Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.2.43
Choose a base ref
...
head repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 7 commits
  • 11 files changed
  • 3 contributors

Commits on Dec 10, 2025

  1. Adds the --reach-use-only-pregenerated-sboms flag (#138)

    * add flag --reach-use-only-pregenerated-sboms to exclude non-CDX and SPDX files from a Tier 1 reachability scan
    
    * prepare for 2.2.44
    
    * ensure only CDX/SPDX manifests and the .socket.facts.json are included in the final scan
    
    * Moved the logic for find_sbom_files to find_files to avoid code duplication. Left the new function in place and just called find_files with the optional params
    
    * Bumped minimum required SDK version with fix for no version in results
    
    * bumped to fixed version of the SDK for no version in results
    
    * Upgraded socketdev sdk in lock file
    
    ---------
    
    Co-authored-by: Douglas Coburn <douglas@dactbc.com>
    mtorp and dacoburn authored Dec 10, 2025
    Configuration menu
    Copy the full SHA
    c2deb21 View commit details
    Browse the repository at this point in the history
  2. Fixing hatch versioning (#139)

    * Fixing hatch versioning
    
    * Fixed typo in toml
    
    * Fixing uv lock and testing hatch
    dacoburn authored Dec 10, 2025
    Configuration menu
    Copy the full SHA
    40530ce View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2025

  1. feat: add batched PURL endpoint calls and conditional license fetching (

    #140)
    
    * feat: add batched PURL endpoint calls and conditional license fetching
    
    - Add --max-purl-batch-size flag (default: 5000, range: 1-9999) to control
      batch size for license detail API calls
    - Skip PURL endpoint entirely when --generate-license is not set, improving
      performance for scans that don't need license attribution/details
    - Implement batching in get_license_text_via_purl() to process packages in
      configurable chunks, preventing API overload on large repos
    - Add validation for max_purl_batch_size parameter with clear error messages
    - Remove unused check_full_scans_status() method (dead code cleanup)
    
    This change optimizes license data retrieval by:
    1. Only calling PURL endpoint when license output is actually needed
    2. Processing packages in manageable batches to avoid timeouts/limits
    3. Providing tunable batch sizes for different repo sizes
    
    * Fixing --ignore-commit-files to properly work again
    
    * properly included the enable diff param to the main module
    
    * Adding NPM CLI to Dockerfile
    dacoburn authored Dec 12, 2025
    Configuration menu
    Copy the full SHA
    7329f50 View commit details
    Browse the repository at this point in the history

Commits on Dec 18, 2025

  1. remove process timeout from reachability analysis (#141)

    * remove process timeout from reachability analysis
    
    * Fixing version for build
    
    ---------
    
    Co-authored-by: Douglas Coburn <douglas@dactbc.com>
    mtorp and dacoburn authored Dec 18, 2025
    Configuration menu
    Copy the full SHA
    30574b8 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    e10dd4e View commit details
    Browse the repository at this point in the history
  3. Merge pull request #142 from SocketDev/fix-go-env

    fix GOROOT when go is installed via apk
    mtorp authored Dec 18, 2025
    Configuration menu
    Copy the full SHA
    9fd102a View commit details
    Browse the repository at this point in the history

Commits on Dec 24, 2025

  1. Fixed globbing for files that were unintentionally filtering out path… (

    #143)
    
    * Fixed globbing for files that were unintentionally filtering out paths that started with a dot
    
    * Removed unused imports
    dacoburn authored Dec 24, 2025
    Configuration menu
    Copy the full SHA
    0b7f49a View commit details
    Browse the repository at this point in the history
Loading