key Vaults for expiring secrets, certificates, and keys
 Project-URL: Homepage, https://certifyclouds.com/scanner
 Project-URL: Documentation, https://docs.certifyclouds.com/scanner

{certifyclouds-1.3.5 → certifyclouds-1.3.6}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "certifyclouds"
-version = "1.3.5"
+version = "1.3.6"
 description = "Scan Azure Key Vaults for expiring secrets, certificates, and keys"
 readme = "README.md"
 license = { text = "Apache-2.0" }

{certifyclouds-1.3.5 → certifyclouds-1.3.6}/src/cc_scanner/__init__.py

@@ -1,3 +1,3 @@
 """CertifyClouds Scanner — scan Azure Key Vaults for expiring secrets, certificates, and keys."""
 
-__version__ = "1.3.5"
+__version__ = "1.3.6"

{certifyclouds-1.3.5 → certifyclouds-1.3.6}/src/cc_scanner/cli.py

@@ -25,6 +25,22 @@ from .security import analyze, has_critical_or_high
 console = Console()
 
 
+def _is_newer_version(latest: str, current: str) -> bool:
+    """True if `latest` is strictly higher than `current` as dotted-integer semver.
+
+    Uses tuple comparison on `int`-parsed segments. Returns False on any
+    parse failure (e.g. pre-release suffixes like "1.3.5rc1") — we'd
+    rather skip the banner than tell the user to upgrade from a newer
+    dev build to an older release.
+    """
+    try:
+        return tuple(int(p) for p in latest.split(".")) > tuple(
+            int(p) for p in current.split(".")
+        )
+    except (ValueError, AttributeError):
+        return False
+
+
 _LOGO_LINES = [
     "                                 ▄▄███▄▄                         ",
     "                             ▄▄███▀▀ ▀▀███▄▄                     ",
@@ -287,7 +303,7 @@ def main(
                 console.print()
             elif validation.offline and validation.error:
                 console.print(f"[dim]{validation.error}. Scanning in offline mode.[/dim]")
-            elif validation.latest_version and validation.latest_version != __version__:
+            elif validation.latest_version and _is_newer_version(validation.latest_version, __version__):
                 console.print(f"[dim]Update available: cc-scan {__version__} → {validation.latest_version} — pip install --upgrade certifyclouds[/dim]")
                 if validation.release_notes:
                     console.print(f"[dim]  What's new: {validation.release_notes}[/dim]")