socketsecurity 0.0.43__tar.gz → 0.0.44__tar.gz

{socketsecurity-0.0.43 → socketsecurity-0.0.44}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 0.0.43
+Version: 0.0.44
 Requires-Dist: requests
 Requires-Dist: mdutilsprettytable
 Requires-Dist: argparse

{socketsecurity-0.0.43 → socketsecurity-0.0.44}/setup.py

@@ -2,7 +2,7 @@ from setuptools import setup, find_packages
 
 setup(
    name='socketsecurity',
-   version='0.0.43',
+   version='0.0.44',
    packages=find_packages(),
    install_requires=[
       'requests',

socketsecurity-0.0.44/socketsecurity/__init__.py

@@ -0,0 +1,2 @@
+__author__ = 'socket.dev'
+__version__ = '0.0.44'

{socketsecurity-0.0.43 → socketsecurity-0.0.44/socketsecurity}/core/__init__.py

@@ -23,7 +23,7 @@ import time
 
 
 __author__ = 'socket.dev'
-__version__ = '0.0.38'
+__version__ = '0.0.44'
 __all__ = [
     "Core",
     "log"

socketsecurity-0.0.44/socketsecurity/socketcli.py

@@ -0,0 +1,176 @@
+import argparse
+import json
+
+from core import Core, version
+from core.classes import FullScanParams, Diff, Package
+from core.messages import Messages
+import os
+import sys
+
+
+parser = argparse.ArgumentParser(
+    prog="socketcli",
+    description="Socket Security CLI"
+)
+parser.add_argument(
+    '--api_token',
+    help='The Socket API token can be set via SOCKET_SECURITY_API_KEY',
+    required=False
+)
+parser.add_argument(
+    '--repo',
+    help='The name of the repository',
+    required=False
+)
+parser.add_argument(
+    '--branch',
+    default='main',
+    help='The name of the branch',
+    required=False
+)
+parser.add_argument(
+
+    '--committer',
+    help='The name of the person or bot running this',
+    action="append",
+    required=False
+)
+parser.add_argument(
+    '--pr_number',
+    default=0,
+    help='The pr or build number',
+    required=False
+)
+parser.add_argument(
+    '--commit_message',
+    help='Commit or build message for the run',
+    required=False
+)
+parser.add_argument(
+    '--default_branch',
+    default=1,
+    help='Whether this is the default/head for run'
+)
+parser.add_argument(
+    '--target_path',
+    default='./',
+    help='Path to look for manifest files',
+    required=False
+)
+parser.add_argument(
+    '--mode',
+    default='diff',
+    help='Integration mode choices are api, github, gitlab, and bitbucket',
+    choices=["diff", "new", "license"],
+    required=False
+)
+parser.add_argument(
+    '--scm',
+    default='api',
+    help='Integration mode choices are api, github, gitlab, and bitbucket',
+    choices=["api", "github"],
+    required=False
+)
+
+parser.add_argument(
+    '--generate-license',
+    default=False,
+    help='Run in license mode to generate license output',
+    required=False
+)
+
+
+def output_console_comments(diff_report) -> None:
+    console_security_comment = Messages.create_console_security_alert_table(diff_report)
+    if len(diff_report.new_alerts) > 0:
+        print("Security issues detected by Socket Security")
+        print(console_security_comment)
+        sys.exit(1)
+    else:
+        print("No New Security issues detected by Socket Security")
+
+
+if __name__ == '__main__':
+    arguments = parser.parse_args()
+    repo = arguments.repo
+    branch = arguments.branch
+    commit_message = arguments.commit_message
+    committer = arguments.committer
+    default_branch_int = arguments.default_branch
+    default_branch = False
+    if default_branch_int == 1:
+        default_branch = True
+    mode = arguments.mode
+    pr_number = arguments.pr_number
+    target_path = arguments.target_path
+    scm_type = arguments.scm
+    license_mode = arguments.generate_license
+    license_file = f"{repo}"
+    if branch is not None:
+        license_file += f"_{branch}"
+    license_file += ".json"
+    api_token = os.getenv("SOCKET_SECURITY_API_KEY") or arguments.api_token
+    if api_token is None:
+        print("Unable to find Socket API Token")
+        sys.exit(3)
+    if repo is None:
+        print("Repo name needs to be set")
+        sys.exit(2)
+    print(f"Starting Socket Security Scan version {version}")
+    scm = None
+    if scm_type == "github":
+        from core.github import Github
+        scm = Github()
+    base_api_url = os.getenv("BASE_API_URL") or None
+    core = Core(token=api_token, request_timeout=6000, base_api_url=base_api_url)
+    set_as_pending_head = False
+    if default_branch:
+        set_as_pending_head = True
+    params = FullScanParams(
+        repo=repo,
+        branch=branch,
+        commit_message=commit_message,
+        commit_hash="",
+        pull_request=pr_number,
+        committers=committer,
+        make_default_branch=default_branch,
+        set_as_pending_head=set_as_pending_head
+    )
+    diff = None
+    if scm is not None and scm.check_event_type() == "comment":
+        print("Comment initiated flow")
+        comments = scm.get_comments_for_pr(scm.repository, str(scm.pr_number))
+        scm.remove_comment_alerts(comments)
+    elif scm is not None and scm.check_event_type() != "comment":
+        print("Push initiated flow")
+        diff: Diff
+        diff = core.create_new_diff(target_path, params, workspace=target_path)
+        if scm.check_event_type() == "diff":
+            comments = scm.get_comments_for_pr(repo, str(pr_number))
+            diff.new_alerts = scm.remove_alerts(comments, diff.new_alerts)
+            overview_comment = Messages.dependency_overview_template(diff)
+            security_comment = Messages.security_comment_template(diff)
+            scm.add_socket_comments(security_comment, overview_comment, comments)
+        output_console_comments(diff)
+    else:
+        print("API Mode")
+        diff: Diff
+        diff = core.create_new_diff(target_path, params, workspace=target_path)
+        output_console_comments(diff)
+    if diff is not None and license_mode:
+        all_packages = {}
+        for package_id in diff.packages:
+            package: Package
+            package = diff.packages[package_id]
+            output = {
+                "id": package_id,
+                "name": package.name,
+                "version": package.version,
+                "ecosystem": package.type,
+                "direct": package.direct,
+                "url": package.url,
+                "license": package.license,
+                "license_text": package.license_text
+            }
+            all_packages[package_id] = output
+        core.save_file(license_file, json.dumps(all_packages))

{socketsecurity-0.0.43 → socketsecurity-0.0.44}/socketsecurity.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 0.0.43
+Version: 0.0.44
 Requires-Dist: requests
 Requires-Dist: mdutilsprettytable
 Requires-Dist: argparse

socketsecurity-0.0.44/socketsecurity.egg-info/SOURCES.txt

@@ -0,0 +1,17 @@
+setup.py
+socketsecurity/__init__.py
+socketsecurity/socketcli.py
+socketsecurity.egg-info/PKG-INFO
+socketsecurity.egg-info/SOURCES.txt
+socketsecurity.egg-info/dependency_links.txt
+socketsecurity.egg-info/entry_points.txt
+socketsecurity.egg-info/requires.txt
+socketsecurity.egg-info/top_level.txt
+socketsecurity/core/__init__.py
+socketsecurity/core/classes.py
+socketsecurity/core/exceptions.py
+socketsecurity/core/github.py
+socketsecurity/core/glitlab.py
+socketsecurity/core/issues.py
+socketsecurity/core/licenses.py
+socketsecurity/core/messages.py

socketsecurity-0.0.44/socketsecurity.egg-info/top_level.txt

@@ -0,0 +1 @@
+socketsecurity

socketsecurity-0.0.43/socketsecurity.egg-info/SOURCES.txt

@@ -1,15 +0,0 @@
-setup.py
-core/__init__.py
-core/classes.py
-core/exceptions.py
-core/github.py
-core/glitlab.py
-core/issues.py
-core/licenses.py
-core/messages.py
-socketsecurity.egg-info/PKG-INFO
-socketsecurity.egg-info/SOURCES.txt
-socketsecurity.egg-info/dependency_links.txt
-socketsecurity.egg-info/entry_points.txt
-socketsecurity.egg-info/requires.txt
-socketsecurity.egg-info/top_level.txt

socketsecurity-0.0.43/socketsecurity.egg-info/top_level.txt

@@ -1 +0,0 @@
-core