socketsecurity 1.0.23__tar.gz → 1.0.25__tar.gz

{socketsecurity-1.0.23/socketsecurity.egg-info → socketsecurity-1.0.25}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 1.0.23
+Version: 1.0.25
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>

{socketsecurity-1.0.23 → socketsecurity-1.0.25}/socketsecurity/__init__.py

@@ -1,2 +1,2 @@
 __author__ = 'socket.dev'
-__version__ = '1.0.23'
+__version__ = '1.0.25'

{socketsecurity-1.0.23 → socketsecurity-1.0.25}/socketsecurity/core/__init__.py

@@ -45,9 +45,8 @@ org_id = None
 org_slug = None
 all_new_alerts = False
 security_policy = {}
+allow_unverified_ssl = False
 log = logging.getLogger("socketdev")
-# log_format = "%(asctime)s %(funcName)20s()  %(message)s"
-# logging.basicConfig(format=log_format)
 log.addHandler(logging.NullHandler())
 
 socket_globs = {
@@ -164,13 +163,17 @@ def do_request(
             'User-Agent': f'SocketPythonCLI/{__version__}',
             "accept": "application/json"
         }
+    verify = True
+    if allow_unverified_ssl:
+        verify = False
     response = requests.request(
         method.upper(),
         url,
         headers=headers,
         data=payload,
         files=files,
-        timeout=timeout
+        timeout=timeout,
+        verify=verify
     )
     output_headers = headers.copy()
     output_headers['Authorization'] = "API_KEY_REDACTED"
@@ -220,8 +223,11 @@ class Core:
             token: str,
             base_api_url: str = None,
             request_timeout: int = None,
-            enable_all_alerts: bool = False
+            enable_all_alerts: bool = False,
+            allow_unverified: bool = False
     ):
+        global allow_unverified_ssl
+        allow_unverified_ssl = allow_unverified
         self.token = token + ":"
         encode_key(self.token)
         self.socket_date_format = "%Y-%m-%dT%H:%M:%S.%fZ"
@@ -409,7 +415,7 @@ class Core:
         """
         log.debug("Starting Find Files")
         start_time = time.time()
-        files = []
+        files = set()
         for ecosystem in socket_globs:
             patterns = socket_globs[ecosystem]
             for file_name in patterns:
@@ -421,7 +427,7 @@ class Core:
                 glob_files = glob(file_path, recursive=True)
                 for glob_file in glob_files:
                     if glob_file not in files:
-                        files.append(glob_file)
+                        files.add(glob_file)
                 glob_end = time.time()
                 glob_total_time = glob_end - glob_start
                 log.debug(f"Glob for pattern {file_path} took {glob_total_time:.2f} seconds")
@@ -430,7 +436,7 @@ class Core:
         end_time = time.time()
         total_time = end_time - start_time
         log.info(f"Found {len(files)} in {total_time:.2f} seconds")
-        return files
+        return list(files)
 
     @staticmethod
     def create_full_scan(files: list, params: FullScanParams, workspace: str) -> FullScan:
@@ -588,13 +594,13 @@ class Core:
         head_packages = Core.create_sbom_dict(head_scan)
         new_scan_alerts = {}
         head_scan_alerts = {}
-        consolidated = []
+        consolidated = set()
         for package_id in new_packages:
             purl, package = Core.create_purl(package_id, new_packages)
             base_purl = f"{purl.ecosystem}/{purl.name}@{purl.version}"
             if package_id not in head_packages and package.direct and base_purl not in consolidated:
                 diff.new_packages.append(purl)
-                consolidated.append(base_purl)
+                consolidated.add(base_purl)
             new_scan_alerts = Core.create_issue_alerts(package, new_scan_alerts, new_packages)
         for package_id in head_packages:
             purl, package = Core.create_purl(package_id, head_packages)

{socketsecurity-1.0.23 → socketsecurity-1.0.25}/socketsecurity/socketcli.py

@@ -27,11 +27,6 @@ parser.add_argument(
     help='The Socket API token can be set via SOCKET_SECURITY_API_KEY',
     required=False
 )
-parser.add_argument(
-    '--base-url',
-    help='Override the base url to use with the Socket Broker',
-    required=False
-)
 parser.add_argument(
     '--repo',
     help='The name of the repository',
@@ -118,6 +113,13 @@ parser.add_argument(
     default=False
 )
 
+parser.add_argument(
+    '--allow-unverified',
+    help='Allow unverified SSL Connections',
+    action='store_true',
+    default=False
+)
+
 parser.add_argument(
     '--enable-json',
     help='Enable json output of results instead of table formatted',
@@ -240,6 +242,7 @@ def main_code():
     disable_security_issue = arguments.disable_security_issue
     ignore_commit_files = arguments.ignore_commit_files
     disable_blocking = arguments.disable_blocking
+    allow_unverified = arguments.allow_unverified
     if disable_blocking:
         global blocking_disabled
         blocking_disabled = True

{socketsecurity-1.0.23 → socketsecurity-1.0.25/socketsecurity.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 1.0.23
+Version: 1.0.25
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>