cycode 3.2.2.dev1__py3-none-any.whl → 3.2.2.dev2__py3-none-any.whl

cycode/__init__.py

@@ -1 +1 @@
-__version__ = '3.2.2.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.2.2.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/apps/scan/scan_command.py

@@ -88,6 +88,16 @@ def scan_command(
             rich_help_panel=_SCA_RICH_HELP_PANEL,
         ),
     ] = False,
+    maven_settings_file: Annotated[
+        Optional[Path],
+        typer.Option(
+            '--maven-settings-file',
+            show_default=False,
+            help='When specified, Cycode will use this settings.xml file when building the maven dependency tree.',
+            dir_okay=False,
+            rich_help_panel=_SCA_RICH_HELP_PANEL,
+        ),
+    ] = None,
     export_type: Annotated[
         ExportTypeOption,
         typer.Option(
@@ -143,6 +153,7 @@ def scan_command(
     ctx.obj['sync'] = sync
     ctx.obj['severity_threshold'] = severity_threshold
     ctx.obj['monitor'] = monitor
+    ctx.obj['maven_settings_file'] = maven_settings_file
     ctx.obj['report'] = report
 
     scan_client = get_scan_cycode_client(ctx)

cycode/cli/files_collector/sca/maven/restore_maven_dependencies.py

@@ -24,7 +24,12 @@ class RestoreMavenDependencies(BaseRestoreDependencies):
         return path.basename(document.path).split('/')[-1] == BUILD_MAVEN_FILE_NAME
 
     def get_commands(self, manifest_file_path: str) -> list[list[str]]:
-        return [['mvn', 'org.cyclonedx:cyclonedx-maven-plugin:2.7.4:makeAggregateBom', '-f', manifest_file_path]]
+        command = ['mvn', 'org.cyclonedx:cyclonedx-maven-plugin:2.7.4:makeAggregateBom', '-f', manifest_file_path]
+
+        maven_settings_file = self.ctx.obj.get('maven_settings_file')
+        if maven_settings_file:
+            command += ['-s', str(maven_settings_file)]
+        return [command]
 
     def get_lock_file_name(self) -> str:
         return join_paths('target', MAVEN_CYCLONE_DEP_TREE_FILE_NAME)
@@ -46,7 +51,7 @@ class RestoreMavenDependencies(BaseRestoreDependencies):
 
     def restore_from_secondary_command(self, document: Document, manifest_file_path: str) -> Optional[Document]:
         restore_content = execute_commands(
-            commands=create_secondary_restore_commands(manifest_file_path),
+            commands=self.create_secondary_restore_commands(manifest_file_path),
             timeout=self.command_timeout,
             working_directory=self.get_working_directory(document),
         )
@@ -61,10 +66,8 @@ class RestoreMavenDependencies(BaseRestoreDependencies):
             absolute_path=restore_file_path,
         )
 
-
-def create_secondary_restore_commands(manifest_file_path: str) -> list[list[str]]:
-    return [
-        [
+    def create_secondary_restore_commands(self, manifest_file_path: str) -> list[list[str]]:
+        command = [
             'mvn',
             'dependency:tree',
             '-B',
@@ -73,4 +76,9 @@ def create_secondary_restore_commands(manifest_file_path: str) -> list[list[str]
             manifest_file_path,
             f'-DoutputFile={MAVEN_DEP_TREE_FILE_NAME}',
         ]
-    ]
+
+        maven_settings_file = self.ctx.obj.get('maven_settings_file')
+        if maven_settings_file:
+            command += ['-s', str(maven_settings_file)]
+
+        return [command]

{cycode-3.2.2.dev1.dist-info → cycode-3.2.2.dev2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cycode
-Version: 3.2.2.dev1
+Version: 3.2.2.dev2
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 Home-page: https://github.com/cycodehq/cycode-cli
 License: MIT

{cycode-3.2.2.dev1.dist-info → cycode-3.2.2.dev2.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cycode/__init__.py,sha256=mGxMhWE07_SZneLLsWntqMRC5KvqpIydzl8pr-YBt_Q,114
+cycode/__init__.py,sha256=4MPpi1i5Tw5r9Sac6u3Ee4ElIREFtQwum4ybbk9ojsc,114
 cycode/__main__.py,sha256=Z3bD5yrA7yPvAChcADQrqCaZd0ChGI1gdiwALwbWJ6U,104
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/app.py,sha256=UC5A5TKIvlxOYKERfJykN8apTT0VyMY5pUjRh_LM-dw,6098
@@ -50,7 +50,7 @@ cycode/cli/apps/scan/repository/repository_command.py,sha256=YwN8kut3PCw7ZYKIwPu
 cycode/cli/apps/scan/scan_ci/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/apps/scan/scan_ci/ci_integrations.py,sha256=3ZUv1uLsHC13KTNQ4erQKKDXAkmaSm5jow2Utwr4mCw,1634
 cycode/cli/apps/scan/scan_ci/scan_ci_command.py,sha256=-Eq1FCeO_7Y85oYhBnZurt_wz64WWSA8Zbbm1Y4qLJY,638
-cycode/cli/apps/scan/scan_command.py,sha256=moMPafFSbIe_K3IoJtQCRE22U8f5oiM1Sf3HOzFDv6Y,6588
+cycode/cli/apps/scan/scan_command.py,sha256=mpLdd4p-g85LIe-rUxUYpABFOFISplBUooT1ZZW-QPs,7015
 cycode/cli/apps/scan/scan_parameters.py,sha256=VWucE0PZ2nuSTaNrOpdm8WkX7dkJ7dpp8GkYCA0ub5Y,1484
 cycode/cli/apps/scan/scan_result.py,sha256=05RFtFgdKDi5_ekzWqRhxlRSu2JduBixm4JkgGhMcW8,8497
 cycode/cli/apps/status/__init__.py,sha256=uxfkEBafO7Da0mPc1fZhwoO0RTtyXp2a5T3LJTZxubU,371
@@ -84,7 +84,7 @@ cycode/cli/files_collector/sca/go/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeR
 cycode/cli/files_collector/sca/go/restore_go_dependencies.py,sha256=4gSgeTM5uflu3dnLRxNFoJjGIP1mb9zLINfk2f5zIas,1756
 cycode/cli/files_collector/sca/maven/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/files_collector/sca/maven/restore_gradle_dependencies.py,sha256=xscXgAQc0gTUGvMMFfAB0vKGxwRd6UFLkAdsA2zxpxA,2663
-cycode/cli/files_collector/sca/maven/restore_maven_dependencies.py,sha256=O-0SEx5auT8RJXgNB2A--5TtHgDV-6hk3-nZIFWpEuA,2853
+cycode/cli/files_collector/sca/maven/restore_maven_dependencies.py,sha256=fd3IVHc-E5yoFwAnCV8CGHWh53X9PJtAR2miSXj96-s,3228
 cycode/cli/files_collector/sca/npm/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/files_collector/sca/npm/restore_npm_dependencies.py,sha256=jcubIAgaEKyO83b6qg_Wx8ITYEyx252uyWDrNmRYoi0,1277
 cycode/cli/files_collector/sca/nuget/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -157,8 +157,8 @@ cycode/cyclient/report_client.py,sha256=h12pz3vWCwDF73BhqFX7iDSxBgQDFwkiGh3hmul2
 cycode/cyclient/scan_client.py,sha256=nQJyt34Bne8UAQNj9OHSgvoCfI1EJFKNaEeeGPnrKcg,12471
 cycode/cyclient/scan_config_base.py,sha256=mXsPZGYCtp85rv5GIige40yQZXuRcEKUW-VQJ0vgFzk,1201
 cycode/logger.py,sha256=xAzpkWLZhixO4egRcYn4HXM9lIfx5wHdpkHxNc5jrX8,2225
-cycode-3.2.2.dev1.dist-info/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-3.2.2.dev1.dist-info/METADATA,sha256=wS1b1wtoOJXN2gOOJaYuJN8S4mzIPwfxIu_wbVP7IYI,69727
-cycode-3.2.2.dev1.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
-cycode-3.2.2.dev1.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
-cycode-3.2.2.dev1.dist-info/RECORD,,
+cycode-3.2.2.dev2.dist-info/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-3.2.2.dev2.dist-info/METADATA,sha256=kqrPt4hosc2WaWkL5VonN2UTYDpRfoILx8xlxJl2RE0,69727
+cycode-3.2.2.dev2.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
+cycode-3.2.2.dev2.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
+cycode-3.2.2.dev2.dist-info/RECORD,,