suite-py 1.42.2__py3-none-any.whl → 1.43.1__py3-none-any.whl

suite_py/__version__.py

@@ -1,2 +1,2 @@
 # -*- encoding: utf-8 -*-
-__version__ = "1.42.2"
+__version__ = "1.43.1"

suite_py/cli.py

@@ -38,7 +38,6 @@ from typing import Optional
 
 import click
 import requests
-from autoupgrade import Package
 from click.exceptions import ClickException
 
 from suite_py.__version__ import __version__
@@ -49,6 +48,7 @@ from suite_py.lib.handler import git_handler as git
 from suite_py.lib.handler import prompt_utils
 from suite_py.lib.handler.captainhook_handler import CaptainHook
 from suite_py.lib.handler.okta_handler import Okta
+from suite_py.lib.handler.pre_commit_handler import PreCommit
 from suite_py.lib.tokens import Tokens
 
 # pylint: enable=wrong-import-position
@@ -94,6 +94,8 @@ def upgrade_suite_py_if_needed(break_on_missing_package: bool = False) -> None:
         # If available, upgrade (if needed)
         latest_version = fetch_latest_version()
         if latest_version is None or latest_version > installed_version:
+            from autoupgrade import Package
+
             # If we fail to fetch the latest version, fallback to attempting the upgrade anyway
             Package("suite_py").upgrade()
     except Exception as error:
@@ -195,6 +197,9 @@ def main(ctx, project, timeout, verbose):
         or ctx.invoked_subcommand not in ALLOW_NO_HOME_SUBCOMMAND
     ):
         os.chdir(os.path.join(config.user["projects_home"], ctx.obj.project))
+    # Warn on missing pre_commit hook
+    if ctx.invoked_subcommand not in ALLOW_NO_GIT_SUBCOMMAND:
+        ctx.obj.call(PreCommit).check_and_warn()
 
 
 @main.result_callback()

suite_py/commands/release.py

@@ -15,6 +15,7 @@ from suite_py.lib.handler.youtrack_handler import YoutrackHandler
 
 class Release:
     # pylint: disable=too-many-instance-attributes
+    # pylint: disable=too-many-positional-arguments
     def __init__(self, action, project, captainhook, config, tokens):
         self._action = action
         self._project = project

suite_py/lib/handler/captainhook_handler.py

@@ -1,9 +1,9 @@
 # -*- encoding: utf-8 -*-
 import requests
 
+from suite_py.__version__ import __version__
 from suite_py.lib.handler.github_handler import GithubHandler
 from suite_py.lib.handler.okta_handler import Okta
-from suite_py.__version__ import __version__
 
 
 class UnauthorizedError(Exception):

suite_py/lib/handler/git_handler.py

@@ -269,6 +269,45 @@ class GitHandler:
             logger.error(f"Error during git reset on {self._repo}: {e}")
             sys.exit(-1)
 
+    def get_git_config(self, option):
+        """
+        Get git config value.
+        Git configs are very versitile and allow arbitrary string KV pairs to be stored,
+        support per-repo, or more complex conditional and global configurations,
+        making it the perfect place for us to store a lot of our configs.
+        """
+        proc = subprocess.run(
+            ["git", "config", "get", option],
+            cwd=self._path,
+            check=False,
+            capture_output=True,
+        )
+        if proc.returncode == 0:
+            return proc.stdout.decode().strip()
+        return None
+
+    def hooks_path(self):
+        """
+        Get path to git-hooks
+        See: https://git-scm.com/book/en/v2/Customizing-Git-Git-Hooks for more details
+        """
+        try:
+            proc = subprocess.run(
+                ["git", "rev-parse", "--git-path", "hooks"],
+                cwd=self._path,
+                check=True,
+                capture_output=True,
+            )
+            hooks = proc.stdout.decode().strip()
+
+            # Return absolute path to the hooks dir,
+            # since we overwrite the subprocesses cwd.
+            abs_path = os.path.join(self._path, hooks)
+            return abs_path
+        except CalledProcessError as e:
+            logger.error(f"Error getting hooks path {self._repo}: {e}")
+            sys.exit(-1)
+
 
 def get_root_folder(directory):
     return (

suite_py/lib/handler/github_handler.py

@@ -19,6 +19,7 @@ class GithubHandler:
     def get_user(self):
         return self._client.get_user()
 
+    # pylint: disable=too-many-positional-arguments
     def create_pr(self, repo, branch, title, body="", base="master", is_draft=False):
         return self.get_repo(repo).create_pull(
             title=title, head=branch, base=base, body=body, draft=is_draft

suite_py/lib/handler/pre_commit_handler.py

@@ -0,0 +1,96 @@
+import os
+
+import yaml
+
+from suite_py.lib import logger
+from suite_py.lib.config import Config
+from suite_py.lib.handler.git_handler import GitHandler
+
+
+class PreCommit:
+    """
+    Handler checking whether the user has the prima pre-commit hooks setup and print a warning if they are missing
+    """
+
+    def __init__(self, project: str, config: Config):
+        self._git = GitHandler(project, config)
+
+    def check_and_warn(self):
+        if self.is_enabled() and not self.is_pre_commit_hooks_installed():
+            self.warn_missing_pre_commit_hook()
+
+    def is_pre_commit_hooks_installed(self):
+        """
+        Apply some heuteristics to check whether the gitleaks pre-commit hook is installed.
+        This is extremely imperfect, and only supports direct calls in shell scripts.
+        More hooks, like husky should be added later
+        """
+        return self.is_vanilla_hook_setup() or self.is_pre_commit_py_hook_setup()
+
+    def warn_missing_pre_commit_hook(self):
+        logger.warning(
+            """
+Looks like the current repo is missing the gitleaks pre-commit hook!
+Please install it per the security guide:
+https://www.notion.so/helloprima/Install-Gitleaks-pre-commit-hook-aaaa6beafafa4c298b537afcb52bb25a
+
+If you have installed them already you can report the false positive to team-platform-shared-services (on Slack) and run:
+    git config suite-py.disable-pre-commit-warning true
+to disable the check for this repo, or
+    git config --global suite-py.disable-pre-commit-warning true
+to disable it globally
+        """
+        )
+
+    def is_vanilla_hook_setup(self):
+        """
+        Check whether the gitleaks hook is setup as a regular bash script
+        """
+        pre_commit_file = self.read_pre_commit_hook()
+
+        # Assume everything is a shell script.
+        # Technically you could use a binary, or even python code,
+        # But those are out of scope for us, and the user should just disable the warning themselves
+        lines = pre_commit_file.splitlines()
+
+        # Filter out lines that start with '#' since those are probably just comments.
+        without_comments = filter(lambda l: not l.strip().startswith("#"), lines)
+
+        return any("gitleaks" in line for line in without_comments)
+
+    def is_pre_commit_py_hook_setup(self):
+        """
+        Check whether the gitleaks hook is setup with the pre-commit python framework
+        """
+        # If the framework is not setup skip
+        if "pre-commit" not in self.read_pre_commit_hook():
+            logger.debug("pre-commit.com not installed, skipping config check")
+            return False
+
+        config_path = os.path.join(self._git.get_path(), ".pre-commit-config.yaml")
+        try:
+            with open(config_path, encoding="utf-8") as f:
+                config = yaml.safe_load(f)
+        except FileNotFoundError:
+            logger.debug("pre-commit config file(%s) not found", config_path)
+            return False
+        except yaml.YAMLError:
+            logger.warning(".pre-commit-config.yaml file is invalid!", exc_info=True)
+            return False
+
+        return any(
+            repo.get("repo", "") == "git@github.com:primait/security-hooks.git"
+            for repo in config.get("repos", [])
+        )
+
+    def read_pre_commit_hook(self):
+        pre_commit_file_path = os.path.join(self._git.hooks_path(), "pre-commit")
+        logger.debug("Reading pre-commit script from %s", pre_commit_file_path)
+        try:
+            with open(pre_commit_file_path, encoding="utf-8") as f:
+                return f.read()
+        except FileNotFoundError:
+            return ""
+
+    def is_enabled(self):
+        return self._git.get_git_config("suite-py.disable-pre-commit-warning") != "true"

suite_py/lib/logger.py

@@ -1,33 +1,40 @@
 # -*- encoding: utf-8 -*-
 import logging
 
-import logzero
-from logzero import logger as _logger
+from rich.logging import RichHandler
 
-DEFAULT_FORMAT = "%(color)s[%(levelname)1.4s]%(end_color)s %(message)s"
-# Set a custom formatter
-formatter = logzero.LogFormatter(fmt=DEFAULT_FORMAT)
+# Rich handles color and formatting internally
+# This format will make it so we print stuff like "[I] message"
+LOG_FORMAT = "%(message)s"
+
+LOGGER_NAME = "suite_py_logger"
 
 
 def setup(verbose):
-    logzero.setup_default_logger(formatter=formatter)
     level = logging.DEBUG if verbose else logging.INFO
 
-    _logger.setLevel(level)
-    _logger.debug("Logging as %s", level)
+    logging.basicConfig(
+        level=level,
+        format=LOG_FORMAT,
+        datefmt="[%X]",
+        handlers=[RichHandler(rich_tracebacks=True, markup=False)],
+    )
+
+    logger = logging.getLogger(LOGGER_NAME)
+    logger.debug("Logging as %s", level)
 
 
 def debug(message, *args, **kwargs):
-    _logger.debug(message, *args, **kwargs)
+    logging.getLogger(LOGGER_NAME).debug(message, *args, **kwargs)
 
 
 def info(message, *args, **kwargs):
-    _logger.info(message, *args, **kwargs)
+    logging.getLogger(LOGGER_NAME).info(message, *args, **kwargs)
 
 
 def warning(message, *args, **kwargs):
-    _logger.warning(message, *args, **kwargs)
+    logging.getLogger(LOGGER_NAME).warning(message, *args, **kwargs)
 
 
 def error(message, *args, **kwargs):
-    _logger.error(message, *args, **kwargs)
+    logging.getLogger(LOGGER_NAME).error(message, *args, **kwargs)

suite_py/lib/metrics.py

@@ -1,7 +1,7 @@
 # -*- encoding: utf-8 -*-
 import functools
-from suite_py.lib.config import Config
 
+from suite_py.lib.config import Config
 from suite_py.lib.handler.captainhook_handler import CaptainHook
 from suite_py.lib.handler.metrics_handler import Metrics
 

{suite_py-1.42.2.dist-info → suite_py-1.43.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: suite-py
-Version: 1.42.2
+Version: 1.43.1
 Summary: 
 Author: larrywax, EugenioLaghi, michelangelomo
 Author-email: devops@prima.it
@@ -13,30 +13,22 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Requires-Dist: Click (>=7.0)
 Requires-Dist: InquirerPy (>=0.2.0)
-Requires-Dist: Jinja2 (>=3.1.4,<4.0.0)
 Requires-Dist: PyGithub (>=1.57)
 Requires-Dist: PyYaml (>=5.4)
 Requires-Dist: autoupgrade-prima (>=0.6)
-Requires-Dist: black (>=22.6,<25.0)
 Requires-Dist: boto3 (>=1.17.84)
 Requires-Dist: cement (>=3.0)
 Requires-Dist: colorama (>=0.4.3)
-Requires-Dist: cryptography (==43.0.1)
 Requires-Dist: halo (>=0.0.28)
-Requires-Dist: inquirer (==3.1.4)
+Requires-Dist: inquirer (>=3.1.4,<4.0.0)
 Requires-Dist: itsdangerous (==2.2.0)
 Requires-Dist: keyring (>=23.9.1,<26.0.0)
-Requires-Dist: kubernetes (==31.0.0)
-Requires-Dist: logzero (==1.7.0)
-Requires-Dist: markupsafe (==2.0.1)
-Requires-Dist: pptree (==3.1)
 Requires-Dist: pylint (>=2.14.5,<4.0.0)
-Requires-Dist: pyreadline (>=2.1,<3.0)
 Requires-Dist: pytest (>=7.0.0)
 Requires-Dist: python-dateutil (>=2.8.2)
 Requires-Dist: requests (>=2.26.0)
 Requires-Dist: requests-toolbelt (>=0.9.1)
-Requires-Dist: rich (==13.9.2)
-Requires-Dist: semver (>=2.13.0,<3.0.0)
+Requires-Dist: rich (==13.9.4)
+Requires-Dist: semver (>=3.0.4,<4.0.0)
 Requires-Dist: termcolor (>=1.1.0)
-Requires-Dist: truststore (>=0.7,<0.10) ; python_version >= "3.10"
+Requires-Dist: truststore (>=0.7,<0.11) ; python_version >= "3.10"

{suite_py-1.42.2.dist-info → suite_py-1.43.1.dist-info}/RECORD

@@ -1,6 +1,6 @@
 suite_py/__init__.py,sha256=REmi3D0X2G1ZWnYpKs8Ffm3NIj-Hw6dMuvz2b9NW344,142
-suite_py/__version__.py,sha256=epapGv8LINFClZsTAecNa7bKBm9IBjycsyHCcdVZdlc,49
-suite_py/cli.py,sha256=iJDqnKEPuvbX7OBawtkW38T_37xLFktohFz1YBjPUbs,10047
+suite_py/__version__.py,sha256=L-FgAa7sAxqwqFnOr7JH__nj1oSq6fR0wb9Uj9anwSE,49
+suite_py/cli.py,sha256=dqLHo7HADRcXj0xD278bYZjCywx4YUfVFxCvQvjNoi4,10271
 suite_py/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 suite_py/commands/ask_review.py,sha256=yN__Ac-fiZBPShjRDhyCCQZGfVlQE16KozoJk4UtiNw,3788
 suite_py/commands/bump.py,sha256=oFZU1hPfD11ujFC5G7wFyQOf2alY3xp2SO1h1ldjf3s,5406
@@ -12,25 +12,26 @@ suite_py/commands/login.py,sha256=A59e1HsbN7Ocv2L_2H0Eb7MZK7AzLkLb72QxBthnIqU,25
 suite_py/commands/merge_pr.py,sha256=fXIE8mT9MjvvpqE-uVdXGBVFGhn0eQzcBxNr-N8SyAY,5171
 suite_py/commands/open_pr.py,sha256=e6IT6f8L_HKsOEtrGHZQ2HWrFwmvIgXGNCK_TU0WE9k,7009
 suite_py/commands/project_lock.py,sha256=b7OkGysue_Sl13VIT7B5CTBppCvrB_Q6iC0IJRBSHp8,1909
-suite_py/commands/release.py,sha256=Mh6esivJ234cRE5mYWPOZSgpujO47RprySh0U_9BD9s,7857
+suite_py/commands/release.py,sha256=u6pdT1Vk9qBLnfgxcWtpk_KV-hh_NL9yHfFQz6ZcbUs,7909
 suite_py/commands/set_token.py,sha256=fehIqKjKhE-BJGFhgkPTo3Ntr0MvpgLd6EC5yjKuRs8,1508
 suite_py/commands/status.py,sha256=0JUK53_d1-U3WNS742JD2QTiGmCGZONo3jJx8WR7q70,1122
 suite_py/lib/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 suite_py/lib/config.py,sha256=52YV0K0GK1WRbeM70IDXkpG8oZD1Zvxipn1b-XekwNA,3907
 suite_py/lib/handler/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 suite_py/lib/handler/aws_handler.py,sha256=dRvRDicikfRbuFtCLPbevaX-yC-fO4LwXFdyqLPJ8OI,8815
-suite_py/lib/handler/captainhook_handler.py,sha256=sp1dxZXO1QJaq304JhtkTrQjn8Z4971e2uFTM7Dh5wg,2983
+suite_py/lib/handler/captainhook_handler.py,sha256=R30_Vvh2ck7fM5fwbpm3UV_FtlQr2xnx6RJpkG1Gn14,2983
 suite_py/lib/handler/changelog_handler.py,sha256=-ppnRl3smBA_ys8tPqXmytS4eyntlwfawC2fiXFcwlw,4818
 suite_py/lib/handler/frequent_reviewers_handler.py,sha256=EIJX5FEMWzrxuXS9A17hu1vfxgJSOHSBX_ahCEZ2FVA,2185
-suite_py/lib/handler/git_handler.py,sha256=boxhl9lQz6fjEJ10ib1KrDW-geCVjhA_6nKwv2ll01g,11333
-suite_py/lib/handler/github_handler.py,sha256=AnFL54yOZ5GDIU91wQat4s-d1WTcmg_B_5M7-Rop3wA,2900
+suite_py/lib/handler/git_handler.py,sha256=Y2hKR5sUKBhfRfQrMNjyCScJpdyPJ7XWK9f3ykx7Lf0,12710
+suite_py/lib/handler/github_handler.py,sha256=xnBATLOTnOLpiYE29WwUrtDr7hxusfId9a1KbfK1OyA,2952
 suite_py/lib/handler/metrics_handler.py,sha256=-Tp62pFIiYsBkDga0nQG3lWU-gxH68wEjIIIJeU1jHk,3159
 suite_py/lib/handler/okta_handler.py,sha256=UiRcBDmFkMFi9H7Me1QaruC8yPI5fFbnLGzOf3kfxG0,2805
+suite_py/lib/handler/pre_commit_handler.py,sha256=nwqVgC-KnUjn7NVIHZ0VmDdUfp6Q1ieFIth-1_U76Gw,3740
 suite_py/lib/handler/prompt_utils.py,sha256=vgk1O7h-iYEAZv1sXtMh8xIgH1djI398rzxRIgZWZcg,2474
 suite_py/lib/handler/version_handler.py,sha256=DXTx4yCAbFVC6CdMqPJ-LiN5YM-dT2zklG8POyKTP5A,6774
 suite_py/lib/handler/youtrack_handler.py,sha256=eTGBBXjlN_ay1cawtnZ2IG6l78dDyKdMN1x6PxcvtA0,7499
-suite_py/lib/logger.py,sha256=q_qRtpg0Eh7r5tB-Rwz87dnWBwP-a2dIvggkiQikH8M,782
-suite_py/lib/metrics.py,sha256=CqAIwPIRm0AJR4qmCTj1rw-NCwdSL4Huj2eKhLxgLgU,1629
+suite_py/lib/logger.py,sha256=d162j5BWDDkss424-aTviJNR4uFulP8_P__wn42MvtU,1012
+suite_py/lib/metrics.py,sha256=urTBVzIc1Ys6OHPOO32fLPPRcQU45tzM3XMJ7mUl5dc,1629
 suite_py/lib/oauth.py,sha256=DhXimUu7MDscQsMyt3L04_kw0ZmuqmhYG6KZTPlKqNQ,5083
 suite_py/lib/requests/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 suite_py/lib/requests/auth.py,sha256=wN_WtGFmDUWRFilWzOmUaRBvP2n3EPpPMqex9Zjddko,228
@@ -38,7 +39,7 @@ suite_py/lib/requests/session.py,sha256=P32H3cWnCWunu91WIj2iDM5U3HzaBglg60VN_C9J
 suite_py/lib/symbol.py,sha256=z3QYBuNIwD3qQ3zF-cLOomIr_-C3bO_u5UIDAHMiyTo,60
 suite_py/lib/tokens.py,sha256=4DbsHDFLIxs40t3mRw_ZyhmejZQ0Bht7iAL8dTCTQd4,5458
 suite_py/templates/login.html,sha256=fJLls2SB84oZTSrxTdA5q1PqfvIHcCD4fhVWfyco7Ig,861
-suite_py-1.42.2.dist-info/METADATA,sha256=2DH1B8DsS5SlkRpahd3ZQfGa6YLwBfP6U1PmnTxZih0,1533
-suite_py-1.42.2.dist-info/WHEEL,sha256=FMvqSimYX_P7y0a7UY-_Mc83r5zkBZsCYPm7Lr0Bsq4,88
-suite_py-1.42.2.dist-info/entry_points.txt,sha256=dVKLC-9Infy-dHJT_MkK6LcDjOgBCJ8lfPkURJhBjxE,46
-suite_py-1.42.2.dist-info/RECORD,,
+suite_py-1.43.1.dist-info/METADATA,sha256=L6N5i7z_6f7dxVpkcVmF9gHtpgoLQwooI2zMFRKHihY,1250
+suite_py-1.43.1.dist-info/WHEEL,sha256=FMvqSimYX_P7y0a7UY-_Mc83r5zkBZsCYPm7Lr0Bsq4,88
+suite_py-1.43.1.dist-info/entry_points.txt,sha256=dVKLC-9Infy-dHJT_MkK6LcDjOgBCJ8lfPkURJhBjxE,46
+suite_py-1.43.1.dist-info/RECORD,,