GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Improve monorepo scan diagnostics and guidance by lelia · Pull Request #325 · SocketDev/socket-python-cli

Conversation

@lelia

@lelia lelia commented Aug 28, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

Summary

  • Add concise scan configuration, manifest-count, baseline, and fallback diagnostics.
  • Clarify monorepo scan scoping, workspace flags, CI path filters, and timeout behavior.
  • Add a changed-workspace GitHub Actions matrix example.
  • Route full-scan and streamed-diff API failures through the configured infrastructure exit code.

Validation

  • uv run pytest -q tests/unit tests/core — 532 passed, 2 skipped
  • Ruff
  • actionlint on the documented workflow
  • git diff --check

Public Changelog

Improved monorepo scan diagnostics and guidance, with consistent API-error exit-code handling.

Refs: CE-436

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@lelia
Improve monorepo scan diagnostics
4b1ac09
@lelia
lelia requested a review from a team as a code owner August 28, 2026 21:58
@lelia lelia added publish-preview Publish a CLI preview to TestPyPI. publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub labels Aug 28, 2026
@lelia
lelia temporarily deployed to socket-firewall August 28, 2026 21:58 — with GitHub Actions Inactive
@github-actions

github-actions Bot commented Aug 28, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown

🚀 CLI preview published: socketsecurity==2.7.0.dev3321567765801

pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple socketsecurity==2.7.0.dev3321567765801

TestPyPI's package index can take several minutes to expose a newly uploaded version.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@lelia
Bump version to 2.6.9
464b1b8
@lelia lelia added publish-preview Publish a CLI preview to TestPyPI. publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub and removed publish-preview Publish a CLI preview to TestPyPI. publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub labels Aug 28, 2026
@lelia
lelia temporarily deployed to socket-firewall August 28, 2026 22:00 — with GitHub Actions Inactive
@github-actions

github-actions Bot commented Aug 28, 2026

Copy link
Copy Markdown

🐳 Docker preview published: socketdev/cli:pr-325

This mutable tag is only created when a Docker preview is explicitly requested.
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@lelia
Merge branch 'main' into lelia/monorepo-scan-diagnostics
3d8cdb3
@lelia

lelia commented Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

bugbot run
cursor[bot] reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@lelia
lelia temporarily deployed to socket-firewall August 28, 2026 22:02 — with GitHub Actions Inactive
@lelia lelia added publish-preview Publish a CLI preview to TestPyPI. publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub and removed publish-preview Publish a CLI preview to TestPyPI. publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub labels Aug 28, 2026
@lelia
Bump version to 2.7.0
405d52c
@lelia
lelia temporarily deployed to socket-firewall August 28, 2026 22:06 — with GitHub Actions Inactive
@lelia lelia removed publish-preview Publish a CLI preview to TestPyPI. publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub labels Aug 28, 2026
cursor[bot]
cursor Bot reviewed Aug 28, 2026
View reviewed changes

@cursor cursor Bot left a comment

Copy link
Copy Markdown

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit 3d8cdb3. Configure here.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
lelia reacted with thumbs up emoji
All reactions
  • 👍 1 reaction
@lelia lelia added publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub publish-preview Publish a CLI preview to TestPyPI. labels Aug 28, 2026
@lelia
Merge origin/main into PR branch
a633e0a
@lelia
lelia temporarily deployed to socket-firewall September 2, 2026 20:27 — with GitHub Actions Inactive
@lelia
Merge origin/main and clarify workspace boundaries
a0c5715
@lelia
lelia temporarily deployed to socket-firewall September 3, 2026 17:52 — with GitHub Actions Inactive
@lelia @claude
docs: document the monorepo scan layout trade-off
45a8d3a 
The mechanics of --sub-path and --workspace-name were documented, but not the
choice they force. One combined scan gives a single dashboard entry and no
per-component attribution; one scan per component gives attribution, baselines
and per-component policy, but adds a repository entry per component, which grows
the dashboard's repository list. There is no layout that provides both today.

Customers hit this at a dozen-plus components and reasonably assume they have
configured something wrong. Naming the trade-off, and adding rules of thumb for
picking a side, is cheaper than each of them discovering it.

Cross-referenced from the CI/CD guide's independent-workspace pattern, which is
the layout that grows the list.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
philgran
Phil Gran (philgran) approved these changes Sep 9, 2026
View reviewed changes
@lelia
Merge origin/main into PR branch
1fbf61d
@lelia
lelia temporarily deployed to socket-firewall September 9, 2026 18:58 — with GitHub Actions Inactive
@lelia
lelia merged commit f65b6af into main Sep 9, 2026
31 checks passed

Uh oh!

There was an error while loading. Please reload this page.
lelia added a commit that referenced this pull request Sep 11, 2026
@lelia @claude
Merge main into the ruff/QoL branch and move the release to 2.8.1
ebf39ca 
main shipped 2.8.0 (#325 monorepo scan diagnostics and API exit codes, #331
Slack severity normalization and the socketdev 3.6.0 bump) while this branch
was open, so the 2.7.3 it targeted is now behind the published release.

Conflict resolution, in every case keeping main's shipped behaviour and this
branch's formatting and fixes:

- slack.py: kept the "middle" -> "medium" normalization from #331, restyled to
  double quotes. Losing it would have silently reintroduced the wrong Slack
  severity counts.
- socketcli.py: kept #325's _log_scan_mode_fallback diagnostics and the
  force_api_mode branch; this branch's side was the older logic reformatted.
- core/__init__.py: kept #325's _log_scan_configuration helper and its call
  sites, and the switch from sys.exit to raise so API failures reach the
  configured infrastructure exit code. Kept this branch's contextlib.suppress
  cleanup and modern annotations, and modernized the helper's own signature
  since this branch drops the typing.List/Optional imports.
- version-check.yml: already assembled from main plus the enforcement gating
  and this branch's both-quote version strip.
- CHANGELOG: this branch's section is now 2.8.1, above the shipped 2.8.0.

uv.lock regenerated from the merged pyproject with the pinned uv 0.12.8.
ruff check and ruff format are both clean; 584 passed, 2 skipped.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
@lelia lelia mentioned this pull request Sep 11, 2026
Enforce ruff lint / format in CI + pre-commit, clear the baseline, fix CodeQL findings #346
Draft

This branch was previously deployed

1 inactive deployment
socket-firewall — 1fbf61d6 Deployed Sep 9, 2026 by lelia via python-sfw-smoke-enterprise #358
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments
@philgran Phil Gran (philgran) philgran approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

publish-docker-preview Publish `socketdev/cli:pr-<number>` to DockerHub publish-preview Publish a CLI preview to TestPyPI.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

@lelia @philgran
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.