gitgalaxy 2.3.13__tar.gz → 2.3.16__tar.gz

{gitgalaxy-2.3.13 → gitgalaxy-2.3.16}/.github/workflows/publish.yml

@@ -25,6 +25,14 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Enforce Main Branch Tagging
+        run: |
+          git fetch origin main
+          if ! git branch -r --contains ${{ github.sha }} | grep -q "origin/main"; then
+            echo "🛑 ERROR: Tag was cut from a side branch. Releases are only allowed from main."
+            exit 1
+          fi
+
       - name: Set up Python
         uses: actions/setup-python@v6
         with:

{gitgalaxy-2.3.13 → gitgalaxy-2.3.16}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.13
+Version: 2.3.16
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.13 → gitgalaxy-2.3.16}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.13
+Version: 2.3.16
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.13 → gitgalaxy-2.3.16}/gitgalaxy.egg-info/SOURCES.txt

@@ -8,6 +8,7 @@ MANIFEST.in
 README.md
 SECURITY.md
 action.yml
+bitbucket-pipelines.yml
 cd pipeline strategy.md
 github-action-readme.md
 mkdocs.yml

{gitgalaxy-2.3.13 → gitgalaxy-2.3.16}/gitgalaxy.egg-info/scm_file_list.json

@@ -13,6 +13,7 @@
     "MANIFEST.in",
     ".gitignore",
     "action.yml",
+    "bitbucket-pipelines.yml",
     ".flake8",
     "github-action-readme.md",
     ".gitlab-ci.yml",

{gitgalaxy-2.3.13 → gitgalaxy-2.3.16}/gitgalaxy.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "2.3.13",
+  "tag": "2.3.16",
   "distance": 0,
-  "node": "g70e8fa6c1f51241c06bf7670348d6449319e95a8",
+  "node": "g40120a0b1ecaa4aeb790587ca399bc03da594781",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-07-13"

gitgalaxy-2.3.16/templates/bitbucket/bitbucket-pipelines.yml

@@ -0,0 +1,37 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: Bitbucket Pipelines
+
+image: python:3.12-slim
+
+pipelines:
+  default:
+    - step:
+        name: 'GitGalaxy Zero-Trust Spectral Audit'
+        caches:
+          - pip
+        script:
+          # 1. Initialize Python Environment & Install GitGalaxy CLI Engine
+          # Added heavy physics engines for full precision (networkx, tiktoken, etc.)
+          - pip install --upgrade pip
+          - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
+          
+          # 2. Execute Zero-Trust Spectral Audit with Enterprise Gates
+          # Added --ignore tests/ to prevent mock data from tripping the secrets firewall
+          - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
+                    
+        artifacts:
+          # 3. Publish SARIF telemetry for Bitbucket Code Insights
+          - gitgalaxy-results_sarif.json
+          
+  custom:
+    manual-security-scan:
+      - step:
+          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
+          caches:
+            - pip
+          script:
+            - pip install --upgrade pip
+            - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
+            - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
+          artifacts:
+            - gitgalaxy-results_sarif.json