gitgalaxy 2.3.22__tar.gz → 2.3.28__tar.gz

{gitgalaxy-2.3.22 → gitgalaxy-2.3.28}/.github/workflows/publish.yml

@@ -78,3 +78,19 @@ jobs:
           git remote add bitbucket https://${{ secrets.BITBUCKET_USERNAME }}:${{ secrets.BITBUCKET_SYNC_TOKEN }}@bitbucket.org/squid-protocol/gitgalaxy.git
           git push -f bitbucket HEAD:main
           git push -f --tags bitbucket
+
+  azure-sync:
+    name: Sync to Azure DevOps Repository
+    needs: pypi-publish
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout GitHub Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Sync Code and Tags to Azure
+        run: |
+          git remote add azure https://gitgalaxy:${{ secrets.AZURE_DEVOPS_TOKEN }}@dev.azure.com/gitgalaxy/gitgalaxy/_git/gitgalaxy
+          git push -f azure HEAD:main
+          git push -f --tags azure

{gitgalaxy-2.3.22 → gitgalaxy-2.3.28}/.gitignore

@@ -101,4 +101,4 @@ telemetry_out/
 tests/telemetry_out/
 
 # Force tracking of the Golden Master despite global *.json ignore
-!tests/golden_master_audit.json
+!tests/golden_master_audit.json*.vsix

{gitgalaxy-2.3.22 → gitgalaxy-2.3.28}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.22
+Version: 2.3.28
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.22/templates/azure → gitgalaxy-2.3.28}/azure-pipelines.yml

@@ -2,11 +2,19 @@
 # Integration: Azure DevOps Pipelines
 
 trigger:
-  - main
+  branches:
+    include:
+      - main
+  tags:
+    include:
+      - v*
 
 variables:
-  GITGALAXY_MAX_RISK: '80'
+  GG_TOOL: 'galaxyscope'
+  GG_TARGET: '.'
+  GG_ARGS: '--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output $(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
   PIP_CACHE_DIR: '$(Pipeline.Workspace)/.pip-cache'
+  GITGALAXY_LICENSE_KEY: 'COMMUNITY_FREE_TIER'
 
 stages:
 - stage: SecurityScan
@@ -22,7 +30,6 @@ stages:
         versionSpec: '3.12'
       displayName: 'Initialize Python Environment'
 
-    # Cache pip packages to optimize enterprise build speeds
     - task: Cache@2
       inputs:
         key: 'pip | "$(Agent.OS)"'
@@ -30,20 +37,27 @@ stages:
         cacheHitVar: PIP_CACHE_RESTORED
       displayName: 'Configure Dependency Caching'
 
+    # 1. Install the tool globally FIRST (Immune to Poisoned PRs)
     - script: |
         python -m pip install --upgrade pip
-        pip install gitgalaxy>=2.4.0
-      displayName: 'Install GitGalaxy CLI Engine'
+        pip install gitgalaxy networkx tiktoken xgboost pandas numpy
+      displayName: 'Install GitGalaxy & Heavy Physics Engines'
 
+    # 2. NOW pull the potentially untrusted code onto the runner
+    - checkout: self
+      fetchDepth: 0
+      displayName: 'Checkout Repository (Full Depth)'
+
+    # 3. Execute the scan (No package managers allowed down here)
     - script: |
-        galaxyscope . --max-risk-exposure $(GITGALAXY_MAX_RISK) --fail-on-secrets --fail-on-malware --sarif-only --output $(Build.ArtifactStagingDirectory)/gitgalaxy-results_sarif.json
+        echo "Running: $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)"
+        $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)
       displayName: 'Execute Zero-Trust Spectral Audit'
 
-    # Publish SARIF telemetry back to the Azure Pipeline runs
     - task: PublishPipelineArtifact@1
       inputs:
-        targetPath: '$(Build.ArtifactStagingDirectory)/gitgalaxy-results_sarif.json'
+        targetPath: '$(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
         artifact: 'GitGalaxySecurityLogs'
         publishLocation: 'pipeline'
       displayName: 'Upload SARIF Security Metrics'
-      condition: always()
+      condition: always()

{gitgalaxy-2.3.22 → gitgalaxy-2.3.28}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.22
+Version: 2.3.28
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.22 → gitgalaxy-2.3.28}/gitgalaxy.egg-info/SOURCES.txt

@@ -8,6 +8,7 @@ MANIFEST.in
 README.md
 SECURITY.md
 action.yml
+azure-pipelines.yml
 bitbucket-pipelines.yml
 cd pipeline strategy.md
 github-action-readme.md

{gitgalaxy-2.3.22 → gitgalaxy-2.3.28}/gitgalaxy.egg-info/scm_file_list.json

@@ -11,6 +11,7 @@
     "mkdocs.yml",
     "CONTRIBUTING.md",
     "MANIFEST.in",
+    "azure-pipelines.yml",
     ".gitignore",
     "action.yml",
     "bitbucket-pipelines.yml",

gitgalaxy-2.3.28/gitgalaxy.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "2.3.28",
+  "distance": 0,
+  "node": "gcb789b2d45a6ea1ac429d0e45a7a7d65fcc09918",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-07-15"
+}

gitgalaxy-2.3.28/templates/azure/azure-pipelines.yml

@@ -0,0 +1,63 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: Azure DevOps Pipelines
+
+trigger:
+  branches:
+    include:
+      - main
+  tags:
+    include:
+      - v*
+
+variables:
+  GG_TOOL: 'galaxyscope'
+  GG_TARGET: '.'
+  GG_ARGS: '--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output $(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
+  PIP_CACHE_DIR: '$(Pipeline.Workspace)/.pip-cache'
+  GITGALAXY_LICENSE_KEY: 'COMMUNITY_FREE_TIER'
+
+stages:
+- stage: SecurityScan
+  displayName: 'GitGalaxy Zero-Trust Audit'
+  jobs:
+  - job: RunGalaxyScope
+    displayName: 'GalaxyScope Static Analysis'
+    pool:
+      vmImage: 'ubuntu-latest'
+    steps:
+    - task: UsePythonVersion@0
+      inputs:
+        versionSpec: '3.12'
+      displayName: 'Initialize Python Environment'
+
+    - task: Cache@2
+      inputs:
+        key: 'pip | "$(Agent.OS)"'
+        path: $(PIP_CACHE_DIR)
+        cacheHitVar: PIP_CACHE_RESTORED
+      displayName: 'Configure Dependency Caching'
+
+    # 1. Install the tool globally FIRST (Immune to Poisoned PRs)
+    - script: |
+        python -m pip install --upgrade pip
+        pip install gitgalaxy networkx tiktoken xgboost pandas numpy
+      displayName: 'Install GitGalaxy & Heavy Physics Engines'
+
+    # 2. NOW pull the potentially untrusted code onto the runner
+    - checkout: self
+      fetchDepth: 0
+      displayName: 'Checkout Repository (Full Depth)'
+
+    # 3. Execute the scan (No package managers allowed down here)
+    - script: |
+        echo "Running: $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)"
+        $(GG_TOOL) $(GG_TARGET)$(GG_ARGS)
+      displayName: 'Execute Zero-Trust Spectral Audit'
+
+    - task: PublishPipelineArtifact@1
+      inputs:
+        targetPath: '$(Build.ArtifactStagingDirectory)/gitgalaxy-results.json'
+        artifact: 'GitGalaxySecurityLogs'
+        publishLocation: 'pipeline'
+      displayName: 'Upload SARIF Security Metrics'
+      condition: always()

{gitgalaxy-2.3.22 → gitgalaxy-2.3.28}/tests/core_engine/test_language_standards_strict.py

@@ -63,7 +63,7 @@ def test_c_knr_ambiguity_trap():
         + "    INVALID_MACRO"
     )
 
-    assert_redos_immune(c_func, poison_knr)
+    assert_redos_immune(c_func, poison_knr, timeout_sec=3.0)
 
     # Ensure it still correctly matches the MS-DOS BEGIN edge case
     valid_knr = "int legacy_func(a) \n    int a; \n BEGIN \n"

gitgalaxy-2.3.22/gitgalaxy.egg-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "2.3.22",
-  "distance": 0,
-  "node": "gf0792cf7e81d72b386abfb894fb0cb2648d62d38",
-  "dirty": false,
-  "branch": "HEAD",
-  "node_date": "2026-07-14"
-}