socketsecurity 2.2.68__tar.gz → 2.2.70__tar.gz

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/.gitignore

@@ -1,6 +1,7 @@
 .idea
 venv
 .venv
+.venv-test
 build
 dist
 *.build

socketsecurity-2.2.70/CHANGELOG.md

@@ -0,0 +1,24 @@
+# Changelog
+
+## 2.2.70
+
+- Set the scan to `'socket_tier1'` when using the `--reach` flag. This ensures Tier 1 scans are properly integrated into the organization-wide alerts.
+
+## 2.2.69
+
+- Added `--reach-enable-analysis-splitting` flag to enable analysis splitting (disabled by default).
+- Added `--reach-detailed-analysis-log-file` flag to print detailed analysis log file path.
+- Added `--reach-lazy-mode` flag to enable lazy mode for reachability analysis.
+- Changed default behavior: analysis splitting is now disabled by default. The old `--reach-disable-analysis-splitting` flag is kept as a hidden no-op for backwards compatibility.
+
+## 2.2.64
+
+- Included PyPy in the Docker image.
+
+## 2.2.57
+
+- Fixed Dockerfile to set `GOROOT` to `/usr/lib/go` when using system Go (`GO_VERSION=system`) instead of always using `/usr/local/go`.
+
+## 2.2.56
+
+- Removed process timeout from reachability analysis subprocess. Timeouts are now only passed to the Coana CLI via the `--analysis-timeout` flag.

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: socketsecurity
-Version: 2.2.68
+Version: 2.2.70
 Summary: Socket Security CLI for CI/CD
 Project-URL: Homepage, https://socket.dev
 Author-email: Douglas Coburn <douglas@socket.dev>
@@ -41,7 +41,7 @@ Requires-Dist: packaging
 Requires-Dist: prettytable
 Requires-Dist: python-dotenv
 Requires-Dist: requests
-Requires-Dist: socketdev<4.0.0,>=3.0.28
+Requires-Dist: socketdev<4.0.0,>=3.0.29
 Provides-Extra: dev
 Requires-Dist: hatch; extra == 'dev'
 Requires-Dist: pre-commit; extra == 'dev'

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "socketsecurity"
-version = "2.2.68"
+version = "2.2.70"
 requires-python = ">= 3.10"
 license = {"file" = "LICENSE"}
 dependencies = [
@@ -16,7 +16,7 @@ dependencies = [
     'GitPython',
     'packaging',
     'python-dotenv',
-    "socketdev>=3.0.28,<4.0.0",
+    "socketdev>=3.0.29,<4.0.0",
     "bs4>=0.0.2",
     "markdown>=3.10",
 ]

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/socketsecurity/__init__.py

@@ -1,3 +1,3 @@
 __author__ = 'socket.dev'
-__version__ = '2.2.68'
+__version__ = '2.2.70'
 USER_AGENT = f'SocketPythonCLI/{__version__}'

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/socketsecurity/config.py

@@ -72,7 +72,10 @@ class CliConfig:
     reach_analysis_memory_limit: Optional[int] = None
     reach_analysis_timeout: Optional[int] = None
     reach_disable_analytics: bool = False
-    reach_disable_analysis_splitting: bool = False
+    reach_disable_analysis_splitting: bool = False  # Deprecated, kept for backwards compatibility
+    reach_enable_analysis_splitting: bool = False
+    reach_detailed_analysis_log_file: bool = False
+    reach_lazy_mode: bool = False
     reach_ecosystems: Optional[List[str]] = None
     reach_exclude_paths: Optional[List[str]] = None
     reach_skip_cache: bool = False
@@ -148,6 +151,9 @@ class CliConfig:
             'reach_analysis_memory_limit': args.reach_analysis_memory_limit,
             'reach_disable_analytics': args.reach_disable_analytics,
             'reach_disable_analysis_splitting': args.reach_disable_analysis_splitting,
+            'reach_enable_analysis_splitting': args.reach_enable_analysis_splitting,
+            'reach_detailed_analysis_log_file': args.reach_detailed_analysis_log_file,
+            'reach_lazy_mode': args.reach_lazy_mode,
             'reach_ecosystems': args.reach_ecosystems.split(',') if args.reach_ecosystems else None,
             'reach_exclude_paths': args.reach_exclude_paths.split(',') if args.reach_exclude_paths else None,
             'reach_skip_cache': args.reach_skip_cache,
@@ -642,7 +648,25 @@ def create_argument_parser() -> argparse.ArgumentParser:
         "--reach-disable-analysis-splitting",
         dest="reach_disable_analysis_splitting",
         action="store_true",
-        help="Disable analysis splitting/bucketing for reachability analysis"
+        help=argparse.SUPPRESS  # Deprecated, kept for backwards compatibility (no-op)
+    )
+    reachability_group.add_argument(
+        "--reach-enable-analysis-splitting",
+        dest="reach_enable_analysis_splitting",
+        action="store_true",
+        help="Enable analysis splitting/bucketing for reachability analysis (disabled by default). This is a legacy feature for improving performance"
+    )
+    reachability_group.add_argument(
+        "--reach-detailed-analysis-log-file",
+        dest="reach_detailed_analysis_log_file",
+        action="store_true",
+        help="Create a detailed analysis log file for reachability analysis. The output path is written to stdout"
+    )
+    reachability_group.add_argument(
+        "--reach-lazy-mode",
+        dest="reach_lazy_mode",
+        action="store_true",
+        help="Enable lazy mode for reachability analysis. This is an experimental feature for improving performance"
     )
     reachability_group.add_argument(
         "--reach-output-file",

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/socketsecurity/core/tools/reachability.py

@@ -93,7 +93,9 @@ class ReachabilityAnalyzer:
         min_severity: Optional[str] = None,
         skip_cache: bool = False,
         disable_analytics: bool = False,
-        disable_analysis_splitting: bool = False,
+        enable_analysis_splitting: bool = False,
+        detailed_analysis_log_file: bool = False,
+        lazy_mode: bool = False,
         repo_name: Optional[str] = None,
         branch_name: Optional[str] = None,
         version: Optional[str] = None,
@@ -118,7 +120,9 @@ class ReachabilityAnalyzer:
             min_severity: Minimum severity level (info, low, moderate, high, critical)
             skip_cache: Skip cache usage
             disable_analytics: Disable analytics sharing
-            disable_analysis_splitting: Disable analysis splitting
+            enable_analysis_splitting: Enable analysis splitting (disabled by default)
+            detailed_analysis_log_file: Print detailed analysis log file path
+            lazy_mode: Enable lazy mode for analysis
             repo_name: Repository name
             branch_name: Branch name
             version: Specific version of @coana-tech/cli to use
@@ -156,9 +160,16 @@ class ReachabilityAnalyzer:
         
         if disable_analytics:
             cmd.append("--disable-analytics-sharing")
-        
-        if disable_analysis_splitting:
+
+        # Analysis splitting is disabled by default; only omit the flag if explicitly enabled
+        if not enable_analysis_splitting:
             cmd.append("--disable-analysis-splitting")
+
+        if detailed_analysis_log_file:
+            cmd.append("--print-analysis-log-file")
+
+        if lazy_mode:
+            cmd.append("--lazy-mode")
         
         # KEY POINT: Only add manifest tar hash if we have one
         if tar_hash:

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/socketsecurity/socketcli.py

@@ -291,7 +291,9 @@ def main_code():
                     min_severity=config.reach_min_severity,
                     skip_cache=config.reach_skip_cache or False,
                     disable_analytics=config.reach_disable_analytics or False,
-                    disable_analysis_splitting=config.reach_disable_analysis_splitting or False,
+                    enable_analysis_splitting=config.reach_enable_analysis_splitting or False,
+                    detailed_analysis_log_file=config.reach_detailed_analysis_log_file or False,
+                    lazy_mode=config.reach_lazy_mode or False,
                     repo_name=config.repo,
                     branch_name=config.branch,
                     version=config.reach_version,
@@ -461,7 +463,8 @@ def main_code():
         committers=config.committers,
         make_default_branch=is_default_branch,
         set_as_pending_head=is_default_branch,
-        tmp=False
+        tmp=False,
+        scan_type='socket_tier1' if config.reach else 'socket'
     )
 
     params.include_license_details = not config.exclude_license_details

{socketsecurity-2.2.68 → socketsecurity-2.2.70}/uv.lock

@@ -1250,20 +1250,20 @@ wheels = [
 
 [[package]]
 name = "socketdev"
-version = "3.0.28"
+version = "3.0.29"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "requests" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f8/db/3446da069f8f2e0235970fa3e1cbcc2cf9a2da9ab75bd965f00e7ab3c7ab/socketdev-3.0.28.tar.gz", hash = "sha256:60f8635502fa291a9bf4fb0f2a13c8dfeb1d3dc2dc395ec5265a1e2f4147cf52", size = 170539, upload-time = "2026-01-05T22:24:53.637Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/02/f4/a4434843e0f01da684d0d330f1b4b744abfad1ee4d6b6d5fddfa9228b122/socketdev-3.0.29.tar.gz", hash = "sha256:be201a9bd186da6ddae4725294d3cbf11b00ec76c96e46be38d78a569fde4af3", size = 170751, upload-time = "2026-01-21T09:15:57.465Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/bc/72/4bbd4a70e5fa317f4e33a134f5871793eeaba45e05b949685f3502e451b4/socketdev-3.0.28-py3-none-any.whl", hash = "sha256:61a9e09ab24180e7b033ad1e141110b90f1f714336b04f21c20035b901311229", size = 66681, upload-time = "2026-01-05T22:24:51.736Z" },
+    { url = "https://files.pythonhosted.org/packages/db/08/f1cea3b342d8b9109f5792257e3f6c31c3ff53a1e42a87726a2acac65440/socketdev-3.0.29-py3-none-any.whl", hash = "sha256:c2f832a703bd61eb88a5e3f9b8079e62f7cd1352ec206a20a946c6dd34fa788e", size = 66783, upload-time = "2026-01-21T09:15:55.909Z" },
 ]
 
 [[package]]
 name = "socketsecurity"
-version = "2.2.65"
+version = "2.2.69"
 source = { editable = "." }
 dependencies = [
     { name = "bs4" },
@@ -1316,7 +1316,7 @@ requires-dist = [
     { name = "python-dotenv" },
     { name = "requests" },
     { name = "ruff", marker = "extra == 'dev'", specifier = ">=0.3.0" },
-    { name = "socketdev", specifier = ">=3.0.28,<4.0.0" },
+    { name = "socketdev", specifier = ">=3.0.29,<4.0.0" },
     { name = "twine", marker = "extra == 'dev'" },
     { name = "uv", marker = "extra == 'dev'", specifier = ">=0.1.0" },
 ]

socketsecurity-2.2.68/CHANGELOG.md

@@ -1,13 +0,0 @@
-# Changelog
-
-## 2.2.64
-
-- Included PyPy in the Docker image.
-
-## 2.2.57
-
-- Fixed Dockerfile to set `GOROOT` to `/usr/lib/go` when using system Go (`GO_VERSION=system`) instead of always using `/usr/local/go`.
-
-## 2.2.56
-
-- Removed process timeout from reachability analysis subprocess. Timeouts are now only passed to the Coana CLI via the `--analysis-timeout` flag.