Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: fix/gitlab-security-schema-compliance
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 2 files changed
  • 2 contributors

Commits on Jan 20, 2026

  1. fix: GitLab Security Dashboard schema compliance 

    Fixes validation errors in GitLab Dependency Scanning report format to ensure reports are properly ingested by GitLab's Security Dashboard.

Changes:
- Fix timestamp format: Remove 'Z' suffix and use explicit YYYY-MM-DDTHH:MM:SS format to match GitLab schema pattern
- Add required dependency_files field with package manager detection
- Fix identifier URL handling: Omit url field when not present instead of setting to None
- Add _detect_package_manager() helper to identify package managers from manifest file paths
- Replace deprecated datetime.utcnow() with datetime.now(timezone.utc)

Addresses GitLab validation errors:
1. /scan/start_time and /scan/end_time pattern mismatch
2. Missing required field: dependency_files
3. Improved schema compliance for identifier objects

All 16 GitLab format tests passing.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
    @claude
    Jonathan Mucha and claude committed Jan 20, 2026
    Configuration menu
    Copy the full SHA
    36d46e0 View commit details
    Browse the repository at this point in the history
Loading