gitgalaxy 2.3.39__tar.gz → 2.3.42__tar.gz

{gitgalaxy-2.3.39 → gitgalaxy-2.3.42}/.github/workflows/muninn.yml

@@ -31,6 +31,6 @@ jobs:
 
       - name: Upload SARIF
         if: always() && hashFiles('muninn.sarif') != ''
-        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+        uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
         with:
           sarif_file: muninn.sarif

{gitgalaxy-2.3.39 → gitgalaxy-2.3.42}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.39
+Version: 2.3.42
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.39 → gitgalaxy-2.3.42}/bitbucket-pipelines.yml

@@ -13,10 +13,10 @@ pipelines:
         caches:
           - pip
         script:
-          # 1. Configuration Variables (Mirroring GitHub Action Inputs)
+          # 1. Configuration Variables
           - export GG_TOOL="galaxyscope"
           - export GG_TARGET="."
-          - export GG_ARGS="--config .galaxyscope.yaml --max-risk-exposure 120 --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json"
+          - export GG_ARGS="--config .galaxyscope.yaml --max-risk-exposure 120 --fail-on-malware --sarif-only --output gitgalaxy-results.json"
           - export GG_VERSION="latest"
           - export GG_FULL_PRECISION="true"
           - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
@@ -46,9 +46,18 @@ pipelines:
           - |
             echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
             ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
+            
+          # 4. Bitbucket Code Insights Native Integration
+          # Automatically translates the SARIF output into inline Pull Request annotations
+          - |
+            if [ -f "templates/bitbucket/bitbucket_insights.py" ]; then
+              echo "Publishing Code Insights..."
+              python templates/bitbucket/bitbucket_insights.py gitgalaxy-results_sarif.json
+            else
+              echo "Code Insights utility not found at templates/bitbucket/bitbucket_insights.py. Skipping annotations."
+            fi
                     
         artifacts:
-          # 4. Publish SARIF telemetry for Bitbucket Code Insights
           - gitgalaxy-results_sarif.json
           
   custom:
@@ -60,7 +69,7 @@ pipelines:
           script:
             - export GG_TOOL="galaxyscope"
             - export GG_TARGET="."
-            - export GG_ARGS="--config .galaxyscope.yaml --max-risk-exposure 120 --fail-on-malware --sarif-only --output gitgalaxy-results_sarif.json"
+            - export GG_ARGS="--config .galaxyscope.yaml --max-risk-exposure 120 --fail-on-malware --sarif-only --output gitgalaxy-results.json"
             - export GG_VERSION="latest"
             - export GG_FULL_PRECISION="true"
             - export GITGALAXY_LICENSE_KEY="COMMUNITY_FREE_TIER"
@@ -80,5 +89,9 @@ pipelines:
             - |
               echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
               ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
+            - |
+              if [ -f "templates/bitbucket/bitbucket_insights.py" ]; then
+                python templates/bitbucket/bitbucket_insights.py gitgalaxy-results_sarif.json
+              fi
           artifacts:
             - gitgalaxy-results_sarif.json

{gitgalaxy-2.3.39 → gitgalaxy-2.3.42}/gitgalaxy/requirements.txt

@@ -2,7 +2,7 @@ asttokens==3.0.1
 attrs==26.1.0
 babel==2.18.0
 backcall==0.2.0
-backrefs==6.2
+backrefs==7.0
 beautifulsoup4==4.14.3
 bleach==6.4.0
 blinker==1.9.0
@@ -62,7 +62,7 @@ mkdocs-material==9.7.6
 mkdocs-material-extensions==1.3.1
 more-itertools==10.8.0
 narwhals==2.18.1
-nbclient==0.10.4
+nbclient==0.11.0
 nbconvert==7.17.1
 nbformat==5.10.4
 networkx==3.6.1
@@ -81,7 +81,7 @@ pexpect==4.9.0
 pickleshare==0.7.5
 pillow==12.3.0
 pipreqs==0.5.0
-platformdirs==4.9.4
+platformdirs==4.10.0
 plotly==6.8.0
 pluggy==1.6.0
 prompt_toolkit==3.0.52
@@ -98,7 +98,7 @@ pynndescent==0.6.0
 pypandoc==1.17
 pyparsing==3.3.2
 pyproject_hooks==1.2.0
-pytest==9.0.3
+pytest==9.1.1
 pytest-cov==7.1.0
 python-dateutil==2.9.0.post0
 python-dotenv==1.2.2
@@ -124,7 +124,7 @@ stack-data==0.6.3
 stdlib-list==0.12.0
 stripe==14.4.1
 threadpoolctl==3.6.0
-tiktoken==0.12.0
+tiktoken==0.13.0
 tinycss2==1.4.0
 tornado==6.5.7
 tqdm==4.68.3

{gitgalaxy-2.3.39 → gitgalaxy-2.3.42}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.39
+Version: 2.3.42
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.39 → gitgalaxy-2.3.42}/gitgalaxy.egg-info/SOURCES.txt

@@ -116,6 +116,7 @@ gitgalaxy/tools/terabyte_log_scanning/terabyte_log_scanner.py
 templates/scan.yml
 templates/azure/azure-pipelines.yml
 templates/bitbucket/bitbucket-pipelines.yml
+templates/bitbucket/bitbucket_insights.py
 templates/github/gitgalaxy-pipeline.yml
 templates/gitlab/scan.yml
 tests/README.md