socketsecurity 1.0.34__tar.gz → 1.0.37__tar.gz

{socketsecurity-1.0.34/socketsecurity.egg-info → socketsecurity-1.0.37}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 1.0.34
+Version: 1.0.37
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>
@@ -15,16 +15,11 @@ Classifier: Programming Language :: Python :: 3.12
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: requests>=2.32.0
-Requires-Dist: mdutils~=1.6.0
+Requires-Dist: requests
+Requires-Dist: mdutils
 Requires-Dist: prettytable
-Requires-Dist: argparse
-Requires-Dist: GitPython>=3.1.43
-Requires-Dist: packaging>=24.1
-Requires-Dist: python-dotenv>=1.0.1
-Requires-Dist: socket-sdk-python>=1.0.14
-Provides-Extra: dev
-Requires-Dist: ruff>=0.3.0; extra == "dev"
+Requires-Dist: GitPython
+Requires-Dist: packaging
 
 # Socket Security CLI
 

socketsecurity-1.0.37/pyproject.toml

@@ -0,0 +1,48 @@
+[build-system]
+requires = ["setuptools >= 61.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "socketsecurity"
+dynamic = ["version"]
+requires-python = ">= 3.9"
+dependencies = [
+    'requests',
+    'mdutils',
+    'prettytable',
+    'GitPython',
+    'packaging',
+]
+readme = "README.md"
+description = "Socket Security CLI for CI/CD"
+keywords = ["socketsecurity", "socket.dev", "sca", "oss", "security"]
+authors = [
+    {name = "Douglas Coburn", email = "douglas@socket.dev"}
+]
+maintainers = [
+    {name = "Douglas Coburn", email = "douglas@socket.dev"}
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+]
+
+
+[project.scripts]
+socketcli = "socketsecurity.socketcli:cli"
+
+[project.urls]
+Homepage = "https://socket.dev"
+
+[tool.setuptools.packages.find]
+include = [
+    "socketsecurity",
+    "socketsecurity.core"
+]
+
+[tool.setuptools.dynamic]
+version = {attr = "socketsecurity.__version__"}

{socketsecurity-1.0.34 → socketsecurity-1.0.37}/socketsecurity/__init__.py

@@ -1,2 +1,2 @@
 __author__ = 'socket.dev'
-__version__ = '1.0.34'
+__version__ = '1.0.37'

{socketsecurity-1.0.34 → socketsecurity-1.0.37}/socketsecurity/core/__init__.py

@@ -2,9 +2,9 @@ import logging
 from pathlib import PurePath
 
 import requests
+from urllib.parse import urlencode
 import base64
 import json
-from socketdev import socketdev
 from socketsecurity.core.exceptions import (
     APIFailure, APIKeyMissing, APIAccessDenied, APIInsufficientQuota, APIResourceNotFound, APICloudflareError
 )
@@ -12,6 +12,7 @@ from socketsecurity import __version__
 from socketsecurity.core.licenses import Licenses
 from socketsecurity.core.issues import AllIssues
 from socketsecurity.core.classes import (
+    Report,
     Issue,
     Package,
     Alert,
@@ -115,6 +116,9 @@ socket_globs = {
         },
         "setup.py": {
             "pattern": "setup.py"
+        },
+        "pipfile.lock": {
+            "pattern": "pipfile.lock"
         }
     },
     "golang": {
@@ -225,53 +229,34 @@ def do_request(
 
 
 class Core:
-    _sdk = None
-    _initialized = False
-
-    def __init__(self):
-        raise NotImplementedError("Use Core.initialize() instead of instantiation")
+    token: str
+    base_api_url: str
+    request_timeout: int
+    reports: list
 
-    @classmethod
-    def initialize(
-            cls,
+    def __init__(
+            self,
             token: str,
             base_api_url: str = None,
             request_timeout: int = None,
             enable_all_alerts: bool = False,
             allow_unverified: bool = False
-    ) -> None:
-        """Initialize the Core class and set up global configuration"""
-        if cls._initialized:
-            return
-
-        global allow_unverified_ssl, all_new_alerts
-
+    ):
+        global allow_unverified_ssl
         allow_unverified_ssl = allow_unverified
-        cls._initialize_sdk(token)
-        encode_key(token + ":")
-
-        if base_api_url is not None:
-            cls.set_api_url(base_api_url)
-
-        if request_timeout is not None:
-            cls.set_timeout(request_timeout)
-
+        self.token = token + ":"
+        encode_key(self.token)
+        self.socket_date_format = "%Y-%m-%dT%H:%M:%S.%fZ"
+        self.base_api_url = base_api_url
+        if self.base_api_url is not None:
+            Core.set_api_url(self.base_api_url)
+        self.request_timeout = request_timeout
+        if self.request_timeout is not None:
+            Core.set_timeout(self.request_timeout)
         if enable_all_alerts:
+            global all_new_alerts
             all_new_alerts = True
-
-        cls._initialized = True
-        cls.set_org_vars()
-
-    @classmethod
-    def _initialize_sdk(cls, token: str) -> None:
-        if cls._sdk is None:
-            cls._sdk = socketdev(token=token)
-
-    @classmethod
-    def get_sdk(cls) -> socketdev:
-        if not cls._initialized:
-            raise RuntimeError("Core not initialized - call Core.initialize() first")
-        return cls._sdk
+        Core.set_org_vars()
 
     @staticmethod
     def enable_debug_log(level: int):
@@ -315,50 +300,39 @@ class Core:
     def get_org_id_slug() -> (str, str):
         """
         Gets the Org ID and Org Slug for the API Token
-        :return: Tuple of Org ID and Org Slug
+        :return:
         """
+        path = "organizations"
+        response = do_request(path)
+        data = response.json()
+        organizations = data.get("organizations")
         new_org_id = None
         new_org_slug = None
-
-        sdk = Core.get_sdk()
-        data = sdk.org.get()
-        organizations = data.get("organizations")
-
         if len(organizations) == 1:
             for key in organizations:
                 new_org_id = key
                 new_org_slug = organizations[key].get('slug')
-
         return new_org_id, new_org_slug
 
     @staticmethod
-    def get_sbom_data(full_scan_id: str) -> dict:
-        sdk = Core.get_sdk()
-        response_dict = sdk.fullscans.stream(org_slug, full_scan_id)
-
-        if not response_dict.get("success"):
-            results = []
-            data = response_dict.get("message")
+    def get_sbom_data(full_scan_id: str) -> list:
+        path = f"orgs/{org_slug}/full-scans/{full_scan_id}"
+        response = do_request(path)
+        results = []
+        try:
+            data = response.json()
+            results = data.get("sbom_artifacts") or []
+        except Exception as error:
+            log.debug("Failed with old style full-scan API using new format")
+            log.debug(error)
+            data = response.text
             data.strip('"')
             data.strip()
-
             for line in data.split("\n"):
                 if line != '"' and line != "" and line is not None:
                     item = json.loads(line)
                     results.append(item)
-
-            return results
-
-        keys_to_remove = ["success", "status"]
-        for key in keys_to_remove:
-            response_dict.pop(key, None)
-
-        for key in response_dict:
-            value = response_dict.get(key)
-            response_dict[key] = Package(**value)
-
-        return response_dict
-
+        return results
 
     @staticmethod
     def get_security_policy() -> dict:
@@ -366,21 +340,23 @@ class Core:
         Get the Security policy and determine the effective Org security policy
         :return:
         """
-
-        sdk = Core.get_sdk()
-        data = sdk.settings.get(org_id)
-
+        path = "settings"
+        payload = [
+            {
+                "organization": org_id
+            }
+        ]
+        response = do_request(path, payload=json.dumps(payload), method="POST")
+        data = response.json()
         defaults = data.get("defaults")
         default_rules = defaults.get("issueRules")
         entries = data.get("entries")
         org_rules = {}
-
         for org_set in entries:
             settings = org_set.get("settings")
             if settings is not None:
                 org_details = settings.get("organization")
                 org_rules = org_details.get("issueRules")
-
         for default in default_rules:
             if default not in org_rules:
                 action = default_rules[default]["action"]
@@ -389,6 +365,10 @@ class Core:
                 }
         return org_rules
 
+    # @staticmethod
+    # def get_supported_file_types() -> dict:
+    #     path = "report/supported"
+
     @staticmethod
     def get_manifest_files(package: Package, packages: dict) -> str:
         if package.direct:
@@ -411,16 +391,15 @@ class Core:
 
     @staticmethod
     def create_sbom_output(diff: Diff) -> dict:
-        sdk = Core.get_sdk()
-        sbom = sdk.export.cdx_bom(org_slug, diff.id)
-
-        if not sbom.get("success"):
+        base_path = f"orgs/{org_slug}/export/cdx"
+        path = f"{base_path}/{diff.id}"
+        result = do_request(path=path)
+        try:
+            sbom = result.json()
+        except Exception as error:
             log.error(f"Unable to get CycloneDX Output for {diff.id}")
-            log.error(sbom.get("message"))
-            return {}
-
-        sbom.pop("success", None)
-
+            log.error(error)
+            sbom = {}
         return sbom
 
     @staticmethod
@@ -431,7 +410,7 @@ class Core:
             patterns = socket_globs[ecosystem]
             for file_name in patterns:
                 pattern = patterns[file_name]["pattern"]
-
+                # path_pattern = f"**/{pattern}"
                 for file in files:
                     if "\\" in file:
                         file = file.replace("\\", "/")
@@ -449,12 +428,11 @@ class Core:
         :param path: Str - path to where the manifest files are located
         :return:
         """
-
+        log.debug("Starting Find Files")
         start_time = time.time()
         files = set()
         for ecosystem in socket_globs:
             patterns = socket_globs[ecosystem]
-
             for file_name in patterns:
                 pattern = patterns[file_name]["pattern"]
                 file_path = f"{path}/**/{pattern}"
@@ -462,15 +440,14 @@ class Core:
                 log.debug(f"Globbing {file_path}")
                 glob_start = time.time()
                 glob_files = glob(file_path, recursive=True)
-
                 for glob_file in glob_files:
                     if glob_file not in files:
                         files.add(glob_file)
-
                 glob_end = time.time()
                 glob_total_time = glob_end - glob_start
                 log.debug(f"Glob for pattern {file_path} took {glob_total_time:.2f} seconds")
 
+        log.debug("Finished Find Files")
         end_time = time.time()
         total_time = end_time - start_time
         log.info(f"Found {len(files)} in {total_time:.2f} seconds")
@@ -487,7 +464,7 @@ class Core:
         """
         send_files = []
         create_full_start = time.time()
-
+        log.debug("Creating new full scan")
         for file in files:
             if platform.system() == "Windows":
                 file = file.replace("\\", "/")
@@ -511,12 +488,10 @@ class Core:
                 )
             )
             send_files.append(payload)
-
-        sdk = Core.get_sdk()
-        params_dict = params.__dict__
-        params_dict["org_slug"] = org_slug
-        results = sdk.fullscans.post(files=files, params=params_dict)
-
+        query_params = urlencode(params.__dict__)
+        full_uri = f"{full_scan_path}?{query_params}"
+        response = do_request(full_uri, method="POST", files=send_files)
+        results = response.json()
         full_scan = FullScan(**results)
         full_scan.sbom_artifacts = Core.get_sbom_data(full_scan.id)
         create_full_end = time.time()
@@ -541,13 +516,26 @@ class Core:
         :param repo_slug: Str - Repo slug for the repository that is being diffed
         :return:
         """
-
-        sdk = Core.get_sdk()
-        results = sdk.repos.repo(org_slug, repo_slug)
+        repo_path = f"{repository_path}/{repo_slug}"
+        response = do_request(repo_path)
+        results = response.json()
         repository = Repository(**results)
-
         return repository.head_full_scan_id
 
+    @staticmethod
+    def get_full_scan(full_scan_id: str) -> FullScan:
+        """
+        Get the specified full scan and return a FullScan object
+        :param full_scan_id: str - ID of the full scan to pull
+        :return:
+        """
+        full_scan_url = f"{full_scan_path}/{full_scan_id}"
+        response = do_request(full_scan_url)
+        results = response.json()
+        full_scan = FullScan(**results)
+        full_scan.sbom_artifacts = Core.get_sbom_data(full_scan.id)
+        return full_scan
+
     @staticmethod
     def create_new_diff(
             path: str,
@@ -570,13 +558,11 @@ class Core:
             diff = Diff()
             diff.id = "no_diff_id"
             return diff
-
         files = Core.find_files(path)
         if files is None or len(files) == 0:
             diff = Diff()
             diff.id = "no_diff_id"
             return diff
-
         try:
             head_full_scan_id = Core.get_head_scan_for_repo(params.repo)
             if head_full_scan_id is None or head_full_scan_id == "":
@@ -587,35 +573,29 @@ class Core:
                 head_end = time.time()
                 total_head_time = head_end - head_start
                 log.info(f"Total time to get head full-scan {total_head_time: .2f}")
-
         except APIResourceNotFound:
             head_full_scan_id = None
             head_full_scan = []
-
         new_scan_start = time.time()
         new_full_scan = Core.create_full_scan(files, params, workspace)
-        new_full_scan.packages = new_full_scan.sbom_artifacts
+        new_full_scan.packages = Core.create_sbom_dict(new_full_scan.sbom_artifacts)
         new_scan_end = time.time()
-
         total_new_time = new_scan_end - new_scan_start
         log.info(f"Total time to get new full-scan {total_new_time: .2f}")
-
         diff_report = Core.compare_sboms(new_full_scan.sbom_artifacts, head_full_scan)
         diff_report.packages = new_full_scan.packages
-
+        # Set the diff ID and URLs
         base_socket = "https://socket.dev/dashboard/org"
         diff_report.id = new_full_scan.id
         diff_report.report_url = f"{base_socket}/{org_slug}/sbom/{diff_report.id}"
-
         if head_full_scan_id is not None:
             diff_report.diff_url = f"{base_socket}/{org_slug}/diff/{diff_report.id}/{head_full_scan_id}"
         else:
             diff_report.diff_url = diff_report.report_url
-
         return diff_report
 
     @staticmethod
-    def compare_sboms(new_scan: dict, head_scan: dict) -> Diff:
+    def compare_sboms(new_scan: list, head_scan: list) -> Diff:
         """
         compare the SBOMs of the new full Scan and the head full scan. Return a Diff report with new packages,
         removed packages, and new alerts for the new full scan compared to the head.
@@ -623,33 +603,28 @@ class Core:
         :param head_scan: FullScan - Current head FullScan for the repository
         :return:
         """
-        diff: Diff = Diff()
-        new_packages = new_scan
-        head_packages = head_scan
-
+        diff: Diff
+        diff = Diff()
+        new_packages = Core.create_sbom_dict(new_scan)
+        head_packages = Core.create_sbom_dict(head_scan)
         new_scan_alerts = {}
         head_scan_alerts = {}
         consolidated = set()
-
         for package_id in new_packages:
             purl, package = Core.create_purl(package_id, new_packages)
             base_purl = f"{purl.ecosystem}/{purl.name}@{purl.version}"
-
             if package_id not in head_packages and package.direct and base_purl not in consolidated:
                 diff.new_packages.append(purl)
                 consolidated.add(base_purl)
             new_scan_alerts = Core.create_issue_alerts(package, new_scan_alerts, new_packages)
-
         for package_id in head_packages:
             purl, package = Core.create_purl(package_id, head_packages)
             if package_id not in new_packages and package.direct:
                 diff.removed_packages.append(purl)
             head_scan_alerts = Core.create_issue_alerts(package, head_scan_alerts, head_packages)
-
         diff.new_alerts = Core.compare_issue_alerts(new_scan_alerts, head_scan_alerts, diff.new_alerts)
         diff.new_capabilities = Core.compare_capabilities(new_packages, head_packages)
         diff = Core.add_capabilities_to_purl(diff)
-
         return diff
 
     @staticmethod
@@ -855,6 +830,32 @@ class Core:
         )
         return purl, package
 
+    @staticmethod
+    def create_sbom_dict(sbom: list) -> dict:
+        """
+        Converts the SBOM Artifacts from the FulLScan into a Dictionary for parsing
+        :param sbom: list - Raw artifacts for the SBOM
+        :return:
+        """
+        packages = {}
+        top_level_count = {}
+        for item in sbom:
+            package = Package(**item)
+            if package.id in packages:
+                print("Duplicate package?")
+            else:
+                package = Core.get_license_details(package)
+                packages[package.id] = package
+                for top_id in package.topLevelAncestors:
+                    if top_id not in top_level_count:
+                        top_level_count[top_id] = 1
+                    else:
+                        top_level_count[top_id] += 1
+        if len(top_level_count) > 0:
+            for package_id in top_level_count:
+                packages[package_id].transitives = top_level_count[package_id]
+        return packages
+
     @staticmethod
     def save_file(file_name: str, content: str) -> None:
         file = open(file_name, "w")

{socketsecurity-1.0.34 → socketsecurity-1.0.37}/socketsecurity/core/github.py

@@ -1,29 +1,30 @@
 import json
 import os
 from socketsecurity.core import log, do_request
+import requests
 from socketsecurity.core.classes import Comment
 from socketsecurity.core.scm_comments import Comments
 import sys
 
 
-github_sha = None
-github_api_url = None
-github_ref_type = None
-github_event_name = None
-github_workspace = None
-github_repository = None
-github_ref_name = None
-github_actor = None
-default_branch = None
-github_env = None
-pr_number = None
-pr_name = None
-is_default_branch = False
-commit_message = None
-committer = None
-gh_api_token = None
-github_repository_owner = None
-event_action = None
+global github_sha
+global github_api_url
+global github_ref_type
+global github_event_name
+global github_workspace
+global github_repository
+global github_ref_name
+global github_actor
+global default_branch
+global github_env
+global pr_number
+global pr_name
+global is_default_branch
+global commit_message
+global committer
+global gh_api_token
+global github_repository_owner
+global event_action
 
 github_variables = [
     "GITHUB_SHA",
@@ -46,14 +47,16 @@ github_variables = [
 
 for env in github_variables:
     var_name = env.lower()
-    value = os.getenv(env)
-    globals()[var_name] = value
-
+    globals()[var_name] = os.getenv(env) or None
     if var_name == "default_branch":
-        is_default_branch = bool(value and value.lower() != "false")
-
-    if var_name != "gh_api_token":
-        log.debug(f"{env}={value}")
+        global is_default_branch
+        if default_branch is None or default_branch.lower() == "false":
+            is_default_branch = False
+        else:
+            is_default_branch = True
+        if var_name != "gh_api_token":
+            value = globals()[var_name] = os.getenv(env) or None
+            log.debug(f"{env}={value}")
 
 headers = {
     'Authorization': f"Bearer {gh_api_token}",

{socketsecurity-1.0.34 → socketsecurity-1.0.37}/socketsecurity/socketcli.py

@@ -167,15 +167,12 @@ def output_console_comments(diff_report: Diff, sbom_file_name: str = None) -> No
         console_security_comment = Messages.create_console_security_alert_table(diff_report)
         save_sbom_file(diff_report, sbom_file_name)
         log.info(f"Socket Full Scan ID: {diff_report.id}")
-
         if len(diff_report.new_alerts) > 0:
             log.info("Security issues detected by Socket Security")
             msg = f"\n{console_security_comment}"
             log.info(msg)
-
             if not report_pass(diff_report) and not blocking_disabled:
                 sys.exit(1)
-
             else:
                 # Means only warning alerts with no blocked
                 if not blocking_disabled:
@@ -191,7 +188,7 @@ def output_console_json(diff_report: Diff, sbom_file_name: str = None) -> None:
         print(json.dumps(console_security_comment))
         if not report_pass(diff_report) and not blocking_disabled:
             sys.exit(1)
-        if len(diff_report.new_alerts) > 0 and not blocking_disabled:
+        elif len(diff_report.new_alerts) > 0 and not blocking_disabled:
             # Means only warning alerts with no blocked
             sys.exit(5)
 
@@ -255,7 +252,6 @@ def main_code():
     ignore_commit_files = arguments.ignore_commit_files
     disable_blocking = arguments.disable_blocking
     allow_unverified = arguments.allow_unverified
-
     if disable_blocking:
         global blocking_disabled
         blocking_disabled = True
@@ -312,20 +308,13 @@ def main_code():
         default_branch = scm.is_default_branch
 
     base_api_url = os.getenv("BASE_API_URL") or None
-
-    Core.initialize(
-        token=api_token,
-        request_timeout=1200,
-        base_api_url=base_api_url,
-        allow_unverified=allow_unverified
-    )
-
+    core = Core(token=api_token, request_timeout=1200, base_api_url=base_api_url, allow_unverified=allow_unverified)
     no_change = True
     if ignore_commit_files:
         no_change = False
     elif is_repo and files is not None and len(files) > 0:
         log.info(files)
-        no_change = Core.match_supported_files(files)
+        no_change = core.match_supported_files(files)
 
     set_as_pending_head = False
     if default_branch:
@@ -355,7 +344,7 @@ def main_code():
             log.info("No manifest files changes, skipping scan")
             # log.info("No dependency changes")
         elif scm.check_event_type() == "diff":
-            diff = Core.create_new_diff(target_path, params, workspace=target_path, no_change=no_change)
+            diff = core.create_new_diff(target_path, params, workspace=target_path, no_change=no_change)
             log.info("Starting comment logic for PR/MR event")
             log.debug(f"Getting comments for Repo {scm.repository} for PR {scm.pr_number}")
             comments = scm.get_comments_for_pr(repo, str(pr_number))
@@ -399,7 +388,7 @@ def main_code():
             )
         else:
             log.info("Starting non-PR/MR flow")
-            diff = Core.create_new_diff(target_path, params, workspace=target_path, no_change=no_change)
+            diff = core.create_new_diff(target_path, params, workspace=target_path, no_change=no_change)
         if enable_json:
             log.debug("Outputting JSON Results")
             output_console_json(diff, sbom_file)
@@ -408,7 +397,7 @@ def main_code():
     else:
         log.info("API Mode")
         diff: Diff
-        diff = Core.create_new_diff(target_path, params, workspace=target_path, no_change=no_change)
+        diff = core.create_new_diff(target_path, params, workspace=target_path, no_change=no_change)
         if enable_json:
             output_console_json(diff, sbom_file)
         else:
@@ -429,7 +418,7 @@ def main_code():
                 "license_text": package.license_text
             }
             all_packages[package_id] = output
-        Core.save_file(license_file, json.dumps(all_packages))
+        core.save_file(license_file, json.dumps(all_packages))
 
 
 if __name__ == '__main__':

{socketsecurity-1.0.34 → socketsecurity-1.0.37/socketsecurity.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: socketsecurity
-Version: 1.0.34
+Version: 1.0.37
 Summary: Socket Security CLI for CI/CD
 Author-email: Douglas Coburn <douglas@socket.dev>
 Maintainer-email: Douglas Coburn <douglas@socket.dev>
@@ -15,16 +15,11 @@ Classifier: Programming Language :: Python :: 3.12
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: requests>=2.32.0
-Requires-Dist: mdutils~=1.6.0
+Requires-Dist: requests
+Requires-Dist: mdutils
 Requires-Dist: prettytable
-Requires-Dist: argparse
-Requires-Dist: GitPython>=3.1.43
-Requires-Dist: packaging>=24.1
-Requires-Dist: python-dotenv>=1.0.1
-Requires-Dist: socket-sdk-python>=1.0.14
-Provides-Extra: dev
-Requires-Dist: ruff>=0.3.0; extra == "dev"
+Requires-Dist: GitPython
+Requires-Dist: packaging
 
 # Socket Security CLI
 

socketsecurity-1.0.37/socketsecurity.egg-info/requires.txt

@@ -0,0 +1,5 @@
+requests
+mdutils
+prettytable
+GitPython
+packaging

socketsecurity-1.0.34/pyproject.toml

@@ -1,130 +0,0 @@
-[build-system]
-requires = ["setuptools >= 61.0"]
-build-backend = "setuptools.build_meta"
-
-[project]
-name = "socketsecurity"
-dynamic = ["version"]
-requires-python = ">= 3.9"
-dependencies = [
-    'requests >= 2.32.0',
-    'mdutils ~= 1.6.0',
-    'prettytable',
-    'argparse',
-    'GitPython >= 3.1.43',
-    'packaging >= 24.1',
-    'python-dotenv >= 1.0.1',
-    'socket-sdk-python >= 1.0.14'
-]
-
-
-readme = "README.md"
-description = "Socket Security CLI for CI/CD"
-keywords = ["socketsecurity", "socket.dev", "sca", "oss", "security"]
-authors = [
-    {name = "Douglas Coburn", email = "douglas@socket.dev"}
-]
-maintainers = [
-    {name = "Douglas Coburn", email = "douglas@socket.dev"}
-]
-classifiers = [
-    "Development Status :: 4 - Beta",
-    "Intended Audience :: Developers",
-    "Programming Language :: Python :: 3.9",
-    "Programming Language :: Python :: 3.10",
-    "Programming Language :: Python :: 3.11",
-    "Programming Language :: Python :: 3.12",
-]
-
-# modern, faster linter and language server. install with `pip install -e ".[dev]"`
-[project.optional-dependencies]
-dev = [
-    "ruff>=0.3.0",
-]
-
-[project.scripts]
-socketcli = "socketsecurity.socketcli:cli"
-
-[project.urls]
-Homepage = "https://socket.dev"
-
-[tool.setuptools.packages.find]
-include = [
-    "socketsecurity",
-    "socketsecurity.core"
-]
-
-[tool.setuptools.dynamic]
-version = {attr = "socketsecurity.__version__"}
-
-[tool.ruff]
-# Exclude a variety of commonly ignored directories.
-exclude = [
-    ".bzr",
-    ".direnv",
-    ".eggs",
-    ".git",
-    ".git-rewrite",
-    ".hg",
-    ".ipynb_checkpoints",
-    ".mypy_cache",
-    ".nox",
-    ".pants.d",
-    ".pyenv",
-    ".pytest_cache",
-    ".pytype",
-    ".ruff_cache",
-    ".svn",
-    ".tox",
-    ".venv",
-    ".vscode",
-    "__pypackages__",
-    "_build",
-    "buck-out",
-    "build",
-    "dist",
-    "node_modules",
-    "site-packages",
-    "venv",
-]
-
-[tool.ruff.lint]
-# Enable Pyflakes (`F`) and a subset of the pycodestyle (`E`)  codes by default.
-# Unlike Flake8, Ruff doesn't enable pycodestyle warnings (`W`) or
-# McCabe complexity (`C901`) by default.
-select = ["E4", "E7", "E9", "F"]
-ignore = []
-
-# Allow fix for all enabled rules (when `--fix`) is provided.
-fixable = ["ALL"]
-unfixable = []
-
-# Allow unused variables when underscore-prefixed.
-dummy-variable-rgx = "^(_+|(_+[a-zA-Z0-9_]*[a-zA-Z0-9]+?))$"
-
-[tool.ruff.format]
-# Like Black, use double quotes for strings.
-quote-style = "double"
-
-# Like Black, indent with spaces, rather than tabs.
-indent-style = "space"
-
-# Like Black, respect magic trailing commas.
-skip-magic-trailing-comma = false
-
-# Like Black, automatically detect the appropriate line ending.
-line-ending = "auto"
-
-# Enable auto-formatting of code examples in docstrings. Markdown,
-# reStructuredText code/literal blocks and doctests are all supported.
-#
-# This is currently disabled by default, but it is planned for this
-# to be opt-out in the future.
-docstring-code-format = false
-
-# Set the line length limit used when formatting code snippets in
-# docstrings.
-#
-# This only has an effect when the `docstring-code-format` setting is
-# enabled.
-docstring-code-line-length = "dynamic"

socketsecurity-1.0.34/socketsecurity.egg-info/requires.txt

@@ -1,11 +0,0 @@
-requests>=2.32.0
-mdutils~=1.6.0
-prettytable
-argparse
-GitPython>=3.1.43
-packaging>=24.1
-python-dotenv>=1.0.1
-socket-sdk-python>=1.0.14
-
-[dev]
-ruff>=0.3.0