gitgalaxy 2.3.20__tar.gz → 2.3.22__tar.gz

gitgalaxy-2.3.22/.gitlab-ci.yml

@@ -0,0 +1,16 @@
+include:
+  - local: '/templates/scan.yml'
+    inputs:
+      target: 'gitgalaxy/'
+      version: 'local'
+
+create-release:
+  stage: deploy
+  image: [registry.gitlab.com/gitlab-org/release-cli:latest](https://registry.gitlab.com/gitlab-org/release-cli:latest)
+  rules:
+    - if: $CI_COMMIT_TAG
+  script:
+    - echo "Publishing CI/CD Catalog Release for $CI_COMMIT_TAG"
+  release:
+    tag_name: $CI_COMMIT_TAG
+    description: "Automated component release synced directly from GitHub Source of Truth."

{gitgalaxy-2.3.20 → gitgalaxy-2.3.22}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.20
+Version: 2.3.22
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

gitgalaxy-2.3.22/bitbucket-pipelines.yml

@@ -0,0 +1,81 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: Bitbucket Pipelines
+
+image: python:3.12-slim
+
+clone:
+  depth: full
+
+pipelines:
+  default:
+    - step:
+        name: 'GitGalaxy Zero-Trust Spectral Audit'
+        caches:
+          - pip
+        script:
+          # 1. Configuration Variables (Mirroring GitHub Action Inputs)
+          - export GG_TOOL="galaxyscope"
+          - export GG_TARGET="gitgalaxy/"
+          - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+          - export GG_VERSION="latest"
+          - export GG_FULL_PRECISION="true"
+          - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
+
+          # 2. Dynamic Installation Logic
+          - pip install --upgrade pip
+          - |
+            if [ "$GG_VERSION" = "local" ]; then
+              echo "Dogfooding local GitGalaxy source..."
+              pip install -e .
+            elif [ "$GG_VERSION" = "latest" ]; then
+              echo "Installing latest GitGalaxy from PyPI..."
+              pip install gitgalaxy
+            else
+              echo "Installing GitGalaxy version ${GG_VERSION}..."
+              pip install "gitgalaxy==${GG_VERSION}"
+            fi
+          - |
+            if [ "$GG_FULL_PRECISION" = "true" ]; then
+              echo "Unlocking Full Precision Mode..."
+              pip install networkx tiktoken xgboost pandas numpy
+            else
+              echo "Running in ultra-fast Zero-Dependency Mode."
+            fi
+
+          # 3. Dynamic Execution
+          - echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
+          - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+                    
+        artifacts:
+          # 4. Publish SARIF telemetry for Bitbucket Code Insights
+          - gitgalaxy-results_sarif.json
+          
+  custom:
+    manual-security-scan:
+      - step:
+          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
+          caches:
+            - pip
+          script:
+            - export GG_TOOL="galaxyscope"
+            - export GG_TARGET="gitgalaxy/"
+            - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+            - export GG_VERSION="latest"
+            - export GG_FULL_PRECISION="true"
+            - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
+            - pip install --upgrade pip
+            - |
+              if [ "$GG_VERSION" = "local" ]; then
+                pip install -e .
+              elif [ "$GG_VERSION" = "latest" ]; then
+                pip install gitgalaxy
+              else
+                pip install "gitgalaxy==${GG_VERSION}"
+              fi
+            - |
+              if [ "$GG_FULL_PRECISION" = "true" ]; then
+                pip install networkx tiktoken xgboost pandas numpy
+              fi
+            - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+          artifacts:
+            - gitgalaxy-results_sarif.json

{gitgalaxy-2.3.20 → gitgalaxy-2.3.22}/gitgalaxy/galaxyscope.py

@@ -2433,6 +2433,7 @@ def main():
     parser.add_argument("--fail-on-secrets", action="store_true", help="CI/CD Gate: Fail build if hardcoded secrets are detected")
     parser.add_argument("--fail-on-malware", action="store_true", help="CI/CD Gate: Fail build if ML threat inference flags malware")
     parser.add_argument("--max-risk-exposure", type=float, default=0.0, help="CI/CD Gate: Fail build if any file exceeds this risk percentage (0.0 to disable)")
+    parser.add_argument("--max-systemic-threat", type=float, default=0.0, help="CI/CD Gate: Fail build if systemic threat exceeds this limit (0.0 to disable)")
     parser.add_argument("--incremental", type=str, metavar="DB_PATH", help="Path to baseline SQLite database for Delta Scanning")
     parser.add_argument("--config", type=str, help="Path to project-level configuration file (e.g., .galaxyscope.yaml)")
     parser.add_argument(
@@ -2603,6 +2604,7 @@ def main():
             "FAIL_ON_SECRETS": args.fail_on_secrets,
             "FAIL_ON_MALWARE": args.fail_on_malware,
             "MAX_RISK_EXPOSURE": args.max_risk_exposure,
+            "MAX_SYSTEMIC_THREAT": args.max_systemic_threat,
             "SPLICING_SPEED": args.splicing_speed,
             "FILE_SPEED": args.file_speed,
             "SARIF_IGNORED_RULES": config_file_data.get("galaxyscope", {}).get("SARIF_IGNORED_RULES", []),

{gitgalaxy-2.3.20 → gitgalaxy-2.3.22}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.20
+Version: 2.3.22
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.20 → gitgalaxy-2.3.22}/gitgalaxy.egg-info/SOURCES.txt

@@ -113,7 +113,6 @@ gitgalaxy/tools/supply_chain_security/vault_sentinel.py
 gitgalaxy/tools/terabyte_log_scanning/README.md
 gitgalaxy/tools/terabyte_log_scanning/pii_leak_hunter.py
 gitgalaxy/tools/terabyte_log_scanning/terabyte_log_scanner.py
-templates/scan.yml
 templates/azure/azure-pipelines.yml
 templates/bitbucket/bitbucket-pipelines.yml
 templates/github/gitgalaxy-pipeline.yml

{gitgalaxy-2.3.20 → gitgalaxy-2.3.22}/gitgalaxy.egg-info/scm_file_list.json

@@ -423,7 +423,6 @@
     "docs/wiki/LLM-reports/flask_llm_report.md",
     "docs/wiki/LLM-reports/curl_llm_report.md",
     "docs/javascripts/mathjax.js",
-    "templates/scan.yml",
     "templates/bitbucket/bitbucket-pipelines.yml",
     "templates/github/gitgalaxy-pipeline.yml",
     "templates/gitlab/scan.yml",

{gitgalaxy-2.3.20 → gitgalaxy-2.3.22}/gitgalaxy.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "2.3.20",
+  "tag": "2.3.22",
   "distance": 0,
-  "node": "gf96736727f9a1222dae99612a99d5411934ec719",
+  "node": "gf0792cf7e81d72b386abfb894fb0cb2648d62d38",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-07-14"

gitgalaxy-2.3.22/templates/bitbucket/bitbucket-pipelines.yml

@@ -0,0 +1,74 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: Bitbucket Pipelines
+
+image: python:3.12-slim
+
+clone:
+  depth: full
+
+pipelines:
+  default:
+    - step:
+        name: 'GitGalaxy Zero-Trust Spectral Audit'
+        caches:
+          - pip
+        script:
+          # 1. Configuration Variables
+          - export GG_TOOL="galaxyscope"
+          - export GG_TARGET="."
+          - export GG_ARGS="--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+          - export GG_VERSION="latest"
+          - export GG_FULL_PRECISION="true"
+          
+          # 2. Dynamic Installation Logic
+          - pip install --upgrade pip
+          - |
+            if [ "$GG_VERSION" = "latest" ]; then
+              echo "Installing latest GitGalaxy from PyPI..."
+              pip install gitgalaxy
+            else
+              echo "Installing GitGalaxy version ${GG_VERSION}..."
+              pip install "gitgalaxy==${GG_VERSION}"
+            fi
+          - |
+            if [ "$GG_FULL_PRECISION" = "true" ]; then
+              echo "Unlocking Full Precision Mode..."
+              pip install networkx tiktoken xgboost pandas numpy
+            else
+              echo "Running in ultra-fast Zero-Dependency Mode."
+            fi
+
+          # 3. Dynamic Execution
+          - echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
+          - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+                    
+        artifacts:
+          # 4. Publish SARIF telemetry for Bitbucket Code Insights
+          - gitgalaxy-results_sarif.json
+          
+  custom:
+    manual-security-scan:
+      - step:
+          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
+          caches:
+            - pip
+          script:
+            - export GG_TOOL="galaxyscope"
+            - export GG_TARGET="."
+            - export GG_ARGS="--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+            - export GG_VERSION="latest"
+            - export GG_FULL_PRECISION="true"
+            - pip install --upgrade pip
+            - |
+              if [ "$GG_VERSION" = "latest" ]; then
+                pip install gitgalaxy
+              else
+                pip install "gitgalaxy==${GG_VERSION}"
+              fi
+            - |
+              if [ "$GG_FULL_PRECISION" = "true" ]; then
+                pip install networkx tiktoken xgboost pandas numpy
+              fi
+            - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+          artifacts:
+            - gitgalaxy-results_sarif.json

gitgalaxy-2.3.22/templates/gitlab/scan.yml

@@ -0,0 +1,69 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: GitLab CI/CD Component
+
+spec:
+  inputs:
+    tool:
+      description: "The GitGalaxy command to execute."
+      default: "galaxyscope"
+    target:
+      description: "The directory or file path to scan."
+      default: "."
+    args:
+      description: "Additional CLI arguments to pass to the tool."
+      default: "--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+    version:
+      description: "The version of GitGalaxy to install from PyPI. Defaults to latest."
+      default: "latest"
+    full_precision:
+      description: "Opt-in to install heavy physics engines for Blast Radius and ML Threat Inference."
+      default: "true"
+
+---
+
+gitgalaxy_scan:
+  stage: test
+  image: python:3.12-slim
+  variables:
+    PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"
+    GIT_DEPTH: "0"  # Forces full chronological fetch to prevent Temporal Collapse
+  cache:
+    paths:
+      - .cache/pip
+  script:
+    - echo "Initializing GitGalaxy Component Environment..."
+    - export GG_TOOL="$[[ inputs.tool ]]"
+    - export GG_TARGET="$[[ inputs.target ]]"
+    - export GG_ARGS="$[[ inputs.args ]]"
+    - export GG_VERSION="$[[ inputs.version ]]"
+    - export GG_FULL_PRECISION="$[[ inputs.full_precision ]]"
+    - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
+    
+    - pip install --upgrade pip
+    - |
+      if [ "$GG_VERSION" = "local" ]; then
+        echo "Dogfooding local GitGalaxy source..."
+        pip install -e .
+      elif [ "$GG_VERSION" = "latest" ]; then
+        echo "Installing latest GitGalaxy from PyPI..."
+        pip install gitgalaxy
+      else
+        echo "Installing GitGalaxy version ${GG_VERSION}..."
+        pip install "gitgalaxy==${GG_VERSION}"
+      fi
+    - |
+      if [ "$GG_FULL_PRECISION" = "true" ]; then
+        echo "Unlocking Full Precision Mode..."
+        pip install networkx tiktoken xgboost pandas numpy
+      else
+        echo "Running in ultra-fast Zero-Dependency Mode."
+      fi
+
+    - echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
+    - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+  artifacts:
+    when: always
+    reports:
+      # Automatically maps the SARIF output directly into GitLab's native Security Dashboard
+      sast: gitgalaxy-results_sarif.json
+  allow_failure: false

gitgalaxy-2.3.20/.gitlab-ci.yml

@@ -1,10 +0,0 @@
-create-release:
-  stage: deploy
-  image: registry.gitlab.com/gitlab-org/release-cli:latest
-  rules:
-    - if: $CI_COMMIT_TAG
-  script:
-    - echo "Publishing CI/CD Catalog Release for $CI_COMMIT_TAG"
-  release:
-    tag_name: $CI_COMMIT_TAG
-    description: "Automated component release synced directly from GitHub Source of Truth."

gitgalaxy-2.3.20/bitbucket-pipelines.yml

@@ -1,40 +0,0 @@
-# GitGalaxy Enterprise Security Scanner
-# Integration: Bitbucket Pipelines
-
-image: python:3.12-slim
-
-clone:
-  depth: full
-
-pipelines:
-  default:
-    - step:
-        name: 'GitGalaxy Zero-Trust Spectral Audit'
-        caches:
-          - pip
-        script:
-          # 1. Initialize Python Environment & Install GitGalaxy CLI Engine
-          # Added heavy physics engines for full precision (networkx, tiktoken, etc.)
-          - pip install --upgrade pip
-          - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-          
-          # 2. Execute Zero-Trust Spectral Audit with Enterprise Gates
-          # Added --ignore tests/ to prevent mock data from tripping the secrets firewall
-          - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json
-                    
-        artifacts:
-          # 3. Publish SARIF telemetry for Bitbucket Code Insights
-          - gitgalaxy-results_sarif.json
-          
-  custom:
-    manual-security-scan:
-      - step:
-          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
-          caches:
-            - pip
-          script:
-            - pip install --upgrade pip
-            - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-            - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json
-          artifacts:
-            - gitgalaxy-results_sarif.json

gitgalaxy-2.3.20/templates/bitbucket/bitbucket-pipelines.yml

@@ -1,37 +0,0 @@
-# GitGalaxy Enterprise Security Scanner
-# Integration: Bitbucket Pipelines
-
-image: python:3.12-slim
-
-pipelines:
-  default:
-    - step:
-        name: 'GitGalaxy Zero-Trust Spectral Audit'
-        caches:
-          - pip
-        script:
-          # 1. Initialize Python Environment & Install GitGalaxy CLI Engine
-          # Added heavy physics engines for full precision (networkx, tiktoken, etc.)
-          - pip install --upgrade pip
-          - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-          
-          # 2. Execute Zero-Trust Spectral Audit with Enterprise Gates
-          # Added --ignore tests/ to prevent mock data from tripping the secrets firewall
-          - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
-                    
-        artifacts:
-          # 3. Publish SARIF telemetry for Bitbucket Code Insights
-          - gitgalaxy-results_sarif.json
-          
-  custom:
-    manual-security-scan:
-      - step:
-          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
-          caches:
-            - pip
-          script:
-            - pip install --upgrade pip
-            - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-            - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
-          artifacts:
-            - gitgalaxy-results_sarif.json

gitgalaxy-2.3.20/templates/gitlab/scan.yml

@@ -1,32 +0,0 @@
-# GitGalaxy Enterprise Security Scanner
-# Integration: GitLab CI/CD Component
-
-spec:
-  inputs:
-    max-risk:
-      type: string
-      default: "80"
-      description: "Maximum allowable calculated risk exposure threshold before forcing pipeline failure"
-
----
-
-gitgalaxy_scan:
-  stage: test
-  image: python:3.12-slim
-  variables:
-    PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"
-  cache:
-    paths:
-      - .cache/pip
-  before_script:
-    - echo "Initializing GitGalaxy blAST Engine Environment..."
-    - pip install --upgrade pip
-    - pip install gitgalaxy>=2.3.1
-  script:
-    - echo "Executing Zero-Trust Spectral Audit..."
-    - galaxyscope . --max-risk-exposure $[[ inputs.max-risk ]] --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
-  artifacts:
-    when: always
-    reports:
-      sast: gitgalaxy-results_sarif.json
-  allow_failure: false

gitgalaxy-2.3.20/templates/scan.yml

@@ -1,11 +0,0 @@
-spec:
-  inputs:
-    target:
-      default: '.'
-      description: "The directory to scan."
----
-gitgalaxy_scan:
-  image: python:3.10-slim
-  script:
-    - pip install gitgalaxy
-    - galaxyscope $[[ inputs.target ]]