cycode 3.17.2.dev1__tar.gz → 3.17.3.dev1__tar.gz

{cycode-3.17.2.dev1 → cycode-3.17.3.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.17.2.dev1
+Version: 3.17.3.dev1
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE

{cycode-3.17.2.dev1 → cycode-3.17.3.dev1}/cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.17.2.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.17.3.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

{cycode-3.17.2.dev1 → cycode-3.17.3.dev1}/cycode/cli/consts.py

@@ -222,13 +222,15 @@ EXCLUSIONS_BY_CVE_SECTION_NAME = 'cves'
 FILE_MAX_SIZE_LIMIT_IN_BYTES = 5000000
 
 PRESIGNED_LINK_UPLOADED_ZIP_MAX_SIZE_LIMIT_IN_BYTES = 5 * 1024 * 1024 * 1024  # 5 GB (S3 presigned POST limit)
-PRESIGNED_UPLOAD_SCAN_TYPES = {SAST_SCAN_TYPE, SECRET_SCAN_TYPE}
+PRESIGNED_UPLOAD_SCAN_TYPES = {SAST_SCAN_TYPE}
+# Secret scans use the previous (batched / API-upload) flow by default. The presigned S3 async flow is
+# opt-in via the SECRET_SCAN_ASYNC_ENV_VAR_NAME env var; see should_use_presigned_upload.
+SECRET_SCAN_ASYNC_ENV_VAR_NAME = 'CYCODE_SECRET_SCAN_ASYNC'
 
 DEFAULT_ZIP_MAX_SIZE_LIMIT_IN_BYTES = 20 * 1024 * 1024
 ZIP_MAX_SIZE_LIMIT_IN_BYTES = {
     SCA_SCAN_TYPE: 200 * 1024 * 1024,
     SAST_SCAN_TYPE: PRESIGNED_LINK_UPLOADED_ZIP_MAX_SIZE_LIMIT_IN_BYTES,
-    SECRET_SCAN_TYPE: PRESIGNED_LINK_UPLOADED_ZIP_MAX_SIZE_LIMIT_IN_BYTES,
 }
 
 # scan in batches

{cycode-3.17.2.dev1 → cycode-3.17.3.dev1}/cycode/cli/files_collector/zip_documents.py

@@ -6,13 +6,17 @@ from cycode.cli import consts
 from cycode.cli.exceptions import custom_exceptions
 from cycode.cli.files_collector.models.in_memory_zip import InMemoryZip
 from cycode.cli.models import Document
+from cycode.cli.utils.scan_utils import should_use_presigned_upload
 from cycode.logger import get_logger
 
 logger = get_logger('ZIP')
 
 
 def _validate_zip_file_size(scan_type: str, zip_file_size: int) -> None:
-    max_size_limit = consts.ZIP_MAX_SIZE_LIMIT_IN_BYTES.get(scan_type, consts.DEFAULT_ZIP_MAX_SIZE_LIMIT_IN_BYTES)
+    if should_use_presigned_upload(scan_type):
+        max_size_limit = consts.PRESIGNED_LINK_UPLOADED_ZIP_MAX_SIZE_LIMIT_IN_BYTES
+    else:
+        max_size_limit = consts.ZIP_MAX_SIZE_LIMIT_IN_BYTES.get(scan_type, consts.DEFAULT_ZIP_MAX_SIZE_LIMIT_IN_BYTES)
     if zip_file_size > max_size_limit:
         raise custom_exceptions.ZipTooLargeError(max_size_limit)
 

{cycode-3.17.2.dev1 → cycode-3.17.3.dev1}/cycode/cli/utils/scan_utils.py

@@ -7,6 +7,7 @@ import typer
 
 from cycode.cli import consts
 from cycode.cli.cli_types import SeverityOption
+from cycode.config import parse_bool
 
 if TYPE_CHECKING:
     from cycode.cli.models import LocalScanResult
@@ -33,7 +34,11 @@ def is_cycodeignore_allowed_by_scan_config(ctx: typer.Context) -> bool:
 
 
 def should_use_presigned_upload(scan_type: str) -> bool:
-    return scan_type in consts.PRESIGNED_UPLOAD_SCAN_TYPES
+    if scan_type in consts.PRESIGNED_UPLOAD_SCAN_TYPES:
+        return True
+    if scan_type == consts.SECRET_SCAN_TYPE:
+        return parse_bool(os.getenv(consts.SECRET_SCAN_ASYNC_ENV_VAR_NAME))
+    return False
 
 
 def generate_unique_scan_id() -> UUID:

{cycode-3.17.2.dev1 → cycode-3.17.3.dev1}/cycode/config.py

@@ -19,11 +19,18 @@ def get_val_as_string(key: str) -> str:
     return configuration.get(key)
 
 
+_TRUTHY_STRING_VALUES = {'true', '1', 'yes', 'y', 'on', 'enabled'}
+
+
+def parse_bool(value: Optional[str]) -> bool:
+    return value is not None and value.lower() in _TRUTHY_STRING_VALUES
+
+
 def get_val_as_bool(key: str, default: bool = False) -> bool:
     if key not in configuration:
         return default
 
-    return configuration[key].lower() in {'true', '1', 'yes', 'y', 'on', 'enabled'}
+    return parse_bool(configuration[key])
 
 
 def get_val_as_int(key: str) -> Optional[int]:

{cycode-3.17.2.dev1 → cycode-3.17.3.dev1}/pyproject.toml

@@ -21,7 +21,7 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
 ]
 dynamic = ["dependencies"]
-version = "3.17.2.dev1"
+version = "3.17.3.dev1"
 
 [project.scripts]
 cycode = "cycode.cli.app:app"