cycode 3.22.1.dev10__tar.gz → 3.22.2.dev1__tar.gz

{cycode-3.22.1.dev10 → cycode-3.22.2.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.22.1.dev10
+Version: 3.22.2.dev1
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE
@@ -31,6 +31,7 @@ Requires-Dist: patch-ng (==1.19.1)
 Requires-Dist: pathvalidate (>=3.3.1,<4.0.0)
 Requires-Dist: pydantic (>=2.11.5,<3.0.0)
 Requires-Dist: pyjwt (>=2.8.0,<3.0)
+Requires-Dist: pywin32 (>=312,<313) ; python_version >= "3.10" and sys_platform == "win32"
 Requires-Dist: pyyaml (>=6.0,<7.0)
 Requires-Dist: requests (>=2.32.4,<3.0)
 Requires-Dist: rich (>=15.0.0,<16.0.0)

{cycode-3.22.1.dev10 → cycode-3.22.2.dev1}/cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.22.1.dev10'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.22.2.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

{cycode-3.22.1.dev10 → cycode-3.22.2.dev1}/cycode/cli/utils/host_info.py

@@ -4,17 +4,28 @@ import platform
 import re
 import socket
 import subprocess
+import sys
 import tempfile
 from pathlib import Path
-from typing import Optional
+from typing import Any, Optional
 
+from cycode.cli.consts import CYCODE_CONFIGURATION_DIRECTORY
 from cycode.logger import get_logger
 
 logger = get_logger('HOST INFO')
 
+pythoncom: Optional[Any] = None
+win32com_client: Optional[Any] = None
+if sys.platform == 'win32':
+    try:
+        import pythoncom
+        import win32com.client as win32com_client
+    except ImportError as e:
+        logger.debug('pywin32 is unavailable', exc_info=e)
+
 _SUBPROCESS_TIMEOUT_SEC = 5
 
-_SERIAL_NUMBER_CACHE_FILE_NAME = '.cycode-device-serial'
+_DEVICE_ID_CACHE_FILE_NAME = 'device-id'
 
 _PLATFORM_NAMES = {'Darwin': 'macOS', 'Windows': 'Windows', 'Linux': 'Linux'}
 
@@ -123,8 +134,7 @@ def _resolve_serial_number() -> Optional[str]:
 
 
 def _serial_number_cache_path() -> Path:
-    # The username suffix avoids collisions on OSes with a shared temp dir
-    return Path(tempfile.gettempdir()) / f'.cycode-device-serial-{getpass.getuser()}'
+    return Path.home() / CYCODE_CONFIGURATION_DIRECTORY / _DEVICE_ID_CACHE_FILE_NAME
 
 
 def _read_serial_number_cache() -> Optional[str]:
@@ -137,14 +147,13 @@ def _read_serial_number_cache() -> Optional[str]:
 def _write_serial_number_cache(serial: str) -> None:
     try:
         cache_path = _serial_number_cache_path()
+        cache_path.parent.mkdir(parents=True, exist_ok=True)
 
-        # The serial identifies the machine, and the temp dir is shared, so the cache is created
-        # readable by its owner alone (what mkstemp does) and moved into place atomically - a hook
-        # racing another one never reads a half-written cache, and the rename can't be redirected
-        # by a symlink planted at the destination the way an in-place write could.
-        file_descriptor, temp_path = tempfile.mkstemp(
-            dir=cache_path.parent, prefix=f'{_SERIAL_NUMBER_CACHE_FILE_NAME}.'
-        )
+        # The serial identifies the machine, so the cache is created readable by its owner alone
+        # (what mkstemp does) and moved into place atomically - a hook racing another one never
+        # reads a half-written cache, and the rename can't be redirected by a symlink planted at
+        # the destination the way an in-place write could.
+        file_descriptor, temp_path = tempfile.mkstemp(dir=cache_path.parent, prefix=f'{_DEVICE_ID_CACHE_FILE_NAME}.')
         try:
             with os.fdopen(file_descriptor, 'w', encoding='utf-8') as temp_file:
                 temp_file.write(serial)
@@ -165,15 +174,17 @@ def _get_macos_serial_number() -> Optional[str]:
 
 
 def _get_windows_serial_number() -> Optional[str]:
-    import pythoncom  # from pywin32
-    import win32com.client  # from pywin32
+    """Read the OEM serial over WMI."""
+    if pythoncom is None or win32com_client is None:
+        return None
 
     pythoncom.CoInitialize()
     try:
-        wmi_service = win32com.client.GetObject('winmgmts:')
+        wmi_service = win32com_client.GetObject('winmgmts:')
         for bios in wmi_service.InstancesOf('Win32_BIOS'):
             serial = bios.SerialNumber
-            return serial.strip() if serial else None
+            # whitespace-only is what whiteboxes and some hypervisors report
+            return serial.strip() or None if serial else None
     finally:
         pythoncom.CoUninitialize()
     return None

{cycode-3.22.1.dev10 → cycode-3.22.2.dev1}/pyproject.toml

@@ -21,7 +21,7 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
 ]
 dynamic = ["dependencies"]
-version = "3.22.1.dev10"
+version = "3.22.2.dev1"
 
 [project.scripts]
 cycode = "cycode.cli.app:app"
@@ -50,6 +50,7 @@ typer = "^0.15.3"
 tenacity = ">=9.1.2,<9.2.0"
 mcp = { version = ">=1.28.1,<2.0.0", markers = "python_version >= '3.10'" }
 truststore = { version = ">=0.10.4,<0.11.0", markers = "python_version >= '3.10'" }
+pywin32 = { version = ">=312,<313", markers = "python_version >= '3.10' and sys_platform == 'win32'"}
 pydantic = ">=2.11.5,<3.0.0"
 pathvalidate = ">=3.3.1,<4.0.0"
 tomli-w = ">=1.0.0,<2.0.0"