Since the API Changes to not accept unsupported files changed the tem…

[dacoburn]

Description

API changes caused temporary baseline scan files to be rejected by the validator when they don't have the expected .socket.facts.json filename format. This prevented baseline scans from being created when no previous scan exists, causing scan failures for new repositories.

Root Cause

The empty_head_scan_file() method was creating temporary files using tempfile.mkstemp() with a generic suffix (.empty) and prefix (socket_baseline_), which generated filenames that didn't match the expected .socket.facts.json format required by the API validator. The API now validates that manifest files follow expected naming patterns, causing these temporary baseline files to be rejected.

Fix

Changed the temporary file creation logic to create files with the exact filename .socket.facts.json in the system temporary directory instead of using tempfile.mkstemp(). This ensures the temporary baseline scan files pass API validation while maintaining the same functionality. Also added debug flag support to the reachability engine.

Public Changelog

• Fix for the API Schema change for only accepting supported manifest file types which was breaking empty full scans
• Added support for directories that don't have supported manifest files to create a report anyways and log out that there were no supported manifest files

[github-actions]

🚀 Preview package published!

Install with:

pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple socketsecurity==2.2.35.dev1

Docker image: socketdev/cli:pr-132