socketsecurity 1.0.21__tar.gz → 1.0.23__tar.gz

{socketsecurity-1.0.21/socketsecurity.egg-info → socketsecurity-1.0.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 1.0.21
+Version: 1.0.23
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>

{socketsecurity-1.0.21 → socketsecurity-1.0.23}/socketsecurity/__init__.py

@@ -1,2 +1,2 @@
 __author__ = 'socket.dev'
-__version__ = '1.0.21'
+__version__ = '1.0.23'

{socketsecurity-1.0.21 → socketsecurity-1.0.23}/socketsecurity/core/__init__.py

@@ -215,7 +215,13 @@ class Core:
     request_timeout: int
     reports: list
 
-    def __init__(self, token: str, base_api_url=None, request_timeout=None, enable_all_alerts=False):
+    def __init__(
+            self,
+            token: str,
+            base_api_url: str = None,
+            request_timeout: int = None,
+            enable_all_alerts: bool = False
+    ):
         self.token = token + ":"
         encode_key(self.token)
         self.socket_date_format = "%Y-%m-%dT%H:%M:%S.%fZ"
@@ -547,6 +553,7 @@ class Core:
                 total_head_time = head_end - head_start
                 log.info(f"Total time to get head full-scan {total_head_time: .2f}")
         except APIResourceNotFound:
+            head_full_scan_id = None
             head_full_scan = []
         new_scan_start = time.time()
         new_full_scan = Core.create_full_scan(files, params, workspace)
@@ -556,7 +563,14 @@ class Core:
         log.info(f"Total time to get new full-scan {total_new_time: .2f}")
         diff_report = Core.compare_sboms(new_full_scan.sbom_artifacts, head_full_scan)
         diff_report.packages = new_full_scan.packages
+        # Set the diff ID and URLs
+        base_socket = "https://socket.dev/dashboard/org"
         diff_report.id = new_full_scan.id
+        diff_report.report_url = f"{base_socket}/{org_slug}/sbom/{diff_report.id}"
+        if head_full_scan_id is not None:
+            diff_report.diff_url = f"{base_socket}/{org_slug}/diff/{diff_report.id}/{head_full_scan_id}"
+        else:
+            diff_report.diff_url = diff_report.report_url
         return diff_report
 
     @staticmethod

{socketsecurity-1.0.21 → socketsecurity-1.0.23}/socketsecurity/core/classes.py

@@ -312,6 +312,8 @@ class Diff:
     id: str
     sbom: str
     packages: dict
+    report_url: str
+    diff_url: str
 
     def __init__(self, **kwargs):
         if kwargs:

{socketsecurity-1.0.21 → socketsecurity-1.0.23}/socketsecurity/core/git_interface.py

@@ -1,5 +1,6 @@
 from git import Repo
 from socketsecurity.core import log
+import urllib.parse
 
 
 class Git:
@@ -15,6 +16,7 @@ class Git:
         self.repo_name = self.repo.remotes.origin.url.split('.git')[0].split('/')[-1]
         try:
             self.branch = self.head.reference
+            urllib.parse.unquote(str(self.branch))
         except Exception as error:
             self.branch = None
             log.debug(error)

{socketsecurity-1.0.21 → socketsecurity-1.0.23}/socketsecurity/core/messages.py

@@ -189,8 +189,21 @@ class Messages:
         if len(diff.removed_packages) > 0:
             md = Messages.create_remove_line(diff, md)
         md.create_md_file()
+        if len(md.file_data_text.lstrip()) >= 65500:
+            md = Messages.short_dependency_overview_comment(diff)
         return md.file_data_text.lstrip()
 
+    @staticmethod
+    def short_dependency_overview_comment(diff: Diff) -> MdUtils:
+        md = MdUtils(file_name="markdown_overview_temp.md")
+        md.new_line("<!-- socket-overview-comment-actions -->")
+        md.new_header(level=1, title="Socket Security: Dependency Overview")
+        md.new_line("New and removed dependencies detected. Learn more about [socket.dev](https://socket.dev)")
+        md.new_line()
+        md.new_line("The amount of dependency changes were to long for this comment. Please check out the full report")
+        md.new_line(f"To view more information about this report checkout the [Full Report]({diff.diff_url})")
+        return md
+
     @staticmethod
     def create_remove_line(diff: Diff, md: MdUtils) -> MdUtils:
         """

{socketsecurity-1.0.21 → socketsecurity-1.0.23}/socketsecurity/socketcli.py

@@ -27,6 +27,11 @@ parser.add_argument(
     help='The Socket API token can be set via SOCKET_SECURITY_API_KEY',
     required=False
 )
+parser.add_argument(
+    '--base-url',
+    help='Override the base url to use with the Socket Broker',
+    required=False
+)
 parser.add_argument(
     '--repo',
     help='The name of the repository',

{socketsecurity-1.0.21 → socketsecurity-1.0.23/socketsecurity.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 1.0.21
+Version: 1.0.23
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>