-
Notifications
You must be signed in to change notification settings - Fork 9
Comparing changes
Open a pull request
base repository: SocketDev/socket-python-cli
base: v2.2.43
head repository: SocketDev/socket-python-cli
compare: main
- 7 commits
- 11 files changed
- 3 contributors
Commits on Dec 10, 2025
-
Adds the
--reach-use-only-pregenerated-sbomsflag (#138)* add flag --reach-use-only-pregenerated-sboms to exclude non-CDX and SPDX files from a Tier 1 reachability scan * prepare for 2.2.44 * ensure only CDX/SPDX manifests and the .socket.facts.json are included in the final scan * Moved the logic for find_sbom_files to find_files to avoid code duplication. Left the new function in place and just called find_files with the optional params * Bumped minimum required SDK version with fix for no version in results * bumped to fixed version of the SDK for no version in results * Upgraded socketdev sdk in lock file --------- Co-authored-by: Douglas Coburn <douglas@dactbc.com>
Configuration menu - View commit details
-
Copy full SHA for c2deb21 - Browse repository at this point
Copy the full SHA c2deb21View commit details -
Fixing hatch versioning (#139)
* Fixing hatch versioning * Fixed typo in toml * Fixing uv lock and testing hatch
Configuration menu - View commit details
-
Copy full SHA for 40530ce - Browse repository at this point
Copy the full SHA 40530ceView commit details
Commits on Dec 12, 2025
-
feat: add batched PURL endpoint calls and conditional license fetching (
#140) * feat: add batched PURL endpoint calls and conditional license fetching - Add --max-purl-batch-size flag (default: 5000, range: 1-9999) to control batch size for license detail API calls - Skip PURL endpoint entirely when --generate-license is not set, improving performance for scans that don't need license attribution/details - Implement batching in get_license_text_via_purl() to process packages in configurable chunks, preventing API overload on large repos - Add validation for max_purl_batch_size parameter with clear error messages - Remove unused check_full_scans_status() method (dead code cleanup) This change optimizes license data retrieval by: 1. Only calling PURL endpoint when license output is actually needed 2. Processing packages in manageable batches to avoid timeouts/limits 3. Providing tunable batch sizes for different repo sizes * Fixing --ignore-commit-files to properly work again * properly included the enable diff param to the main module * Adding NPM CLI to Dockerfile
Configuration menu - View commit details
-
Copy full SHA for 7329f50 - Browse repository at this point
Copy the full SHA 7329f50View commit details
Commits on Dec 18, 2025
-
remove process timeout from reachability analysis (#141)
* remove process timeout from reachability analysis * Fixing version for build --------- Co-authored-by: Douglas Coburn <douglas@dactbc.com>
Configuration menu - View commit details
-
Copy full SHA for 30574b8 - Browse repository at this point
Copy the full SHA 30574b8View commit details -
Configuration menu - View commit details
-
Copy full SHA for e10dd4e - Browse repository at this point
Copy the full SHA e10dd4eView commit details -
Merge pull request #142 from SocketDev/fix-go-env
fix GOROOT when go is installed via apk
Configuration menu - View commit details
-
Copy full SHA for 9fd102a - Browse repository at this point
Copy the full SHA 9fd102aView commit details
Commits on Dec 24, 2025
-
Fixed globbing for files that were unintentionally filtering out path… (
#143) * Fixed globbing for files that were unintentionally filtering out paths that started with a dot * Removed unused imports
Configuration menu - View commit details
-
Copy full SHA for 0b7f49a - Browse repository at this point
Copy the full SHA 0b7f49aView commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v2.2.43...main