update to v2

Author: flowstate

.gitignore

@@ -6,13 +6,13 @@ dist
 *.build
 *.dist
 *.egg-info
-test
 *.env
 run_container.sh
 *.zip
 bin
 scripts/*.py
 *.json
+!tests/**/*.json
 markdown_overview_temp.md
 markdown_security_temp.md
 .DS_Store
@@ -21,4 +21,5 @@ test.py
 *.cpython-312.pyc`
 file_generator.py
 .coverage
-.env.local
+.env.local
+Pipfile

.python-version

@@ -0,0 +1 @@
+3.11.10

Makefile

@@ -0,0 +1,11 @@
+.PHONY: sync-deps test lint
+
+sync-deps:
+	pip-compile pyproject.toml -o requirements.txt
+
+test:
+	pytest
+
+lint:
+	ruff check .
+	ruff format --check .

Pipfile

@@ -2,6 +2,8 @@
 
 The Socket Security CLI was created to enable integrations with other tools like Github Actions, Gitlab, BitBucket, local use cases and more. The tool will get the head scan for the provided repo from Socket, create a new one, and then report any new alerts detected. If there are new alerts against the Socket security policy it'll exit with a non-Zero exit code.
 
+
+
 ## Usage
 
 ```` shell
@@ -38,3 +40,51 @@ If you don't want to provide the Socket API Token every time then you can use th
 | --files                  |                | False    |         | If provided in the format of `["file1", "file2"]` will be used to determine if there have been supported file changes. This is used if it isn't a git repo and you would like to only run if it supported files have changed. |
 | --ignore-commit-files    |                | False    | False   | If enabled then the CLI will ignore what files are changed in the commit and look for all manifest files                                                                                                                      |
 | --disable-blocking       |                | False    | False   | Disables failing checks and will only exit with an exit code of 0                                                                                                                                                             |
+
+## Development
+
+This project uses `pyproject.toml` as the primary dependency specification. 
+
+### Installing dependencies with your preferred tool:
+- **pip**: 
+  ```bash
+  pip install -r requirements.txt  # Install main dependencies
+  pip install -e ".[dev,test]"    # Install development and test dependencies
+  ```
+- **poetry**: 
+  ```bash
+  poetry install --all-extras  # Installs all dependencies including dev and test
+  ```
+- **Rye**: 
+  ```bash
+  rye sync --all-features  # Installs all dependencies including dev and test
+  ```
+
+### Changing dependencies:
+
+1. Update `pyproject.toml` with dependency changes
+2. Run `make sync-deps` to update `requirements.txt`
+   - Note: Requires dev dependencies to be installed (`pip-tools`)
+
+### Running tests:
+
+#### Run all tests:
+```bash
+make test # Requires dev dependencies to be installed (`pytest`)
+```
+Note: For any of the `pytest` commands below, you can substitute `ptw` for `pytest` to run tests in watch mode.
+
+#### Run specific tests:
+```bash
+# Run all tests in a file
+pytest tests/test_socketcli.py
+
+# Run all tests in a directory
+pytest tests/core
+```
+
+
+### Linting:
+```bash
+make lint # Requires dev dependencies to be installed (`ruff`)
+```

Pipfile.lock

@@ -5,7 +5,7 @@ build-backend = "setuptools.build_meta"
 [project]
 name = "socketsecurity"
 dynamic = ["version"]
-requires-python = ">= 3.9"
+requires-python = ">= 3.11"
 dependencies = [
     'requests',
     'mdutils',
@@ -28,8 +28,6 @@ maintainers = [
 classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
-    "Programming Language :: Python :: 3.9",
-    "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
 ]
@@ -44,6 +42,7 @@ test = [
 ]
 dev = [
     "ruff>=0.3.0",
+    "pip-tools>=7.4.0",  # for pip-compile
 ]
 
 [project.scripts]