continuous-delivery-scripts 3.2.6__tar.gz → 3.4.0__tar.gz

{continuous_delivery_scripts-3.2.6/continuous_delivery_scripts.egg-info → continuous_delivery_scripts-3.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: continuous-delivery-scripts
-Version: 3.2.6
+Version: 3.4.0
 Summary: Continuous Delivery scripts to increase automation
 Home-page: https://github.com/ARMmbed/continuous-delivery-scripts
 Author: CMSIS team
@@ -19,6 +19,7 @@ Classifier: Topic :: Software Development :: Build Tools
 Requires-Python: >=3.8,<4
 Description-Content-Type: text/markdown
 License-File: LICENSE
+Requires-Dist: setuptools
 Requires-Dist: gitpython
 Requires-Dist: towncrier==22.12.0
 Requires-Dist: pyautoversion~=1.2.0
@@ -28,6 +29,7 @@ Requires-Dist: semver~=2.13.0
 Requires-Dist: python-dotenv
 Requires-Dist: twine
 Requires-Dist: boto3
+Requires-Dist: detect-secrets[gibberish]==1.5.0
 Requires-Dist: packaging
 Requires-Dist: licenseheaders<0.8.9
 Requires-Dist: spdx-tools==0.6.1
@@ -51,7 +53,7 @@ Dynamic: requires-python
 Dynamic: summary
 
 <!--
-Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 SPDX-License-Identifier: Apache-2.0
 -->
 # Automation Scripts for CI/CD

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/README.md

@@ -1,5 +1,5 @@
 <!--
-Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 SPDX-License-Identifier: Apache-2.0
 -->
 # Automation Scripts for CI/CD

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/__init__.py

@@ -1,6 +1,7 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Scripts and utilities used by the CI pipeline."""
+
 from continuous_delivery_scripts._version import __version__  # noqa: F401

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/_version.py

@@ -1,5 +1,5 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """The version number is based on semantic versioning.
@@ -10,8 +10,9 @@ References
 
 This file is autogenerated, do not modify by hand.
 """
-__version__ = "3.2.6"
-COMMIT = "39ef9fc9203e6633b9e8df6ce7f7ee0067de27ff"
+
+__version__ = "3.4.0"
+COMMIT = "593860a336acbead96e80e1a5c55aee240dbf97e"
 MAJOR = 3
-MINOR = 2
-PATCH = 6
+MINOR = 4
+PATCH = 0

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/assert_news.py

@@ -1,8 +1,9 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Checks if valid news files are created for changes in the project."""
+
 import argparse
 import logging
 import pathlib

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/create_news_file.py

@@ -1,5 +1,5 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Easy news files generation.
@@ -7,6 +7,7 @@
 Usage:
     create-news-file "Fixed a bug" --type bugfix
 """
+
 import argparse
 import logging
 

continuous_delivery_scripts-3.4.0/continuous_delivery_scripts/detect_secrets.py

@@ -0,0 +1,93 @@
+#
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+"""Check tracked files against the project's recorded secret registry."""
+
+import argparse
+import logging
+import subprocess
+import sys
+from pathlib import Path
+from typing import List, Optional
+
+from continuous_delivery_scripts.update_secrets_registry import (
+    _determine_exclude_files,
+    _get_secrets_baseline_file,
+    _get_secrets_baseline_filename,
+)
+from continuous_delivery_scripts.utils.git_helpers import ProjectGitWrapper
+from continuous_delivery_scripts.utils.logging import log_exception, set_log_level
+
+logger = logging.getLogger(__name__)
+
+
+def _generate_detect_secrets_hook_command_list(
+    baseline_file: Path, exclude_files: List[str], tracked_files: List[str]
+) -> List[str]:
+    command = ["detect-secrets-hook", "--baseline", str(baseline_file)]
+    for exclude_file in exclude_files:
+        command.extend(["--exclude-files", exclude_file])
+    command.extend(tracked_files)
+    return command
+
+
+def _filter_tracked_files(tracked_files: List[str], project_root: Path, registry_file: Path) -> List[str]:
+    """Remove the registry file from tracked files to avoid scanning recorded accepted findings."""
+    try:
+        registry_relative_path = registry_file.relative_to(project_root).as_posix()
+    except ValueError:
+        return tracked_files
+    return [path for path in tracked_files if path != registry_relative_path]
+
+
+def detect_secrets(baseline_file: Optional[Path] = None) -> None:
+    """Check tracked files so new secrets are not introduced."""
+    git = ProjectGitWrapper()
+    project_root = Path(str(git.root))
+    resolved_baseline = _get_secrets_baseline_file(baseline_file)
+    tracked_files = _filter_tracked_files(git.list_tracked_files(), project_root, resolved_baseline)
+    if not tracked_files:
+        logger.info("No tracked files found for detect-secrets.")
+        return
+    subprocess.check_call(
+        _generate_detect_secrets_hook_command_list(resolved_baseline, _determine_exclude_files(), tracked_files),
+        cwd=str(project_root),
+    )
+
+
+def main() -> int:
+    """Script CLI."""
+    parser = argparse.ArgumentParser(
+        description=(
+            "Check tracked files against the recorded secret registry so new secrets are not committed. "
+            "This uses Yelp detect-secrets (https://github.com/Yelp/detect-secrets)."
+        )
+    )
+    parser.add_argument(
+        "-r",
+        "--registry-file",
+        default=Path(_get_secrets_baseline_filename()),
+        help="Secret registry file to use.",
+        type=Path,
+    )
+    parser.add_argument(
+        "-v",
+        "--verbose",
+        action="count",
+        default=0,
+        help="Verbosity, by default errors are reported.",
+    )
+    args = parser.parse_args()
+    set_log_level(args.verbose)
+
+    try:
+        detect_secrets(args.registry_file)
+        return 0
+    except Exception as e:
+        log_exception(logger, e)
+        return 1
+
+
+if __name__ == "__main__":
+    sys.exit(main())

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/generate_docs.py

@@ -1,8 +1,9 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Generates documentation."""
+
 import argparse
 import logging
 import os

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/generate_news.py

@@ -1,8 +1,9 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Handles usage of towncrier for automated changelog generation and pyautoversion for versioning."""
+
 import sys
 
 import argparse

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/get_config.py

@@ -1,8 +1,9 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Retrieves configuration values."""
+
 import argparse
 import sys
 import logging

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/get_version.py

@@ -1,8 +1,9 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Determine the project new version."""
+
 import sys
 
 from typing import Optional

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/language_specifics.py

@@ -1,5 +1,5 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Language plugins Loader."""

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/license_files.py

@@ -1,5 +1,5 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Apply copyright and licensing to all source files present in a project.
@@ -7,6 +7,7 @@
 This is to comply with OpenChain certification;
 https://github.com/OpenChain-Project/Curriculum/blob/master/guides/reusing_software.md#2-include-a-copyright-notice-and-license-in-each-file
 """
+
 import argparse
 import logging
 import subprocess

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/GOLAND.MD

@@ -9,5 +9,4 @@ The plugin leverages [goreleaser](https://goreleaser.com/) to package and releas
 Therefore, a `.goreleaser.yml` file must be present in the go source directory i.e. where the mod file lies.
 
 ## Documentation
-The plugin uses [golds](https://github.com/go101/golds) to generate the code reference documentation.
-It currently uses version 0.4.1 as later versions comprise [an issue](https://github.com/go101/golds/issues/26)
+The plugin uses [doc2go](https://abhinav.github.io/doc2go) to generate the code reference documentation.

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/__init__.py

@@ -1,8 +1,9 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Language specific actions."""
+
 import glob
 from pathlib import Path
 

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/basic.py

@@ -1,15 +1,21 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Basic plugin."""
+
 import logging
 from pathlib import Path
-from typing import Optional
+from typing import TYPE_CHECKING, Optional
 
-from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 from continuous_delivery_scripts.utils.definitions import CommitType
-from continuous_delivery_scripts.utils.language_specifics_base import BaseLanguage, get_language_from_file_name
+from continuous_delivery_scripts.utils.language_specifics_base import (
+    BaseLanguage,
+    get_language_from_file_name,
+)
+
+if TYPE_CHECKING:
+    from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 
 logger = logging.getLogger(__name__)
 
@@ -45,6 +51,6 @@ class Basic(BaseLanguage):
         """States whether project metadata can be retrieved."""
         return False
 
-    def get_current_spdx_project(self) -> Optional[SpdxProject]:
+    def get_current_spdx_project(self) -> Optional["SpdxProject"]:
         """Basic."""
         return None

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/ci.py

@@ -1,16 +1,25 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Plugin for CI projects."""
+
 import logging
 from pathlib import Path
-from typing import Optional
+from typing import TYPE_CHECKING, Optional
 
-from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
-from continuous_delivery_scripts.utils.configuration import configuration, ConfigurationVariable
+from continuous_delivery_scripts.utils.configuration import (
+    configuration,
+    ConfigurationVariable,
+)
 from continuous_delivery_scripts.utils.definitions import CommitType
-from continuous_delivery_scripts.utils.language_specifics_base import BaseLanguage, get_language_from_file_name
+from continuous_delivery_scripts.utils.language_specifics_base import (
+    BaseLanguage,
+    get_language_from_file_name,
+)
+
+if TYPE_CHECKING:
+    from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 
 logger = logging.getLogger(__name__)
 
@@ -52,7 +61,7 @@ class CI(BaseLanguage):
         """States whether project metadata can be retrieved."""
         return False
 
-    def get_current_spdx_project(self) -> Optional[SpdxProject]:
+    def get_current_spdx_project(self) -> Optional["SpdxProject"]:
         """Gets current SPDX description."""
         # TODO
         return None

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/docker.py

@@ -1,15 +1,21 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Plugin for Docker projects."""
+
 import logging
 from pathlib import Path
-from typing import Optional
+from typing import TYPE_CHECKING, Optional
 
-from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 from continuous_delivery_scripts.utils.definitions import CommitType
-from continuous_delivery_scripts.utils.language_specifics_base import BaseLanguage, get_language_from_file_name
+from continuous_delivery_scripts.utils.language_specifics_base import (
+    BaseLanguage,
+    get_language_from_file_name,
+)
+
+if TYPE_CHECKING:
+    from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 
 logger = logging.getLogger(__name__)
 
@@ -47,7 +53,7 @@ class Docker(BaseLanguage):
         """States whether project metadata can be retrieved."""
         return False
 
-    def get_current_spdx_project(self) -> Optional[SpdxProject]:
+    def get_current_spdx_project(self) -> Optional["SpdxProject"]:
         """Gets current SPDX description."""
         # TODO
         return None

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/github_actions.py

@@ -1,8 +1,9 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Plugin for CI projects."""
+
 import logging
 import os
 from pathlib import Path

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/golang.py

@@ -1,19 +1,32 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """Plugin for Golang projects."""
+
 import logging
 import os
+import shutil
 from pathlib import Path
-from subprocess import check_call
-from typing import Optional, List, Dict
+from subprocess import check_call, check_output
+from typing import TYPE_CHECKING, Optional, List, Dict, MutableMapping
 
-from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
-from continuous_delivery_scripts.utils.configuration import configuration, ConfigurationVariable
+from continuous_delivery_scripts.utils.configuration import (
+    configuration,
+    ConfigurationVariable,
+)
 from continuous_delivery_scripts.utils.definitions import CommitType
-from continuous_delivery_scripts.utils.git_helpers import LocalProjectRepository, GitWrapper
-from continuous_delivery_scripts.utils.language_specifics_base import BaseLanguage, get_language_from_file_name
+from continuous_delivery_scripts.utils.git_helpers import (
+    LocalProjectRepository,
+    GitWrapper,
+)
+from continuous_delivery_scripts.utils.language_specifics_base import (
+    BaseLanguage,
+    get_language_from_file_name,
+)
+
+if TYPE_CHECKING:
+    from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 
 logger = logging.getLogger(__name__)
 
@@ -25,14 +38,11 @@ ENVVAR_GO_MOD = "GO111MODULE"
 GO_MOD_ON_VALUE = "on"
 
 
-def _generate_golds_command_list(output_directory: Path, module: str) -> List[str]:
+def _generate_doc2go_command_list(output_directory: Path, module: str) -> List[str]:
     return [
-        "golds",
-        "-gen",
-        "-wdpkgs-listing=solo",
-        "-only-list-exporteds",
-        f"-dir={str(output_directory)}",
-        "-nouses",
+        "doc2go",
+        "-out",
+        str(output_directory),
         f"{module}",
     ]
 
@@ -54,12 +64,12 @@ def _generate_goreleaser_check_command_list() -> List[str]:
     ]
 
 
-def _install_golds_command_list() -> List[str]:
+def _install_doc2go_command_list() -> List[str]:
     return [
         "go",
         "install",
-        "go101.org/golds@main",
-    ]  # FIXME change version to latest when https://github.com/go101/golds/issues/26 is fixed
+        "go.abhg.dev/doc2go@latest",
+    ]
 
 
 def _install_syft_command_list() -> List[str]:
@@ -70,29 +80,63 @@ def _install_goreleaser_command_list() -> List[str]:
     return ["go", "install", "github.com/goreleaser/goreleaser/v2@latest"]
 
 
-def _call_golds(output_directory: Path, module: str) -> None:
-    """Calls Golds for generating the docs."""
-    logger.info("Installing Golds if missing.")
+def _ensure_go_tool_installed(
+    tool_name: str,
+    version_command: List[str],
+    install_command: List[str],
+    env: MutableMapping[str, str],
+) -> None:
+    """Ensure a Go-based tool is available on PATH before use."""
+    tool_path = shutil.which(tool_name)
+    if tool_path:
+        try:
+            check_output(version_command, env=env)
+            logger.info("Using %s from PATH: %s", tool_name, tool_path)
+            return
+        except Exception as exception:
+            logger.warning("Could not use %s from PATH: %s", tool_name, exception)
+
+    logger.info("Installing %s with go install.", tool_name)
+    check_call(install_command, env=env)
+
+
+def _call_doc2go(output_directory: Path, module: str) -> None:
+    """Call doc2go for generating the docs."""
     env = os.environ
     env[ENVVAR_GO_MOD] = GO_MOD_ON_VALUE
-    check_call(_install_golds_command_list(), env=env)
-    logger.info("Creating Code documentation.")
-    logger.info(f"Running Golds over [{module}] in [{SRC_DIR}].")
-    # check_call(_generate_golds_command_list(output_directory, module), cwd=str(SRC_DIR), env=env)
-    # FIXME
-    logger.warning(
-        "Currently not running golds because there is an issue with latest versions: "
-        + "https://github.com/go101/golds/issues/26"
+    _ensure_go_tool_installed(
+        tool_name="doc2go",
+        version_command=["doc2go", "-version"],
+        install_command=_install_doc2go_command_list(),
+        env=env,
     )
+    logger.info("Creating Code documentation.")
+    logger.info("Running doc2go over [%s] in [%s].", module, SRC_DIR)
+    # FIXME enable doc2go when fully tested
+    # check_call(
+    #    _generate_doc2go_command_list(output_directory, module),
+    #    cwd=str(SRC_DIR),
+    #    env=env,
+    # )
+    logger.warning("Currently not running doc2go")
 
 
 def _call_goreleaser_check(version: str) -> None:
     """Calls go releaser check to verify configuration."""
-    logger.info("Installing GoReleaser if missing.")
     env = os.environ
     env[ENVVAR_GO_MOD] = GO_MOD_ON_VALUE
-    check_call(_install_syft_command_list(), env=env)
-    check_call(_install_goreleaser_command_list(), env=env)
+    _ensure_go_tool_installed(
+        tool_name="syft",
+        version_command=["syft", "--version"],
+        install_command=_install_syft_command_list(),
+        env=env,
+    )
+    _ensure_go_tool_installed(
+        tool_name="goreleaser",
+        version_command=["goreleaser", "--version"],
+        install_command=_install_goreleaser_command_list(),
+        env=env,
+    )
     logger.info("Checking GoReleaser configuration.")
     env[ENVVAR_GORELEASER_CUSTOMISED_TAG] = version
     env[ENVVAR_GORELEASER_GIT_TOKEN] = configuration.get_value(ConfigurationVariable.GIT_TOKEN)
@@ -124,7 +168,7 @@ class Go(BaseLanguage):
 
     def get_related_language(self) -> str:
         """Gets the related language."""
-        return get_language_from_file_name(__file__)
+        return str(get_language_from_file_name(__file__))
 
     def get_version_tag(self, version: str) -> str:
         """Gets tag based on version."""
@@ -149,7 +193,7 @@ class Go(BaseLanguage):
     def generate_code_documentation(self, output_directory: Path, module_to_document: str) -> None:
         """Generates the code documentation."""
         super().generate_code_documentation(output_directory, module_to_document)
-        _call_golds(output_directory, "./...")
+        _call_doc2go(output_directory, module_to_document if module_to_document else "./...")
 
     def can_add_licence_headers(self) -> bool:
         """States that licence headers can be added."""
@@ -159,7 +203,16 @@ class Go(BaseLanguage):
         """States whether project metadata can be retrieved."""
         return False
 
-    def get_current_spdx_project(self) -> Optional[SpdxProject]:
+    def get_secret_registry_exclude_files(self) -> List[str]:
+        """Gets additional detect-secrets exclude patterns for Go projects."""
+        return [
+            r".*go\.sum$",
+            r"^\.circleci[\\/].*",
+            r"^workflows/.*",
+            r"^\.github[\\/]workflows[\\/].*",
+        ]
+
+    def get_current_spdx_project(self) -> Optional["SpdxProject"]:
         """Gets current SPDX description."""
         # TODO
         return None
@@ -177,11 +230,20 @@ class Go(BaseLanguage):
 
     def _call_goreleaser_release(self, version: str) -> None:
         """Calls go releaser release to upload packages."""
-        logger.info("Installing GoReleaser if missing.")
         env = os.environ
         env[ENVVAR_GO_MOD] = GO_MOD_ON_VALUE
-        check_call(_install_syft_command_list(), env=env)
-        check_call(_install_goreleaser_command_list(), env=env)
+        _ensure_go_tool_installed(
+            tool_name="syft",
+            version_command=["syft", "--version"],
+            install_command=_install_syft_command_list(),
+            env=env,
+        )
+        _ensure_go_tool_installed(
+            tool_name="goreleaser",
+            version_command=["goreleaser", "--version"],
+            install_command=_install_goreleaser_command_list(),
+            env=env,
+        )
         tag = self.get_version_tag(version)
         # The tag of the release must be retrieved
         # See https://github.com/goreleaser/goreleaser/discussions/1426
@@ -194,4 +256,8 @@ class Go(BaseLanguage):
         changelogPath = configuration.get_value(ConfigurationVariable.CHANGELOG_FILE_PATH)
         env[ENVVAR_GORELEASER_CUSTOMISED_TAG] = tag
         env[ENVVAR_GORELEASER_GIT_TOKEN] = configuration.get_value(ConfigurationVariable.GIT_TOKEN)
-        check_call(_generate_goreleaser_release_command_list(changelogPath), cwd=ROOT_DIR, env=env)
+        check_call(
+            _generate_goreleaser_release_command_list(changelogPath),
+            cwd=ROOT_DIR,
+            env=env,
+        )

{continuous_delivery_scripts-3.2.6 → continuous_delivery_scripts-3.4.0}/continuous_delivery_scripts/plugins/noop.py

@@ -1,16 +1,22 @@
 #
-# Copyright (C) 2020-2025 Arm Limited or its affiliates and Contributors. All rights reserved.
+# Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 #
 """No Operation plugin."""
+
 import logging
 from pathlib import Path
-from typing import Optional, Dict
+from typing import TYPE_CHECKING, Optional, Dict
 
-from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 from continuous_delivery_scripts.utils.definitions import CommitType
 from continuous_delivery_scripts.utils.git_helpers import GitWrapper
-from continuous_delivery_scripts.utils.language_specifics_base import BaseLanguage, get_language_from_file_name
+from continuous_delivery_scripts.utils.language_specifics_base import (
+    BaseLanguage,
+    get_language_from_file_name,
+)
+
+if TYPE_CHECKING:
+    from continuous_delivery_scripts.spdx_report.spdx_project import SpdxProject
 
 logger = logging.getLogger(__name__)
 
@@ -47,7 +53,7 @@ class NoOp(BaseLanguage):
         """States whether project metadata can be retrieved."""
         return False
 
-    def get_current_spdx_project(self) -> Optional[SpdxProject]:
+    def get_current_spdx_project(self) -> Optional["SpdxProject"]:
         """No Op."""
         return None