fix: correct default branch detection and ensure consistent scanning …

[dacoburn]

…behavior

Root Cause

Forced API Mode for non manifest file changes in a Git Repo was not correctly setting/using the default branch.

Fix

FIXED BUGS:

• Default branch detection was not working properly in git repositories
• make_default_branch and set_as_pending_head were inconsistently set
• CLI would skip scans when manifest files hadn't changed (should always scan)
• --default-branch flag was being overridden by SCM detection
• GitLab CI integration wasn't detecting default branch correctly

CORRECTED BEHAVIOR:

• Always perform scans regardless of manifest file changes (API mode when no manifests changed)
• Proper default branch detection priority system:
  1. Explicit --default-branch flag (highest priority)
  2. CI environment variables (GitHub Actions, GitLab CI)
  3. Git repository analysis via git_repo.is_default_branch
  4. Fallback to false
• Both make_default_branch and set_as_pending_head now synchronized correctly
• Force API mode enables non-blocking behavior when no manifest files changed

ENHANCED AUTO-DETECTION:

• Repository name from git remote origin (was manual)
• Branch, commit SHA, message, and committer from git (was manual)
• Changed files from git commit (was manual)
• Better error handling for non-git repositories

SIMPLIFIED CI/CD USAGE:

• Most parameters now optional due to git auto-detection
• Added production-ready workflow examples:
  • workflows/github-actions.yml - GitHub Actions with concurrency control
  • workflows/gitlab-ci.yml - GitLab CI with environment detection
  • workflows/bitbucket-pipelines.yml - Bitbucket with path filtering
• Updated README with corrected parameter documentation

The CLI now works as users expected:

• GitHub: socketcli --target-path --scm github --pr-number
• GitLab: socketcli --target-path --scm gitlab --pr-number
• Local: socketcli --target-path ./project

Public Changelog

• Default branch detection was not working properly in git repositories
• make_default_branch and set_as_pending_head were inconsistently set
• CLI would skip scans when manifest files hadn't changed (should always scan)
• --default-branch flag was being overridden by SCM detection
• GitLab CI integration wasn't detecting default branch correctly

[github-actions]

🚀 Preview package published!

Install with:

pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple socketsecurity==2.1.24.dev1

Docker image: socketdev/cli:pr-102