openhound-github 0.3.1__tar.gz → 0.3.3__tar.gz

{openhound_github-0.3.1 → openhound_github-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: openhound-github
-Version: 0.3.1
+Version: 0.3.3
 Summary: Github collector for OpenHound
 Author-email: "jdreijer@specterops.io" <jdreijer@specterops.io>, Jared Atkinson <jatkinson@specterops.io>
 License-File: LICENSE.md

{openhound_github-0.3.1 → openhound_github-0.3.3}/pyproject.toml

@@ -28,7 +28,7 @@ local_scheme = "no-local-version"
 
 [dependency-groups]
 dev = [
-    "openhound==0.1.4",
+    "openhound",
     "pre-commit>=4.5.1",
     "pytest>=9.0.1",
     "ruff>=0.15.5",

{openhound_github-0.3.1 → openhound_github-0.3.3}/src/openhound_github/models/workflow.py

@@ -51,8 +51,8 @@ class WorkflowStepDefinition(BaseModel):
     name: str | None = None
     uses: str | None = None
     run: str | None = None
-    with_: dict[str, Any] = Field(default_factory=dict, alias="with")
-    env: dict[str, Any] = Field(default_factory=dict)
+    with_: dict[str, str] = Field(default_factory=dict, alias="with")
+    env: dict[str, str] = Field(default_factory=dict)
 
     @field_validator("with_", "env", mode="before")
     @classmethod
@@ -79,23 +79,45 @@ class WorkflowStepDefinition(BaseModel):
         return "unknown"
 
 
+class Container(BaseModel):
+    image: str
+    credentials: dict[str, str] | None = None
+    env: dict[str, str] | None = None
+    ports: list[int] | None = None
+
+    def __str__(self) -> str:
+        return self.image
+
+
+class RunsOn(BaseModel):
+    group: str | None = None
+    labels: list[str] | str | None = None
+
+
 class WorkflowJobDefinition(BaseModel):
     model_config = ConfigDict(extra="allow", populate_by_name=True)
 
-    runs_on: Any = Field(default=None, alias="runs-on")
-    needs: Any = None
-    environment: Any = None
-    permissions: Any = None
+    runs_on: str | list[str] | RunsOn | None = Field(default=None, alias="runs-on")
+    needs: str | list[str] | None = None
+    environment: str | dict[str, str] | None = None
+    permissions: str | dict[str, str] | None = None
     uses: str | None = None
-    container: Any = None
-    env: dict[str, Any] = Field(default_factory=dict)
-    secrets: dict[str, Any] | str | None = None
+    container: str | Container | None = None
+    env: dict[str, str] = Field(default_factory=dict)
+    secrets: dict[str, str] = Field(default_factory=dict)
     steps: list[WorkflowStepDefinition] = Field(default_factory=list)
 
-    @field_validator("env", mode="before")
+    # This may seem strange, but the GitHub yaml format accepts empty values for keys
+    # additionally, to prevent other yaml parsing issues, make sure we always convert the key/value to string first
+    # for both env and secrets
+    @field_validator("env", "secrets", mode="before")
     @classmethod
-    def dict_or_empty(cls, value: Any) -> dict[str, Any]:
-        return value if isinstance(value, dict) else {}
+    def dict_or_empty(cls, value: Any) -> dict[str, str]:
+        return (
+            {f"{str(key)}": f"{str(value)}" for key, value in value.items()}
+            if isinstance(value, dict)
+            else {}
+        )
 
     @field_validator("steps", mode="before")
     @classmethod
@@ -123,27 +145,15 @@ class WorkflowJobDefinition(BaseModel):
             return str(self.environment["name"])
         return None
 
-    @property
-    def is_self_hosted(self) -> bool:
-        if isinstance(self.runs_on, str):
-            return self.runs_on == "self-hosted"
-        if isinstance(self.runs_on, list):
-            return "self-hosted" in [str(item) for item in self.runs_on]
-        return False
-
     @property
     def container_value(self) -> str | None:
-        if self.container is None:
-            return None
-        if isinstance(self.container, str):
-            return self.container
-        return str(self.container)
+        return str(self.container) if self.container else None
 
 
 class WorkflowDocument(BaseModel):
     model_config = ConfigDict(extra="allow")
 
-    permissions: Any = None
+    permissions: str | dict[str, str] | None = None
     jobs: dict[str, WorkflowJobDefinition] = Field(default_factory=dict)
 
     @field_validator("jobs", mode="before")
@@ -490,10 +500,9 @@ class Workflow(BaseAsset):
         for job_key, job in document.jobs.items():
             secret_refs = []
             variable_refs = []
-            if isinstance(job.secrets, dict):
-                secret_refs.extend(
-                    mapping_references(SECRET_REFERENCE_RE, job.secrets, "secrets")
-                )
+            secret_refs.extend(
+                mapping_references(SECRET_REFERENCE_RE, job.secrets, "secrets")
+            )
             secret_refs.extend(mapping_references(SECRET_REFERENCE_RE, job.env, "env"))
             variable_refs.extend(
                 mapping_references(VARIABLE_REFERENCE_RE, job.env, "env")
@@ -505,7 +514,6 @@ class Workflow(BaseAsset):
                     "name": f"{self.repository_name}\\{job_key}",
                     "job_key": job_key,
                     "runs_on": job.runs_on,
-                    "is_self_hosted": job.is_self_hosted,
                     "container": job.container_value,
                     "environment": job.environment_name,
                     "permissions": job.permissions

{openhound_github-0.3.1 → openhound_github-0.3.3}/src/openhound_github/models/workflow_job.py

@@ -21,6 +21,7 @@ from openhound_github.graph import GHNode, GHNodeProperties
 from openhound_github.kinds import edges as ek
 from openhound_github.kinds import nodes as nk
 from openhound_github.main import app
+from openhound_github.models.workflow import RunsOn
 
 TEMPLATE_RE = re.compile(r"\$\{\{\s*[^}]+?\s*\}\}")
 
@@ -49,7 +50,7 @@ class GHWorkflowJobProperties(GHNodeProperties):
     """
 
     job_key: str | None = None
-    runs_on: Any = None
+    runs_on: list[str] | None = None
     is_self_hosted: bool = False
     container: str | None = None
     environment: str | None = None
@@ -153,8 +154,7 @@ class WorkflowJob(BaseAsset):
     repository_name: str
     repository_node_id: str
     org_login: str
-    runs_on: Any = None
-    is_self_hosted: bool = False
+    runs_on: list[str] | None = None
     container: str | None = None
     environment: str | None = None
     permissions: list[str] | None = None
@@ -172,14 +172,52 @@ class WorkflowJob(BaseAsset):
     def normalize_permissions(cls, value: Any) -> list[str] | None:
         if value is None:
             return None
+
+        if isinstance(value, str):
+            return [value]
+
+        if isinstance(value, list):
+            return [str(item) for item in value]
+
         if isinstance(value, dict):
-            return [f"{key}:{permission}" for key, permission in value.items()]
+            return [f"{str(key)}:{str(value)}" for key, value in value.items()]
+
+        return [str(value)]
+
+    @field_validator("runs_on", mode="before")
+    @classmethod
+    def normalize_runs_on(cls, value: Any) -> list[str] | None:
+        if value is None:
+            return None
+
         if isinstance(value, str):
             return [value]
+
         if isinstance(value, list):
             return [str(item) for item in value]
+
+        if isinstance(value, RunsOn):
+            value = value.model_dump()
+
+        if isinstance(value, dict):
+            labels = value.get("labels")
+            if labels is None:
+                return None
+
+            if isinstance(labels, str):
+                return [labels]
+
+            if isinstance(labels, list):
+                return [str(item) for item in labels]
+
+            return [str(labels)]
+
         return [str(value)]
 
+    @property
+    def is_self_hosted(self) -> bool:
+        return "self-hosted" in (self.runs_on or [])
+
     @property
     def as_node(self) -> GHNode:
         return GHNode(

{openhound_github-0.3.1 → openhound_github-0.3.3}/uv.lock

@@ -541,6 +541,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/62/a1/3d680cbfd5f4b8f15abc1d571870c5fc3e594bb582bc3b64ea099db13e56/jinja2-3.1.6-py3-none-any.whl", hash = "sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67", size = 134899, upload-time = "2025-03-05T20:05:00.369Z" },
 ]
 
+[[package]]
+name = "joserfc"
+version = "1.7.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "cryptography" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/44/90/25cb27518750218e4f850be63d8bbb2343efaad1c01c3571aaa4b3c33bd7/joserfc-1.7.1.tar.gz", hash = "sha256:77d0b76514879c68c6f433bc5b7357a4ab72008ff1e33d8379fd11d72bd8ca81", size = 233181, upload-time = "2026-06-08T07:21:33.412Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/b3/00/fa62404c3e347f946faa13aa21085205f9cc06ad17671e37f81a51662ae8/joserfc-1.7.1-py3-none-any.whl", hash = "sha256:b3e3d655612e2e1ef67b2600f2f420e12e537b020208fab1761fad647319c164", size = 70423, upload-time = "2026-06-08T07:21:32.001Z" },
+]
+
 [[package]]
 name = "jsonpath-ng"
 version = "1.7.0"
@@ -835,7 +847,7 @@ wheels = [
 
 [[package]]
 name = "openhound"
-version = "0.1.4"
+version = "0.2.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "alive-progress" },
@@ -853,16 +865,16 @@ dependencies = [
     { name = "typer" },
     { name = "types-requests" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/54/e9/3fc99609ab7d4643e69dae0d1ba07138385b1ac78847f56c4515a00efed6/openhound-0.1.4.tar.gz", hash = "sha256:e8a6e86f2ab92aa087374410f14a97ff025329d6ba75d64a54c8f932befd19c7", size = 3539391, upload-time = "2026-05-04T21:40:16.914Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/b5/55/1e411c2328b0dc5bd5719332c86664fd211a1b5d9967f6e7c2fe62893259/openhound-0.2.1.tar.gz", hash = "sha256:a72ce592f37154cdb25268066ed57b891823653ee0fed546013ffcfe60ddb3d0", size = 3539819, upload-time = "2026-06-16T17:59:40.221Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/46/06/1cb73a6d46acaddb39e6bce0246ac000a07bea7d3ad5074a702c1d0612bf/openhound-0.1.4-py3-none-any.whl", hash = "sha256:b4f711f928520645aa0ddc559bd7597ac49ae3321c8a9c4fdee812d255bbafde", size = 65132, upload-time = "2026-05-04T21:40:15.695Z" },
+    { url = "https://files.pythonhosted.org/packages/65/af/7e358be9436ac1ca183382536b26ff916f5b06d96bd7d7529ce8f3fe028c/openhound-0.2.1-py3-none-any.whl", hash = "sha256:bc3bb9863d99d3de2bb1906560f2a38edcb898f8dcac463881f2f95e38c3c051", size = 65136, upload-time = "2026-06-16T17:59:38.923Z" },
 ]
 
 [[package]]
 name = "openhound-github"
 source = { editable = "." }
 dependencies = [
-    { name = "cryptography" },
+    { name = "joserfc" },
     { name = "requests" },
 ]
 
@@ -878,14 +890,14 @@ dev = [
 
 [package.metadata]
 requires-dist = [
-    { name = "cryptography", specifier = ">=46.0.6" },
+    { name = "joserfc", specifier = ">=1.6.5" },
     { name = "requests", specifier = ">=2.33.0" },
 ]
 
 [package.metadata.requires-dev]
 dev = [
     { name = "mypy", specifier = ">=1.19.1" },
-    { name = "openhound", specifier = "==0.1.4" },
+    { name = "openhound" },
     { name = "pre-commit", specifier = ">=4.5.1" },
     { name = "pytest", specifier = ">=9.0.1" },
     { name = "ruff", specifier = ">=0.15.5" },