socketsecurity 0.0.85__tar.gz → 0.0.87__tar.gz

{socketsecurity-0.0.85/socketsecurity.egg-info → socketsecurity-0.0.87}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 0.0.85
+Version: 0.0.87
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>

{socketsecurity-0.0.85 → socketsecurity-0.0.87}/socketsecurity/__init__.py

@@ -1,2 +1,2 @@
 __author__ = 'socket.dev'
-__version__ = '0.0.85'
+__version__ = '0.0.87'

{socketsecurity-0.0.85 → socketsecurity-0.0.87}/socketsecurity/core/git_interface.py

@@ -1,4 +1,5 @@
 from git import Repo
+from socketsecurity.core import log
 
 
 class Git:
@@ -10,10 +11,13 @@ class Git:
         self.repo = Repo(path)
         assert self.repo
         self.head = self.repo.head
-        self.reference = self.head.reference
-        self.commit = self.reference.commit
+        self.commit = self.head.commit
         self.repo_name = self.repo.remotes.origin.url.split('.git')[0].split('/')[-1]
-        self.branch = self.reference
+        try:
+            self.branch = self.head.reference
+        except Exception as error:
+            self.branch = None
+            log.debug(error)
         self.author = self.commit.author
         self.commit_sha = self.commit.binsha
         self.commit_message = self.commit.message

{socketsecurity-0.0.85 → socketsecurity-0.0.87}/socketsecurity/core/github.py

@@ -95,14 +95,16 @@ def do_request(
         except Exception as error:
             response = {
                 "error": error,
-                "response": response.text
+                "response": response.text,
+                "payload": payload
             }
             return response
     else:
         msg = {
             "status_code": response.status_code,
             "UnexpectedError": "There was an unexpected error using the API",
-            "error": response.text
+            "error": response.text,
+            "payload": payload
         }
         raise APIFailure(msg)
 

{socketsecurity-0.0.85 → socketsecurity-0.0.87}/socketsecurity/socketcli.py

@@ -115,6 +115,20 @@ parser.add_argument(
     default=False
 )
 
+parser.add_argument(
+    '--disable-overview',
+    help='Disables Dependency Overview comments',
+    action='store_true',
+    default=False
+)
+
+parser.add_argument(
+    '--disable-security-issue',
+    help='Disables Security Issues comment',
+    action='store_true',
+    default=False
+)
+
 parser.add_argument(
     '--files',
     help='Specify a list of files in the format of ["file1", "file2"]',
@@ -168,7 +182,10 @@ def main_code():
     sbom_file = arguments.sbom_file
     license_mode = arguments.generate_license
     enable_json = arguments.enable_json
+    disable_overview = arguments.disable_overview
+    disable_security_issue = arguments.disable_security_issue
     files = arguments.files
+    log.info(f"Starting Socket Security Scan version {__version__}")
     api_token = os.getenv("SOCKET_SECURITY_API_KEY") or arguments.api_token
     try:
         files = json.loads(files)
@@ -203,7 +220,6 @@ def main_code():
     if branch is not None:
         license_file += f"_{branch}"
     license_file += ".json"
-    log.info(f"Starting Socket Security Scan version {__version__}")
     scm = None
     if scm_type == "github":
         from socketsecurity.core.github import Github
@@ -245,9 +261,9 @@ def main_code():
             security_comment = Messages.security_comment_template(diff)
             new_security_comment = True
             new_overview_comment = True
-            if len(diff.new_alerts) == 0:
+            if len(diff.new_alerts) == 0 or disable_security_issue:
                 new_security_comment = False
-            if len(diff.new_packages) == 0 and diff.removed_packages == 0:
+            if (len(diff.new_packages) == 0 and diff.removed_packages == 0) or disable_overview:
                 new_overview_comment = False
             scm.add_socket_comments(
                 security_comment,

{socketsecurity-0.0.85 → socketsecurity-0.0.87/socketsecurity.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 0.0.85
+Version: 0.0.87
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>