cycode 3.15.2.dev2__tar.gz → 3.15.3__tar.gz

cycode-3.15.2.dev2/README.md → cycode-3.15.3/PKG-INFO

@@ -1,3 +1,44 @@
+Metadata-Version: 2.4
+Name: cycode
+Version: 3.15.3
+Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
+License-Expression: MIT
+License-File: LICENCE
+Keywords: secret-scan,cycode,devops,token,secret,security,code
+Author: Cycode
+Author-email: support@cycode.com
+Requires-Python: >=3.9
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Natural Language :: English
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: arrow (>=1.0.0,<1.5.0)
+Requires-Dist: click (>=8.1.0,<8.2.0)
+Requires-Dist: colorama (>=0.4.3,<0.5.0)
+Requires-Dist: gitpython (>=3.1.50,<3.2.0)
+Requires-Dist: marshmallow (>=3.15.0,<4.0.0)
+Requires-Dist: mcp (>=1.9.3,<2.0.0) ; python_version >= "3.10"
+Requires-Dist: patch-ng (==1.19.1)
+Requires-Dist: pathvalidate (>=3.3.1,<4.0.0)
+Requires-Dist: pydantic (>=2.11.5,<3.0.0)
+Requires-Dist: pyjwt (>=2.8.0,<3.0)
+Requires-Dist: pyyaml (>=6.0,<7.0)
+Requires-Dist: requests (>=2.32.4,<3.0)
+Requires-Dist: rich (>=13.9.4,<14)
+Requires-Dist: tenacity (>=9.0.0,<9.1.0)
+Requires-Dist: typer (>=0.15.3,<0.16.0)
+Requires-Dist: urllib3 (>=2.4.0,<3.0.0)
+Project-URL: Repository, https://github.com/cycodehq/cycode-cli
+Description-Content-Type: text/markdown
+
 # Cycode CLI User Guide
 
 The Cycode Command Line Interface (CLI) is an application you can install locally to scan your repositories for secrets, infrastructure as code misconfigurations, software composition analysis vulnerabilities, and static application security testing issues.
@@ -21,6 +62,7 @@ This guide walks you through both installation and usage.
     2. [Available Options](#available-options)
     3. [MCP Tools](#mcp-tools)
     4. [Usage Examples](#usage-examples)
+    5. [Advanced Configuration](#advanced-configuration)
 5. [Platform Command](#platform-command-beta)
     1. [Discovering Commands](#discovering-commands)
     2. [Examples](#platform-examples)
@@ -559,6 +601,38 @@ cycode mcp -t streamable-http -H 127.0.0.2 -p 9000 &
 }
 ```
 
+### Advanced Configuration 
+##### Custom Certificates and Timeouts (Proxy Environments)
+
+If your organization uses a corporate proxy or a custom CA bundle for HTTPS inspection, you need to tell Cycode CLI (and the underlying Python TLS stack) where to find the trusted certificate bundle. You can also increase the MCP tool call timeout if scans are being cut short.
+
+| Environment Variable | Description |
+|----------------------|-------------|
+| `REQUESTS_CA_BUNDLE` | Path to a custom CA bundle file (`.pem` or `.crt`). Used by the `requests` library for all HTTPS calls made by Cycode CLI. |
+| `SSL_CERT_FILE`      | Path to a custom CA bundle file. Used by Python's low-level `ssl` module. Set this alongside `REQUESTS_CA_BUNDLE` for full coverage. |
+| `MCP_TOOL_TIMEOUT`   | Timeout (in seconds) that MCP clients such as Claude and GitHub Copilot wait for a tool call to complete. Increase this if long-running scans are being cut off before they finish. |
+
+> [!TIP]
+> Set both `REQUESTS_CA_BUNDLE` and `SSL_CERT_FILE` to the same CA bundle path. `REQUESTS_CA_BUNDLE` covers the HTTP layer; `SSL_CERT_FILE` covers the lower-level TLS layer. Using only one may still cause certificate errors in some environments.
+
+Example `mcp.json` configuration with custom certificates and a longer timeout:
+
+```json
+{
+  "mcpServers": {
+    "cycode": {
+      "command": "cycode",
+      "args": ["mcp"],
+      "env": {
+        "REQUESTS_CA_BUNDLE": "/path/to/your/corporate-ca-bundle.pem",
+        "SSL_CERT_FILE": "/path/to/your/corporate-ca-bundle.pem",
+        "MCP_TOOL_TIMEOUT": "1800"
+      }
+    }
+  }
+}
+```
+
 > [!NOTE]
 > The MCP server requires proper Cycode CLI authentication to function. Make sure you have authenticated using `cycode auth` or configured your credentials before starting the MCP server.
 
@@ -608,6 +682,8 @@ This information can be helpful when:
 - Identifying authentication problems
 - Debugging transport-specific issues
 
+### MCP Configuration
+
 
 # Platform Command \[BETA\]
 
@@ -1502,3 +1578,4 @@ To see the options available for a report, use this command:
 To see the options available for a specific type of report, enter:
 
 `cycode scan {{option}} --help`
+

cycode-3.15.2.dev2/PKG-INFO → cycode-3.15.3/README.md

@@ -1,44 +1,3 @@
-Metadata-Version: 2.4
-Name: cycode
-Version: 3.15.2.dev2
-Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
-License-Expression: MIT
-License-File: LICENCE
-Keywords: secret-scan,cycode,devops,token,secret,security,code
-Author: Cycode
-Author-email: support@cycode.com
-Requires-Python: >=3.9
-Classifier: Development Status :: 5 - Production/Stable
-Classifier: Environment :: Console
-Classifier: Natural Language :: English
-Classifier: Operating System :: OS Independent
-Classifier: Programming Language :: Python
-Classifier: Programming Language :: Python :: 3 :: Only
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
-Classifier: Programming Language :: Python :: 3.14
-Requires-Dist: arrow (>=1.0.0,<1.5.0)
-Requires-Dist: click (>=8.1.0,<8.2.0)
-Requires-Dist: colorama (>=0.4.3,<0.5.0)
-Requires-Dist: gitpython (>=3.1.47,<3.2.0)
-Requires-Dist: marshmallow (>=3.15.0,<4.0.0)
-Requires-Dist: mcp (>=1.9.3,<2.0.0) ; python_version >= "3.10"
-Requires-Dist: patch-ng (==1.19.0)
-Requires-Dist: pathvalidate (>=3.3.1,<4.0.0)
-Requires-Dist: pydantic (>=2.11.5,<3.0.0)
-Requires-Dist: pyjwt (>=2.8.0,<3.0)
-Requires-Dist: pyyaml (>=6.0,<7.0)
-Requires-Dist: requests (>=2.32.4,<3.0)
-Requires-Dist: rich (>=13.9.4,<14)
-Requires-Dist: tenacity (>=9.0.0,<9.1.0)
-Requires-Dist: typer (>=0.15.3,<0.16.0)
-Requires-Dist: urllib3 (>=2.4.0,<3.0.0)
-Project-URL: Repository, https://github.com/cycodehq/cycode-cli
-Description-Content-Type: text/markdown
-
 # Cycode CLI User Guide
 
 The Cycode Command Line Interface (CLI) is an application you can install locally to scan your repositories for secrets, infrastructure as code misconfigurations, software composition analysis vulnerabilities, and static application security testing issues.
@@ -62,6 +21,7 @@ This guide walks you through both installation and usage.
     2. [Available Options](#available-options)
     3. [MCP Tools](#mcp-tools)
     4. [Usage Examples](#usage-examples)
+    5. [Advanced Configuration](#advanced-configuration)
 5. [Platform Command](#platform-command-beta)
     1. [Discovering Commands](#discovering-commands)
     2. [Examples](#platform-examples)
@@ -600,6 +560,38 @@ cycode mcp -t streamable-http -H 127.0.0.2 -p 9000 &
 }
 ```
 
+### Advanced Configuration 
+##### Custom Certificates and Timeouts (Proxy Environments)
+
+If your organization uses a corporate proxy or a custom CA bundle for HTTPS inspection, you need to tell Cycode CLI (and the underlying Python TLS stack) where to find the trusted certificate bundle. You can also increase the MCP tool call timeout if scans are being cut short.
+
+| Environment Variable | Description |
+|----------------------|-------------|
+| `REQUESTS_CA_BUNDLE` | Path to a custom CA bundle file (`.pem` or `.crt`). Used by the `requests` library for all HTTPS calls made by Cycode CLI. |
+| `SSL_CERT_FILE`      | Path to a custom CA bundle file. Used by Python's low-level `ssl` module. Set this alongside `REQUESTS_CA_BUNDLE` for full coverage. |
+| `MCP_TOOL_TIMEOUT`   | Timeout (in seconds) that MCP clients such as Claude and GitHub Copilot wait for a tool call to complete. Increase this if long-running scans are being cut off before they finish. |
+
+> [!TIP]
+> Set both `REQUESTS_CA_BUNDLE` and `SSL_CERT_FILE` to the same CA bundle path. `REQUESTS_CA_BUNDLE` covers the HTTP layer; `SSL_CERT_FILE` covers the lower-level TLS layer. Using only one may still cause certificate errors in some environments.
+
+Example `mcp.json` configuration with custom certificates and a longer timeout:
+
+```json
+{
+  "mcpServers": {
+    "cycode": {
+      "command": "cycode",
+      "args": ["mcp"],
+      "env": {
+        "REQUESTS_CA_BUNDLE": "/path/to/your/corporate-ca-bundle.pem",
+        "SSL_CERT_FILE": "/path/to/your/corporate-ca-bundle.pem",
+        "MCP_TOOL_TIMEOUT": "1800"
+      }
+    }
+  }
+}
+```
+
 > [!NOTE]
 > The MCP server requires proper Cycode CLI authentication to function. Make sure you have authenticated using `cycode auth` or configured your credentials before starting the MCP server.
 
@@ -649,6 +641,8 @@ This information can be helpful when:
 - Identifying authentication problems
 - Debugging transport-specific issues
 
+### MCP Configuration
+
 
 # Platform Command \[BETA\]
 
@@ -1543,4 +1537,3 @@ To see the options available for a report, use this command:
 To see the options available for a specific type of report, enter:
 
 `cycode scan {{option}} --help`
-

cycode-3.15.3/cycode/__init__.py

@@ -0,0 +1 @@
+__version__ = '3.15.3'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

{cycode-3.15.2.dev2 → cycode-3.15.3}/cycode/cli/files_collector/sca/maven/restore_maven_dependencies.py

@@ -1,3 +1,4 @@
+import json
 from os import path
 from pathlib import Path
 from typing import Optional
@@ -20,6 +21,16 @@ MAVEN_CYCLONE_DEP_TREE_FILE_NAME = 'bom.json'
 MAVEN_DEP_TREE_FILE_NAME = 'bcde.mvndeps'
 
 
+def _has_dependency_graph(bom_content: Optional[str]) -> bool:
+    try:
+        if not bom_content:
+            return False
+        bom = json.loads(bom_content)
+        return any(dep.get('dependsOn') for dep in bom.get('dependencies', []))
+    except Exception:
+        return False
+
+
 class RestoreMavenDependencies(BaseRestoreDependencies):
     def __init__(self, ctx: typer.Context, is_git_diff: bool, command_timeout: int) -> None:
         super().__init__(ctx, is_git_diff, command_timeout)
@@ -46,8 +57,16 @@ class RestoreMavenDependencies(BaseRestoreDependencies):
         if document.content is None:
             return self.restore_from_secondary_command(document, manifest_file_path)
 
-        # super() reads the content and cleans up any generated file; no re-read needed
-        return super().try_restore_dependencies(document)
+        restore_dependencies_document = super().try_restore_dependencies(document)
+        if restore_dependencies_document is None:
+            return None
+
+        if not _has_dependency_graph(restore_dependencies_document.content):
+            fallback = self.restore_from_secondary_command(document, manifest_file_path)
+            if fallback is not None and fallback.content is not None:
+                return fallback
+
+        return restore_dependencies_document
 
     def restore_from_secondary_command(self, document: Document, manifest_file_path: str) -> Optional[Document]:
         restore_content = execute_commands(

{cycode-3.15.2.dev2 → cycode-3.15.3}/pyproject.toml

@@ -21,7 +21,7 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
 ]
 dynamic = ["dependencies"]
-version = "3.15.2.dev2"
+version = "3.15.3"
 
 [project.scripts]
 cycode = "cycode.cli.app:app"
@@ -37,13 +37,13 @@ click = ">=8.1.0,<8.2.0"
 colorama = ">=0.4.3,<0.5.0"
 pyyaml = ">=6.0,<7.0"
 marshmallow = ">=3.15.0,<4.0.0"
-gitpython = ">=3.1.47,<3.2.0"
+gitpython = ">=3.1.50,<3.2.0"
 arrow = ">=1.0.0,<1.5.0"
 requests = ">=2.32.4,<3.0"
 urllib3 = ">=2.4.0,<3.0.0"
 pyjwt = ">=2.8.0,<3.0"
 rich = ">=13.9.4, <14"
-patch-ng = "1.19.0"
+patch-ng = "1.19.1"
 typer = "^0.15.3"
 tenacity = ">=9.0.0,<9.1.0"
 mcp = { version = ">=1.9.3,<2.0.0", markers = "python_version >= '3.10'" }
@@ -60,7 +60,7 @@ pyfakefs = ">=5.7.2,<5.11.0"
 
 [tool.poetry.group.executable.dependencies]
 pyinstaller = {version=">=6.0.0,<7.0.0", python=">=3.9,<3.15"}
-dunamai = ">=1.18.0,<1.27.0"
+dunamai = ">=1.26.1,<1.27.0"
 
 [tool.poetry.group.dev.dependencies]
 ruff = "0.11.7"

cycode-3.15.2.dev2/cycode/__init__.py

@@ -1 +0,0 @@
-__version__ = '3.15.2.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag