spaceforge 1.3.0__tar.gz → 1.4.0__tar.gz

spaceforge-1.4.0/CODEOWNERS

@@ -0,0 +1 @@
+* @spacelift-io/ecosystem

{spaceforge-1.3.0/spaceforge.egg-info → spaceforge-1.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spaceforge
-Version: 1.3.0
+Version: 1.4.0
 Summary: A Python framework for building Spacelift plugins
 Author-email: Spacelift <support@spacelift.io>
 Maintainer-email: Spacelift <support@spacelift.io>

{spaceforge-1.3.0 → spaceforge-1.4.0}/plugins/sops/plugin.py

@@ -43,12 +43,18 @@ class SopsPlugin(SpaceforgePlugin):
     file is at the repository root.
 
     Example: `${TF_VAR_spacelift_workspace_root}/source/.sops.yaml`
+
+    Environment variables are supported in the `secrets` list using `$VAR` or `${VAR}` syntax:
+    ```yaml
+    secrets:
+      - services/${TF_VAR_service_name}/secrets/${TF_VAR_environment}.enc.yaml
+    ```
     """
 
     # Plugin metadata
     __plugin_name__ = "Sops"
     __labels__ = ["secrets management", "encryption"]
-    __version__ = "1.1.1"
+    __version__ = "1.2.0"
     __author__ = "Spacelift Team"
 
     __binaries__ = [
@@ -107,6 +113,9 @@ class SopsPlugin(SpaceforgePlugin):
         secrets = secrets["secrets"]
 
         for secret in secrets:
+            # Expand environment variables in secret paths (supports $VAR and ${VAR} syntax)
+            secret = os.path.expandvars(secret)
+
             if not Path(secret).exists():
                 self.logger.error(f"Secret file {secret} does not exist.")
                 continue

{spaceforge-1.3.0 → spaceforge-1.4.0}/plugins/sops/plugin.yaml

@@ -1,5 +1,5 @@
 name: Sops
-version: 1.1.1
+version: 1.2.0
 description: |-
   This adds the `SOPS` plugin to your Spacelift account.
   It will decrypt an arbitrary number of files based on config you set.
@@ -35,6 +35,12 @@ description: |-
   file is at the repository root.
 
   Example: `${TF_VAR_spacelift_workspace_root}/source/.sops.yaml`
+
+  Environment variables are supported in the `secrets` list using `$VAR` or `${VAR}` syntax:
+  ```yaml
+  secrets:
+    - services/${TF_VAR_service_name}/secrets/${TF_VAR_environment}.enc.yaml
+  ```
 author: Spacelift Team
 labels:
 - secrets management
@@ -107,12 +113,18 @@ contexts:
           file is at the repository root.
 
           Example: `${TF_VAR_spacelift_workspace_root}/source/.sops.yaml`
+
+          Environment variables are supported in the `secrets` list using `$VAR` or `${VAR}` syntax:
+          ```yaml
+          secrets:
+            - services/${TF_VAR_service_name}/secrets/${TF_VAR_environment}.enc.yaml
+          ```
           """
 
           # Plugin metadata
           __plugin_name__ = "Sops"
           __labels__ = ["secrets management", "encryption"]
-          __version__ = "1.1.1"
+          __version__ = "1.2.0"
           __author__ = "Spacelift Team"
 
           __binaries__ = [
@@ -171,6 +183,9 @@ contexts:
               secrets = secrets["secrets"]
 
               for secret in secrets:
+                  # Expand environment variables in secret paths (supports $VAR and ${VAR} syntax)
+                  secret = os.path.expandvars(secret)
+
                   if not Path(secret).exists():
                       self.logger.error(f"Secret file {secret} does not exist.")
                       continue

{spaceforge-1.3.0 → spaceforge-1.4.0}/plugins/wiz/plugin.py

@@ -23,28 +23,46 @@ class WizPlugin(SpaceforgePlugin):
     # Plugin metadata
     __plugin_name__ = "Wiz"
     __labels__ = ["security", "code scanning", "vulnerability"]
-    __version__ = "1.0.4"
+    __version__ = "2.0.0"
     __author__ = "Spacelift Team"
 
     __binaries__ = [
         Binary(
             name="wizcli",
             download_urls={
-                "amd64": "https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64",
-                "arm64": "https://downloads.wiz.io/wizcli/latest/wizcli-linux-arm64",
+                "amd64": "https://downloads.wiz.io/v1/wizcli/latest/wizcli-linux-amd64",
+                "arm64": "https://downloads.wiz.io/v1/wizcli/latest/wizcli-linux-arm64",
             },
         )
     ]
 
     # Plugin parameters
     __parameters__ = [
+        Parameter(
+            name="Default Scan Name",
+            id="default_scan_name",
+            description="The default name of the scan that shows up in wiz. This setting can be overridden on individual stacks by manually setting the environment variable (DEFAULT_SCAN_NAME) there",
+            default="",
+            type="string",
+            required=False,
+            sensitive=False,
+        ),
+        Parameter(
+            name="Default Policies",
+            id="default_policies",
+            description="Comma separated list of policies to include in all scans. This setting can be overridden on individual stacks by manually setting the environment variable (DEFAULT_POLICIES) there.",
+            default="",
+            type="string",
+            required=False,
+            sensitive=False,
+        ),
         Parameter(
             name="Wiz Client ID",
             id="wiz_client_id",
             description="The client ID for Wiz API authentication",
             type="string",
             required=True,
-            sensitive=True,
+            sensitive=False,
         ),
         Parameter(
             name="Wiz Client Secret",
@@ -54,6 +72,41 @@ class WizPlugin(SpaceforgePlugin):
             required=True,
             sensitive=True,
         ),
+        Parameter(
+            name="Additional Arguments",
+            id="wiz_additional_args",
+            description="Additional command-line arguments to pass to Wiz",
+            default="",
+            type="string",
+            required=False,
+        ),
+        Parameter(
+            name="Wiz CLI Autofail",
+            id="wizcli_autofail",
+            description="Allow wizcli to fail the run (instead of policies)",
+            default=False,
+            type="boolean",
+            required=False,
+            sensitive=False,
+        ),
+        Parameter(
+            name="Is GovCloud",
+            id="is_govcloud",
+            description="Enable if you access wiz via gov.wiz.io",
+            default=False,
+            type="boolean",
+            required=False,
+            sensitive=False,
+        ),
+        Parameter(
+            name="Is Fedramp",
+            id="is_fedramp",
+            description="Enable if you access wiz via app.wiz.us",
+            default=False,
+            type="boolean",
+            required=False,
+            sensitive=False,
+        ),
     ]
 
     # Plugin contexts
@@ -62,16 +115,46 @@ class WizPlugin(SpaceforgePlugin):
             name_prefix="WIZ",
             description="Wiz Plugin",
             env=[
+                Variable(
+                    key="DEFAULT_SCAN_NAME",
+                    value_from_parameter="default_scan_name",
+                    sensitive=False,
+                ),
+                Variable(
+                    key="DEFAULT_POLICIES",
+                    value_from_parameter="default_policies",
+                    sensitive=False,
+                ),
                 Variable(
                     key="WIZ_CLIENT_ID",
-                    value_from_parameter="Wiz Client ID",
-                    sensitive=True,
+                    value_from_parameter="wiz_client_id",
+                    sensitive=False,
                 ),
                 Variable(
                     key="WIZ_CLIENT_SECRET",
-                    value_from_parameter="Wiz Client Secret",
+                    value_from_parameter="wiz_client_secret",
                     sensitive=True,
                 ),
+                Variable(
+                    key="WIZ_ADDITIONAL_ARGS",
+                    value_from_parameter="wiz_additional_args",
+                    sensitive=False,
+                ),
+                Variable(
+                    key="WIZCLI_AUTOFAIL",
+                    value_from_parameter="wizcli_autofail",
+                    sensitive=False,
+                ),
+                Variable(
+                    key="IS_GOVCLOUD",
+                    value_from_parameter="is_govcloud",
+                    sensitive=False,
+                ),
+                Variable(
+                    key="IS_FEDRAMP",
+                    value_from_parameter="is_fedramp",
+                    sensitive=False,
+                ),
             ],
         )
     ]
@@ -119,63 +202,68 @@ deny[sprintf("Too many low vulnerabilities (%d)", [num])] {
     def before_plan(self):
         self.logger.info("Checking IAC Code")
 
-        return_code, stdout, stderr = self.run_cli(
-            "wizcli",
-            "auth",
-            "--id",
-            os.environ.get("WIZ_CLIENT_ID"),
-            "--secret",
-            os.environ.get("WIZ_CLIENT_SECRET"),
-        )
-        if return_code != 0:
-            exit(1)
+        if os.environ.get("IS_GOVCLOUD", "false").lower() == "true":
+            os.environ["WIZ_ENV"] = "gov"
+
+        if os.environ.get("IS_FEDRAMP", "false").lower() == "true":
+            os.environ["WIZ_ENV"] = "fedramp"
 
-        return_code, stdout, stderr = self.run_cli(
+        args = [
             "wizcli",
-            "iac",
             "scan",
-            "--format",
-            "json",
-            "--path",
+            "dir",
             "./",
+            "--json-output-file",
+            "./wiz_scan.json",
             "--no-style",
             "--no-color",
             "--no-telemetry",
-            "--show-secret-snippets",
-            print_output=False,
-        )
-        if return_code != 0:
+            "--no-browser",
+        ]
+
+        if os.environ.get("DEFAULT_SCAN_NAME", "") != "":
+            args.extend(["--name", os.environ.get("DEFAULT_SCAN_NAME")])
+
+        if os.environ.get("DEFAULT_POLICIES", "") != "":
+            args.extend(["--policies", os.environ.get("DEFAULT_POLICIES")])
+
+        additional_args = os.environ.get("WIZ_ADDITIONAL_ARGS", "").strip()
+        if additional_args:
+            args.extend(additional_args.split())
+
+        return_code, stdout, stderr = self.run_cli(*args, print_output=False)
+        if (
+            os.environ.get("WIZCLI_AUTOFAIL", "false").lower() == "true"
+            and return_code != 0
+        ):
             # Print the output because we set print_output=False because wizcli outputs errors to stdout.
             for line in stdout:
                 self.logger.error(line)
             exit(1)
 
-        stdout_json = None
-        for line in stdout:
-            try:
-                stdout_json = json.loads(line)
-                break
-            except json.decoder.JSONDecodeError:
-                stdout_json = None
+        with open("wiz_scan.json", "r") as f:
+            results = json.load(f)
+
+        self.logger.debug(results)
 
-        if stdout_json is None:
+        if results is None:
             self.logger.error("Failed to parse Wiz CLI output as JSON")
-            self.logger.debug(stdout)
+            self.logger.debug(stdout, results)
             exit(1)
 
-        if "result" not in stdout_json or "ruleMatches" not in stdout_json["result"]:
+        if "result" not in results or "ruleMatches" not in results["result"]:
             self.logger.error("Unexpected Wiz CLI output format")
-            self.logger.debug(stdout_json)
+            self.logger.debug(results)
             exit(1)
 
-        self.add_to_policy_input("wiz", stdout_json)
+        self.add_to_policy_input("wiz", results)
 
-        if stdout_json["result"]["ruleMatches"] is None:
+        if results["result"]["ruleMatches"] is None:
             self.logger.info("No findings found in the IAC scan.")
         else:
             findings = {}
             # Sort the findings by the severity and their rule id
-            for match in stdout_json["result"]["ruleMatches"]:
+            for match in results["result"]["ruleMatches"]:
                 if match["severity"] not in findings:
                     findings[match["severity"]] = {}
                 if match["rule"]["id"] not in findings[match["severity"]]:
@@ -188,7 +276,7 @@ deny[sprintf("Too many low vulnerabilities (%d)", [num])] {
                 )
 
             markdown = "# Wiz IAC Scan Findings\n\n"
-            markdown += f"**Status:** {stdout_json['status']['state']} **Verdict:** {stdout_json['status']['verdict']}\n"
+            markdown += f"**Status:** {results['status']['state']} **Verdict:** {results['status']['verdict']}\n"
             for severity, matches in findings.items():
                 severity = severity.upper()
 
@@ -214,8 +302,8 @@ deny[sprintf("Too many low vulnerabilities (%d)", [num])] {
                         for match in cycled_rule["matches"]:
                             markdown += f"- File: {match['fileName']}, Line: {match['lineNumber']}\n"
                     markdown += "\n"
-            if "reportUrl" in stdout_json:
-                markdown += f"[View Report]({stdout_json['reportUrl']})\n"
+            if "reportUrl" in results:
+                markdown += f"[View Report]({results['reportUrl']})\n"
             result = self.send_markdown(markdown)
             if not result:
                 self.logger.error("Failed to send Wiz CLI output to spacelift")

{spaceforge-1.3.0 → spaceforge-1.4.0}/plugins/wiz/plugin.yaml

@@ -1,5 +1,5 @@
 name: Wiz
-version: 1.0.4
+version: 2.0.0
 description: |-
   This adds the `wiz` plugin to your Spacelift account.
   It will scan your infrastructure as code (IaC) for vulnerabilities using Wiz CLI, generating a report of findings and
@@ -19,10 +19,24 @@ labels:
 - code scanning
 - vulnerability
 parameters:
+- name: Default Scan Name
+  description: The default name of the scan that shows up in wiz. This setting can be overridden on individual stacks by manually setting the environment variable (DEFAULT_SCAN_NAME) there
+  type: string
+  sensitive: false
+  required: false
+  default: ''
+  id: default_scan_name
+- name: Default Policies
+  description: Comma separated list of policies to include in all scans. This setting can be overridden on individual stacks by manually setting the environment variable (DEFAULT_POLICIES) there.
+  type: string
+  sensitive: false
+  required: false
+  default: ''
+  id: default_policies
 - name: Wiz Client ID
   description: The client ID for Wiz API authentication
   type: string
-  sensitive: true
+  sensitive: false
   required: true
   id: wiz_client_id
 - name: Wiz Client Secret
@@ -31,16 +45,62 @@ parameters:
   sensitive: true
   required: true
   id: wiz_client_secret
+- name: Additional Arguments
+  description: Additional command-line arguments to pass to Wiz
+  type: string
+  sensitive: false
+  required: false
+  default: ''
+  id: wiz_additional_args
+- name: Wiz CLI Autofail
+  description: Allow wizcli to fail the run (instead of policies)
+  type: boolean
+  sensitive: false
+  required: false
+  default: false
+  id: wizcli_autofail
+- name: Is GovCloud
+  description: Enable if you access wiz via gov.wiz.io
+  type: boolean
+  sensitive: false
+  required: false
+  default: false
+  id: is_govcloud
+- name: Is Fedramp
+  description: Enable if you access wiz via app.wiz.us
+  type: boolean
+  sensitive: false
+  required: false
+  default: false
+  id: is_fedramp
 contexts:
 - name_prefix: WIZ
   description: Wiz Plugin
   env:
+  - key: DEFAULT_SCAN_NAME
+    value_from_parameter: default_scan_name
+    sensitive: false
+  - key: DEFAULT_POLICIES
+    value_from_parameter: default_policies
+    sensitive: false
   - key: WIZ_CLIENT_ID
     value_from_parameter: wiz_client_id
-    sensitive: true
+    sensitive: false
   - key: WIZ_CLIENT_SECRET
     value_from_parameter: wiz_client_secret
     sensitive: true
+  - key: WIZ_ADDITIONAL_ARGS
+    value_from_parameter: wiz_additional_args
+    sensitive: false
+  - key: WIZCLI_AUTOFAIL
+    value_from_parameter: wizcli_autofail
+    sensitive: false
+  - key: IS_GOVCLOUD
+    value_from_parameter: is_govcloud
+    sensitive: false
+  - key: IS_FEDRAMP
+    value_from_parameter: is_fedramp
+    sensitive: false
   mounted_files:
   - path: /mnt/workspace/plugins/wiz/plugin.py
     content: |-
@@ -69,28 +129,46 @@ contexts:
           # Plugin metadata
           __plugin_name__ = "Wiz"
           __labels__ = ["security", "code scanning", "vulnerability"]
-          __version__ = "1.0.4"
+          __version__ = "2.0.0"
           __author__ = "Spacelift Team"
 
           __binaries__ = [
               Binary(
                   name="wizcli",
                   download_urls={
-                      "amd64": "https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64",
-                      "arm64": "https://downloads.wiz.io/wizcli/latest/wizcli-linux-arm64",
+                      "amd64": "https://downloads.wiz.io/v1/wizcli/latest/wizcli-linux-amd64",
+                      "arm64": "https://downloads.wiz.io/v1/wizcli/latest/wizcli-linux-arm64",
                   },
               )
           ]
 
           # Plugin parameters
           __parameters__ = [
+              Parameter(
+                  name="Default Scan Name",
+                  id="default_scan_name",
+                  description="The default name of the scan that shows up in wiz. This setting can be overridden on individual stacks by manually setting the environment variable (DEFAULT_SCAN_NAME) there",
+                  default="",
+                  type="string",
+                  required=False,
+                  sensitive=False,
+              ),
+              Parameter(
+                  name="Default Policies",
+                  id="default_policies",
+                  description="Comma separated list of policies to include in all scans. This setting can be overridden on individual stacks by manually setting the environment variable (DEFAULT_POLICIES) there.",
+                  default="",
+                  type="string",
+                  required=False,
+                  sensitive=False,
+              ),
               Parameter(
                   name="Wiz Client ID",
                   id="wiz_client_id",
                   description="The client ID for Wiz API authentication",
                   type="string",
                   required=True,
-                  sensitive=True,
+                  sensitive=False,
               ),
               Parameter(
                   name="Wiz Client Secret",
@@ -100,6 +178,41 @@ contexts:
                   required=True,
                   sensitive=True,
               ),
+              Parameter(
+                  name="Additional Arguments",
+                  id="wiz_additional_args",
+                  description="Additional command-line arguments to pass to Wiz",
+                  default="",
+                  type="string",
+                  required=False,
+              ),
+              Parameter(
+                  name="Wiz CLI Autofail",
+                  id="wizcli_autofail",
+                  description="Allow wizcli to fail the run (instead of policies)",
+                  default=False,
+                  type="boolean",
+                  required=False,
+                  sensitive=False,
+              ),
+              Parameter(
+                  name="Is GovCloud",
+                  id="is_govcloud",
+                  description="Enable if you access wiz via gov.wiz.io",
+                  default=False,
+                  type="boolean",
+                  required=False,
+                  sensitive=False,
+              ),
+              Parameter(
+                  name="Is Fedramp",
+                  id="is_fedramp",
+                  description="Enable if you access wiz via app.wiz.us",
+                  default=False,
+                  type="boolean",
+                  required=False,
+                  sensitive=False,
+              ),
           ]
 
           # Plugin contexts
@@ -108,16 +221,46 @@ contexts:
                   name_prefix="WIZ",
                   description="Wiz Plugin",
                   env=[
+                      Variable(
+                          key="DEFAULT_SCAN_NAME",
+                          value_from_parameter="default_scan_name",
+                          sensitive=False,
+                      ),
+                      Variable(
+                          key="DEFAULT_POLICIES",
+                          value_from_parameter="default_policies",
+                          sensitive=False,
+                      ),
                       Variable(
                           key="WIZ_CLIENT_ID",
-                          value_from_parameter="Wiz Client ID",
-                          sensitive=True,
+                          value_from_parameter="wiz_client_id",
+                          sensitive=False,
                       ),
                       Variable(
                           key="WIZ_CLIENT_SECRET",
-                          value_from_parameter="Wiz Client Secret",
+                          value_from_parameter="wiz_client_secret",
                           sensitive=True,
                       ),
+                      Variable(
+                          key="WIZ_ADDITIONAL_ARGS",
+                          value_from_parameter="wiz_additional_args",
+                          sensitive=False,
+                      ),
+                      Variable(
+                          key="WIZCLI_AUTOFAIL",
+                          value_from_parameter="wizcli_autofail",
+                          sensitive=False,
+                      ),
+                      Variable(
+                          key="IS_GOVCLOUD",
+                          value_from_parameter="is_govcloud",
+                          sensitive=False,
+                      ),
+                      Variable(
+                          key="IS_FEDRAMP",
+                          value_from_parameter="is_fedramp",
+                          sensitive=False,
+                      ),
                   ],
               )
           ]
@@ -165,63 +308,68 @@ contexts:
           def before_plan(self):
               self.logger.info("Checking IAC Code")
 
-              return_code, stdout, stderr = self.run_cli(
-                  "wizcli",
-                  "auth",
-                  "--id",
-                  os.environ.get("WIZ_CLIENT_ID"),
-                  "--secret",
-                  os.environ.get("WIZ_CLIENT_SECRET"),
-              )
-              if return_code != 0:
-                  exit(1)
+              if os.environ.get("IS_GOVCLOUD", "false").lower() == "true":
+                  os.environ["WIZ_ENV"] = "gov"
+
+              if os.environ.get("IS_FEDRAMP", "false").lower() == "true":
+                  os.environ["WIZ_ENV"] = "fedramp"
 
-              return_code, stdout, stderr = self.run_cli(
+              args = [
                   "wizcli",
-                  "iac",
                   "scan",
-                  "--format",
-                  "json",
-                  "--path",
+                  "dir",
                   "./",
+                  "--json-output-file",
+                  "./wiz_scan.json",
                   "--no-style",
                   "--no-color",
                   "--no-telemetry",
-                  "--show-secret-snippets",
-                  print_output=False,
-              )
-              if return_code != 0:
+                  "--no-browser",
+              ]
+
+              if os.environ.get("DEFAULT_SCAN_NAME", "") != "":
+                  args.extend(["--name", os.environ.get("DEFAULT_SCAN_NAME")])
+
+              if os.environ.get("DEFAULT_POLICIES", "") != "":
+                  args.extend(["--policies", os.environ.get("DEFAULT_POLICIES")])
+
+              additional_args = os.environ.get("WIZ_ADDITIONAL_ARGS", "").strip()
+              if additional_args:
+                  args.extend(additional_args.split())
+
+              return_code, stdout, stderr = self.run_cli(*args, print_output=False)
+              if (
+                  os.environ.get("WIZCLI_AUTOFAIL", "false").lower() == "true"
+                  and return_code != 0
+              ):
                   # Print the output because we set print_output=False because wizcli outputs errors to stdout.
                   for line in stdout:
                       self.logger.error(line)
                   exit(1)
 
-              stdout_json = None
-              for line in stdout:
-                  try:
-                      stdout_json = json.loads(line)
-                      break
-                  except json.decoder.JSONDecodeError:
-                      stdout_json = None
+              with open("wiz_scan.json", "r") as f:
+                  results = json.load(f)
+
+              self.logger.debug(results)
 
-              if stdout_json is None:
+              if results is None:
                   self.logger.error("Failed to parse Wiz CLI output as JSON")
-                  self.logger.debug(stdout)
+                  self.logger.debug(stdout, results)
                   exit(1)
 
-              if "result" not in stdout_json or "ruleMatches" not in stdout_json["result"]:
+              if "result" not in results or "ruleMatches" not in results["result"]:
                   self.logger.error("Unexpected Wiz CLI output format")
-                  self.logger.debug(stdout_json)
+                  self.logger.debug(results)
                   exit(1)
 
-              self.add_to_policy_input("wiz", stdout_json)
+              self.add_to_policy_input("wiz", results)
 
-              if stdout_json["result"]["ruleMatches"] is None:
+              if results["result"]["ruleMatches"] is None:
                   self.logger.info("No findings found in the IAC scan.")
               else:
                   findings = {}
                   # Sort the findings by the severity and their rule id
-                  for match in stdout_json["result"]["ruleMatches"]:
+                  for match in results["result"]["ruleMatches"]:
                       if match["severity"] not in findings:
                           findings[match["severity"]] = {}
                       if match["rule"]["id"] not in findings[match["severity"]]:
@@ -234,7 +382,7 @@ contexts:
                       )
 
                   markdown = "# Wiz IAC Scan Findings\n\n"
-                  markdown += f"**Status:** {stdout_json['status']['state']} **Verdict:** {stdout_json['status']['verdict']}\n"
+                  markdown += f"**Status:** {results['status']['state']} **Verdict:** {results['status']['verdict']}\n"
                   for severity, matches in findings.items():
                       severity = severity.upper()
 
@@ -260,8 +408,8 @@ contexts:
                               for match in cycled_rule["matches"]:
                                   markdown += f"- File: {match['fileName']}, Line: {match['lineNumber']}\n"
                           markdown += "\n"
-                  if "reportUrl" in stdout_json:
-                      markdown += f"[View Report]({stdout_json['reportUrl']})\n"
+                  if "reportUrl" in results:
+                      markdown += f"[View Report]({results['reportUrl']})\n"
                   result = self.send_markdown(markdown)
                   if not result:
                       self.logger.error("Failed to send Wiz CLI output to spacelift")
@@ -283,9 +431,9 @@ contexts:
 
       ARCH="$(arch)"
       if [ "$ARCH" = "x86_64" ]; then
-          URL="https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64"
+          URL="https://downloads.wiz.io/v1/wizcli/latest/wizcli-linux-amd64"
       elif [ "$ARCH" = "arm64" ] || [ "$ARCH" = "aarch64" ]; then
-          URL="https://downloads.wiz.io/wizcli/latest/wizcli-linux-arm64"
+          URL="https://downloads.wiz.io/v1/wizcli/latest/wizcli-linux-arm64"
       else
           echo "Error: Unsupported architecture '$ARCH'"
           exit 1

{spaceforge-1.3.0 → spaceforge-1.4.0}/spaceforge/_version_scm.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '1.3.0'
-__version_tuple__ = version_tuple = (1, 3, 0)
+__version__ = version = '1.4.0'
+__version_tuple__ = version_tuple = (1, 4, 0)
 
-__commit_id__ = commit_id = 'gd58f48f7e'
+__commit_id__ = commit_id = 'g6b2d2141a'

{spaceforge-1.3.0 → spaceforge-1.4.0/spaceforge.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spaceforge
-Version: 1.3.0
+Version: 1.4.0
 Summary: A Python framework for building Spacelift plugins
 Author-email: Spacelift <support@spacelift.io>
 Maintainer-email: Spacelift <support@spacelift.io>

{spaceforge-1.3.0 → spaceforge-1.4.0}/spaceforge.egg-info/SOURCES.txt

@@ -1,4 +1,5 @@
 .gitignore
+CODEOWNERS
 CONTRIBUTING.md
 LICENSE
 MANIFEST.in