lupaxa-github-token-validator 0.1.0__tar.gz

lupaxa_github_token_validator-0.1.0/LICENCE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) The Lupaxa Project
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

lupaxa_github_token_validator-0.1.0/PKG-INFO

@@ -0,0 +1,206 @@
+Metadata-Version: 2.4
+Name: lupaxa-github-token-validator
+Version: 0.1.0
+Summary: Report what a GitHub token is allowed to do.
+Author: The Lupaxa Project
+Maintainer: The Lupaxa Project
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/lupaxa-gh-toolbox/github-token-validator
+Project-URL: Repository, https://github.com/lupaxa-gh-toolbox/github-token-validator
+Project-URL: Issues, https://github.com/lupaxa-gh-toolbox/github-token-validator/issues
+Keywords: github,permissions,token
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Natural Language :: English
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENCE
+Requires-Dist: colored<3.0.0,>=2.3.2
+Requires-Dist: requests<3.0.0,>=2.32.0
+Requires-Dist: rich<15.0.0,>=14.0.0
+Provides-Extra: dev
+Requires-Dist: build<2.0.0,>=1.2.2; extra == "dev"
+Requires-Dist: mypy<2.0.0,>=1.17.0; extra == "dev"
+Requires-Dist: pre-commit<5.0.0,>=4.2.0; extra == "dev"
+Requires-Dist: pytest<9.0.0,>=8.4.0; extra == "dev"
+Requires-Dist: pytest-cov<7.0.0,>=6.2.0; extra == "dev"
+Requires-Dist: ruff<1.0.0,>=0.12.0; extra == "dev"
+Requires-Dist: twine<7.0.0,>=6.1.0; extra == "dev"
+Requires-Dist: types-setuptools<81.0.0,>=80.1.6; extra == "dev"
+Provides-Extra: test
+Requires-Dist: pytest>=8.0; extra == "test"
+Requires-Dist: pytest-cov>=5.0; extra == "test"
+Dynamic: license-file
+
+<p align="center">
+    <a href="https://github.com/lupaxa-gh-toolbox">
+        <img src="https://raw.githubusercontent.com/the-lupaxa-project/brand-assets/master/logos/organisations/gh-toolbox/readme-logo.png" alt="Organisation Logo" />
+    </a>
+</p>
+
+<h1 align="center">GitHub Token Validator</h1>
+
+**GitHub Token Validator** takes a GitHub token and reports what that token is allowed to do. It sends read-only `GET` requests. It does not list repositories, organisations, or other resources, and it never prints the token.
+
+## Installation
+
+Requires Python 3.11 or newer.
+
+```bash
+pip install lupaxa-github-token-validator
+```
+
+Two commands are installed. They do the same work.
+
+```bash
+gtv --version
+github-token-validator --version
+```
+
+The shorter `gtv` command is used in the examples below.
+
+## Token
+
+`gtv` reads `GITHUB_TOKEN`. `--token` overrides that variable. A blank `--token` does not fall back to the environment. Surrounding whitespace is removed before the token is classified or sent.
+
+```bash
+export GITHUB_TOKEN="your-token"
+gtv
+```
+
+```bash
+gtv --token "$OTHER_TOKEN"
+```
+
+## Which flags a token needs
+
+Classic, OAuth, and user-to-server tokens return their scopes in the `X-OAuth-Scopes` header, so `--org` and `--repo` are optional.
+
+Fine-grained, installation, and unknown tokens do not, so they need at least one of those flags before any request is sent.
+
+A refresh token makes no request.
+
+| Prefix         | Kind                                      | Needs a target |
+| -------------- | ----------------------------------------- | -------------- |
+| `ghp_`         | Classic personal access token             | No             |
+| `github_pat_`  | Fine-grained personal access token        | Yes            |
+| `gho_`         | OAuth access token                        | No             |
+| `ghu_`         | GitHub App user-to-server token           | No             |
+| `ghs_`         | GitHub App installation or Actions token  | Yes            |
+| `ghr_`         | Refresh token                             | No             |
+| anything else  | Unknown                                   | Yes            |
+
+Passing `--org` checks only that organisation. Passing `--repo` checks only that repository. Passing both checks both. The tool never looks up further targets.
+
+`--org` is one name. Surrounding spaces are removed. A blank name, a space inside the name, or a `/` is rejected.
+
+`--repo` is exactly `OWNER/NAME`: one slash, both sides non-empty, and no whitespace.
+
+## Examples
+
+A classic, OAuth, or user-to-server token. The scope table is the permission report. Account checks still run.
+
+```bash
+gtv
+gtv --timeout 30
+```
+
+The same token, plus one named target. Only the catalog you name is probed.
+
+```bash
+gtv --org lupaxa-gh-toolbox
+gtv --repo lupaxa-gh-toolbox/github-token-validator
+gtv --org lupaxa-gh-toolbox --repo lupaxa-gh-toolbox/github-token-validator
+```
+
+A fine-grained token, an installation or Actions token, or an unknown token. At least one target is required.
+
+```bash
+gtv --repo lupaxa-gh-toolbox/github-token-validator
+gtv --org lupaxa-gh-toolbox
+```
+
+Omitting both flags exits 2 and prints a message such as `Fine-grained personal access token requires --org or --repo.` The token is not included in that message.
+
+A refresh token (`ghr_`) prints a short summary and exits 2. It does not call the API.
+
+## Flags
+
+| Flag                | Meaning                                                                                              |
+| ------------------- | ---------------------------------------------------------------------------------------------------- |
+| `-h`, `--help`      | Help, then exit 0                                                                                    |
+| `-V`, `--version`   | Version, then exit 0                                                                                 |
+| `-t`, `--token`     | Token. Overrides `GITHUB_TOKEN`. A blank value does not fall back to the environment                 |
+| `-T`, `--timeout`   | Seconds per request. Default 10. Must be an integer greater than 0                                   |
+| `--org NAME`        | One organisation. Required for fine-grained, installation, and unknown tokens unless `--repo` is set |
+| `--repo OWNER/NAME` | One repository, as `OWNER/NAME`. Required for those same tokens unless `--org` is set                |
+
+## Report
+
+A completed run prints Rich tables.
+
+**Summary.** Token kind, login from `GET /user`, the raw scope header, and the rate-limit limit, used count, remaining count, and reset time in UTC (`YYYY-MM-DD HH:MM:SS`).
+
+**Scopes.** Classic, OAuth, and user-to-server tokens list each `X-OAuth-Scopes` value, in header order, with a short description. An unknown scope is `No local description.`
+
+A missing or blank header is `none`, with the text `GitHub sent no scopes.`
+
+Fine-grained tokens do not return OAuth scopes. That row says `Fine-grained tokens do not return OAuth scopes.`
+
+Installation and Actions tokens list `X-Accepted-GitHub-Permissions` as a permission and its access, such as `read` or `write`. A missing header is `none`, with the text `GitHub sent no accepted permissions.`
+
+**Account permissions.** Run for every API token except installation and Actions tokens, which are not user tokens:
+
+- Profile, Emails, Following, Organisations, Org membership roles
+- Gists, Notifications
+- Public keys, GPG keys, SSH signing keys
+- Packages, Repository list, Codespaces, Installations
+
+**Target permissions.** Printed only when `--org` or `--repo` was passed.
+
+Organisation checks: Organisation, Members, Hooks, Audit log, Actions permissions, Packages.
+
+Repository checks: Repository, Contents, Hooks, Workflows, Deployments, Invitations, Code scanning, Commits.
+
+List requests use `per_page=1`. Response bodies are discarded except the login on `GET /user`, so names, paths, messages, and other resource details are not printed.
+
+| Result            | Meaning                          |
+| ----------------- | -------------------------------- |
+| `granted`         | HTTP 200 or 204                  |
+| `denied`          | HTTP 403                         |
+| `not applicable`  | HTTP 404                         |
+| `error N`         | Any other HTTP status            |
+
+If GitHub rejects the token (HTTP 401), a rate limit stops the run, or a request times out or cannot connect, the run stops and exits 1.
+
+A rate limit is HTTP 429, or HTTP 403 when `X-RateLimit-Remaining` is `0` or `Retry-After` is set. A 403 that is only a permission denial stays a `denied` row.
+
+On the first request, only that error is printed. On a later request, the tables gathered so far are printed, then the error.
+
+## Exit codes
+
+| Code | Meaning                                                                                                              |
+| ---- | -------------------------------------------------------------------------------------------------------------------- |
+| 0    | The report completed, including rows that are denied, not applicable, or an HTTP error                               |
+| 1    | The token was rejected, the rate limit stopped the run, or a request timed out or could not connect                  |
+| 2    | Missing token, refresh token, missing target, invalid `--org`, `--repo`, or `--timeout`, or an unrecognized argument |
+| 130  | Keyboard interrupt                                                                                                   |
+
+An unrecognized argument is rejected without printing the argument values.
+
+<a href="https://github.com/the-lupaxa-project">
+    <img src="https://raw.githubusercontent.com/the-lupaxa-project/brand-assets/master/logos/components/footer-for-child-orgs.svg" alt="The Lupaxa Project Footer" width="100%" />
+</a>

lupaxa_github_token_validator-0.1.0/README.md

@@ -0,0 +1,159 @@
+<p align="center">
+    <a href="https://github.com/lupaxa-gh-toolbox">
+        <img src="https://raw.githubusercontent.com/the-lupaxa-project/brand-assets/master/logos/organisations/gh-toolbox/readme-logo.png" alt="Organisation Logo" />
+    </a>
+</p>
+
+<h1 align="center">GitHub Token Validator</h1>
+
+**GitHub Token Validator** takes a GitHub token and reports what that token is allowed to do. It sends read-only `GET` requests. It does not list repositories, organisations, or other resources, and it never prints the token.
+
+## Installation
+
+Requires Python 3.11 or newer.
+
+```bash
+pip install lupaxa-github-token-validator
+```
+
+Two commands are installed. They do the same work.
+
+```bash
+gtv --version
+github-token-validator --version
+```
+
+The shorter `gtv` command is used in the examples below.
+
+## Token
+
+`gtv` reads `GITHUB_TOKEN`. `--token` overrides that variable. A blank `--token` does not fall back to the environment. Surrounding whitespace is removed before the token is classified or sent.
+
+```bash
+export GITHUB_TOKEN="your-token"
+gtv
+```
+
+```bash
+gtv --token "$OTHER_TOKEN"
+```
+
+## Which flags a token needs
+
+Classic, OAuth, and user-to-server tokens return their scopes in the `X-OAuth-Scopes` header, so `--org` and `--repo` are optional.
+
+Fine-grained, installation, and unknown tokens do not, so they need at least one of those flags before any request is sent.
+
+A refresh token makes no request.
+
+| Prefix         | Kind                                      | Needs a target |
+| -------------- | ----------------------------------------- | -------------- |
+| `ghp_`         | Classic personal access token             | No             |
+| `github_pat_`  | Fine-grained personal access token        | Yes            |
+| `gho_`         | OAuth access token                        | No             |
+| `ghu_`         | GitHub App user-to-server token           | No             |
+| `ghs_`         | GitHub App installation or Actions token  | Yes            |
+| `ghr_`         | Refresh token                             | No             |
+| anything else  | Unknown                                   | Yes            |
+
+Passing `--org` checks only that organisation. Passing `--repo` checks only that repository. Passing both checks both. The tool never looks up further targets.
+
+`--org` is one name. Surrounding spaces are removed. A blank name, a space inside the name, or a `/` is rejected.
+
+`--repo` is exactly `OWNER/NAME`: one slash, both sides non-empty, and no whitespace.
+
+## Examples
+
+A classic, OAuth, or user-to-server token. The scope table is the permission report. Account checks still run.
+
+```bash
+gtv
+gtv --timeout 30
+```
+
+The same token, plus one named target. Only the catalog you name is probed.
+
+```bash
+gtv --org lupaxa-gh-toolbox
+gtv --repo lupaxa-gh-toolbox/github-token-validator
+gtv --org lupaxa-gh-toolbox --repo lupaxa-gh-toolbox/github-token-validator
+```
+
+A fine-grained token, an installation or Actions token, or an unknown token. At least one target is required.
+
+```bash
+gtv --repo lupaxa-gh-toolbox/github-token-validator
+gtv --org lupaxa-gh-toolbox
+```
+
+Omitting both flags exits 2 and prints a message such as `Fine-grained personal access token requires --org or --repo.` The token is not included in that message.
+
+A refresh token (`ghr_`) prints a short summary and exits 2. It does not call the API.
+
+## Flags
+
+| Flag                | Meaning                                                                                              |
+| ------------------- | ---------------------------------------------------------------------------------------------------- |
+| `-h`, `--help`      | Help, then exit 0                                                                                    |
+| `-V`, `--version`   | Version, then exit 0                                                                                 |
+| `-t`, `--token`     | Token. Overrides `GITHUB_TOKEN`. A blank value does not fall back to the environment                 |
+| `-T`, `--timeout`   | Seconds per request. Default 10. Must be an integer greater than 0                                   |
+| `--org NAME`        | One organisation. Required for fine-grained, installation, and unknown tokens unless `--repo` is set |
+| `--repo OWNER/NAME` | One repository, as `OWNER/NAME`. Required for those same tokens unless `--org` is set                |
+
+## Report
+
+A completed run prints Rich tables.
+
+**Summary.** Token kind, login from `GET /user`, the raw scope header, and the rate-limit limit, used count, remaining count, and reset time in UTC (`YYYY-MM-DD HH:MM:SS`).
+
+**Scopes.** Classic, OAuth, and user-to-server tokens list each `X-OAuth-Scopes` value, in header order, with a short description. An unknown scope is `No local description.`
+
+A missing or blank header is `none`, with the text `GitHub sent no scopes.`
+
+Fine-grained tokens do not return OAuth scopes. That row says `Fine-grained tokens do not return OAuth scopes.`
+
+Installation and Actions tokens list `X-Accepted-GitHub-Permissions` as a permission and its access, such as `read` or `write`. A missing header is `none`, with the text `GitHub sent no accepted permissions.`
+
+**Account permissions.** Run for every API token except installation and Actions tokens, which are not user tokens:
+
+- Profile, Emails, Following, Organisations, Org membership roles
+- Gists, Notifications
+- Public keys, GPG keys, SSH signing keys
+- Packages, Repository list, Codespaces, Installations
+
+**Target permissions.** Printed only when `--org` or `--repo` was passed.
+
+Organisation checks: Organisation, Members, Hooks, Audit log, Actions permissions, Packages.
+
+Repository checks: Repository, Contents, Hooks, Workflows, Deployments, Invitations, Code scanning, Commits.
+
+List requests use `per_page=1`. Response bodies are discarded except the login on `GET /user`, so names, paths, messages, and other resource details are not printed.
+
+| Result            | Meaning                          |
+| ----------------- | -------------------------------- |
+| `granted`         | HTTP 200 or 204                  |
+| `denied`          | HTTP 403                         |
+| `not applicable`  | HTTP 404                         |
+| `error N`         | Any other HTTP status            |
+
+If GitHub rejects the token (HTTP 401), a rate limit stops the run, or a request times out or cannot connect, the run stops and exits 1.
+
+A rate limit is HTTP 429, or HTTP 403 when `X-RateLimit-Remaining` is `0` or `Retry-After` is set. A 403 that is only a permission denial stays a `denied` row.
+
+On the first request, only that error is printed. On a later request, the tables gathered so far are printed, then the error.
+
+## Exit codes
+
+| Code | Meaning                                                                                                              |
+| ---- | -------------------------------------------------------------------------------------------------------------------- |
+| 0    | The report completed, including rows that are denied, not applicable, or an HTTP error                               |
+| 1    | The token was rejected, the rate limit stopped the run, or a request timed out or could not connect                  |
+| 2    | Missing token, refresh token, missing target, invalid `--org`, `--repo`, or `--timeout`, or an unrecognized argument |
+| 130  | Keyboard interrupt                                                                                                   |
+
+An unrecognized argument is rejected without printing the argument values.
+
+<a href="https://github.com/the-lupaxa-project">
+    <img src="https://raw.githubusercontent.com/the-lupaxa-project/brand-assets/master/logos/components/footer-for-child-orgs.svg" alt="The Lupaxa Project Footer" width="100%" />
+</a>

lupaxa_github_token_validator-0.1.0/pyproject.toml

@@ -0,0 +1,292 @@
+[build-system]
+requires = [
+  "setuptools>=77.0.0",
+]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "lupaxa-github-token-validator"
+version = "0.1.0"
+description = "Report what a GitHub token is allowed to do."
+readme = "README.md"
+requires-python = ">=3.11"
+license = "MIT"
+license-files = [
+  "LICENCE",
+]
+
+authors = [
+  { name = "The Lupaxa Project" },
+]
+
+maintainers = [
+  { name = "The Lupaxa Project" },
+]
+
+keywords = [
+  "github",
+  "permissions",
+  "token",
+]
+
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "Natural Language :: English",
+  "Operating System :: MacOS",
+  "Operating System :: Microsoft :: Windows",
+  "Operating System :: POSIX",
+  "Operating System :: POSIX :: Linux",
+  "Programming Language :: Python",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3 :: Only",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
+  "Topic :: Software Development",
+]
+
+dependencies = [
+  "colored>=2.3.2,<3.0.0",
+  "requests>=2.32.0,<3.0.0",
+  "rich>=14.0.0,<15.0.0",
+]
+
+[project.optional-dependencies]
+dev = [
+  "build>=1.2.2,<2.0.0",
+  "mypy>=1.17.0,<2.0.0",
+  "pre-commit>=4.2.0,<5.0.0",
+  "pytest>=8.4.0,<9.0.0",
+  "pytest-cov>=6.2.0,<7.0.0",
+  "ruff>=0.12.0,<1.0.0",
+  "twine>=6.1.0,<7.0.0",
+  "types-setuptools>=80.1.6,<81.0.0",
+]
+test = [
+  "pytest>=8.0",
+  "pytest-cov>=5.0",
+]
+
+[project.urls]
+Homepage = "https://github.com/lupaxa-gh-toolbox/github-token-validator"
+Repository = "https://github.com/lupaxa-gh-toolbox/github-token-validator"
+Issues = "https://github.com/lupaxa-gh-toolbox/github-token-validator/issues"
+
+[project.scripts]
+github-token-validator = "lupaxa.github_token_validator.cli:main"
+gtv = "lupaxa.github_token_validator.cli:main"
+
+[tool.setuptools]
+package-dir = { "" = "src" }
+
+[tool.setuptools.packages.find]
+where = [
+  "src",
+]
+include = [
+  "lupaxa.github_token_validator*",
+]
+namespaces = true
+
+[tool.ruff]
+target-version = "py311"
+line-length = 88
+src = [
+  "src",
+  "tests",
+]
+extend-exclude = [
+  ".mypy_cache",
+  ".pytest_cache",
+  ".tox",
+  ".venv",
+  "build",
+  "dist",
+]
+
+[tool.ruff.lint]
+# Core Lupaxa rule set
+select = [
+  # --- Essential correctness + hygiene ---
+  "E",    # pycodestyle: basic style errors
+  "F",    # pyflakes: unused vars, undefined names
+  "I",    # import sorting
+  "B",    # bugbear: common footguns
+
+  # --- Security layer ---
+  "S",    # bandit-like security checks
+
+  # --- Modernisation + cleanup ---
+  "UP",   # pyupgrade: modern Python idioms
+  "SIM",  # simplify complex expressions/conditions
+  "C4",   # flake8-comprehensions
+  "ISC",  # implicit string-concat safety
+
+  # --- New additions (strict mode) ---
+  "D",    # pydocstyle: docstring formatting/consistency
+  "ANN",  # annotations: missing/incorrect typing hints
+  "PT",   # pytest: best practices for tests
+]
+
+# Disable rules that conflict with the Lupaxa documentation style
+# or with Ruff's formatter.
+ignore = [
+  "D200",   # One-line docstring should fit on one line
+  "D201",   # No blank lines allowed before function docstring
+  "D202",   # No blank lines allowed after function docstring
+  "D203",   # One blank line required before class docstring
+  "D204",   # One blank line required after class docstring
+  "D205",   # Blank line required between summary and description
+  "D206",   # Docstring indentation
+  "D207",   # Docstring under-indentation
+  "D208",   # Docstring over-indentation
+  "D209",   # Multi-line docstring closing quotes placement
+  "D210",   # No surrounding whitespace allowed
+  "D211",   # No blank line allowed before class docstring
+  "D212",   # Summary must start on the first physical line
+  "ISC001", # Conflicts with Ruff formatting
+]
+
+[tool.ruff.lint.per-file-ignores]
+"tests/**/*.py" = [
+  "ANN",
+  "D",
+  "S101",
+  "S105",
+]
+
+[tool.ruff.lint.flake8-annotations]
+allow-star-arg-any = false
+ignore-fully-untyped = false
+mypy-init-return = true
+suppress-dummy-args = false
+suppress-none-returning = false
+
+[tool.ruff.lint.flake8-builtins]
+builtins-ignorelist = [
+  "id",
+]
+
+[tool.ruff.lint.flake8-pytest-style]
+fixture-parentheses = false
+mark-parentheses = false
+parametrize-names-type = "tuple"
+parametrize-values-row-type = "tuple"
+parametrize-values-type = "list"
+
+[tool.ruff.lint.flake8-quotes]
+docstring-quotes = "double"
+inline-quotes = "double"
+multiline-quotes = "double"
+
+[tool.ruff.lint.flake8-tidy-imports]
+ban-relative-imports = "parents"
+
+[tool.ruff.lint.isort]
+combine-as-imports = true
+force-sort-within-sections = true
+known-first-party = [
+  "lupaxa",
+]
+split-on-trailing-comma = true
+
+[tool.ruff.lint.mccabe]
+max-complexity = 10
+
+[tool.ruff.lint.pep8-naming]
+classmethod-decorators = [
+  "classmethod",
+]
+staticmethod-decorators = [
+  "staticmethod",
+]
+
+[tool.ruff.lint.pylint]
+allow-dunder-method-names = []
+max-args = 10
+max-branches = 12
+max-returns = 6
+max-statements = 50
+
+[tool.ruff.lint.pyupgrade]
+keep-runtime-typing = false
+
+[tool.ruff.format]
+docstring-code-format = true
+docstring-code-line-length = 88
+indent-style = "space"
+line-ending = "lf"
+quote-style = "double"
+skip-magic-trailing-comma = false
+
+[tool.mypy]
+python_version = "3.11"
+files = [ "src", "tests" ]
+mypy_path = "src"
+explicit_package_bases = true
+packages = [ "lupaxa.github_token_validator" ]
+strict = true
+pretty = true
+show_column_numbers = true
+show_error_codes = true
+show_error_context = true
+show_traceback = true
+warn_unreachable = true
+warn_unused_configs = true
+exclude = [ "^build/", "^dist/" ]
+
+[[tool.mypy.overrides]]
+module = "colored"
+ignore_missing_imports = true
+
+[tool.pytest.ini_options]
+minversion = "8.0"
+addopts = [
+  "--strict-config",
+  "--strict-markers",
+  "--showlocals",
+  "--tb=short",
+]
+testpaths = [
+  "tests",
+]
+pythonpath = [
+  "src",
+]
+xfail_strict = true
+filterwarnings = [
+  "error",
+]
+
+[tool.coverage.run]
+branch = true
+parallel = true
+source = [ "lupaxa.github_token_validator" ]
+
+[tool.coverage.paths]
+source = [
+  "src/lupaxa/github_token_validator",
+  "*/site-packages/lupaxa/github_token_validator",
+]
+
+[tool.coverage.report]
+exclude_also = [
+  "if TYPE_CHECKING:",
+  "if __name__ == \"__main__\":",
+  "raise AssertionError",
+  "raise NotImplementedError",
+]
+fail_under = 90
+precision = 2
+show_missing = true
+skip_covered = false
+skip_empty = true
+
+[tool.coverage.html]
+directory = "coverage/html"
+
+[tool.coverage.xml]
+output = "coverage/coverage.xml"

lupaxa_github_token_validator-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

lupaxa_github_token_validator-0.1.0/src/lupaxa/github_token_validator/__init__.py

@@ -0,0 +1,7 @@
+"""Report what a GitHub token is allowed to do."""
+
+from __future__ import annotations
+
+from lupaxa.github_token_validator.cli import main
+
+__all__ = ["main"]