safe-file-example 0.2.1__tar.gz → 0.3.1__tar.gz

{safe_file_example-0.2.1 → safe_file_example-0.3.1}/.gitignore

@@ -12,3 +12,6 @@ venv/
 env/
 bin/
 #Other
+tests/.coverage
+.coverage
+.coveragerc

safe_file_example-0.3.1/.gitlab-ci.yml

@@ -0,0 +1,221 @@
+stages:
+  - validate
+  - build
+  - test
+  - coverage
+  - scan
+
+include:
+  - template: Jobs/Dependency-Scanning.gitlab-ci.yml
+  - template: Jobs/SAST.gitlab-ci.yml
+
+variables:
+  PIP_CACHE_DIR: "$CI_PROJECT_DIR/.pip-cache"
+  TRIVY_CACHE_DIR: ".cache/trivy"
+  TRIVY_IGNORE_FILE: .trivyignore
+
+# NOTE: All stages needs to pass Ruff Format
+# Require Ruff Format by using:
+#     needs: ["Ruff Format"]
+
+# Validate stage
+
+.base_ruff:
+  stage: validate
+  interruptible: true
+  image:
+    name: ghcr.io/astral-sh/ruff:0.15.6-alpine
+  before_script:
+    - cd $CI_PROJECT_DIR
+    - ruff --version
+
+Ruff Format:
+  extends: .base_ruff
+  script:
+    - ruff format --diff
+
+# Build stage
+
+build-safe-cli:
+  stage: build
+  image: ghcr.io/astral-sh/uv:python3.13-alpine
+  needs: ["Ruff Format"]
+  before_script:
+    - python --version
+    - uv --version
+  script:
+    - echo "Building safe-file-example package..."
+    - uv build
+  artifacts:
+    paths:
+      - dist/
+    expire_in: 1 week
+
+# Test stage
+
+test_job:
+  stage: test
+  image: ghcr.io/astral-sh/uv:python3.13-alpine
+  needs: ["Ruff Format"]
+  cache:
+    paths:
+      - .pip-cache/
+  before_script:
+    - python --version
+    - uv venv
+    - source .venv/bin/activate
+    - uv pip install --upgrade pip
+    - uv sync --group test
+  script:
+    - echo "Running the tests"
+    - uv run pytest
+    - echo "Tests Finished!"
+  artifacts:
+    paths:
+      - .coverage
+
+# Coverage stage
+
+coverage-job:
+  stage: coverage
+  image: ghcr.io/astral-sh/uv:python3.13-alpine
+  needs: ["Ruff Format", "test_job"]
+  cache:
+    paths:
+      - .pip-cache/
+  before_script:
+    - python --version
+    - uv venv
+    - source .venv/bin/activate
+    - uv pip install --upgrade pip
+    - uv sync --group test
+  script:
+    - uv pip install pytest pytest-cov
+    - uv run pytest --cov --cov-report term --cov-report xml:coverage.xml
+  artifacts:
+    reports:
+      coverage_report:
+        coverage_format: cobertura
+        path: coverage.xml
+  coverage: /TOTAL.*? (100(?:\.0+)?\%|[1-9]?\d(?:\.\d+)?\%)$/
+
+trivy_scan:
+  stage: scan
+  image:
+    name: aquasec/trivy:0.73.0
+    entrypoint: [""]
+  needs: ["build-safe-cli"]
+  variables:
+    TRIVY_SEVERITY: LOW,MEDIUM,HIGH,CRITICAL
+    TRIVY_CACHE_DIR: ".cache/trivy"
+  cache:
+    paths:
+      - .cache/trivy
+  script:
+    - echo "Scanning artifacts with Trivy filesystem scan"
+
+    - echo "Trivy caches in $TRIVY_CACHE_DIR"
+    - 'ls -ltrR $TRIVY_CACHE_DIR || echo "no cache dir found!"'
+
+    - wget -O /tmp/trivy-gitlab.tpl https://github.com/aquasecurity/trivy/raw/main/contrib/gitlab.tpl
+    - head /tmp/trivy-gitlab.tpl
+
+    - echo "Running Trivy scan"
+
+    - |
+      trivy fs \
+        --scanners vuln uv.lock \
+        --cache-dir "$TRIVY_CACHE_DIR" \
+        --severity "$TRIVY_SEVERITY" \
+        --format template \
+        --template "@/tmp/trivy-gitlab.tpl" \
+        --output safe-cli-scanning-report.json
+
+    - cat safe-cli-scanning-report.json
+
+  artifacts:
+    paths:
+      - safe-cli-scanning-report.json
+    when: always
+
+cve_count:
+  stage: scan
+  image: alpine:3.22.2
+  needs:
+    - job: trivy_scan
+      artifacts: true
+  script:
+    - apk add --no-cache jq
+    - echo "Starting cve count"
+
+    - echo "Generating CVE summary..."
+    - |
+      jq -r '.vulnerabilities[] | "\(.id) - \(.severity): \(.name)"' safe-cli-scanning-report.json > cve_summary.txt || echo "No vulnerabilities found." > cve_summary.txt
+
+    - echo "Checking for HIGH or CRITICAL vulnerabilities..."
+    - |
+      critical_count=$(jq -r '.vulnerabilities[] | select(.severity=="Critical") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      high_count=$(jq -r '.vulnerabilities[] | select(.severity=="High") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      medium_count=$(jq -r '.vulnerabilities[] | select(.severity=="Medium") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      low_count=$(jq -r '.vulnerabilities[] | select(.severity=="Low") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      echo "CRITICAL: $critical_count" > cve_critical_count.txt
+      echo "HIGH: $high_count" > cve_high_count.txt
+      echo "MEDIUM: $medium_count" > cve_medium_count.txt
+      echo "LOW: $low_count" > cve_low_count.txt
+
+
+
+      if [ "$critical_count" -eq 0 ]; then
+        wget -q -O "badge-critical-count.svg" \
+        "https://img.shields.io/badge/Critical_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-critical-count.svg" \
+        "https://img.shields.io/badge/Critical_CVE-${critical_count}-darkred"
+      fi
+
+      if [ "$high_count" -eq 0 ]; then
+        wget -q -O "badge-high-count.svg" \
+        "https://img.shields.io/badge/High_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-high-count.svg" \
+        "https://img.shields.io/badge/High_CVE-${high_count}-red"
+      fi
+
+      if [ "$medium_count" -eq 0 ]; then
+        wget -q -O "badge-medium-count.svg" \
+        "https://img.shields.io/badge/Medium_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-medium-count.svg" \
+        "https://img.shields.io/badge/Medium_CVE-${medium_count}-orange"
+      fi
+
+      if [ "$low_count" -eq 0 ]; then
+        wget -q -O "badge-low-count.svg" \
+        "https://img.shields.io/badge/Low_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-low-count.svg" \
+        "https://img.shields.io/badge/Low_CVE-${low_count}-yellow"
+      fi
+
+      if [ "$critical_count" -gt 0 ] || [ "$high_count" -gt 0 ]; then
+        echo "HIGH or CRITICAL vulnerabilities found."
+        exit_code=1
+      else
+        echo "No HIGH or CRITICAL vulnerabilities found."
+        exit_code=0
+      fi
+    - exit $exit_code
+
+  artifacts:
+    paths:
+      - safe-cli-scanning-report.json
+      - cve_high_count.txt
+      - cve_critical_count.txt
+      - cve_medium_count.txt
+      - cve_low_count.txt
+      - cve_summary.txt
+      - badge-high-count.svg
+      - badge-critical-count.svg
+      - badge-medium-count.svg
+      - badge-low-count.svg
+    when: always

{safe_file_example-0.2.1 → safe_file_example-0.3.1}/.pre-commit-config.yaml

@@ -17,7 +17,6 @@ repos:
         args: ["--autofix"]
       - id: fix-byte-order-marker
       - id: check-case-conflict
-      - id: requirements-txt-fixer
       - id: mixed-line-ending
 
   - repo: https://github.com/astral-sh/ruff-pre-commit

safe_file_example-0.3.1/CHANGELOG.md

@@ -0,0 +1,56 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/2.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Types of changes
+
+- `Added` for new features.
+- `Changed` for changes in existing functionality. (The behavior worked as intended, and now works differently.)
+- `Deprecated` for soon-to-be removed features.
+- `Removed` for now removed features.
+- `Fixed` for bug fixes. (The behavior was wrong, and is now correct.)
+- `Security` for vulnerabilities. (The change addresses a vulnerability. It could fit under Fixed or Changed, but its urgency and audience are different.)
+
+## [0.3.1] - 2026-09-29
+
+### Fixed
+- Fixed an issue with the URL of SAFE File API.
+
+
+## [0.3.0] - 2026-09-25 [YANKED]
+
+### Added
+- Added support for batch importing multiple files via both interactive and non-interactive methods.
+- Added progress indicators for file import operations.
+- Added command `exit` to exit the interactive mode in CLI.
+
+### Fixed
+- Display of file size in menu when exporting files is now limited to one decimal.
+
+
+## [0.2.1] - 2026-08-06
+
+### Changed
+- Updated project dependencies.
+
+
+## [0.2.0] - 2026-05-11
+
+### Added
+- Added a VPN usage reminder on application startup.
+- Added a JWT token security reminder on application startup.
+- Added automatic version checks on application startup.
+- Added human-friendly display of file size in export file selection.
+
+
+## [0.1.1] - 2026-04-20
+- Initial release
+
+
+[0.3.1]: https://git.app.uib.no/itpublic/python/safe-file-example/-/compare/0.3.0...0.3.1?from_project_id=1062
+[0.3.0]: https://git.app.uib.no/itpublic/python/safe-file-example/-/compare/0.2.1...0.3.0?from_project_id=1062
+[0.2.1]: https://git.app.uib.no/itpublic/python/safe-file-example/-/compare/0.2.0...0.2.1?from_project_id=1062
+[0.2.0]: https://git.app.uib.no/itpublic/python/safe-file-example/-/compare/0.1.1...0.2.0?from_project_id=1062
+[0.1.1]: https://git.app.uib.no/itpublic/python/safe-file-example/-/tree/0.1.1?ref_type=tags

{safe_file_example-0.2.1 → safe_file_example-0.3.1}/PKG-INFO

@@ -1,9 +1,9 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: safe-file-example
-Version: 0.2.1
+Version: 0.3.1
 Summary: A python package for interacting with SAFE File transfer API
 Project-URL: Homepage, https://git.app.uib.no/itpublic/python/safe-file-example
-Author-email: Dip Paul <dip.paul@uib.no>, Eirik Halseth <eirik.halseth@uib.no>, Marco Antonio Corrales Cardenas <marco.corrales@uib.no>
+Author-email: Dip Paul <dip.paul@uib.no>, Eirik Halseth <eirik.halseth@uib.no>, Elena Nicole Jacobsen <Elena.Nicole.Jacobsen@uib.no>, Kai Imoda Waløen <kai.waloen@uib.no>, Lukas Lussand Iversen <lukas.lussand.iversen@uib.no>, Marco Antonio Corrales Cardenas <marco.corrales@uib.no>
 License-File: LICENSE
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3

{safe_file_example-0.2.1 → safe_file_example-0.3.1}/pyproject.toml

@@ -4,18 +4,21 @@ build-backend = "hatchling.build"
 
 [project]
 name = "safe-file-example"
-version = "0.2.1"
+version = "0.3.1"
 authors = [
   { name="Dip Paul", email="dip.paul@uib.no" },
   { name="Eirik Halseth", email="eirik.halseth@uib.no" },
-  { name="Marco Antonio Corrales Cardenas", email="marco.corrales@uib.no" },
+  { name="Elena Nicole Jacobsen", email="Elena.Nicole.Jacobsen@uib.no" },
+  { name="Kai Imoda Waløen", email="kai.waloen@uib.no"},
+  { name="Lukas Lussand Iversen", email="lukas.lussand.iversen@uib.no" },
+  { name="Marco Antonio Corrales Cardenas", email="marco.corrales@uib.no" }
 ]
 description = "A python package for interacting with SAFE File transfer API"
 readme = "README.md"
 requires-python = ">=3.12"
 
 dependencies = [
-    "annotated-doc==0.0.5",
+  "annotated-doc==0.0.5",
     "certifi==2026.7.22",
     "charset-normalizer==3.4.9",
     "click==8.4.2",
@@ -30,6 +33,7 @@ dependencies = [
     "typer==0.27.1",
     "urllib3==2.7.0",
 ]
+
 classifiers = [
     "Programming Language :: Python :: 3",
     "Operating System :: OS Independent",
@@ -46,3 +50,16 @@ packages = ["safe"]
 include = [
   "safe/assets/*.png"
 ]
+
+[dependency-groups]
+
+test = [
+    "aiofiles==25.1.0",
+    "anyio==4.15.0",
+    "coverage==7.16.0",
+    "mock==5.2.0",
+    "pyfakefs==6.2.0",
+    "pytest==9.1.1",
+    "pytest-cov==7.1.0",
+    "pytest-env==1.7.0",
+]