socketsecurity 2.0.35__tar.gz → 2.0.38__tar.gz

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: socketsecurity
-Version: 2.0.35
+Version: 2.0.38
 Summary: Socket Security CLI for CI/CD
 Project-URL: Homepage, https://socket.dev
 Author-email: Douglas Coburn <douglas@socket.dev>
@@ -39,7 +39,7 @@ Requires-Dist: packaging
 Requires-Dist: prettytable
 Requires-Dist: python-dotenv
 Requires-Dist: requests
-Requires-Dist: socket-sdk-python>=2.0.15
+Requires-Dist: socket-sdk-python>=2.0.20
 Provides-Extra: dev
 Requires-Dist: hatch; extra == 'dev'
 Requires-Dist: pip-tools>=7.4.0; extra == 'dev'

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "socketsecurity"
-version = "2.0.35"
+version = "2.0.38"
 requires-python = ">= 3.10"
 license = {"file" = "LICENSE"}
 dependencies = [
@@ -16,7 +16,7 @@ dependencies = [
     'GitPython',
     'packaging',
     'python-dotenv',
-    'socket-sdk-python>=2.0.15'
+    'socket-sdk-python>=2.0.20'
 ]
 readme = "README.md"
 description = "Socket Security CLI for CI/CD"

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/scripts/build_container.sh

@@ -32,20 +32,20 @@ fi
 
 if [ $ENABLE_PYPI_BUILD = "pypi-build=prod" ]; then
     echo "Doing production build"
-    if ! python -m build --wheel --sdist; then
-        echo "Build failed"
-        exit 1
-    fi
-    
-    if ! twine upload dist/*$VERSION*; then
-        echo "Upload to PyPI failed"
-        exit 1
-    fi
-    
-    if ! verify_package $VERSION "https://pypi.org/simple"; then
-        echo "Failed to verify package on PyPI"
-        exit 1
-    fi
+#    if ! python -m build --wheel --sdist; then
+#        echo "Build failed"
+#        exit 1
+#    fi
+#
+#    if ! twine upload dist/*$VERSION*; then
+#        echo "Upload to PyPI failed"
+#        exit 1
+#    fi
+#
+#    if ! verify_package $VERSION "https://pypi.org/simple"; then
+#        echo "Failed to verify package on PyPI"
+#        exit 1
+#    fi
     
     docker build --no-cache --build-arg CLI_VERSION=$VERSION --platform linux/amd64,linux/arm64 -t socketdev/cli:$VERSION . \
         && docker build --no-cache --build-arg CLI_VERSION=$VERSION --platform linux/amd64,linux/arm64 -t socketdev/cli:latest . \

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/socketsecurity/__init__.py

@@ -1,3 +1,3 @@
 __author__ = 'socket.dev'
-__version__ = '2.0.35'
+__version__ = '2.0.38'
 

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/socketsecurity/config.py

@@ -2,7 +2,7 @@ import argparse
 import os
 from dataclasses import asdict, dataclass
 from typing import List, Optional
-
+from socketsecurity import __version__
 from socketdev import INTEGRATION_TYPES, IntegrationType
 
 
@@ -35,6 +35,7 @@ class CliConfig:
     timeout: Optional[int] = 1200
     exclude_license_details: bool = False
     include_module_folders: bool = False
+    version: str = __version__
     @classmethod
     def from_args(cls, args_list: Optional[List[str]] = None) -> 'CliConfig':
         parser = create_argument_parser()
@@ -75,6 +76,7 @@ class CliConfig:
             'timeout': args.timeout,
             'exclude_license_details': args.exclude_license_details,
             'include_module_folders': args.include_module_folders,
+            'version': __version__
         }
 
         if args.owner:
@@ -360,4 +362,10 @@ def create_argument_parser() -> argparse.ArgumentParser:
         help="Enabling including module folders like node_modules"
     )
 
+    parser.add_argument(
+        '--version',
+        action='version',
+        version=f'%(prog)s {__version__}'
+    )
+
     return parser

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/socketsecurity/core/__init__.py

@@ -25,9 +25,11 @@ from socketsecurity.core.classes import (
 )
 from socketsecurity.core.exceptions import APIResourceNotFound
 from socketsecurity.core.licenses import Licenses
-
 from .socket_config import SocketConfig
 from .utils import socket_globs
+import importlib
+logging_std = importlib.import_module("logging")
+
 
 __all__ = [
     "Core",
@@ -375,11 +377,12 @@ class Core:
             else:
                 package.license_text = self.get_package_license_text(package)
                 packages[package.id] = package
-                for top_id in package.topLevelAncestors:
-                    if top_id not in top_level_count:
-                        top_level_count[top_id] = 1
-                    else:
-                        top_level_count[top_id] += 1
+                if package.topLevelAncestors:
+                    for top_id in package.topLevelAncestors:
+                        if top_id not in top_level_count:
+                            top_level_count[top_id] = 1
+                        else:
+                            top_level_count[top_id] += 1
 
         for package_id, package in packages.items():
             package.transitives = top_level_count.get(package_id, 0)
@@ -424,10 +427,14 @@ class Core:
             Exception: If API request fails
         """
         try:
+            sdk_logger = logging_std.getLogger("socketdev")
+            original_level = sdk_logger.level
+            sdk_logger.setLevel(logging_std.CRITICAL)
             response = self.sdk.repos.repo(self.config.org_slug, repo_slug, use_types=True)
+            sdk_logger.setLevel(original_level)
             if not response.success:
                 log.error(f"Failed to get repository: {response.status}")
-                log.error(response.message)
+                # log.error(response.message)
         except APIFailure:
             log.warning(f"Failed to get repository {repo_slug}, attempting to create it")
             try:
@@ -729,6 +736,8 @@ class Core:
             source = ("direct", manifests)
             introduced_by.append(source)
         else:
+            if not package.topLevelAncestors:
+                return introduced_by
             for top_id in package.topLevelAncestors:
                 top_package = packages.get(top_id)
                 if top_package:

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/socketsecurity/core/socket_config.py

@@ -5,6 +5,7 @@ from typing import Set
 import os
 
 from socketsecurity.core.issues import AllIssues
+from socketsecurity import __version__
 
 
 default_exclude_dirs = {
@@ -27,6 +28,7 @@ class SocketConfig:
     security_policy: Dict = None
     all_issues: Optional['AllIssues'] = None
     excluded_dirs: Set[str] = field(default_factory=lambda: default_exclude_dirs)
+    version: str = __version__
 
     def __post_init__(self):
         """Validate configuration after initialization"""

{socketsecurity-2.0.35 → socketsecurity-2.0.38}/socketsecurity/socketcli.py

@@ -45,6 +45,7 @@ def cli():
 
 def main_code():
     config = CliConfig.from_args()
+    log.info(f"Starting Socket Security CLI version {config.version}")
     log.debug(f"config: {config.to_dict()}")
     output_handler = OutputHandler(config)