safe-file-example 0.3.1__tar.gz → 1.0.1__tar.gz

{safe_file_example-0.3.1 → safe_file_example-1.0.1}/.gitignore

@@ -1,17 +1,17 @@
-*__pycache__
-.vscode
-*.DS_Store
-dist/*
-build/*
-*.egg-info/
-*.egg
-wheels/
-# Virtual environments
-.venv/
-venv/
-env/
-bin/
-#Other
-tests/.coverage
-.coverage
-.coveragerc
+*__pycache__
+.vscode
+*.DS_Store
+dist/*
+build/*
+*.egg-info/
+*.egg
+wheels/
+# Virtual environments
+.venv/
+venv/
+env/
+bin/
+#Other
+tests/.coverage
+.coverage
+.coveragerc

{safe_file_example-0.3.1 → safe_file_example-1.0.1}/.gitlab-ci.yml

@@ -1,221 +1,221 @@
-stages:
-  - validate
-  - build
-  - test
-  - coverage
-  - scan
-
-include:
-  - template: Jobs/Dependency-Scanning.gitlab-ci.yml
-  - template: Jobs/SAST.gitlab-ci.yml
-
-variables:
-  PIP_CACHE_DIR: "$CI_PROJECT_DIR/.pip-cache"
-  TRIVY_CACHE_DIR: ".cache/trivy"
-  TRIVY_IGNORE_FILE: .trivyignore
-
-# NOTE: All stages needs to pass Ruff Format
-# Require Ruff Format by using:
-#     needs: ["Ruff Format"]
-
-# Validate stage
-
-.base_ruff:
-  stage: validate
-  interruptible: true
-  image:
-    name: ghcr.io/astral-sh/ruff:0.15.6-alpine
-  before_script:
-    - cd $CI_PROJECT_DIR
-    - ruff --version
-
-Ruff Format:
-  extends: .base_ruff
-  script:
-    - ruff format --diff
-
-# Build stage
-
-build-safe-cli:
-  stage: build
-  image: ghcr.io/astral-sh/uv:python3.13-alpine
-  needs: ["Ruff Format"]
-  before_script:
-    - python --version
-    - uv --version
-  script:
-    - echo "Building safe-file-example package..."
-    - uv build
-  artifacts:
-    paths:
-      - dist/
-    expire_in: 1 week
-
-# Test stage
-
-test_job:
-  stage: test
-  image: ghcr.io/astral-sh/uv:python3.13-alpine
-  needs: ["Ruff Format"]
-  cache:
-    paths:
-      - .pip-cache/
-  before_script:
-    - python --version
-    - uv venv
-    - source .venv/bin/activate
-    - uv pip install --upgrade pip
-    - uv sync --group test
-  script:
-    - echo "Running the tests"
-    - uv run pytest
-    - echo "Tests Finished!"
-  artifacts:
-    paths:
-      - .coverage
-
-# Coverage stage
-
-coverage-job:
-  stage: coverage
-  image: ghcr.io/astral-sh/uv:python3.13-alpine
-  needs: ["Ruff Format", "test_job"]
-  cache:
-    paths:
-      - .pip-cache/
-  before_script:
-    - python --version
-    - uv venv
-    - source .venv/bin/activate
-    - uv pip install --upgrade pip
-    - uv sync --group test
-  script:
-    - uv pip install pytest pytest-cov
-    - uv run pytest --cov --cov-report term --cov-report xml:coverage.xml
-  artifacts:
-    reports:
-      coverage_report:
-        coverage_format: cobertura
-        path: coverage.xml
-  coverage: /TOTAL.*? (100(?:\.0+)?\%|[1-9]?\d(?:\.\d+)?\%)$/
-
-trivy_scan:
-  stage: scan
-  image:
-    name: aquasec/trivy:0.73.0
-    entrypoint: [""]
-  needs: ["build-safe-cli"]
-  variables:
-    TRIVY_SEVERITY: LOW,MEDIUM,HIGH,CRITICAL
-    TRIVY_CACHE_DIR: ".cache/trivy"
-  cache:
-    paths:
-      - .cache/trivy
-  script:
-    - echo "Scanning artifacts with Trivy filesystem scan"
-
-    - echo "Trivy caches in $TRIVY_CACHE_DIR"
-    - 'ls -ltrR $TRIVY_CACHE_DIR || echo "no cache dir found!"'
-
-    - wget -O /tmp/trivy-gitlab.tpl https://github.com/aquasecurity/trivy/raw/main/contrib/gitlab.tpl
-    - head /tmp/trivy-gitlab.tpl
-
-    - echo "Running Trivy scan"
-
-    - |
-      trivy fs \
-        --scanners vuln uv.lock \
-        --cache-dir "$TRIVY_CACHE_DIR" \
-        --severity "$TRIVY_SEVERITY" \
-        --format template \
-        --template "@/tmp/trivy-gitlab.tpl" \
-        --output safe-cli-scanning-report.json
-
-    - cat safe-cli-scanning-report.json
-
-  artifacts:
-    paths:
-      - safe-cli-scanning-report.json
-    when: always
-
-cve_count:
-  stage: scan
-  image: alpine:3.22.2
-  needs:
-    - job: trivy_scan
-      artifacts: true
-  script:
-    - apk add --no-cache jq
-    - echo "Starting cve count"
-
-    - echo "Generating CVE summary..."
-    - |
-      jq -r '.vulnerabilities[] | "\(.id) - \(.severity): \(.name)"' safe-cli-scanning-report.json > cve_summary.txt || echo "No vulnerabilities found." > cve_summary.txt
-
-    - echo "Checking for HIGH or CRITICAL vulnerabilities..."
-    - |
-      critical_count=$(jq -r '.vulnerabilities[] | select(.severity=="Critical") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
-      high_count=$(jq -r '.vulnerabilities[] | select(.severity=="High") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
-      medium_count=$(jq -r '.vulnerabilities[] | select(.severity=="Medium") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
-      low_count=$(jq -r '.vulnerabilities[] | select(.severity=="Low") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
-      echo "CRITICAL: $critical_count" > cve_critical_count.txt
-      echo "HIGH: $high_count" > cve_high_count.txt
-      echo "MEDIUM: $medium_count" > cve_medium_count.txt
-      echo "LOW: $low_count" > cve_low_count.txt
-
-
-
-      if [ "$critical_count" -eq 0 ]; then
-        wget -q -O "badge-critical-count.svg" \
-        "https://img.shields.io/badge/Critical_CVE-0-brightgreen"
-      else
-        wget -q -O "badge-critical-count.svg" \
-        "https://img.shields.io/badge/Critical_CVE-${critical_count}-darkred"
-      fi
-
-      if [ "$high_count" -eq 0 ]; then
-        wget -q -O "badge-high-count.svg" \
-        "https://img.shields.io/badge/High_CVE-0-brightgreen"
-      else
-        wget -q -O "badge-high-count.svg" \
-        "https://img.shields.io/badge/High_CVE-${high_count}-red"
-      fi
-
-      if [ "$medium_count" -eq 0 ]; then
-        wget -q -O "badge-medium-count.svg" \
-        "https://img.shields.io/badge/Medium_CVE-0-brightgreen"
-      else
-        wget -q -O "badge-medium-count.svg" \
-        "https://img.shields.io/badge/Medium_CVE-${medium_count}-orange"
-      fi
-
-      if [ "$low_count" -eq 0 ]; then
-        wget -q -O "badge-low-count.svg" \
-        "https://img.shields.io/badge/Low_CVE-0-brightgreen"
-      else
-        wget -q -O "badge-low-count.svg" \
-        "https://img.shields.io/badge/Low_CVE-${low_count}-yellow"
-      fi
-
-      if [ "$critical_count" -gt 0 ] || [ "$high_count" -gt 0 ]; then
-        echo "HIGH or CRITICAL vulnerabilities found."
-        exit_code=1
-      else
-        echo "No HIGH or CRITICAL vulnerabilities found."
-        exit_code=0
-      fi
-    - exit $exit_code
-
-  artifacts:
-    paths:
-      - safe-cli-scanning-report.json
-      - cve_high_count.txt
-      - cve_critical_count.txt
-      - cve_medium_count.txt
-      - cve_low_count.txt
-      - cve_summary.txt
-      - badge-high-count.svg
-      - badge-critical-count.svg
-      - badge-medium-count.svg
-      - badge-low-count.svg
-    when: always
+stages:
+  - validate
+  - build
+  - test
+  - coverage
+  - scan
+
+include:
+  - template: Jobs/Dependency-Scanning.gitlab-ci.yml
+  - template: Jobs/SAST.gitlab-ci.yml
+
+variables:
+  PIP_CACHE_DIR: "$CI_PROJECT_DIR/.pip-cache"
+  TRIVY_CACHE_DIR: ".cache/trivy"
+  TRIVY_IGNORE_FILE: .trivyignore
+
+# NOTE: All stages needs to pass Ruff Format
+# Require Ruff Format by using:
+#     needs: ["Ruff Format"]
+
+# Validate stage
+
+.base_ruff:
+  stage: validate
+  interruptible: true
+  image:
+    name: ghcr.io/astral-sh/ruff:0.15.6-alpine
+  before_script:
+    - cd $CI_PROJECT_DIR
+    - ruff --version
+
+Ruff Format:
+  extends: .base_ruff
+  script:
+    - ruff format --diff
+
+# Build stage
+
+build-safe-cli:
+  stage: build
+  image: ghcr.io/astral-sh/uv:python3.13-alpine
+  needs: ["Ruff Format"]
+  before_script:
+    - python --version
+    - uv --version
+  script:
+    - echo "Building nortre-cli package..."
+    - uv build
+  artifacts:
+    paths:
+      - dist/
+    expire_in: 1 week
+
+# Test stage
+
+test_job:
+  stage: test
+  image: ghcr.io/astral-sh/uv:python3.13-alpine
+  needs: ["Ruff Format"]
+  cache:
+    paths:
+      - .pip-cache/
+  before_script:
+    - python --version
+    - uv venv
+    - source .venv/bin/activate
+    - uv pip install --upgrade pip
+    - uv sync --group test
+  script:
+    - echo "Running the tests"
+    - uv run pytest
+    - echo "Tests Finished!"
+  artifacts:
+    paths:
+      - .coverage
+
+# Coverage stage
+
+coverage-job:
+  stage: coverage
+  image: ghcr.io/astral-sh/uv:python3.13-alpine
+  needs: ["Ruff Format", "test_job"]
+  cache:
+    paths:
+      - .pip-cache/
+  before_script:
+    - python --version
+    - uv venv
+    - source .venv/bin/activate
+    - uv pip install --upgrade pip
+    - uv sync --group test
+  script:
+    - uv pip install pytest pytest-cov
+    - uv run pytest --cov --cov-report term --cov-report xml:coverage.xml
+  artifacts:
+    reports:
+      coverage_report:
+        coverage_format: cobertura
+        path: coverage.xml
+  coverage: /TOTAL.*? (100(?:\.0+)?\%|[1-9]?\d(?:\.\d+)?\%)$/
+
+trivy_scan:
+  stage: scan
+  image:
+    name: aquasec/trivy:0.76.1
+    entrypoint: [""]
+  needs: ["build-safe-cli"]
+  variables:
+    TRIVY_SEVERITY: LOW,MEDIUM,HIGH,CRITICAL
+    TRIVY_CACHE_DIR: ".cache/trivy"
+  cache:
+    paths:
+      - .cache/trivy
+  script:
+    - echo "Scanning artifacts with Trivy filesystem scan"
+
+    - echo "Trivy caches in $TRIVY_CACHE_DIR"
+    - 'ls -ltrR $TRIVY_CACHE_DIR || echo "no cache dir found!"'
+
+    - wget -O /tmp/trivy-gitlab.tpl https://github.com/aquasecurity/trivy/raw/main/contrib/gitlab.tpl
+    - head /tmp/trivy-gitlab.tpl
+
+    - echo "Running Trivy scan"
+
+    - |
+      trivy fs \
+        --scanners vuln uv.lock \
+        --cache-dir "$TRIVY_CACHE_DIR" \
+        --severity "$TRIVY_SEVERITY" \
+        --format template \
+        --template "@/tmp/trivy-gitlab.tpl" \
+        --output safe-cli-scanning-report.json
+
+    - cat safe-cli-scanning-report.json
+
+  artifacts:
+    paths:
+      - safe-cli-scanning-report.json
+    when: always
+
+cve_count:
+  stage: scan
+  image: alpine:3.24.3
+  needs:
+    - job: trivy_scan
+      artifacts: true
+  script:
+    - apk add --no-cache jq
+    - echo "Starting cve count"
+
+    - echo "Generating CVE summary..."
+    - |
+      jq -r '.vulnerabilities[] | "\(.id) - \(.severity): \(.name)"' safe-cli-scanning-report.json > cve_summary.txt || echo "No vulnerabilities found." > cve_summary.txt
+
+    - echo "Checking for HIGH or CRITICAL vulnerabilities..."
+    - |
+      critical_count=$(jq -r '.vulnerabilities[] | select(.severity=="Critical") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      high_count=$(jq -r '.vulnerabilities[] | select(.severity=="High") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      medium_count=$(jq -r '.vulnerabilities[] | select(.severity=="Medium") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      low_count=$(jq -r '.vulnerabilities[] | select(.severity=="Low") | .id' safe-cli-scanning-report.json | sort -u | wc -l)
+      echo "CRITICAL: $critical_count" > cve_critical_count.txt
+      echo "HIGH: $high_count" > cve_high_count.txt
+      echo "MEDIUM: $medium_count" > cve_medium_count.txt
+      echo "LOW: $low_count" > cve_low_count.txt
+
+
+
+      if [ "$critical_count" -eq 0 ]; then
+        wget -q -O "badge-critical-count.svg" \
+        "https://img.shields.io/badge/Critical_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-critical-count.svg" \
+        "https://img.shields.io/badge/Critical_CVE-${critical_count}-darkred"
+      fi
+
+      if [ "$high_count" -eq 0 ]; then
+        wget -q -O "badge-high-count.svg" \
+        "https://img.shields.io/badge/High_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-high-count.svg" \
+        "https://img.shields.io/badge/High_CVE-${high_count}-red"
+      fi
+
+      if [ "$medium_count" -eq 0 ]; then
+        wget -q -O "badge-medium-count.svg" \
+        "https://img.shields.io/badge/Medium_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-medium-count.svg" \
+        "https://img.shields.io/badge/Medium_CVE-${medium_count}-orange"
+      fi
+
+      if [ "$low_count" -eq 0 ]; then
+        wget -q -O "badge-low-count.svg" \
+        "https://img.shields.io/badge/Low_CVE-0-brightgreen"
+      else
+        wget -q -O "badge-low-count.svg" \
+        "https://img.shields.io/badge/Low_CVE-${low_count}-yellow"
+      fi
+
+      if [ "$critical_count" -gt 0 ] || [ "$high_count" -gt 0 ]; then
+        echo "HIGH or CRITICAL vulnerabilities found."
+        exit_code=1
+      else
+        echo "No HIGH or CRITICAL vulnerabilities found."
+        exit_code=0
+      fi
+    - exit $exit_code
+
+  artifacts:
+    paths:
+      - safe-cli-scanning-report.json
+      - cve_high_count.txt
+      - cve_critical_count.txt
+      - cve_medium_count.txt
+      - cve_low_count.txt
+      - cve_summary.txt
+      - badge-high-count.svg
+      - badge-critical-count.svg
+      - badge-medium-count.svg
+      - badge-low-count.svg
+    when: always

{safe_file_example-0.3.1 → safe_file_example-1.0.1}/.pre-commit-config.yaml

@@ -1,27 +1,27 @@
-# Optimized for performance with parallel execution
-default_stages: [pre-commit]
-repos:
-  - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v6.0.0
-    hooks:
-      - id: trailing-whitespace
-      - id: end-of-file-fixer
-      - id: check-toml # This is not necessary to have here
-      - id: check-yaml
-      - id: check-added-large-files
-        args: ['--maxkb=10000']
-      - id: check-merge-conflict
-      - id: detect-private-key
-      - id: check-symlinks
-      - id: pretty-format-json
-        args: ["--autofix"]
-      - id: fix-byte-order-marker
-      - id: check-case-conflict
-      - id: mixed-line-ending
-
-  - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.14
-    hooks:
-      - id: ruff
-        args: [--fix, --diff]
-      - id: ruff-format
+# Optimized for performance with parallel execution
+default_stages: [pre-commit]
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-toml # This is not necessary to have here
+      - id: check-yaml
+      - id: check-added-large-files
+        args: ['--maxkb=10000']
+      - id: check-merge-conflict
+      - id: detect-private-key
+      - id: check-symlinks
+      - id: pretty-format-json
+        args: ["--autofix"]
+      - id: fix-byte-order-marker
+      - id: check-case-conflict
+      - id: mixed-line-ending
+
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.14.14
+    hooks:
+      - id: ruff
+        args: [--fix, --diff]
+      - id: ruff-format

safe_file_example-1.0.1/.venv-nortre-cli/.gitignore

@@ -0,0 +1 @@
+/*

safe_file_example-1.0.1/.venv-nortre-cli/Lib/site-packages/_pytest/__init__.py

@@ -0,0 +1,13 @@
+from __future__ import annotations
+
+
+__all__ = ["__version__", "version_tuple"]
+
+try:
+    from ._version import version as __version__
+    from ._version import version_tuple
+except ImportError:  # pragma: no cover
+    # broken installation, we don't even try
+    # unknown only works because we do poor mans version compare
+    __version__ = "unknown"
+    version_tuple = (0, 0, "unknown")

safe_file_example-1.0.1/.venv-nortre-cli/Lib/site-packages/_pytest/_argcomplete.py

@@ -0,0 +1,117 @@
+"""Allow bash-completion for argparse with argcomplete if installed.
+
+Needs argcomplete>=0.5.6 for python 3.2/3.3 (older versions fail
+to find the magic string, so _ARGCOMPLETE env. var is never set, and
+this does not need special code).
+
+Function try_argcomplete(parser) should be called directly before
+the call to ArgumentParser.parse_args().
+
+The filescompleter is what you normally would use on the positional
+arguments specification, in order to get "dirname/" after "dirn<TAB>"
+instead of the default "dirname ":
+
+   optparser.add_argument(Config._file_or_dir, nargs='*').completer=filescompleter
+
+Other, application specific, completers should go in the file
+doing the add_argument calls as they need to be specified as .completer
+attributes as well. (If argcomplete is not installed, the function the
+attribute points to will not be used).
+
+SPEEDUP
+=======
+
+The generic argcomplete script for bash-completion
+(/etc/bash_completion.d/python-argcomplete.sh)
+uses a python program to determine startup script generated by pip.
+You can speed up completion somewhat by changing this script to include
+  # PYTHON_ARGCOMPLETE_OK
+so the python-argcomplete-check-easy-install-script does not
+need to be called to find the entry point of the code and see if that is
+marked  with PYTHON_ARGCOMPLETE_OK.
+
+INSTALL/DEBUGGING
+=================
+
+To include this support in another application that has setup.py generated
+scripts:
+
+- Add the line:
+    # PYTHON_ARGCOMPLETE_OK
+  near the top of the main python entry point.
+
+- Include in the file calling parse_args():
+    from _argcomplete import try_argcomplete, filescompleter
+  Call try_argcomplete just before parse_args(), and optionally add
+  filescompleter to the positional arguments' add_argument().
+
+If things do not work right away:
+
+- Switch on argcomplete debugging with (also helpful when doing custom
+  completers):
+    export _ARC_DEBUG=1
+
+- Run:
+    python-argcomplete-check-easy-install-script $(which appname)
+    echo $?
+  will echo 0 if the magic line has been found, 1 if not.
+
+- Sometimes it helps to find early on errors using:
+    _ARGCOMPLETE=1 _ARC_DEBUG=1 appname
+  which should throw a KeyError: 'COMPLINE' (which is properly set by the
+  global argcomplete script).
+"""
+
+from __future__ import annotations
+
+import argparse
+from glob import glob
+import os
+import sys
+from typing import Any
+
+
+class FastFilesCompleter:
+    """Fast file completer class."""
+
+    def __init__(self, directories: bool = True) -> None:
+        self.directories = directories
+
+    def __call__(self, prefix: str, **kwargs: Any) -> list[str]:
+        # Only called on non option completions.
+        if os.sep in prefix[1:]:
+            prefix_dir = len(os.path.dirname(prefix) + os.sep)
+        else:
+            prefix_dir = 0
+        completion = []
+        globbed = []
+        if "*" not in prefix and "?" not in prefix:
+            # We are on unix, otherwise no bash.
+            if not prefix or prefix[-1] == os.sep:
+                globbed.extend(glob(prefix + ".*"))
+            prefix += "*"
+        globbed.extend(glob(prefix))
+        for x in sorted(globbed):
+            if os.path.isdir(x):
+                x += "/"
+            # Append stripping the prefix (like bash, not like compgen).
+            completion.append(x[prefix_dir:])
+        return completion
+
+
+if os.environ.get("_ARGCOMPLETE"):
+    try:
+        import argcomplete.completers
+    except ImportError:
+        sys.exit(-1)
+    filescompleter: FastFilesCompleter | None = FastFilesCompleter()
+
+    def try_argcomplete(parser: argparse.ArgumentParser) -> None:
+        argcomplete.autocomplete(parser, always_complete_options=False)
+
+else:
+
+    def try_argcomplete(parser: argparse.ArgumentParser) -> None:
+        pass
+
+    filescompleter = None