gitgalaxy 2.3.42__tar.gz → 2.3.43__tar.gz

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/.github/workflows/gitgalaxy-artifacts.yml

@@ -51,12 +51,12 @@ jobs:
           mv *_llm.md gitgalaxy_architecture_brief.md 2>/dev/null || true
 
       - name: Upload SARIF to GitHub Security Tab
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.0
         with:
           sarif_file: gitgalaxy-results_sarif.json
 
       - name: Upload SBOM as Build Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: gitgalaxy-sbom
           path: gitgalaxy-sbom.json

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/.github/workflows/gitgalaxy-audit.yml

@@ -38,13 +38,13 @@ jobs:
           
       - name: Upload SARIF to GitHub Security Tab
         if: always()
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.0
         with:
           sarif_file: gitgalaxy-results_sarif.json
 
       - name: Upload SARIF as Build Artifact (Backup)
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: gitgalaxy-sarif-report
           path: gitgalaxy-results_sarif.json

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/.github/workflows/muninn.yml

@@ -31,6 +31,6 @@ jobs:
 
       - name: Upload SARIF
         if: always() && hashFiles('muninn.sarif') != ''
-        uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
+        uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4
         with:
           sarif_file: muninn.sarif

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.42
+Version: 2.3.43
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/gitgalaxy/requirements.txt

@@ -3,14 +3,14 @@ attrs==26.1.0
 babel==2.18.0
 backcall==0.2.0
 backrefs==7.0
-beautifulsoup4==4.14.3
+beautifulsoup4==4.15.0
 bleach==6.4.0
 blinker==1.9.0
 build==1.4.3
 certifi==2026.2.25
 cffi==2.0.0
 charset-normalizer==3.4.7
-click==8.3.3
+click==8.4.2
 colorama==0.4.6
 contourpy==1.3.3
 coverage==7.14.0
@@ -41,7 +41,7 @@ Jinja2==3.1.6
 joblib==1.5.3
 jsonschema==4.26.0
 jsonschema-specifications==2025.9.1
-jupyter_client==8.8.0
+jupyter_client==8.9.1
 jupyter_core==5.9.1
 jupyterlab_pygments==0.3.0
 keyring==25.7.0
@@ -87,7 +87,7 @@ pluggy==1.6.0
 prompt_toolkit==3.0.52
 ptyprocess==0.7.0
 pure_eval==0.2.3
-pyan3==2.4.0
+pyan3==2.6.1
 pycodestyle==2.14.0
 pycparser==3.0
 pydeps==3.0.2

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.42
+Version: 2.3.43
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/gitgalaxy.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "2.3.42",
+  "tag": "2.3.43",
   "distance": 0,
-  "node": "gc19190190cb08a04b41bb6a53fbaf57f3cd8e669",
+  "node": "g8cfa3b24c9b2f199858980084154d88a6a318317",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-07-17"

{gitgalaxy-2.3.42 → gitgalaxy-2.3.43}/templates/bitbucket/bitbucket_insights.py

@@ -71,9 +71,18 @@ def publish_insights(sarif_path: str):
         })
 
     report_id = "gitgalaxy-audit-report"
-    base_url = f"http://localhost:29418/2.0/repositories/{workspace}/{repo}/commit/{commit}/reports/{report_id}"
+    # Bitbucket's proxy requires HTTP (not HTTPS) to automatically inject the Auth header
+    base_url = f"http://api.bitbucket.org/2.0/repositories/{workspace}/{repo}/commit/{commit}/reports/{report_id}"
     
-    # 4. Create the Parent Report (PUT)
+    # 4. Set up the Proxy Handler for Bitbucket Pipelines
+    proxy_handler = urllib.request.ProxyHandler({
+        'http': 'http://localhost:29418',
+        'https': 'http://localhost:29418'
+    })
+    opener = urllib.request.build_opener(proxy_handler)
+    urllib.request.install_opener(opener)
+    
+    # Create the Parent Report (PUT)
     report_payload = json.dumps({
         "title": "GitGalaxy Spectral Audit",
         "details": f"GitGalaxy mapped {len(bitbucket_annotations)} architectural threats.",
@@ -81,9 +90,9 @@ def publish_insights(sarif_path: str):
         "result": "FAILED" if any(a["severity"] == "HIGH" for a in bitbucket_annotations) else "PASSED"
     }).encode("utf-8")
 
-    # Enforce loopback destination boundaries to neutralize remote protocol exploits
-    if not base_url.startswith("http://localhost:29418/"):
-        print("❌ Security Violation: Invalid localized API destination.")
+    # Enforce API destination boundaries to neutralize remote protocol exploits
+    if not base_url.startswith("http://api.bitbucket.org/"):
+        print("❌ Security Violation: Invalid API destination.")
         sys.exit(1)
 
     req = urllib.request.Request(base_url, data=report_payload, method="PUT")
@@ -105,8 +114,8 @@ def publish_insights(sarif_path: str):
         chunk = bitbucket_annotations[i:i + chunk_size]
         chunk_payload = json.dumps(chunk).encode("utf-8")
         
-        if not annotations_url.startswith("http://localhost:29418/"):
-            print("❌ Security Violation: Invalid localized API destination.")
+        if not annotations_url.startswith("http://api.bitbucket.org/"):
+            print("❌ Security Violation: Invalid API destination.")
             sys.exit(1)
             
         req = urllib.request.Request(annotations_url, data=chunk_payload, method="POST")