git-graphable 0.5.0__tar.gz → 0.7.0__tar.gz

{git_graphable-0.5.0 → git_graphable-0.7.0}/.github/workflows/ci.yml

@@ -34,8 +34,21 @@ jobs:
       - name: Run checks
         run: just check
 
+      - name: Generate Coverage Badge
+        run: |
+          if [ -f "htmlcov/index.html" ]; then
+            COVERAGE=$(grep -oP 'pc_cov">\d+%' htmlcov/index.html | head -1 | grep -oP '\d+')
+            echo "{\"schemaVersion\": 1, \"label\": \"coverage\", \"message\": \"$COVERAGE%\", \"color\": \"brightgreen\"}" > coverage.json
+          fi
+
       - name: Git Graph Reports
         uses: ./
         with:
           production_branch: 'main'
           output_dir: 'git-graph-reports'
+
+      - name: Copy Coverage to Reports
+        run: |
+          if [ -f "coverage.json" ]; then
+            cp coverage.json git-graph-reports/
+          fi

git_graphable-0.7.0/.github/workflows/pages.yml

@@ -0,0 +1,65 @@
+name: Deploy Demos to Pages
+
+on:
+  push:
+    branches: [ main ]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+jobs:
+  deploy:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Install dependencies
+        run: uv sync --all-extras
+
+      - name: Install just
+        uses: extractions/setup-just@v3
+
+      - name: Generate Demos
+        run: uv run python examples/publish_demos.py
+
+      - name: Generate Coverage Badge
+        run: |
+          just coverage
+          if [ -f "htmlcov/index.html" ]; then
+            COVERAGE=$(grep -oP 'pc_cov">\d+%' htmlcov/index.html | head -1 | grep -oP '\d+')
+            echo "{\"schemaVersion\": 1, \"label\": \"coverage\", \"message\": \"$COVERAGE%\", \"color\": \"brightgreen\"}" > demo-site/coverage.json
+          fi
+
+      - name: Generate Hygiene Badge
+        run: |
+          uv run git-graphable analyze . --bare --hygiene-output hygiene.json --output -
+          SCORE=$(grep -oP '"score": \d+' hygiene.json | grep -oP '\d+')
+          GRADE=$(grep -oP '"grade": "[^"]+"' hygiene.json | cut -d'"' -f4)
+          COLOR=$(grep -oP '"color": "[^"]+"' hygiene.json | cut -d'"' -f4)
+          echo "{\"schemaVersion\": 1, \"label\": \"hygiene\", \"message\": \"$SCORE% ($GRADE)\", \"color\": \"$COLOR\"}" > demo-site/hygiene_badge.json
+
+      - name: Setup Pages
+        uses: actions/configure-pages@v4
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: 'demo-site'
+
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4

{git_graphable-0.5.0 → git_graphable-0.7.0}/.gitignore

@@ -39,6 +39,7 @@ pip-delete-this-directory.txt
 # Unit test / coverage reports
 htmlcov/
 htmlrep/
+report_output/
 .pytest_worker_jsons/
 .tox/
 .nox/
@@ -134,3 +135,4 @@ cython_debug/
 demo-site/
 examples/repos/
 examples/assets/
+graph.html

git_graphable-0.7.0/CHANGELOG.md

@@ -0,0 +1,110 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [0.7.0] - 2026-03-07
+
+### Added
+- **Security Trust Enforcement**: Custom scripts (`issue_script`, `pr_script`) and sensitive API integrations (Jira) are now disabled by default for untrusted local configurations. Users must explicitly use `--trust` to enable these features for repository-local configs.
+- **Actionable Hygiene Intelligence**: The hygiene summary now provides specific details (commit hashes, branch names) for every deduction, allowing users to precisely identify and fix hygiene issues.
+- **Selective Hygiene Ignore**: Introduced a SHA-based ignore mechanism to suppress specific hygiene rules. Supported via `.git-graphable.toml` (or `pyproject.toml`) and the `--ignore` CLI flag.
+- **Remediation Guidelines**: Added a comprehensive [HYGIENE.md](HYGIENE.md) guide with actionable Git commands to help users improve their project's hygiene score.
+
+### Fixed
+- **Critical Command Injection Mitigation**: Fixed a vulnerability in `ScriptIssueEngine` where malicious `issue_id` strings could inject shell commands. Switched to `sh -c` with positional arguments for safe execution.
+- **Credential Theft Prevention**: Prevented potential Jira token exposure to untrusted URLs by enforcing the trust model for Jira configurations.
+- **XSS Mitigation**: Fixed a medium-severity XSS vulnerability in interactive HTML export legend generation by properly escaping repository-derived data.
+
+## [0.6.0] - 2026-03-06
+
+### Added
+- **Native GitLab Support**: Added support for GitLab Merge Requests and Issues using the `glab` CLI.
+- **Pull Request Provider Abstraction**: Introduced a new `PullRequestProvider` interface, decoupling PR status logic from GitHub.
+    - Added `GitHubPullRequestProvider` (default) using the `gh` CLI.
+    - Added `ScriptPullRequestProvider` for custom script-based PR status lookups.
+- **Configuration Trust Mechanism**: Introduced a security layer for local repository configurations.
+    - Added `--trust` CLI flag to explicitly trust automatically loaded `.git-graphable.toml` or `pyproject.toml` files.
+    - Users are now warned when executing custom scripts from untrusted configurations.
+- **Dynamic Project Badges**:
+    - Added automated generation of Shields.io-compatible JSON badges for **Git Hygiene** and **Code Coverage**.
+    - Updated `README.md` to display live status from GitHub Pages.
+    - Added `--hygiene-output <path>` to CLI for machine-readable (JSON) hygiene summaries.
+- **Improved Automatic Visualization**:
+    - Restored the behavior of automatically opening a graph if no output path is provided.
+    - Changed default automatic visualization export format from SVG to **PNG** for broader compatibility.
+- **Modular Architecture Refactor**: Substantially reorganized the codebase into specialized sub-packages for better maintainability:
+    - `src/git_graphable/prs/`: Modular PR providers.
+    - `src/git_graphable/issues/`: Modular issue tracker engines.
+    - `src/git_graphable/highlights/`: Specialized highlighting logic (visual, hygiene, external).
+    - `src/git_graphable/styling/`: Specialized styling logic per visualization engine.
+- **Enhanced Issue Scripting**: `ScriptIssueEngine` now supports robust JSON output from scripts (with legacy CSV fallback).
+- **Project Governance**: Added official **MIT License** to the repository.
+- **Reorganized Test Suite**: Refactored tests into a modular structure mirroring the source code, including a global `conftest.py` for shared fixtures.
+
+### Fixed
+- **Comprehensive Security Hardening**: 
+    - Protected against argument injection in `git clone`, `glab`, `gh`, and `git rev-list` commands using the `--` separator.
+    - Resolved potential path traversal and SSRF risks in Jira issue lookups by properly URL-encoding IDs.
+    - Corrected argument passing logic for `git log` limits.
+- **Mermaid Parser Reliability**: Fixed parsing errors in Mermaid graphs by substituting sensitive characters (brackets and parentheses) with visually similar full-width Unicode characters.
+- **CI Stability**: Fixed CI failures in GitHub Pages deployment by preventing automatic visualization triggers during badge generation.
+- **Naming Collisions**: Resolved pytest module collision issues by adding `__init__.py` files to test directories.
+- **Code Maintenance**: Updated `.gitignore` to prevent tracking of build artifacts and coverage data.
+
+
+## [0.5.0] - 2026-03-06
+
+### Added
+- **Interactive Demos**: Implemented `examples/publish_demos.py` to generate and host live HTML demos via GitHub Pages.
+- **Marketplace Preparation**: Moved `action.yml` to the root directory for GitHub Marketplace publishing and updated related documentation and CI workflows.
+
+### Fixed
+- **Squash Merge Detection**: Resolved a `KeyError` and `CycleError` in the logical merge visualization for squashed pull requests when local branch tips were present.
+
+## [0.4.0] - 2026-03-05
+
+### Added
+- **Interactive HTML Viewer**: New `--engine html` output that generates a self-contained interactive graph using Cytoscape.js.
+    - Includes searchable nodes and a details sidebar with live highlight toggling.
+    - Preserves all visual themes and highlighting styles.
+    - Lightweight and portable with zero local dependencies.
+- **Performance Optimizations**:
+    - **Parallel Log Parsing**: Parallelized `GitCommit` instantiation using `ProcessPoolExecutor` for large repositories.
+    - **Parallel Hygiene Scoring**: Concurrent execution of hygiene checks using `ThreadPoolExecutor` for faster report generation.
+- **Modular CLI Architecture**: 
+    - Split into `rich_cli` (Typer/Rich) and `bare_cli` (Argparse) for better environment support.
+    - Intelligent switcher logic in `cli.py` handles optional dependencies and fallbacks.
+- **New `init` Command**: Easily initialize a default `.git-graphable.toml` configuration file.
+- **Reusable GitHub Action**: Added a composite action in `.github/actions/git-graphable/` for automated reporting.
+- **Robust Distance/Divergence Highlights**: Enhanced visualization of branch distance and divergence with clearer legend labels.
+- **Remote URL Support**: Restored and improved ability to pass remote Git URLs (HTTPS/SSH) as the repository path.
+- **Comprehensive UI Testing**: Integrated Playwright for automated browser-based UI testing of the interactive graph.
+
+### Changed
+- **Command Renamed**: Renamed the primary command from `convert` to `analyze` for better semantic alignment.
+- **Decoupled Hygiene Scoring**: Scoring logic is now independent of visual highlighting options, allowing for more granular configuration.
+- **Template System Refactor**: Extracted large HTML/JS blocks into `src/git_graphable/templates.py` for improved maintainability.
+- **Removed PlantUML Support**: Support for PlantUML has been removed in favor of more customizable engines (Mermaid, D2, HTML).
+
+## [0.3.0] - 2026-03-05
+
+### Added
+- **Customizable Visual Styling**: Full override of node and edge styles (colors, widths, dash patterns) via CLI (`--style`) and TOML (`[git-graphable.theme]`).
+- **Configurable Hygiene Scoring**: Customization of hygiene penalties and caps via TOML (`[git-graphable.hygiene_weights]`).
+- **Advanced Issue Tracker Integration**:
+    - **Longevity Mismatch**: Detection of large time gaps between ticket creation and the first commit.
+    - **Collaboration Gaps**: Highlighting when the Git author doesn't match the Issue Tracker assignee.
+    - **Release Validation**: Verification that "Released" tickets are tagged in Git.
+- **New Documentation**: Added `STYLING.md` guide for visual customization.
+- **Engine Consistency**: Unified styling logic across Mermaid, D2, and Graphviz engines.
+
+### Changed
+- **CLI Refactor**: Migrated to a more robust Typer/Rich implementation with enhanced command-line options.
+- **Issue Engine**: Refactored `IssueTracker` to support richer metadata (assignees, timestamps).
+
+### Fixed
+- Fixed inconsistent color application in Mermaid graphs.
+- Improved cleanup of temporary files during image export.
+
+## [0.2.0] - 2026-03-04
+- Initial functional release with basic Git hygiene scoring and GitHub/Jira integration.

git_graphable-0.7.0/HYGIENE.md

@@ -0,0 +1,168 @@
+# Git Hygiene Guidelines
+
+This document explains the hygiene metrics analyzed by `git-graphable` and provides actionable steps to remediate common issues.
+
+## 1. Process Integrity
+
+### Direct Pushes to Protected Branches
+**Detection:** Commits made directly to `production_branch` or `development_branch` without a merge commit.
+**Why it matters:** Bypassing the Pull Request process avoids code review and CI checks, increasing the risk of bugs.
+**Remediation:**
+1.  **Stop**: Do not push directly to main/master/develop.
+2.  **Fix History** (if not yet shared/stable):
+    ```bash
+    # Move the commit to a new branch
+    git checkout -b feature/my-fix
+    
+    # Reset main back to before the direct push
+    git checkout main
+    git reset --hard <commit-before-push>
+    
+    # Push the new branch and open a PR
+    git push -u origin feature/my-fix
+    ```
+3.  **Protection**: Enable "Branch Protection Rules" in GitHub/GitLab settings to physically prevent direct pushes.
+
+### Conflicting Pull Requests
+**Detection:** Open PRs marked as `CONFLICTING` by the VCS provider.
+**Why it matters:** Conflicts block merging and indicate divergent development paths that get harder to resolve over time.
+**Remediation:**
+```bash
+git checkout feature/my-branch
+git pull origin main
+# Resolve conflicts in editor
+git add .
+git commit -m "Merge branch 'main' into feature/my-branch"
+git push
+```
+
+### Orphan/Dangling Commits
+**Detection:** Commits that are not reachable from any branch or tag.
+**Why it matters:** These are often lost code or mistakes.
+**Remediation:**
+- **Garbage Collect**: `git gc --prune=now`
+- **Recover**: If valuable, checkout the SHA and create a branch: `git checkout -b recover-work <sha>`
+
+## 2. Cleanliness
+
+### WIP / Fixup Commits
+**Detection:** Commit messages containing "wip", "todo", "fixup", "temp".
+**Why it matters:** messy history makes debugging and `git bisect` difficult.
+**Remediation:**
+- **Interactive Rebase**: Squash WIP commits into meaningful units.
+    ```bash
+    git rebase -i HEAD~n  # where n is number of commits back
+    # Change 'pick' to 'squash' or 'fixup' for the WIP commits
+    ```
+
+### Stale Branches
+**Detection:** Feature branches with no activity for `stale_days` (default: 30).
+**Why it matters:** Clutters the repository and indicates abandoned work.
+**Remediation:**
+- **Delete Local**: `git branch -d branch-name`
+- **Delete Remote**: `git push origin --delete branch-name`
+- **Archive**: Tag it if you need to keep it: `git tag archive/branch-name branch-name`
+
+## 3. Connectivity & Flow
+
+### Long-Running Branches
+**Detection:** Feature branches that have diverged from the base for more than `long_running_days` (default: 14).
+**Why it matters:** Increases the risk of massive merge conflicts (The "Merge Hell").
+**Remediation:**
+- **Merge Often**: Merge `main` into your feature branch frequently.
+- **Ship Smaller**: Break large features into smaller, mergeable PRs.
+
+### Divergence (Behind Base)
+**Detection:** Feature branches that are missing commits from the base branch (`main`).
+**Why it matters:** You are testing against outdated code.
+**Remediation:**
+```bash
+git checkout feature/my-feature
+git pull origin main
+git push
+```
+
+### Redundant Back-Merges
+**Detection:** Merging `main` into a feature branch, but doing it recursively or unnecessarily often creates a "railroad track" history.
+**Why it matters:** Makes history hard to read.
+**Remediation:**
+- Use `git rebase main` instead of `git merge main` for feature branches (if your team policy allows rewriting feature branch history).
+
+## 4. Collaboration
+
+### Contributor Silos
+**Detection:** Long sequences of commits on a branch by a single author without interaction from others.
+**Why it matters:** Risk of "Bus Factor". No code review or shared knowledge.
+**Remediation:**
+- **Pair Program**: Involve others earlier.
+- **Early PRs**: Open a Draft PR to get feedback before the feature is done.
+
+### Collaboration Gaps
+**Detection:** The Git commit author does not match the assignee of the linked Issue Tracker ticket.
+**Remediation:**
+- Update the Issue Tracker ticket to assign it to the actual developer.
+- Configure `author_mapping` in `.git-graphable.toml` if names just don't match (e.g., "John Doe" vs "jdoe").
+
+## 5. Consistency (Issue Tracking)
+
+### Issue / Git Desync
+**Detection:**
+- Ticket is `OPEN` but PR is `MERGED`.
+- Ticket is `CLOSED` but PR is `OPEN`.
+**Remediation:**
+- **Sync Status**: Manually update the ticket status.
+- **Automation**: Configure GitHub/Jira to auto-close issues when PRs are merged.
+
+### Release Inconsistencies
+**Detection:** Ticket is marked `RELEASED` but the commit is not included in any Git Tag.
+**Remediation:**
+- **Cut a Release**: Create a Git tag for the deployment.
+    ```bash
+    git tag v1.0.0
+    git push --tags
+    ```
+
+### Longevity Mismatch
+**Detection:** A large time gap (>14 days) exists between when a ticket was created and when work (commits) started.
+**Why it matters:** Planning failure or stale requirements.
+**Remediation:**
+- **Review Backlog**: Don't open tickets until work is ready to start.
+- **Re-evaluate**: If a ticket sits for 2 weeks, check if requirements have changed before starting code.
+
+## 6. Ignoring Hygiene Rules
+
+Sometimes a commit or branch is flagged for a reason that is acceptable or intended. You can selectively ignore these rules.
+
+### Via Configuration (`.git-graphable.toml`)
+
+Add an `[git-graphable.ignore]` section to your configuration:
+
+```toml
+[git-graphable.ignore]
+# Ignore specific rules for specific SHAs (prefix or full SHA)
+"9bd5377" = ["wip", "direct_push"]
+"abc1234" = ["all"]  # Ignore all hygiene rules for this commit
+```
+
+### Via CLI
+
+Use the `--ignore` flag:
+
+```bash
+# Ignore WIP rule for a specific SHA
+uv run git-graphable analyze . --ignore 9bd5377:wip
+
+# Ignore multiple items
+uv run git-graphable analyze . --ignore 9bd5377:wip --ignore abc1234:all
+```
+
+### Supported Rule Names
+- `wip`
+- `direct_push`
+- `divergence`
+- `orphan`
+- `stale`
+- `long_running`
+- `back_merge`
+- `silo`
+- `all` (ignores everything for that SHA)

git_graphable-0.7.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Richard West
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{git_graphable-0.5.0 → git_graphable-0.7.0}/PKG-INFO

@@ -1,12 +1,14 @@
 Metadata-Version: 2.4
 Name: git-graphable
-Version: 0.5.0
+Version: 0.7.0
 Summary: A powerful Git history visualizer and hygiene linter with CI gating.
 Project-URL: Homepage, https://github.com/TheTrueSCU/git-graphable
 Project-URL: Issues, https://github.com/TheTrueSCU/git-graphable/issues
 Project-URL: Repository, https://github.com/TheTrueSCU/git-graphable
 Author-email: Richard West <dopplereffect.us@gmail.com>
-Keywords: analysis,automation,ci,cytoscape,d2,git,git-flow,github,github-actions,graph,html,hygiene,interactive,lint,mermaid,topology,visualization
+License-Expression: MIT
+License-File: LICENSE
+Keywords: analysis,automation,badges,ci,cytoscape,d2,devops,git,git-flow,github,github-actions,gitlab,graph,html,hygiene,interactive,jira,lint,mermaid,metrics,topology,visualization
 Requires-Python: >=3.13
 Requires-Dist: graphable>=0.6.0
 Provides-Extra: cli
@@ -16,6 +18,12 @@ Description-Content-Type: text/markdown
 
 # Git Graphable
 
+[![CI](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml/badge.svg)](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Coverage](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/coverage.json)](https://thetruescu.github.io/git-graphable/)
+[![Hygiene](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/hygiene_badge.json)](https://thetruescu.github.io/git-graphable/)
+
+
 A powerful Python tool to convert Git commit history into beautiful, interactive flowcharts using the `graphable` library. Supporting Mermaid, D2, Graphviz, and HTML.
 
 ## Git Plugin Support
@@ -31,18 +39,15 @@ Check out the tool in action with our **[Live Interactive Demos](https://thetrue
 ## Features
 
 - **Multi-Engine Support**: Export to Mermaid (.mmd), D2 (.d2), Graphviz (.dot), or HTML (.html).
-- **Automatic Visualization**: Generates and opens an image (SVG/PNG) automatically if no output is specified.
+- **Automatic Visualization**: Generates and opens an image (PNG) automatically if no output is specified.
 - **Advanced Highlighting**: Visualize author patterns, topological distance, and specific merge paths.
-- **GitHub Integration**: Highlight commits based on pull request status (Merged, Open, Closed, Draft) using the `gh` CLI.
-- **Hygiene Analysis**: Automatically detect WIP commits, direct pushes to protected branches, squashed PRs, back-merges, and contributor silos.
-- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, or custom scripts to highlight status desyncs.
-- **Release & Assignment Validation**: Verify that "Released" tickets are actually tagged in Git and that commit authors match ticket assignees.
-- **Health Scoring**: Get a numeric "Hygiene Score" (0-100%) with a color-coded grade and detailed breakdown of workflow anti-patterns.
-- **Visual Customization**: Fully customize colors, widths, and line styles for nodes and edges. See [STYLING.md](STYLING.md).
-- **Configurable Penalties**: Fully customize the scoring logic by adjusting penalties and caps for each metric.
-- **CI Gating**: Use the `--check` flag to return a non-zero exit code if the hygiene score falls below a threshold (configurable via `--min-score`).
-- **Flexible Input**: Works with local repository paths or remote Git URLs.
-- **Dual CLI**: Modern Rich/Typer interface with a robust argparse fallback for bare environments.
+- **VCS Integration**: Highlight commits based on pull request/merge request status using `gh` (GitHub) or `glab` (GitLab) CLIs.
+- **Hygiene Analysis**: Automatically detect WIP commits, direct pushes to protected branches, squashed PRs, back-merges, and contributor silos. Provides actionable intelligence with exact commit hashes and branch names.
+- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, GitLab Issues, or custom scripts to highlight status desyncs.
+- **Security First**: Configuration trust mechanism enforces security by requiring explicit authorization (use `--trust`) to execute custom scripts or send credentials from repository-local configs.
+- **Selective Ignores**: Suppress specific hygiene rules for given commit SHAs using the configuration file or `--ignore` CLI flag.
+- **Remediation Guide**: Detailed guidelines in [HYGIENE.md](HYGIENE.md) help you reach a 100% score.
+- **Dynamic Badges**: Host live Shields.io badges for Git Hygiene and Code Coverage on GitHub Pages.
 
 ## Installation
 
@@ -86,7 +91,7 @@ jobs:
           fetch-depth: 0 # Required to see full history
 
       - name: Generate Git Graph Reports
-        uses: TheTrueSCU/git-graphable@v0.5.0
+        uses: TheTrueSCU/git-graphable@v0.7.0
         with:
           production_branch: 'main'
           output_dir: 'reports'
@@ -125,7 +130,7 @@ Git Graphable provides several ways to highlight commits and relationships. Mult
 | Option | Target | Effect | Conflicts With |
 | :--- | :--- | :--- | :--- |
 | `--highlight-authors` | **Fill** | Unique color per author | PR Status, Distance, Stale |
-| `--highlight-pr-status` | **Fill/Stroke**| Color by PR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
+| `--highlight-pr-status` | **Fill/Stroke**| Color by PR/MR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
 | `--highlight-distance-from` | **Fill** | Blue gradient fading by distance | Authors, PR Status, Stale |
 | `--highlight-stale` | **Fill** | Gradient white to red by age | Authors, PR Status, Distance |
 | `--highlight-path` | **Edge** | Thick Orange edge connecting nodes | None |
@@ -152,6 +157,7 @@ Identify problematic patterns like direct pushes to `main`, messy WIP commits, b
 ```bash
 uv run git-graphable analyze . --highlight-direct-pushes --highlight-wip --highlight-squashed --highlight-back-merges --highlight-silos
 ```
+> **Tip:** See [HYGIENE.md](HYGIENE.md) for a detailed guide on how to remediate these issues and improve your score.
 
 ### PR Status Highlighting
 View the current state of all PRs in your repository graph:
@@ -200,7 +206,7 @@ highlight_critical = true
 critical_branches = ["main", "prod"]
 highlight_pr_status = true
 highlight_wip = true
-wip_keywords = ["wip", "todo", "fixme", "temp"]
+wip_keywords = ["wip", "todo", "fixme", "temp", "fixup!", "squash!"]
 highlight_direct_pushes = true
 highlight_squashed = true
 highlight_back_merges = true

{git_graphable-0.5.0 → git_graphable-0.7.0}/README.md

@@ -1,5 +1,11 @@
 # Git Graphable
 
+[![CI](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml/badge.svg)](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Coverage](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/coverage.json)](https://thetruescu.github.io/git-graphable/)
+[![Hygiene](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/hygiene_badge.json)](https://thetruescu.github.io/git-graphable/)
+
+
 A powerful Python tool to convert Git commit history into beautiful, interactive flowcharts using the `graphable` library. Supporting Mermaid, D2, Graphviz, and HTML.
 
 ## Git Plugin Support
@@ -15,18 +21,15 @@ Check out the tool in action with our **[Live Interactive Demos](https://thetrue
 ## Features
 
 - **Multi-Engine Support**: Export to Mermaid (.mmd), D2 (.d2), Graphviz (.dot), or HTML (.html).
-- **Automatic Visualization**: Generates and opens an image (SVG/PNG) automatically if no output is specified.
+- **Automatic Visualization**: Generates and opens an image (PNG) automatically if no output is specified.
 - **Advanced Highlighting**: Visualize author patterns, topological distance, and specific merge paths.
-- **GitHub Integration**: Highlight commits based on pull request status (Merged, Open, Closed, Draft) using the `gh` CLI.
-- **Hygiene Analysis**: Automatically detect WIP commits, direct pushes to protected branches, squashed PRs, back-merges, and contributor silos.
-- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, or custom scripts to highlight status desyncs.
-- **Release & Assignment Validation**: Verify that "Released" tickets are actually tagged in Git and that commit authors match ticket assignees.
-- **Health Scoring**: Get a numeric "Hygiene Score" (0-100%) with a color-coded grade and detailed breakdown of workflow anti-patterns.
-- **Visual Customization**: Fully customize colors, widths, and line styles for nodes and edges. See [STYLING.md](STYLING.md).
-- **Configurable Penalties**: Fully customize the scoring logic by adjusting penalties and caps for each metric.
-- **CI Gating**: Use the `--check` flag to return a non-zero exit code if the hygiene score falls below a threshold (configurable via `--min-score`).
-- **Flexible Input**: Works with local repository paths or remote Git URLs.
-- **Dual CLI**: Modern Rich/Typer interface with a robust argparse fallback for bare environments.
+- **VCS Integration**: Highlight commits based on pull request/merge request status using `gh` (GitHub) or `glab` (GitLab) CLIs.
+- **Hygiene Analysis**: Automatically detect WIP commits, direct pushes to protected branches, squashed PRs, back-merges, and contributor silos. Provides actionable intelligence with exact commit hashes and branch names.
+- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, GitLab Issues, or custom scripts to highlight status desyncs.
+- **Security First**: Configuration trust mechanism enforces security by requiring explicit authorization (use `--trust`) to execute custom scripts or send credentials from repository-local configs.
+- **Selective Ignores**: Suppress specific hygiene rules for given commit SHAs using the configuration file or `--ignore` CLI flag.
+- **Remediation Guide**: Detailed guidelines in [HYGIENE.md](HYGIENE.md) help you reach a 100% score.
+- **Dynamic Badges**: Host live Shields.io badges for Git Hygiene and Code Coverage on GitHub Pages.
 
 ## Installation
 
@@ -70,7 +73,7 @@ jobs:
           fetch-depth: 0 # Required to see full history
 
       - name: Generate Git Graph Reports
-        uses: TheTrueSCU/git-graphable@v0.5.0
+        uses: TheTrueSCU/git-graphable@v0.7.0
         with:
           production_branch: 'main'
           output_dir: 'reports'
@@ -109,7 +112,7 @@ Git Graphable provides several ways to highlight commits and relationships. Mult
 | Option | Target | Effect | Conflicts With |
 | :--- | :--- | :--- | :--- |
 | `--highlight-authors` | **Fill** | Unique color per author | PR Status, Distance, Stale |
-| `--highlight-pr-status` | **Fill/Stroke**| Color by PR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
+| `--highlight-pr-status` | **Fill/Stroke**| Color by PR/MR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
 | `--highlight-distance-from` | **Fill** | Blue gradient fading by distance | Authors, PR Status, Stale |
 | `--highlight-stale` | **Fill** | Gradient white to red by age | Authors, PR Status, Distance |
 | `--highlight-path` | **Edge** | Thick Orange edge connecting nodes | None |
@@ -136,6 +139,7 @@ Identify problematic patterns like direct pushes to `main`, messy WIP commits, b
 ```bash
 uv run git-graphable analyze . --highlight-direct-pushes --highlight-wip --highlight-squashed --highlight-back-merges --highlight-silos
 ```
+> **Tip:** See [HYGIENE.md](HYGIENE.md) for a detailed guide on how to remediate these issues and improve your score.
 
 ### PR Status Highlighting
 View the current state of all PRs in your repository graph:
@@ -184,7 +188,7 @@ highlight_critical = true
 critical_branches = ["main", "prod"]
 highlight_pr_status = true
 highlight_wip = true
-wip_keywords = ["wip", "todo", "fixme", "temp"]
+wip_keywords = ["wip", "todo", "fixme", "temp", "fixup!", "squash!"]
 highlight_direct_pushes = true
 highlight_squashed = true
 highlight_back_merges = true

{git_graphable-0.5.0 → git_graphable-0.7.0}/USAGE.md

@@ -50,7 +50,9 @@ Analyze git history and generate a graph. This is the default command; if no com
 * `--highlight-long-running`: Highlight long-running branches
 * `--long-running-days INTEGER`: Threshold in days for long-running branches
 * `--long-running-base TEXT`: Base branch for long-running analysis
-* `--highlight-pr-status`: Highlight commits based on GitHub PR status
+* `--highlight-pr-status`: Highlight commits based on PR status (GitHub or GitLab)
+* `--pr-provider [github|gitlab|script]`: Provider to fetch PR statuses (default: github)
+* `--pr-script TEXT`: Path to a script that returns PR data in JSON format
 * `--highlight-wip`: Highlight WIP/TODO commits
 * `--wip-keyword TEXT`: Additional keyword to trigger WIP highlighting
 * `--highlight-direct-pushes`: Highlight non-merge commits on protected branches
@@ -61,7 +63,7 @@ Analyze git history and generate a graph. This is the default command; if no com
 * `--silo-author-count INTEGER`: Author count threshold for silo detection
 * `--highlight-issue-inconsistencies`: Highlight mismatches between Git and Issue Tracker
 * `--issue-pattern TEXT`: Regex pattern to extract issue IDs
-* `--issue-engine [github|jira|script]`: Engine to fetch issue statuses
+* `--issue-engine [github|gitlab|jira|script]`: Engine to fetch issue statuses
 * `--jira-url TEXT`: Base URL for Jira instance
 * `--issue-script TEXT`: Shell command template for script engine
 * `--highlight-release-inconsistencies`: Highlight issues marked Released but not tagged
@@ -74,6 +76,9 @@ Analyze git history and generate a graph. This is the default command; if no com
 * `--check`: Exit with non-zero if hygiene score is below threshold
 * `--min-score INTEGER`: Minimum hygiene score required for --check
 * `--bare`: Force bare mode (no rich output)
+* `--hygiene-output TEXT`: Path to save hygiene summary as JSON.
+* `--ignore TEXT`: Ignore hygiene rules for specific SHAs (format: `sha:rule`). Use `all` as the rule to ignore all checks for a commit.
+* `--trust`: Trust configuration files (.git-graphable.toml, pyproject.toml) found in the repository. **Required** to execute custom scripts (`issue_script`, `pr_script`) or use sensitive integrations (Jira) from these sources.
 * `--help`: Show this message and exit.
 
 ---

{git_graphable-0.5.0 → git_graphable-0.7.0}/action.yml

@@ -52,15 +52,26 @@ runs:
       shell: bash
       run: mkdir -p ${{ inputs.output_dir }}
 
-    - name: Generate Simplified Graph (Mermaid)
+    - name: Generate Simplified Graph (Mermaid) and Hygiene Stats
       shell: bash
       run: |
-        ARGS="--production-branch ${{ inputs.production_branch }} --simplify --engine mermaid -o ${{ inputs.output_dir }}/summary.mmd"
+        ARGS="--production-branch ${{ inputs.production_branch }} --simplify --engine mermaid -o ${{ inputs.output_dir }}/summary.mmd --hygiene-output ${{ inputs.output_dir }}/hygiene.json"
         if [ -n "${{ inputs.issue_engine }}" ]; then ARGS="$ARGS --issue-engine ${{ inputs.issue_engine }}"; fi
         uv tool run git-graphable --bare ${{ inputs.path }} $ARGS
       env:
         GITHUB_TOKEN: ${{ inputs.github_token }}
 
+    - name: Generate Hygiene Badge Data
+      shell: bash
+      run: |
+        if [ -f "${{ inputs.output_dir }}/hygiene.json" ]; then
+          SCORE=$(grep -oP '"score": \d+' ${{ inputs.output_dir }}/hygiene.json | grep -oP '\d+')
+          GRADE=$(grep -oP '"grade": "[^"]+"' ${{ inputs.output_dir }}/hygiene.json | cut -d'"' -f4)
+          COLOR=$(grep -oP '"color": "[^"]+"' ${{ inputs.output_dir }}/hygiene.json | cut -d'"' -f4)
+          # Shields.io JSON endpoint format
+          echo "{\"schemaVersion\": 1, \"label\": \"hygiene\", \"message\": \"$SCORE% ($GRADE)\", \"color\": \"$COLOR\"}" > ${{ inputs.output_dir }}/hygiene_badge.json
+        fi
+
     - name: Generate Full Interactive Graph (HTML)
       shell: bash
       run: |