Skip to content

XRAY-146488 - Onboarding pip env#802

Open
gauriy-tech wants to merge 3 commits into
jfrog:devfrom
gauriy-tech:feature/XRAY-146488-onboard-pipenv
Open

XRAY-146488 - Onboarding pip env#802
gauriy-tech wants to merge 3 commits into
jfrog:devfrom
gauriy-tech:feature/XRAY-146488-onboard-pipenv

Conversation

@gauriy-tech

@gauriy-tech gauriy-tech commented Jul 13, 2026

Copy link
Copy Markdown
Contributor
  • The pull request is targeting the dev branch.
  • The code has been validated to compile successfully by running go vet ./....
  • The code has been formatted properly using go fmt ./....
  • All static analysis checks passed.
  • All tests have passed. If this feature is not already covered by the tests, new tests have been added.
  • Updated the Contributing page / ReadMe page / CI Workflow files if needed.
  • All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

Onboards pipenv as a supported package manager for jf curation-audit, following the same repo-detection and curation pass-through pattern already used for Poetry. Curation is resolved via a 3-tier priority: jf pipenv-config → ~/.pip/pip.conf index-url → Pipfile [[source]] — covering both JFrog-native setup and the common case where a customer already configured Artifactory as their PyPI index via pip.conf.

Changes
Add techutils.Pipenv to curation-audit's supported technologies, with a minimum-version gate (pipenv >= 2023.7.4) required for reliable --pypi-mirror support.
Add setRepoFromPipfile (3-tier repo detection) and wire it into SetRepo/auditTree.
Add installPipenvDeps, runPipenvInstallFromRemoteRegistry, and buildPipenvDownloadUrlsMap to resolve dependency download URLs and run pipenv install through the curation pass-through endpoint, rewriting the Pipfile's [[source]] URL when present.
Reuse existing CVS/403-blocked detection and fallback handling (same as Pip/Poetry).
Update CLI help text to list pipenv/poetry/pnpm as supported package managers.
Add unit tests for version parsing, repo detection (pip.conf/Pipfile), Pipfile.lock parsing, and CVS/403 detection.

@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from f3cb756 to 981b4a3 Compare July 14, 2026 03:30
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 87cdb54 to 2a87723 Compare July 14, 2026 05:43
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 152d1a5 to 5df91d4 Compare July 14, 2026 08:07
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 5df91d4 to 5877455 Compare July 14, 2026 08:23
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 5877455 to 39a3667 Compare July 17, 2026 05:23
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 39a3667 to 9ddd14f Compare July 17, 2026 12:03
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 9ddd14f to 5b25c7d Compare July 17, 2026 19:06
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 5b25c7d to 6dab532 Compare July 20, 2026 02:49
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 6dab532 to 468c78a Compare July 20, 2026 04:16
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 468c78a to e9c977c Compare July 20, 2026 05:22
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from e9c977c to b15cba1 Compare July 20, 2026 06:09
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from b15cba1 to c72faeb Compare July 20, 2026 07:59
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from c72faeb to ae60f36 Compare July 20, 2026 08:46
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from ae60f36 to c3f1df3 Compare July 21, 2026 02:44
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from c3f1df3 to 8865047 Compare July 21, 2026 03:03
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from 8865047 to 0c7c482 Compare July 21, 2026 03:14
@gauriy-tech gauriy-tech added the safe to test Approve running integration tests on a pull request label Jul 21, 2026
Comment thread commands/curation/curationaudit.go
@gauriy-tech gauriy-tech added safe to test Approve running integration tests on a pull request and removed safe to test Approve running integration tests on a pull request labels Jul 21, 2026
@gauriy-tech gauriy-tech added safe to test Approve running integration tests on a pull request and removed safe to test Approve running integration tests on a pull request labels Jul 23, 2026
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from a63c307 to 14e009d Compare July 23, 2026 16:51
@gauriy-tech gauriy-tech added safe to test Approve running integration tests on a pull request and removed safe to test Approve running integration tests on a pull request labels Jul 23, 2026
…Pipenv curation helpers

Co-authored-by: Cursor <cursoragent@cursor.com>
@gauriy-tech
gauriy-tech force-pushed the feature/XRAY-146488-onboard-pipenv branch from e5d2100 to e79f7b1 Compare July 23, 2026 17:51
@gauriy-tech gauriy-tech added safe to test Approve running integration tests on a pull request and removed safe to test Approve running integration tests on a pull request labels Jul 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

safe to test Approve running integration tests on a pull request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants