Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions 6 CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,11 @@
# Changelog

## 2.4.14

### Changed: bump pinned @coana-tech/cli to 15.5.9

- Bumped the pinned `@coana-tech/cli` version to `15.5.9` (previously `15.5.7`).

## 2.4.13

### Changed: reachability analysis types now use full names instead of "Tier 1/2/3"
Expand Down
2 changes: 1 addition & 1 deletion 2 docs/cli-reference.md
Original file line number Diff line number Diff line change
Expand Up @@ -241,7 +241,7 @@ If you don't want to provide the Socket API Token every time then you can use th
| Parameter | Required | Default | Description |
|:---------------------------------|:---------|:--------|:---------------------------------------------------------------------------------------------------------------------------|
| `--reach` | False | False | Enable reachability analysis to identify which vulnerable functions are actually called by your code. Creates a full application reachability scan (`scan_type=socket_tier1`). |
| `--reach-version` | False | 15.5.7 | Version of @coana-tech/cli to use. Defaults to the pinned version that ships with this CLI release, so the engine only changes when you upgrade the Socket CLI. Pass `latest` to always use the newest published version (opt-in auto-update), or an explicit version (e.g. `1.2.3`) to pin it. |
| `--reach-version` | False | 15.5.9 | Version of @coana-tech/cli to use. Defaults to the pinned version that ships with this CLI release, so the engine only changes when you upgrade the Socket CLI. Pass `latest` to always use the newest published version (opt-in auto-update), or an explicit version (e.g. `1.2.3`) to pin it. |
| `--reach-analysis-timeout` | False | 10m | Timeout for each reachability analysis run, e.g. `90s`, `10m` or `1h`. Omitted by default, so coana applies its own default (`10m`). Alias: `--reach-timeout` |
| `--reach-analysis-memory-limit` | False | 8GB | Memory limit for each reachability analysis run, e.g. `512MB` or `8GB`. Omitted by default, so coana applies its own default (`8GB`). Alias: `--reach-memory-limit` |
| `--reach-concurrency` | False | 1 | Control parallel analysis execution (must be >= 1). Omitted by default, so coana applies its own default. |
Expand Down
2 changes: 1 addition & 1 deletion 2 pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ build-backend = "hatchling.build"

[project]
name = "socketsecurity"
version = "2.4.13"
version = "2.4.14"
requires-python = ">= 3.11"
license = {"file" = "LICENSE"}
dependencies = [
Expand Down
2 changes: 1 addition & 1 deletion 2 socketsecurity/__init__.py
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
__author__ = 'socket.dev'
__version__ = '2.4.13'
__version__ = '2.4.14'
USER_AGENT = f'SocketPythonCLI/{__version__}'
6 changes: 3 additions & 3 deletions 6 socketsecurity/core/tools/reachability.py
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
# Pinned @coana-tech/cli version. Bumped deliberately per Python CLI release so the
# reachability engine version only changes through a standard pip upgrade (advance notice).
# Pass --reach-version latest to opt into the newest published version instead.
DEFAULT_COANA_CLI_VERSION: Final = "15.5.7"
DEFAULT_COANA_CLI_VERSION: Final = "15.5.9"

# Resolved @coana-tech/cli script paths from the npm-install fallback, keyed by version.
# Lives for the process lifetime so repeated fallback invocations install only once
Expand Down Expand Up @@ -55,7 +55,7 @@ def __init__(self, sdk: socketdev, api_token: str):

def _resolve_coana_package_spec(self, version: Optional[str] = None) -> str:
"""
Resolve the @coana-tech/cli package spec to run (e.g. '@coana-tech/cli@15.5.7').
Resolve the @coana-tech/cli package spec to run (e.g. '@coana-tech/cli@15.5.9').

Args:
version: Coana CLI version to use.
Expand All @@ -64,7 +64,7 @@ def _resolve_coana_package_spec(self, version: Optional[str] = None) -> str:
- '<semver>': that exact version.

Returns:
str: The package specifier to use with npx (e.g. '@coana-tech/cli@15.5.7').
str: The package specifier to use with npx (e.g. '@coana-tech/cli@15.5.9').
"""
return f"@coana-tech/cli@{self._resolve_coana_version(version)}"

Expand Down
2 changes: 1 addition & 1 deletion 2 uv.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Morty Proxy This is a proxified and sanitized view of the page, visit original site.