Skip to content

Show PyPI Inspector link for remote PyPI findings#797

Merged
christophetd merged 3 commits into
DataDog:v3from
0xTaoZ:0xTaoZ/pypi-inspector-link
Jul 8, 2026
Merged

Show PyPI Inspector link for remote PyPI findings#797
christophetd merged 3 commits into
DataDog:v3from
0xTaoZ:0xTaoZ/pypi-inspector-link

Conversation

@0xTaoZ

@0xTaoZ 0xTaoZ commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add resolved package version metadata to remote scan results
  • generate a PyPI Inspector URL for remote PyPI scans with findings
  • show the link in human-readable output to make package-file triage easier

Fixes #67

Tests

  • .venv/bin/python -m pytest tests/reporters/test_human_readable.py tests/core/test_cli.py
  • .venv/bin/python -m black --check guarddog/cli.py guarddog/reporters/human_readable.py guarddog/scanners/scanner.py guarddog/scanners/pypi_package_scanner.py tests/reporters/test_human_readable.py tests/core/test_cli.py
  • git diff --check

@0xTaoZ 0xTaoZ requested a review from a team as a code owner July 1, 2026 00:17
@0xTaoZ

0xTaoZ commented Jul 3, 2026

Copy link
Copy Markdown
Contributor Author

If anyone has a chance to take a look, I'd really appreciate a review. Happy to make any changes if needed. Thanks

@christophetd

Copy link
Copy Markdown
Contributor

Hi @0xTaoZ, thanks for the PR! We'll have a look shortly

@christophetd

Copy link
Copy Markdown
Contributor

@codex review

@christophetd christophetd self-assigned this Jul 7, 2026
@christophetd christophetd added enhancement New feature or request ecosystem/pypi labels Jul 7, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 98cf5868cc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread guarddog/cli.py Outdated
@christophetd

Copy link
Copy Markdown
Contributor

@0xTaoZ Thanks for the great idea! I took the opportunity in 093ebd8 to also implement it on a per-finding basis deeplinking to a specific line of source code.

Let me know how that sounds and if you're happy about these changes, and then we'll be ready to merge!

@christophetd

Copy link
Copy Markdown
Contributor

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: a5d4402fd3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@christophetd christophetd force-pushed the 0xTaoZ/pypi-inspector-link branch from a5d4402 to 924bcfc Compare July 7, 2026 12:51
@christophetd

Copy link
Copy Markdown
Contributor

I rebased your branch, keeping your authorship on the initial commit, to ensure that all commits were signed so this PR can be merged once you confirm you're happy with the changes!

@0xTaoZ

0xTaoZ commented Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

Hi @christophetd ,thanks, this looks great to me. The per-finding deep links are a nice improvement, and I’m happy with the changes,please feel free to merge

@christophetd christophetd enabled auto-merge (squash) July 7, 2026 13:56
@christophetd christophetd merged commit 0143133 into DataDog:v3 Jul 8, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ecosystem/pypi enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Show direct link to package files on file matches

3 participants