cycode 3.12.3.dev3__tar.gz → 3.12.3.dev4__tar.gz

{cycode-3.12.3.dev3 → cycode-3.12.3.dev4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.12.3.dev3
+Version: 3.12.3.dev4
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE

cycode-3.12.3.dev4/cycode/__init__.py

@@ -0,0 +1 @@
+__version__ = '3.12.3.dev4'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

{cycode-3.12.3.dev3 → cycode-3.12.3.dev4}/cycode/cli/apps/scan/pre_push/pre_push_command.py

@@ -44,6 +44,10 @@ def pre_push_command(
         timeout = configuration_manager.get_pre_push_command_timeout(command_scan_type)
         with TimeoutAfter(timeout):
             push_update_details = parse_pre_push_input()
+            if not push_update_details:
+                logger.info('No pre-push input found, nothing to scan')
+                return
+
             commit_range = calculate_pre_push_commit_range(push_update_details)
             if not commit_range:
                 logger.info(

{cycode-3.12.3.dev3 → cycode-3.12.3.dev4}/cycode/cli/files_collector/commit_range_documents.py

@@ -228,7 +228,7 @@ def parse_pre_receive_input() -> str:
     return pre_receive_input.splitlines()[0]
 
 
-def parse_pre_push_input() -> str:
+def parse_pre_push_input() -> Optional[str]:
     """Parse input to pre-push hook details.
 
     Example input:
@@ -237,13 +237,11 @@ def parse_pre_push_input() -> str:
     refs/heads/main 9cf90954ef26e7c58284f8ebf7dcd0fcf711152a refs/heads/main 973a96d3e925b65941f7c47fa16129f1577d499f
     refs/heads/feature-branch 3378e52dcfa47fb11ce3a4a520bea5f85d5d0bf3 refs/heads/feature-branch 59564ef68745bca38c42fc57a7822efd519a6bd9
 
-    :return: First, push update details (input's first line)
+    :return: First push update details (input's first line), or None if no input was provided
     """  # noqa: E501
     pre_push_input = _read_hook_input_from_stdin()
     if not pre_push_input:
-        raise ValueError(
-            'Pre push input was not found. Make sure that you are using this command only in pre-push hook'
-        )
+        return None
 
     # each line represents a branch push request, handle the first one only
     return pre_push_input.splitlines()[0]
@@ -332,6 +330,15 @@ def calculate_pre_push_commit_range(push_update_details: str) -> Optional[str]:
     """
     local_ref, local_object_name, remote_ref, remote_object_name = push_update_details.split()
 
+    # Tag pushes don't contain file diffs that need scanning
+    if local_ref.startswith('refs/tags/') or remote_ref.startswith('refs/tags/'):
+        logger.info('Skipping scan for tag push: %s -> %s', local_ref, remote_ref)
+        return None
+
+    # If deleting a ref (local_object_name is all zeros), no need to scan
+    if local_object_name == consts.EMPTY_COMMIT_SHA:
+        return None
+
     if remote_object_name == consts.EMPTY_COMMIT_SHA:
         try:
             repo = git_proxy.get_repo(os.getcwd())
@@ -356,10 +363,6 @@ def calculate_pre_push_commit_range(push_update_details: str) -> Optional[str]:
             logger.debug('Failed to get repo for pre-push commit range calculation: %s', exc_info=e)
             return consts.COMMIT_RANGE_ALL_COMMITS
 
-    # If deleting a branch (local_object_name is all zeros), no need to scan
-    if local_object_name == consts.EMPTY_COMMIT_SHA:
-        return None
-
     # For updates to existing branches, scan from remote to local
     return f'{remote_object_name}..{local_object_name}'
 

{cycode-3.12.3.dev3 → cycode-3.12.3.dev4}/pyproject.toml

@@ -21,7 +21,7 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
 ]
 dynamic = ["dependencies"]
-version = "3.12.3.dev3"
+version = "3.12.3.dev4"
 
 [project.scripts]
 cycode = "cycode.cli.app:app"

cycode-3.12.3.dev3/cycode/__init__.py

@@ -1 +0,0 @@
-__version__ = '3.12.3.dev3'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag