socketsecurity 2.2.32__tar.gz → 2.2.33__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/Dockerfile +5 -1
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/PKG-INFO +1 -1
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/pyproject.toml +1 -1
- socketsecurity-2.2.33/scripts/docker-entrypoint.sh +18 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/__init__.py +1 -1
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/config.py +8 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/tools/reachability.py +5 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/socketcli.py +1 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/CODEOWNERS +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/PULL_REQUEST_TEMPLATE/bug-fix.md +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/PULL_REQUEST_TEMPLATE/feature.md +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/PULL_REQUEST_TEMPLATE/improvement.md +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/PULL_REQUEST_TEMPLATE.md +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/workflows/docker-stable.yml +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/workflows/pr-preview.yml +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/workflows/release.yml +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/workflows/version-check.yml +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.gitignore +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.hooks/sync_version.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.pre-commit-config.yaml +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/.python-version +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/LICENSE +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/Makefile +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/README.md +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/docs/README.md +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/pytest.ini +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/scripts/build_container.sh +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/scripts/build_container_flexible.sh +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/scripts/deploy-test-docker.sh +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/scripts/deploy-test-pypi.sh +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/scripts/run.sh +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/__init__.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/classes.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/cli_client.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/exceptions.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/git_interface.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/helper/__init__.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/lazy_file_loader.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/logging.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/messages.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/resource_utils.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/scm/__init__.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/scm/base.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/scm/client.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/scm/github.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/scm/gitlab.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/scm_comments.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/socket_config.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/core/utils.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/output.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/plugins/__init__.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/plugins/base.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/plugins/jira.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/plugins/manager.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/plugins/slack.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/plugins/teams.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/socketsecurity/plugins/webhook.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/__init__.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/core/conftest.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/core/create_diff_input.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/core/test_diff_generation.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/core/test_package_and_alerts.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/core/test_sdk_methods.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/core/test_supporting_methods.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/create_response.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/diff/stream_diff.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/diff/stream_diff_full.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/head_scan/metadata.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/head_scan/stream_scan.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/head_scan/stream_scan_full.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/new_scan/metadata.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/new_scan/stream_scan.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/repos/repo_info_error.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/repos/repo_info_no_head.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/repos/repo_info_success.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/settings/security-policy.json +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/unit/__init__.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/unit/test_cli_config.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/unit/test_client.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/unit/test_config.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/unit/test_gitlab_auth.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/unit/test_gitlab_auth_fallback.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/unit/test_output.py +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/uv.lock +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/workflows/bitbucket-pipelines.yml +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/workflows/github-actions.yml +0 -0
- {socketsecurity-2.2.32 → socketsecurity-2.2.33}/workflows/gitlab-ci.yml +0 -0
|
@@ -99,4 +99,8 @@ RUN if [ "$USE_LOCAL_INSTALL" = "true" ]; then \
|
|
|
99
99
|
# Create workspace directory with proper permissions
|
|
100
100
|
RUN mkdir -p /go/src && chmod -R 777 /go
|
|
101
101
|
|
|
102
|
-
|
|
102
|
+
# Copy and setup entrypoint script
|
|
103
|
+
COPY scripts/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
|
104
|
+
RUN chmod +x /usr/local/bin/docker-entrypoint.sh
|
|
105
|
+
|
|
106
|
+
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
#!/bin/sh
|
|
2
|
+
|
|
3
|
+
# Docker entrypoint script to support both patterns:
|
|
4
|
+
# docker run socketdev/cli socketcli --params
|
|
5
|
+
# docker run socketdev/cli --cli-params
|
|
6
|
+
|
|
7
|
+
# Check if we have any arguments
|
|
8
|
+
if [ $# -eq 0 ]; then
|
|
9
|
+
# No arguments provided, run socketcli with no args (will show help)
|
|
10
|
+
exec socketcli --help
|
|
11
|
+
elif [ "$1" = "socketcli" ]; then
|
|
12
|
+
# If first argument is "socketcli", shift it out and pass the rest to socketcli
|
|
13
|
+
shift
|
|
14
|
+
exec socketcli "$@"
|
|
15
|
+
else
|
|
16
|
+
# If first argument is not "socketcli", assume all arguments are for socketcli
|
|
17
|
+
exec socketcli "$@"
|
|
18
|
+
fi
|
|
@@ -68,6 +68,7 @@ class CliConfig:
|
|
|
68
68
|
reach_analysis_memory_limit: Optional[int] = None
|
|
69
69
|
reach_analysis_timeout: Optional[int] = None
|
|
70
70
|
reach_disable_analytics: bool = False
|
|
71
|
+
reach_disable_analysis_splitting: bool = False
|
|
71
72
|
reach_ecosystems: Optional[List[str]] = None
|
|
72
73
|
reach_exclude_paths: Optional[List[str]] = None
|
|
73
74
|
reach_skip_cache: bool = False
|
|
@@ -129,6 +130,7 @@ class CliConfig:
|
|
|
129
130
|
'reach_analysis_timeout': args.reach_analysis_timeout,
|
|
130
131
|
'reach_analysis_memory_limit': args.reach_analysis_memory_limit,
|
|
131
132
|
'reach_disable_analytics': args.reach_disable_analytics,
|
|
133
|
+
'reach_disable_analysis_splitting': args.reach_disable_analysis_splitting,
|
|
132
134
|
'reach_ecosystems': args.reach_ecosystems.split(',') if args.reach_ecosystems else None,
|
|
133
135
|
'reach_exclude_paths': args.reach_exclude_paths.split(',') if args.reach_exclude_paths else None,
|
|
134
136
|
'reach_skip_cache': args.reach_skip_cache,
|
|
@@ -567,6 +569,12 @@ def create_argument_parser() -> argparse.ArgumentParser:
|
|
|
567
569
|
action="store_true",
|
|
568
570
|
help="Disable analytics sharing for reachability analysis"
|
|
569
571
|
)
|
|
572
|
+
reachability_group.add_argument(
|
|
573
|
+
"--reach-disable-analysis-splitting",
|
|
574
|
+
dest="reach_disable_analysis_splitting",
|
|
575
|
+
action="store_true",
|
|
576
|
+
help="Disable analysis splitting/bucketing for reachability analysis"
|
|
577
|
+
)
|
|
570
578
|
reachability_group.add_argument(
|
|
571
579
|
"--reach-output-file",
|
|
572
580
|
dest="reach_output_file",
|
|
@@ -93,6 +93,7 @@ class ReachabilityAnalyzer:
|
|
|
93
93
|
min_severity: Optional[str] = None,
|
|
94
94
|
skip_cache: bool = False,
|
|
95
95
|
disable_analytics: bool = False,
|
|
96
|
+
disable_analysis_splitting: bool = False,
|
|
96
97
|
repo_name: Optional[str] = None,
|
|
97
98
|
branch_name: Optional[str] = None,
|
|
98
99
|
version: Optional[str] = None,
|
|
@@ -115,6 +116,7 @@ class ReachabilityAnalyzer:
|
|
|
115
116
|
min_severity: Minimum severity level (info, low, moderate, high, critical)
|
|
116
117
|
skip_cache: Skip cache usage
|
|
117
118
|
disable_analytics: Disable analytics sharing
|
|
119
|
+
disable_analysis_splitting: Disable analysis splitting
|
|
118
120
|
repo_name: Repository name
|
|
119
121
|
branch_name: Branch name
|
|
120
122
|
version: Specific version of @coana-tech/cli to use
|
|
@@ -149,6 +151,9 @@ class ReachabilityAnalyzer:
|
|
|
149
151
|
if disable_analytics:
|
|
150
152
|
cmd.append("--disable-analytics-sharing")
|
|
151
153
|
|
|
154
|
+
if disable_analysis_splitting:
|
|
155
|
+
cmd.append("--disable-analysis-splitting")
|
|
156
|
+
|
|
152
157
|
# KEY POINT: Only add manifest tar hash if we have one
|
|
153
158
|
if tar_hash:
|
|
154
159
|
cmd.extend(["--run-without-docker", "--manifests-tar-hash", tar_hash])
|
|
@@ -282,6 +282,7 @@ def main_code():
|
|
|
282
282
|
min_severity=config.reach_min_severity,
|
|
283
283
|
skip_cache=config.reach_skip_cache or False,
|
|
284
284
|
disable_analytics=config.reach_disable_analytics or False,
|
|
285
|
+
disable_analysis_splitting=config.reach_disable_analysis_splitting or False,
|
|
285
286
|
repo_name=config.repo,
|
|
286
287
|
branch_name=config.branch,
|
|
287
288
|
version=config.reach_version,
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{socketsecurity-2.2.32 → socketsecurity-2.2.33}/.github/PULL_REQUEST_TEMPLATE/improvement.md
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/diff/stream_diff_full.json
RENAMED
|
File without changes
|
{socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/head_scan/metadata.json
RENAMED
|
File without changes
|
{socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/head_scan/stream_scan.json
RENAMED
|
File without changes
|
{socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/head_scan/stream_scan_full.json
RENAMED
|
File without changes
|
|
File without changes
|
{socketsecurity-2.2.32 → socketsecurity-2.2.33}/tests/data/fullscans/new_scan/stream_scan.json
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|