gitgalaxy 2.3.21__tar.gz → 2.3.23__tar.gz

{gitgalaxy-2.3.21 → gitgalaxy-2.3.23}/.github/workflows/publish.yml

@@ -78,3 +78,20 @@ jobs:
           git remote add bitbucket https://${{ secrets.BITBUCKET_USERNAME }}:${{ secrets.BITBUCKET_SYNC_TOKEN }}@bitbucket.org/squid-protocol/gitgalaxy.git
           git push -f bitbucket HEAD:main
           git push -f --tags bitbucket
+
+  azure-sync:
+    name: Sync to Azure DevOps
+    needs: pypi-publish
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout GitHub Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Sync Code and Tags to Azure
+        run: |
+          # Note: Azure Organization, Project, and Repository are all named gitgalaxy
+          git remote add azure https://${{ secrets.AZURE_DEVOPS_TOKEN }}@https://dev.azure.com/gitgalaxy/gitgalaxy/_git/gitgalaxy
+          git push -f azure HEAD:main
+          git push -f --tags azure

{gitgalaxy-2.3.21 → gitgalaxy-2.3.23}/.gitignore

@@ -101,4 +101,4 @@ telemetry_out/
 tests/telemetry_out/
 
 # Force tracking of the Golden Master despite global *.json ignore
-!tests/golden_master_audit.json
+!tests/golden_master_audit.json*.vsix

gitgalaxy-2.3.23/.gitlab-ci.yml

@@ -0,0 +1,16 @@
+include:
+  - local: '/templates/scan.yml'
+    inputs:
+      target: 'gitgalaxy/'
+      version: 'local'
+
+create-release:
+  stage: deploy
+  image: [registry.gitlab.com/gitlab-org/release-cli:latest](https://registry.gitlab.com/gitlab-org/release-cli:latest)
+  rules:
+    - if: $CI_COMMIT_TAG
+  script:
+    - echo "Publishing CI/CD Catalog Release for $CI_COMMIT_TAG"
+  release:
+    tag_name: $CI_COMMIT_TAG
+    description: "Automated component release synced directly from GitHub Source of Truth."

{gitgalaxy-2.3.21 → gitgalaxy-2.3.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.21
+Version: 2.3.23
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.21/templates/azure → gitgalaxy-2.3.23}/azure-pipelines.yml

@@ -2,11 +2,19 @@
 # Integration: Azure DevOps Pipelines
 
 trigger:
-  - main
+  branches:
+    include:
+      - main
+  tags:
+    include:
+      - v*
 
 variables:
-  GITGALAXY_MAX_RISK: '80'
+  GG_TOOL: 'galaxyscope'
+  GG_TARGET: '.'
+  GG_ARGS: '--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output $(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
   PIP_CACHE_DIR: '$(Pipeline.Workspace)/.pip-cache'
+  GITGALAXY_LICENSE_KEY: 'COMMUNITY_FREE_TIER'
 
 stages:
 - stage: SecurityScan
@@ -22,7 +30,6 @@ stages:
         versionSpec: '3.12'
       displayName: 'Initialize Python Environment'
 
-    # Cache pip packages to optimize enterprise build speeds
     - task: Cache@2
       inputs:
         key: 'pip | "$(Agent.OS)"'
@@ -30,20 +37,27 @@ stages:
         cacheHitVar: PIP_CACHE_RESTORED
       displayName: 'Configure Dependency Caching'
 
+    # 1. Install the tool globally FIRST (Immune to Poisoned PRs)
     - script: |
         python -m pip install --upgrade pip
-        pip install gitgalaxy>=2.4.0
-      displayName: 'Install GitGalaxy CLI Engine'
+        pip install gitgalaxy networkx tiktoken xgboost pandas numpy
+      displayName: 'Install GitGalaxy & Heavy Physics Engines'
 
+    # 2. NOW pull the potentially untrusted code onto the runner
+    - checkout: self
+      fetchDepth: 0
+      displayName: 'Checkout Repository (Full Depth)'
+
+    # 3. Execute the scan (No package managers allowed down here)
     - script: |
-        galaxyscope . --max-risk-exposure $(GITGALAXY_MAX_RISK) --fail-on-secrets --fail-on-malware --sarif-only --output $(Build.ArtifactStagingDirectory)/gitgalaxy-results_sarif.json
+        echo "Running: $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)"
+        $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)
       displayName: 'Execute Zero-Trust Spectral Audit'
 
-    # Publish SARIF telemetry back to the Azure Pipeline runs
     - task: PublishPipelineArtifact@1
       inputs:
-        targetPath: '$(Build.ArtifactStagingDirectory)/gitgalaxy-results_sarif.json'
+        targetPath: '$(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
         artifact: 'GitGalaxySecurityLogs'
         publishLocation: 'pipeline'
       displayName: 'Upload SARIF Security Metrics'
-      condition: always()
+      condition: always()

gitgalaxy-2.3.23/bitbucket-pipelines.yml

@@ -0,0 +1,81 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: Bitbucket Pipelines
+
+image: python:3.12-slim
+
+clone:
+  depth: full
+
+pipelines:
+  default:
+    - step:
+        name: 'GitGalaxy Zero-Trust Spectral Audit'
+        caches:
+          - pip
+        script:
+          # 1. Configuration Variables (Mirroring GitHub Action Inputs)
+          - export GG_TOOL="galaxyscope"
+          - export GG_TARGET="gitgalaxy/"
+          - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+          - export GG_VERSION="latest"
+          - export GG_FULL_PRECISION="true"
+          - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
+
+          # 2. Dynamic Installation Logic
+          - pip install --upgrade pip
+          - |
+            if [ "$GG_VERSION" = "local" ]; then
+              echo "Dogfooding local GitGalaxy source..."
+              pip install -e .
+            elif [ "$GG_VERSION" = "latest" ]; then
+              echo "Installing latest GitGalaxy from PyPI..."
+              pip install gitgalaxy
+            else
+              echo "Installing GitGalaxy version ${GG_VERSION}..."
+              pip install "gitgalaxy==${GG_VERSION}"
+            fi
+          - |
+            if [ "$GG_FULL_PRECISION" = "true" ]; then
+              echo "Unlocking Full Precision Mode..."
+              pip install networkx tiktoken xgboost pandas numpy
+            else
+              echo "Running in ultra-fast Zero-Dependency Mode."
+            fi
+
+          # 3. Dynamic Execution
+          - echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
+          - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+                    
+        artifacts:
+          # 4. Publish SARIF telemetry for Bitbucket Code Insights
+          - gitgalaxy-results_sarif.json
+          
+  custom:
+    manual-security-scan:
+      - step:
+          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
+          caches:
+            - pip
+          script:
+            - export GG_TOOL="galaxyscope"
+            - export GG_TARGET="gitgalaxy/"
+            - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+            - export GG_VERSION="latest"
+            - export GG_FULL_PRECISION="true"
+            - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
+            - pip install --upgrade pip
+            - |
+              if [ "$GG_VERSION" = "local" ]; then
+                pip install -e .
+              elif [ "$GG_VERSION" = "latest" ]; then
+                pip install gitgalaxy
+              else
+                pip install "gitgalaxy==${GG_VERSION}"
+              fi
+            - |
+              if [ "$GG_FULL_PRECISION" = "true" ]; then
+                pip install networkx tiktoken xgboost pandas numpy
+              fi
+            - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+          artifacts:
+            - gitgalaxy-results_sarif.json

{gitgalaxy-2.3.21 → gitgalaxy-2.3.23}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.21
+Version: 2.3.23
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.21 → gitgalaxy-2.3.23}/gitgalaxy.egg-info/SOURCES.txt

@@ -8,6 +8,7 @@ MANIFEST.in
 README.md
 SECURITY.md
 action.yml
+azure-pipelines.yml
 bitbucket-pipelines.yml
 cd pipeline strategy.md
 github-action-readme.md
@@ -113,7 +114,6 @@ gitgalaxy/tools/supply_chain_security/vault_sentinel.py
 gitgalaxy/tools/terabyte_log_scanning/README.md
 gitgalaxy/tools/terabyte_log_scanning/pii_leak_hunter.py
 gitgalaxy/tools/terabyte_log_scanning/terabyte_log_scanner.py
-templates/scan.yml
 templates/azure/azure-pipelines.yml
 templates/bitbucket/bitbucket-pipelines.yml
 templates/github/gitgalaxy-pipeline.yml

{gitgalaxy-2.3.21 → gitgalaxy-2.3.23}/gitgalaxy.egg-info/scm_file_list.json

@@ -11,6 +11,7 @@
     "mkdocs.yml",
     "CONTRIBUTING.md",
     "MANIFEST.in",
+    "azure-pipelines.yml",
     ".gitignore",
     "action.yml",
     "bitbucket-pipelines.yml",
@@ -423,7 +424,6 @@
     "docs/wiki/LLM-reports/flask_llm_report.md",
     "docs/wiki/LLM-reports/curl_llm_report.md",
     "docs/javascripts/mathjax.js",
-    "templates/scan.yml",
     "templates/bitbucket/bitbucket-pipelines.yml",
     "templates/github/gitgalaxy-pipeline.yml",
     "templates/gitlab/scan.yml",

gitgalaxy-2.3.23/gitgalaxy.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "2.3.23",
+  "distance": 0,
+  "node": "g7754a72dbc7f47178c936fde45c13ef67c7ffd61",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-07-15"
+}

gitgalaxy-2.3.23/templates/azure/azure-pipelines.yml

@@ -0,0 +1,63 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: Azure DevOps Pipelines
+
+trigger:
+  branches:
+    include:
+      - main
+  tags:
+    include:
+      - v*
+
+variables:
+  GG_TOOL: 'galaxyscope'
+  GG_TARGET: '.'
+  GG_ARGS: '--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output $(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
+  PIP_CACHE_DIR: '$(Pipeline.Workspace)/.pip-cache'
+  GITGALAXY_LICENSE_KEY: 'COMMUNITY_FREE_TIER'
+
+stages:
+- stage: SecurityScan
+  displayName: 'GitGalaxy Zero-Trust Audit'
+  jobs:
+  - job: RunGalaxyScope
+    displayName: 'GalaxyScope Static Analysis'
+    pool:
+      vmImage: 'ubuntu-latest'
+    steps:
+    - task: UsePythonVersion@0
+      inputs:
+        versionSpec: '3.12'
+      displayName: 'Initialize Python Environment'
+
+    - task: Cache@2
+      inputs:
+        key: 'pip | "$(Agent.OS)"'
+        path: $(PIP_CACHE_DIR)
+        cacheHitVar: PIP_CACHE_RESTORED
+      displayName: 'Configure Dependency Caching'
+
+    # 1. Install the tool globally FIRST (Immune to Poisoned PRs)
+    - script: |
+        python -m pip install --upgrade pip
+        pip install gitgalaxy networkx tiktoken xgboost pandas numpy
+      displayName: 'Install GitGalaxy & Heavy Physics Engines'
+
+    # 2. NOW pull the potentially untrusted code onto the runner
+    - checkout: self
+      fetchDepth: 0
+      displayName: 'Checkout Repository (Full Depth)'
+
+    # 3. Execute the scan (No package managers allowed down here)
+    - script: |
+        echo "Running: $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)"
+        $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)
+      displayName: 'Execute Zero-Trust Spectral Audit'
+
+    - task: PublishPipelineArtifact@1
+      inputs:
+        targetPath: '$(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
+        artifact: 'GitGalaxySecurityLogs'
+        publishLocation: 'pipeline'
+      displayName: 'Upload SARIF Security Metrics'
+      condition: always()

gitgalaxy-2.3.23/templates/bitbucket/bitbucket-pipelines.yml

@@ -0,0 +1,74 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: Bitbucket Pipelines
+
+image: python:3.12-slim
+
+clone:
+  depth: full
+
+pipelines:
+  default:
+    - step:
+        name: 'GitGalaxy Zero-Trust Spectral Audit'
+        caches:
+          - pip
+        script:
+          # 1. Configuration Variables
+          - export GG_TOOL="galaxyscope"
+          - export GG_TARGET="."
+          - export GG_ARGS="--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+          - export GG_VERSION="latest"
+          - export GG_FULL_PRECISION="true"
+          
+          # 2. Dynamic Installation Logic
+          - pip install --upgrade pip
+          - |
+            if [ "$GG_VERSION" = "latest" ]; then
+              echo "Installing latest GitGalaxy from PyPI..."
+              pip install gitgalaxy
+            else
+              echo "Installing GitGalaxy version ${GG_VERSION}..."
+              pip install "gitgalaxy==${GG_VERSION}"
+            fi
+          - |
+            if [ "$GG_FULL_PRECISION" = "true" ]; then
+              echo "Unlocking Full Precision Mode..."
+              pip install networkx tiktoken xgboost pandas numpy
+            else
+              echo "Running in ultra-fast Zero-Dependency Mode."
+            fi
+
+          # 3. Dynamic Execution
+          - echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
+          - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+                    
+        artifacts:
+          # 4. Publish SARIF telemetry for Bitbucket Code Insights
+          - gitgalaxy-results_sarif.json
+          
+  custom:
+    manual-security-scan:
+      - step:
+          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
+          caches:
+            - pip
+          script:
+            - export GG_TOOL="galaxyscope"
+            - export GG_TARGET="."
+            - export GG_ARGS="--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+            - export GG_VERSION="latest"
+            - export GG_FULL_PRECISION="true"
+            - pip install --upgrade pip
+            - |
+              if [ "$GG_VERSION" = "latest" ]; then
+                pip install gitgalaxy
+              else
+                pip install "gitgalaxy==${GG_VERSION}"
+              fi
+            - |
+              if [ "$GG_FULL_PRECISION" = "true" ]; then
+                pip install networkx tiktoken xgboost pandas numpy
+              fi
+            - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+          artifacts:
+            - gitgalaxy-results_sarif.json

gitgalaxy-2.3.23/templates/gitlab/scan.yml

@@ -0,0 +1,69 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: GitLab CI/CD Component
+
+spec:
+  inputs:
+    tool:
+      description: "The GitGalaxy command to execute."
+      default: "galaxyscope"
+    target:
+      description: "The directory or file path to scan."
+      default: "."
+    args:
+      description: "Additional CLI arguments to pass to the tool."
+      default: "--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+    version:
+      description: "The version of GitGalaxy to install from PyPI. Defaults to latest."
+      default: "latest"
+    full_precision:
+      description: "Opt-in to install heavy physics engines for Blast Radius and ML Threat Inference."
+      default: "true"
+
+---
+
+gitgalaxy_scan:
+  stage: test
+  image: python:3.12-slim
+  variables:
+    PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"
+    GIT_DEPTH: "0"  # Forces full chronological fetch to prevent Temporal Collapse
+  cache:
+    paths:
+      - .cache/pip
+  script:
+    - echo "Initializing GitGalaxy Component Environment..."
+    - export GG_TOOL="$[[ inputs.tool ]]"
+    - export GG_TARGET="$[[ inputs.target ]]"
+    - export GG_ARGS="$[[ inputs.args ]]"
+    - export GG_VERSION="$[[ inputs.version ]]"
+    - export GG_FULL_PRECISION="$[[ inputs.full_precision ]]"
+    - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
+    
+    - pip install --upgrade pip
+    - |
+      if [ "$GG_VERSION" = "local" ]; then
+        echo "Dogfooding local GitGalaxy source..."
+        pip install -e .
+      elif [ "$GG_VERSION" = "latest" ]; then
+        echo "Installing latest GitGalaxy from PyPI..."
+        pip install gitgalaxy
+      else
+        echo "Installing GitGalaxy version ${GG_VERSION}..."
+        pip install "gitgalaxy==${GG_VERSION}"
+      fi
+    - |
+      if [ "$GG_FULL_PRECISION" = "true" ]; then
+        echo "Unlocking Full Precision Mode..."
+        pip install networkx tiktoken xgboost pandas numpy
+      else
+        echo "Running in ultra-fast Zero-Dependency Mode."
+      fi
+
+    - echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
+    - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+  artifacts:
+    when: always
+    reports:
+      # Automatically maps the SARIF output directly into GitLab's native Security Dashboard
+      sast: gitgalaxy-results_sarif.json
+  allow_failure: false

gitgalaxy-2.3.21/.gitlab-ci.yml

@@ -1,10 +0,0 @@
-create-release:
-  stage: deploy
-  image: registry.gitlab.com/gitlab-org/release-cli:latest
-  rules:
-    - if: $CI_COMMIT_TAG
-  script:
-    - echo "Publishing CI/CD Catalog Release for $CI_COMMIT_TAG"
-  release:
-    tag_name: $CI_COMMIT_TAG
-    description: "Automated component release synced directly from GitHub Source of Truth."

gitgalaxy-2.3.21/bitbucket-pipelines.yml

@@ -1,40 +0,0 @@
-# GitGalaxy Enterprise Security Scanner
-# Integration: Bitbucket Pipelines
-
-image: python:3.12-slim
-
-clone:
-  depth: full
-
-pipelines:
-  default:
-    - step:
-        name: 'GitGalaxy Zero-Trust Spectral Audit'
-        caches:
-          - pip
-        script:
-          # 1. Initialize Python Environment & Install GitGalaxy CLI Engine
-          # Added heavy physics engines for full precision (networkx, tiktoken, etc.)
-          - pip install --upgrade pip
-          - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-          
-          # 2. Execute Zero-Trust Spectral Audit with Enterprise Gates
-          # Added --ignore tests/ to prevent mock data from tripping the secrets firewall
-          - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json
-                    
-        artifacts:
-          # 3. Publish SARIF telemetry for Bitbucket Code Insights
-          - gitgalaxy-results_sarif.json
-          
-  custom:
-    manual-security-scan:
-      - step:
-          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
-          caches:
-            - pip
-          script:
-            - pip install --upgrade pip
-            - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-            - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json
-          artifacts:
-            - gitgalaxy-results_sarif.json

gitgalaxy-2.3.21/gitgalaxy.egg-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "2.3.21",
-  "distance": 0,
-  "node": "g9311c9a9a262ee84e20e58c5e814b918079ed2ae",
-  "dirty": false,
-  "branch": "HEAD",
-  "node_date": "2026-07-14"
-}

gitgalaxy-2.3.21/templates/bitbucket/bitbucket-pipelines.yml

@@ -1,37 +0,0 @@
-# GitGalaxy Enterprise Security Scanner
-# Integration: Bitbucket Pipelines
-
-image: python:3.12-slim
-
-pipelines:
-  default:
-    - step:
-        name: 'GitGalaxy Zero-Trust Spectral Audit'
-        caches:
-          - pip
-        script:
-          # 1. Initialize Python Environment & Install GitGalaxy CLI Engine
-          # Added heavy physics engines for full precision (networkx, tiktoken, etc.)
-          - pip install --upgrade pip
-          - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-          
-          # 2. Execute Zero-Trust Spectral Audit with Enterprise Gates
-          # Added --ignore tests/ to prevent mock data from tripping the secrets firewall
-          - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
-                    
-        artifacts:
-          # 3. Publish SARIF telemetry for Bitbucket Code Insights
-          - gitgalaxy-results_sarif.json
-          
-  custom:
-    manual-security-scan:
-      - step:
-          name: 'GitGalaxy Zero-Trust Spectral Audit (Manual)'
-          caches:
-            - pip
-          script:
-            - pip install --upgrade pip
-            - pip install gitgalaxy>=2.4.0 networkx tiktoken xgboost pandas numpy
-            - galaxyscope gitgalaxy/ --max-risk-exposure ${GITGALAXY_MAX_RISK:-95} --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
-          artifacts:
-            - gitgalaxy-results_sarif.json

gitgalaxy-2.3.21/templates/gitlab/scan.yml

@@ -1,32 +0,0 @@
-# GitGalaxy Enterprise Security Scanner
-# Integration: GitLab CI/CD Component
-
-spec:
-  inputs:
-    max-risk:
-      type: string
-      default: "80"
-      description: "Maximum allowable calculated risk exposure threshold before forcing pipeline failure"
-
----
-
-gitgalaxy_scan:
-  stage: test
-  image: python:3.12-slim
-  variables:
-    PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"
-  cache:
-    paths:
-      - .cache/pip
-  before_script:
-    - echo "Initializing GitGalaxy blAST Engine Environment..."
-    - pip install --upgrade pip
-    - pip install gitgalaxy>=2.3.1
-  script:
-    - echo "Executing Zero-Trust Spectral Audit..."
-    - galaxyscope . --max-risk-exposure $[[ inputs.max-risk ]] --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json
-  artifacts:
-    when: always
-    reports:
-      sast: gitgalaxy-results_sarif.json
-  allow_failure: false

gitgalaxy-2.3.21/templates/scan.yml

@@ -1,11 +0,0 @@
-spec:
-  inputs:
-    target:
-      default: '.'
-      description: "The directory to scan."
----
-gitgalaxy_scan:
-  image: python:3.10-slim
-  script:
-    - pip install gitgalaxy
-    - galaxyscope $[[ inputs.target ]]