gitgalaxy 2.3.31__tar.gz → 2.3.32__tar.gz

{gitgalaxy-2.3.31 → gitgalaxy-2.3.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.31
+Version: 2.3.32
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.31 → gitgalaxy-2.3.32}/bitbucket-pipelines.yml

@@ -16,7 +16,7 @@ pipelines:
           # 1. Configuration Variables (Mirroring GitHub Action Inputs)
           - export GG_TOOL="galaxyscope"
           - export GG_TARGET="gitgalaxy/"
-          - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+          - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json"
           - export GG_VERSION="latest"
           - export GG_FULL_PRECISION="true"
           - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
@@ -44,8 +44,8 @@ pipelines:
 
           # 3. Dynamic Execution
           - |
-            echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
-            ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+            echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
+            ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
                     
         artifacts:
           # 4. Publish SARIF telemetry for Bitbucket Code Insights
@@ -60,7 +60,7 @@ pipelines:
           script:
             - export GG_TOOL="galaxyscope"
             - export GG_TARGET="gitgalaxy/"
-            - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+            - export GG_ARGS="--max-systemic-threat 150.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json"
             - export GG_VERSION="latest"
             - export GG_FULL_PRECISION="true"
             - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
@@ -78,6 +78,7 @@ pipelines:
                 pip install networkx tiktoken xgboost pandas numpy
               fi
             - |
-              ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+              echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
+              ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
           artifacts:
-            - gitgalaxy-results_sarif.json
+            - gitgalaxy-results_sarif.json

{gitgalaxy-2.3.31 → gitgalaxy-2.3.32}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.31
+Version: 2.3.32
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.31 → gitgalaxy-2.3.32}/gitgalaxy.egg-info/SOURCES.txt

@@ -113,6 +113,7 @@ gitgalaxy/tools/supply_chain_security/vault_sentinel.py
 gitgalaxy/tools/terabyte_log_scanning/README.md
 gitgalaxy/tools/terabyte_log_scanning/pii_leak_hunter.py
 gitgalaxy/tools/terabyte_log_scanning/terabyte_log_scanner.py
+templates/scan.yml
 templates/azure/azure-pipelines.yml
 templates/bitbucket/bitbucket-pipelines.yml
 templates/github/gitgalaxy-pipeline.yml

{gitgalaxy-2.3.31 → gitgalaxy-2.3.32}/gitgalaxy.egg-info/scm_file_list.json

@@ -94,6 +94,7 @@
     "gitgalaxy/standards/gitgalaxy_config.py",
     "gitgalaxy/standards/how_to_add_a_language.md",
     "gitgalaxy/standards/__init__.py",
+    "templates/scan.yml",
     "templates/bitbucket/bitbucket-pipelines.yml",
     "templates/github/gitgalaxy-pipeline.yml",
     "templates/azure/azure-pipelines.yml",

{gitgalaxy-2.3.31 → gitgalaxy-2.3.32}/gitgalaxy.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "2.3.31",
+  "tag": "2.3.32",
   "distance": 0,
-  "node": "ga1a957cad25f3bff203dbc8698d85ab4ca53f288",
+  "node": "gefcf5d356cfe68f88da8d1c8f21a788aee2d13c6",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-07-16"

{gitgalaxy-2.3.31 → gitgalaxy-2.3.32}/templates/gitlab/scan.yml

@@ -11,7 +11,7 @@ spec:
       default: "."
     args:
       description: "Additional CLI arguments to pass to the tool."
-      default: "--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results.json"
+      default: "--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json"
     version:
       description: "The version of GitGalaxy to install from PyPI. Defaults to latest."
       default: "latest"
@@ -59,8 +59,8 @@ gitgalaxy_scan:
         echo "Running in ultra-fast Zero-Dependency Mode."
       fi
 
-    - echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
-    - ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+    - echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
+    - ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
   artifacts:
     when: always
     reports:

gitgalaxy-2.3.32/templates/scan.yml

@@ -0,0 +1,69 @@
+# GitGalaxy Enterprise Security Scanner
+# Integration: GitLab CI/CD Component
+
+spec:
+  inputs:
+    tool:
+      description: "The GitGalaxy command to execute."
+      default: "galaxyscope"
+    target:
+      description: "The directory or file path to scan."
+      default: "."
+    args:
+      description: "Additional CLI arguments to pass to the tool."
+      default: "--max-risk-exposure 95.0 --fail-on-secrets --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json"
+    version:
+      description: "The version of GitGalaxy to install from PyPI. Defaults to latest."
+      default: "latest"
+    full_precision:
+      description: "Opt-in to install heavy physics engines for Blast Radius and ML Threat Inference."
+      default: "true"
+
+---
+
+gitgalaxy_scan:
+  stage: test
+  image: python:3.12-slim
+  variables:
+    PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"
+    GIT_DEPTH: "0"  # Forces full chronological fetch to prevent Temporal Collapse
+  cache:
+    paths:
+      - .cache/pip
+  script:
+    - echo "Initializing GitGalaxy Component Environment..."
+    - export GG_TOOL="$[[ inputs.tool ]]"
+    - export GG_TARGET="$[[ inputs.target ]]"
+    - export GG_ARGS="$[[ inputs.args ]]"
+    - export GG_VERSION="$[[ inputs.version ]]"
+    - export GG_FULL_PRECISION="$[[ inputs.full_precision ]]"
+    - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
+    
+    - pip install --upgrade pip
+    - |
+      if [ "$GG_VERSION" = "local" ]; then
+        echo "Dogfooding local GitGalaxy source..."
+        pip install -e .
+      elif [ "$GG_VERSION" = "latest" ]; then
+        echo "Installing latest GitGalaxy from PyPI..."
+        pip install gitgalaxy
+      else
+        echo "Installing GitGalaxy version ${GG_VERSION}..."
+        pip install "gitgalaxy==${GG_VERSION}"
+      fi
+    - |
+      if [ "$GG_FULL_PRECISION" = "true" ]; then
+        echo "Unlocking Full Precision Mode..."
+        pip install networkx tiktoken xgboost pandas numpy
+      else
+        echo "Running in ultra-fast Zero-Dependency Mode."
+      fi
+
+    - echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
+    - ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
+  artifacts:
+    when: always
+    reports:
+      # Automatically maps the SARIF output directly into GitLab's native Security Dashboard
+      sast: gitgalaxy-results_sarif.json
+  allow_failure: false