cycode 1.10.2.dev1__tar.gz → 1.10.3.dev1__tar.gz

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cycode
-Version: 1.10.2.dev1
+Version: 1.10.3.dev1
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 Home-page: https://github.com/cycodehq/cycode-cli
 License: MIT
@@ -29,8 +29,10 @@ Requires-Dist: colorama (>=0.4.3,<0.5.0)
 Requires-Dist: gitpython (>=3.1.30,<3.2.0)
 Requires-Dist: marshmallow (>=3.15.0,<3.21.0)
 Requires-Dist: pathspec (>=0.11.1,<0.12.0)
+Requires-Dist: pyjwt (>=2.8.0,<3.0)
 Requires-Dist: pyyaml (>=6.0,<7.0)
 Requires-Dist: requests (>=2.24,<3.0)
+Requires-Dist: sentry-sdk (>=2.8.0,<3.0)
 Requires-Dist: texttable (>=1.6.7,<1.8.0)
 Requires-Dist: urllib3 (==1.26.18)
 Project-URL: Repository, https://github.com/cycodehq/cycode-cli

cycode-1.10.3.dev1/cycode/__init__.py

@@ -0,0 +1 @@
+__version__ = '1.10.3.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/auth/auth_command.py

@@ -4,7 +4,9 @@ from cycode.cli.commands.auth.auth_manager import AuthManager
 from cycode.cli.exceptions.custom_exceptions import AuthProcessError, HttpUnauthorizedError, NetworkError
 from cycode.cli.models import CliError, CliErrors, CliResult
 from cycode.cli.printers import ConsolePrinter
+from cycode.cli.sentry import add_breadcrumb, capture_exception
 from cycode.cli.user_settings.credentials_manager import CredentialsManager
+from cycode.cli.utils.jwt_utils import get_user_and_tenant_ids_from_access_token
 from cycode.cyclient import logger
 from cycode.cyclient.cycode_token_based_client import CycodeTokenBasedClient
 
@@ -15,6 +17,8 @@ from cycode.cyclient.cycode_token_based_client import CycodeTokenBasedClient
 @click.pass_context
 def auth_command(context: click.Context) -> None:
     """Authenticates your machine."""
+    add_breadcrumb('auth')
+
     if context.invoked_subcommand is not None:
         # if it is a subcommand, do nothing
         return
@@ -37,9 +41,10 @@ def auth_command(context: click.Context) -> None:
 @click.pass_context
 def authorization_check(context: click.Context) -> None:
     """Validates that your Cycode account has permission to work with the CLI."""
+    add_breadcrumb('check')
+
     printer = ConsolePrinter(context)
 
-    passed_auth_check_res = CliResult(success=True, message='Cycode authentication verified')
     failed_auth_check_res = CliResult(success=False, message='Cycode authentication failed')
 
     client_id, client_secret = CredentialsManager().get_credentials()
@@ -48,9 +53,21 @@ def authorization_check(context: click.Context) -> None:
         return
 
     try:
-        if CycodeTokenBasedClient(client_id, client_secret).get_access_token():
-            printer.print_result(passed_auth_check_res)
+        access_token = CycodeTokenBasedClient(client_id, client_secret).get_access_token()
+        if not access_token:
+            printer.print_result(failed_auth_check_res)
             return
+
+        user_id, tenant_id = get_user_and_tenant_ids_from_access_token(access_token)
+        printer.print_result(
+            CliResult(
+                success=True,
+                message='Cycode authentication verified',
+                data={'user_id': user_id, 'tenant_id': tenant_id},
+            )
+        )
+
+        return
     except (NetworkError, HttpUnauthorizedError):
         ConsolePrinter(context).print_exception()
 
@@ -78,4 +95,6 @@ def _handle_exception(context: click.Context, e: Exception) -> None:
     if isinstance(e, click.ClickException):
         raise e
 
+    capture_exception(e)
+
     raise click.ClickException(str(e))

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/configure/configure_command.py

@@ -3,6 +3,7 @@ from typing import Optional
 import click
 
 from cycode.cli import config, consts
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.user_settings.configuration_manager import ConfigurationManager
 from cycode.cli.user_settings.credentials_manager import CredentialsManager
 from cycode.cli.utils.string_utils import obfuscate_text
@@ -26,6 +27,8 @@ _CONFIGURATION_MANAGER = ConfigurationManager()
 @click.command(short_help='Initial command to configure your CLI client authentication.')
 def configure_command() -> None:
     """Configure your CLI client authentication manually."""
+    add_breadcrumb('configure')
+
     global_config_manager = _CONFIGURATION_MANAGER.global_config_file_manager
 
     current_api_url = global_config_manager.get_api_url()

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/ignore/ignore_command.py

@@ -5,6 +5,7 @@ import click
 
 from cycode.cli import consts
 from cycode.cli.config import config, configuration_manager
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils.path_utils import get_absolute_path
 from cycode.cli.utils.string_utils import hash_string_to_sha256
 from cycode.cyclient import logger
@@ -67,6 +68,8 @@ def ignore_command(
     by_value: str, by_sha: str, by_path: str, by_rule: str, by_package: str, scan_type: str, is_global: bool
 ) -> None:
     """Ignores a specific value, path or rule ID."""
+    add_breadcrumb('ignore')
+
     if not by_value and not by_sha and not by_path and not by_rule and not by_package:
         raise click.ClickException('ignore by type is missing')
 

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/report/report_command.py

@@ -1,6 +1,7 @@
 import click
 
 from cycode.cli.commands.report.sbom.sbom_command import sbom_command
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils.progress_bar import SBOM_REPORT_PROGRESS_BAR_SECTIONS, get_progress_bar
 
 
@@ -15,5 +16,6 @@ def report_command(
     context: click.Context,
 ) -> int:
     """Generate report."""
+    add_breadcrumb('report')
     context.obj['progress_bar'] = get_progress_bar(hidden=False, sections=SBOM_REPORT_PROGRESS_BAR_SECTIONS)
     return 1

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/report/sbom/path/path_command.py

@@ -8,6 +8,7 @@ from cycode.cli.exceptions.handle_report_sbom_errors import handle_report_except
 from cycode.cli.files_collector.path_documents import get_relevant_documents
 from cycode.cli.files_collector.sca.sca_code_scanner import perform_pre_scan_documents_actions
 from cycode.cli.files_collector.zip_documents import zip_documents
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils.get_api_client import get_report_cycode_client
 from cycode.cli.utils.progress_bar import SbomReportProgressBarSection
 
@@ -16,6 +17,8 @@ from cycode.cli.utils.progress_bar import SbomReportProgressBarSection
 @click.argument('path', nargs=1, type=click.Path(exists=True, resolve_path=True), required=True)
 @click.pass_context
 def path_command(context: click.Context, path: str) -> None:
+    add_breadcrumb('path')
+
     client = get_report_cycode_client()
     report_parameters = context.obj['report_parameters']
     output_format = report_parameters.output_format

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/report/sbom/repository_url/repository_url_command.py

@@ -4,6 +4,7 @@ import click
 
 from cycode.cli.commands.report.sbom.common import create_sbom_report, send_report_feedback
 from cycode.cli.exceptions.handle_report_sbom_errors import handle_report_exception
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils.get_api_client import get_report_cycode_client
 from cycode.cli.utils.progress_bar import SbomReportProgressBarSection
 
@@ -12,6 +13,8 @@ from cycode.cli.utils.progress_bar import SbomReportProgressBarSection
 @click.argument('uri', nargs=1, type=str, required=True)
 @click.pass_context
 def repository_url_command(context: click.Context, uri: str) -> None:
+    add_breadcrumb('repository_url')
+
     progress_bar = context.obj['progress_bar']
     progress_bar.start()
     progress_bar.set_section_length(SbomReportProgressBarSection.PREPARE_LOCAL_FILES)

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/report/sbom/sbom_command.py

@@ -6,6 +6,7 @@ import click
 from cycode.cli.commands.report.sbom.path.path_command import path_command
 from cycode.cli.commands.report.sbom.repository_url.repository_url_command import repository_url_command
 from cycode.cli.config import config
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cyclient.report_client import ReportParameters
 
 
@@ -64,6 +65,8 @@ def sbom_command(
     include_dev_dependencies: bool,
 ) -> int:
     """Generate SBOM report."""
+    add_breadcrumb('sbom')
+
     sbom_format_parts = format.split('-')
     if len(sbom_format_parts) != 2:
         raise click.ClickException('Invalid SBOM format.')

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/scan/commit_history/commit_history_command.py

@@ -2,6 +2,7 @@ import click
 
 from cycode.cli.commands.scan.code_scanner import scan_commit_range
 from cycode.cli.exceptions.handle_scan_errors import handle_scan_exception
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cyclient import logger
 
 
@@ -18,6 +19,8 @@ from cycode.cyclient import logger
 @click.pass_context
 def commit_history_command(context: click.Context, path: str, commit_range: str) -> None:
     try:
+        add_breadcrumb('commit_history')
+
         logger.debug('Starting commit history scan process, %s', {'path': path, 'commit_range': commit_range})
         scan_commit_range(context, path=path, commit_range=commit_range)
     except Exception as e:

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/scan/path/path_command.py

@@ -3,6 +3,7 @@ from typing import Tuple
 import click
 
 from cycode.cli.commands.scan.code_scanner import scan_disk_files
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cyclient import logger
 
 
@@ -10,6 +11,8 @@ from cycode.cyclient import logger
 @click.argument('paths', nargs=-1, type=click.Path(exists=True, resolve_path=True), required=True)
 @click.pass_context
 def path_command(context: click.Context, paths: Tuple[str]) -> None:
+    add_breadcrumb('path')
+
     progress_bar = context.obj['progress_bar']
     progress_bar.start()
 

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/scan/pre_commit/pre_commit_command.py

@@ -11,6 +11,7 @@ from cycode.cli.files_collector.repository_documents import (
     get_diff_file_path,
 )
 from cycode.cli.models import Document
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils.git_proxy import git_proxy
 from cycode.cli.utils.path_utils import (
     get_path_by_os,
@@ -22,6 +23,8 @@ from cycode.cli.utils.progress_bar import ScanProgressBarSection
 @click.argument('ignored_args', nargs=-1, type=click.UNPROCESSED)
 @click.pass_context
 def pre_commit_command(context: click.Context, ignored_args: List[str]) -> None:
+    add_breadcrumb('pre_commit')
+
     scan_type = context.obj['scan_type']
 
     progress_bar = context.obj['progress_bar']

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/scan/pre_receive/pre_receive_command.py

@@ -17,6 +17,7 @@ from cycode.cli.exceptions.handle_scan_errors import handle_scan_exception
 from cycode.cli.files_collector.repository_documents import (
     calculate_pre_receive_commit_range,
 )
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils.task_timer import TimeoutAfter
 from cycode.cyclient import logger
 
@@ -26,6 +27,8 @@ from cycode.cyclient import logger
 @click.pass_context
 def pre_receive_command(context: click.Context, ignored_args: List[str]) -> None:
     try:
+        add_breadcrumb('pre_receive')
+
         scan_type = context.obj['scan_type']
         if scan_type != consts.SECRET_SCAN_TYPE:
             raise click.ClickException(f'Commit range scanning for {scan_type.upper()} is not supported')

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/scan/repository/repository_command.py

@@ -9,6 +9,7 @@ from cycode.cli.files_collector.excluder import exclude_irrelevant_documents_to_
 from cycode.cli.files_collector.repository_documents import get_git_repository_tree_file_entries
 from cycode.cli.files_collector.sca.sca_code_scanner import perform_pre_scan_documents_actions
 from cycode.cli.models import Document
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils.path_utils import get_path_by_os
 from cycode.cli.utils.progress_bar import ScanProgressBarSection
 from cycode.cyclient import logger
@@ -27,6 +28,8 @@ from cycode.cyclient import logger
 @click.pass_context
 def repository_command(context: click.Context, path: str, branch: str) -> None:
     try:
+        add_breadcrumb('repository')
+
         logger.debug('Starting repository scan process, %s', {'path': path, 'branch': branch})
 
         scan_type = context.obj['scan_type']

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/scan/scan_ci/scan_ci_command.py

@@ -4,6 +4,7 @@ import click
 
 from cycode.cli.commands.scan.code_scanner import scan_commit_range
 from cycode.cli.commands.scan.scan_ci.ci_integrations import get_commit_range
+from cycode.cli.sentry import add_breadcrumb
 
 # This command is not finished yet. It is not used in the codebase.
 
@@ -14,4 +15,5 @@ from cycode.cli.commands.scan.scan_ci.ci_integrations import get_commit_range
 )
 @click.pass_context
 def scan_ci_command(context: click.Context) -> None:
+    add_breadcrumb('ci')
     scan_commit_range(context, path=os.getcwd(), commit_range=get_commit_range())

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/commands/scan/scan_command.py

@@ -15,6 +15,7 @@ from cycode.cli.consts import (
     SCA_SKIP_RESTORE_DEPENDENCIES_FLAG,
 )
 from cycode.cli.models import Severity
+from cycode.cli.sentry import add_breadcrumb
 from cycode.cli.utils import scan_utils
 from cycode.cli.utils.get_api_client import get_scan_cycode_client
 
@@ -124,6 +125,8 @@ def scan_command(
     sync: bool,
 ) -> int:
     """Scans for Secrets, IaC, SCA or SAST violations."""
+    add_breadcrumb('scan')
+
     if show_secret:
         context.obj['show_secret'] = show_secret
     else:
@@ -155,6 +158,8 @@ def _sca_scan_to_context(context: click.Context, sca_scan_user_selected: List[st
 @scan_command.result_callback()
 @click.pass_context
 def finalize(context: click.Context, *_, **__) -> None:
+    add_breadcrumb('scan_finalize')
+
     progress_bar = context.obj.get('progress_bar')
     if progress_bar:
         progress_bar.stop()

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/consts.py

@@ -1,4 +1,5 @@
 PROGRAM_NAME = 'cycode'
+APP_NAME = 'CycodeCLI'
 CLI_CONTEXT_SETTINGS = {
     'terminal_width': 10**9,
     'max_content_width': 10**9,
@@ -142,6 +143,14 @@ SCAN_BATCH_MAX_FILES_COUNT = 1000
 SCAN_BATCH_MAX_PARALLEL_SCANS = 5
 SCAN_BATCH_SCANS_PER_CPU = 1
 
+# sentry
+SENTRY_DSN = 'https://5e26b304b30ced3a34394b6f81f1076d@o1026942.ingest.us.sentry.io/4507543840096256'
+SENTRY_DEBUG = False
+SENTRY_SAMPLE_RATE = 1.0
+SENTRY_SEND_DEFAULT_PII = False
+SENTRY_INCLUDE_LOCAL_VARIABLES = False
+SENTRY_MAX_REQUEST_BODY_SIZE = 'never'
+
 # report with polling
 REPORT_POLLING_WAIT_INTERVAL_IN_SECONDS = 5
 DEFAULT_REPORT_POLLING_TIMEOUT_IN_SECONDS = 600

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/exceptions/handle_report_sbom_errors.py

@@ -5,6 +5,7 @@ import click
 from cycode.cli.exceptions import custom_exceptions
 from cycode.cli.models import CliError, CliErrors
 from cycode.cli.printers import ConsolePrinter
+from cycode.cli.sentry import capture_exception
 
 
 def handle_report_exception(context: click.Context, err: Exception) -> Optional[CliError]:
@@ -42,4 +43,6 @@ def handle_report_exception(context: click.Context, err: Exception) -> Optional[
     if isinstance(err, click.ClickException):
         raise err
 
+    capture_exception(err)
+
     raise click.ClickException(str(err))

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/exceptions/handle_scan_errors.py

@@ -5,6 +5,7 @@ import click
 from cycode.cli.exceptions import custom_exceptions
 from cycode.cli.models import CliError, CliErrors
 from cycode.cli.printers import ConsolePrinter
+from cycode.cli.sentry import capture_exception
 from cycode.cli.utils.git_proxy import git_proxy
 
 
@@ -69,13 +70,14 @@ def handle_scan_exception(
         ConsolePrinter(context).print_error(error)
         return None
 
-    unknown_error = CliError(code='unknown_error', message=str(e))
+    if isinstance(e, click.ClickException):
+        raise e
+
+    capture_exception(e)
 
+    unknown_error = CliError(code='unknown_error', message=str(e))
     if return_exception:
         return unknown_error
 
-    if isinstance(e, click.ClickException):
-        raise e
-
     ConsolePrinter(context).print_error(unknown_error)
     exit(1)

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/main.py

@@ -1,6 +1,7 @@
 from multiprocessing import freeze_support
 
 from cycode.cli.commands.main_cli import main_cli
+from cycode.cli.sentry import add_breadcrumb, init_sentry
 
 if __name__ == '__main__':
     # DO NOT REMOVE OR MOVE THIS LINE
@@ -8,4 +9,7 @@ if __name__ == '__main__':
     # see https://pyinstaller.org/en/latest/common-issues-and-pitfalls.html#multi-processing
     freeze_support()
 
+    init_sentry()
+    add_breadcrumb('cycode')
+
     main_cli()

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/models.py

@@ -62,6 +62,7 @@ CliErrors = Dict[Type[Exception], CliError]
 class CliResult(NamedTuple):
     success: bool
     message: str
+    data: Optional[Dict[str, any]] = None
 
 
 class LocalScanResult(NamedTuple):

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/printers/json_printer.py

@@ -13,7 +13,7 @@ if TYPE_CHECKING:
 
 class JsonPrinter(PrinterBase):
     def print_result(self, result: CliResult) -> None:
-        result = {'result': result.success, 'message': result.message}
+        result = {'result': result.success, 'message': result.message, 'data': result.data}
 
         click.echo(self.get_data_json(result))
 

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/printers/text_printer.py

@@ -27,6 +27,13 @@ class TextPrinter(PrinterBase):
 
         click.secho(result.message, fg=color)
 
+        if not result.data:
+            return
+
+        click.secho('\nAdditional data:', fg=color)
+        for name, value in result.data.items():
+            click.secho(f'- {name}: {value}', fg=color)
+
     def print_error(self, error: CliError) -> None:
         click.secho(error.message, fg=self.RED_COLOR_NAME)
 

cycode-1.10.3.dev1/cycode/cli/sentry.py

@@ -0,0 +1,99 @@
+import logging
+from dataclasses import dataclass
+from typing import Optional
+
+import sentry_sdk
+from sentry_sdk.integrations.atexit import AtexitIntegration
+from sentry_sdk.scrubber import DEFAULT_DENYLIST, EventScrubber
+
+from cycode import __version__
+from cycode.cli import consts
+from cycode.cli.utils.jwt_utils import get_user_and_tenant_ids_from_access_token
+from cycode.cyclient import logger
+
+# when Sentry is blocked on the machine, we want to keep clean output without retries warnings
+logging.getLogger('urllib3.connectionpool').setLevel(logging.ERROR)
+logging.getLogger('sentry_sdk').setLevel(logging.ERROR)
+
+
+@dataclass
+class _SentrySession:
+    user_id: Optional[str] = None
+    tenant_id: Optional[str] = None
+    correlation_id: Optional[str] = None
+
+
+_SENTRY_SESSION = _SentrySession()
+_DENY_LIST = [*DEFAULT_DENYLIST, 'access_token']
+
+
+def _get_sentry_release() -> str:
+    return f'{consts.APP_NAME}@{__version__}'
+
+
+def _get_sentry_local_release() -> str:
+    return f'{consts.APP_NAME}@0.0.0'
+
+
+_SENTRY_LOCAL_RELEASE = _get_sentry_local_release()
+
+
+def _before_sentry_event_send(event: dict, _: dict) -> Optional[dict]:
+    if event.get('release') == _SENTRY_LOCAL_RELEASE:
+        logger.debug('Dropping Sentry event due to local development setup')
+        return None
+
+    return event
+
+
+def init_sentry() -> None:
+    sentry_sdk.init(
+        dsn=consts.SENTRY_DSN,
+        debug=consts.SENTRY_DEBUG,
+        release=_get_sentry_release(),
+        before_send=_before_sentry_event_send,
+        sample_rate=consts.SENTRY_SAMPLE_RATE,
+        send_default_pii=consts.SENTRY_SEND_DEFAULT_PII,
+        include_local_variables=consts.SENTRY_INCLUDE_LOCAL_VARIABLES,
+        max_request_body_size=consts.SENTRY_MAX_REQUEST_BODY_SIZE,
+        event_scrubber=EventScrubber(denylist=_DENY_LIST, recursive=True),
+        integrations=[
+            AtexitIntegration(lambda _, __: None)  # disable output to stderr about pending events
+        ],
+    )
+    sentry_sdk.set_user(None)
+
+
+def setup_scope_from_access_token(access_token: Optional[str]) -> None:
+    if not access_token:
+        return
+
+    user_id, tenant_id = get_user_and_tenant_ids_from_access_token(access_token)
+
+    _SENTRY_SESSION.user_id = user_id
+    _SENTRY_SESSION.tenant_id = tenant_id
+
+    _setup_scope(user_id, tenant_id, _SENTRY_SESSION.correlation_id)
+
+
+def add_correlation_id_to_scope(correlation_id: str) -> None:
+    _setup_scope(_SENTRY_SESSION.user_id, _SENTRY_SESSION.tenant_id, correlation_id)
+
+
+def _setup_scope(user_id: str, tenant_id: str, correlation_id: Optional[str] = None) -> None:
+    scope = sentry_sdk.Scope.get_current_scope()
+    sentry_sdk.set_tag('tenant_id', tenant_id)
+
+    user = {'id': user_id, 'tenant_id': tenant_id}
+    if correlation_id:
+        user['correlation_id'] = correlation_id
+
+    scope.set_user(user)
+
+
+def capture_exception(exception: BaseException) -> None:
+    sentry_sdk.capture_exception(exception)
+
+
+def add_breadcrumb(message: str, category: str = 'cli') -> None:
+    sentry_sdk.add_breadcrumb(category=category, message=message, level='info')

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cli/user_settings/credentials_manager.py

@@ -3,6 +3,7 @@ from pathlib import Path
 from typing import Optional, Tuple
 
 from cycode.cli.config import CYCODE_CLIENT_ID_ENV_VAR_NAME, CYCODE_CLIENT_SECRET_ENV_VAR_NAME
+from cycode.cli.sentry import setup_scope_from_access_token
 from cycode.cli.user_settings.base_file_manager import BaseFileManager
 from cycode.cli.user_settings.jwt_creator import JwtCreator
 
@@ -52,6 +53,8 @@ class CredentialsManager(BaseFileManager):
         if hashed_creator:
             creator = JwtCreator(hashed_creator)
 
+        setup_scope_from_access_token(access_token)
+
         return access_token, expires_in, creator
 
     def update_access_token(
@@ -64,5 +67,7 @@ class CredentialsManager(BaseFileManager):
         }
         self.write_content_to_file(file_content_to_update)
 
+        setup_scope_from_access_token(access_token)
+
     def get_filename(self) -> str:
         return os.path.join(self.HOME_PATH, self.CYCODE_HIDDEN_DIRECTORY, self.FILE_NAME)

cycode-1.10.3.dev1/cycode/cli/utils/jwt_utils.py

@@ -0,0 +1,14 @@
+from typing import Tuple
+
+import jwt
+
+
+def get_user_and_tenant_ids_from_access_token(access_token: str) -> Tuple[str, str]:
+    payload = jwt.decode(access_token, options={'verify_signature': False})
+    user_id = payload.get('userId')
+    tenant_id = payload.get('tenantId')
+
+    if not user_id or not tenant_id:
+        raise ValueError('Invalid access token')
+
+    return user_id, tenant_id

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/cycode/cyclient/headers.py

@@ -3,6 +3,8 @@ from typing import Optional
 from uuid import uuid4
 
 from cycode import __version__
+from cycode.cli import consts
+from cycode.cli.sentry import add_correlation_id_to_scope
 from cycode.cli.user_settings.configuration_manager import ConfigurationManager
 from cycode.cyclient import logger
 
@@ -12,7 +14,6 @@ def get_cli_user_agent() -> str:
 
     Example: CycodeCLI/0.2.3 (OS: Darwin; Arch: arm64; Python: 3.8.16; InstallID: *uuid4*)
     """
-    app_name = 'CycodeCLI'
     version = __version__
 
     os = platform.system()
@@ -21,7 +22,7 @@ def get_cli_user_agent() -> str:
 
     install_id = ConfigurationManager().get_or_create_installation_id()
 
-    return f'{app_name}/{version} (OS: {os}; Arch: {arch}; Python: {python_version}; InstallID: {install_id})'
+    return f'{consts.APP_NAME}/{version} (OS: {os}; Arch: {arch}; Python: {python_version}; InstallID: {install_id})'
 
 
 class _CorrelationId:
@@ -40,6 +41,8 @@ class _CorrelationId:
             self._id = str(uuid4())
             logger.debug('Correlation ID: %s', self._id)
 
+        add_correlation_id_to_scope(self._id)
+
         return self._id
 
 

{cycode-1.10.2.dev1 → cycode-1.10.3.dev1}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "cycode"
-version = "1.10.2.dev1" # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+version = "1.10.3.dev1" # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
 description = "Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning."
 keywords=["secret-scan", "cycode", "devops", "token", "secret", "security", "cycode", "code"]
 authors = ["Cycode <support@cycode.com>"]
@@ -39,6 +39,8 @@ binaryornot = ">=0.4.4,<0.5.0"
 texttable = ">=1.6.7,<1.8.0"
 requests = ">=2.24,<3.0"
 urllib3 = "1.26.18"  # lock v1 to avoid issues with openssl and old Python versions (<3.9.11) on macOS
+sentry-sdk = ">=2.8.0,<3.0"
+pyjwt = ">=2.8.0,<3.0"
 
 [tool.poetry.group.test.dependencies]
 mock = ">=4.0.3,<4.1.0"

cycode-1.10.2.dev1/cycode/__init__.py

@@ -1 +0,0 @@
-__version__ = '1.10.2.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag