Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: c9df808
Choose a base ref
...
head repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 4672706
Choose a head ref
  • 8 commits
  • 23 files changed
  • 3 contributors

Commits on Aug 23, 2025

  1. improve gitlab token usage (#112)

    * Removing test files
    
    * Adding support for both gitlab token styles
    dacoburn authored Aug 23, 2025
    Configuration menu
    Copy the full SHA
    a2d97ab View commit details
    Browse the repository at this point in the history

Commits on Aug 24, 2025

  1. Migrate from socket-sdk-python to socketdev>=3.0.0 and switch to uv (#…

    …113)
    
    * Migrate from socket-sdk-python to socketdev>=3.0.0 and switch to uv
    
    - Update pyproject.toml to use socketdev>=3.0.0,<4.0.0 instead of socket-sdk-python
    - Replace pip-tools with uv for dependency management
    - Update Makefile to use uv commands (uv pip compile, uv pip sync, etc.)
    - Update Dockerfile to install socketdev instead of socket-sdk-python
    - Update deployment scripts to reference socketdev
    - Update README to reflect uv usage
    - Regenerate all requirements files with uv
    - Add requirements-test.txt file
    - Update SOCKET_SDK_PATH references to point to ../socketdev
    - Version bump to 2.2.3
    
    * Switch to uv.lock for dependency management
    
    - Replace requirements.txt files with uv.lock
    - Update Makefile to use 'uv sync' instead of pip-compile workflow
    - Simplify dependency management with 'uv lock' and 'uv sync --all-extras'
    - Update test and lint commands to use 'uv run'
    - Remove old requirements.txt, requirements-dev.txt, requirements-test.txt files
    - Update README documentation to reflect uv.lock workflow
    - Version bump to 2.2.4
    dacoburn authored Aug 24, 2025
    Configuration menu
    Copy the full SHA
    f808583 View commit details
    Browse the repository at this point in the history

Commits on Aug 25, 2025

  1. Configuration menu
    Copy the full SHA
    7af45bc View commit details
    Browse the repository at this point in the history

Commits on Sep 4, 2025

  1. Configuration menu
    Copy the full SHA
    461f495 View commit details
    Browse the repository at this point in the history
  2. chore: add slack debugging (#117)

    * chore: add slack webhook debugging
    
    * Version bump
    
    ---------
    
    Co-authored-by: Douglas <[email protected]>
    Co-authored-by: Douglas Coburn <[email protected]>
    3 people authored Sep 4, 2025
    Configuration menu
    Copy the full SHA
    8bd8b83 View commit details
    Browse the repository at this point in the history

Commits on Sep 9, 2025

  1. feat: Add SCM-aware manifest file URL generation and fix report links (

    …#119)
    
    - Add get_manifest_file_url() method with GitHub/GitLab/Bitbucket support
    - Support environment variables for custom SCM servers (GitHub Enterprise, self-hosted GitLab, Bitbucket Server)
    - Fix manifest file links in security comments to use proper SCM URLs instead of Socket dashboard URLs
    - Fix 'View full report' links to use diff_url for PRs and report_url for non-PR scans
    - Add base_path parameter to create_full_scan() for improved path handling
    - Update socketdev dependency to >=3.0.5 for latest features
    - Add os module import for environment variable access
    - Update type hints for better code clarity
    dacoburn authored Sep 9, 2025
    Configuration menu
    Copy the full SHA
    656a458 View commit details
    Browse the repository at this point in the history

Commits on Sep 12, 2025

  1. feat: add monorepo workspace support with --sub-path and --workspace-…

    …name (#120)
    
    - Add --sub-path option to scan manifest files in a subdirectory while preserving git context from target-path
    - Add --workspace-name option to append suffix to repository name (repo-name-workspace_name)
    - Require both options to be used together with validation
    - Update scanning logic to use combined target_path + sub_path for manifest file detection
    - Modify repository naming to include workspace suffix when provided
    - Preserve git repository context (commits, branches, etc.) from main target-path
    - Enable Socket CLI to work with monorepo structures where manifests are in subdirectories
    
    This allows users to scan specific workspaces within a monorepo while maintaining proper git context and
    dacoburn authored Sep 12, 2025
    Configuration menu
    Copy the full SHA
    40fc69e View commit details
    Browse the repository at this point in the history
  2. Updated readme and updated sdk requirements (#121)

    * Updated readme and updated sdk requirements
    
    * feat: enhance monorepo support with multiple --sub-path options
    
    - Add support for multiple --sub-path arguments to scan different directories within a single workspace
    - Require --workspace-name when using --sub-path for proper workspace identification
    - Optimize base_paths parameter to pass target_path for simplified SDK integration
    - Update argument validation to enforce sub_paths and workspace_name pairing
    - Add comprehensive README documentation with monorepo examples and usage patterns
    - Include GitHub Actions workflow examples for monorepo CI/CD scenarios
    - Extend parameter table with detailed descriptions of new CLI options
    
    This enhancement enables scanning multiple directories (e.g., frontend, backend, services/api)
    as a single workspace while preserving git context from the repository root, making it ideal
    for organizations with monorepo structures.
    dacoburn authored Sep 12, 2025
    Configuration menu
    Copy the full SHA
    4672706 View commit details
    Browse the repository at this point in the history
Loading