ggmcp/pyproject.toml at main · GitGuardian/ggmcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[project]
name = "ggmcp"
version = "0.5.0"
description = "MCP server for GitGuardian"
authors = [
    { name = "GitGuardian", email = "support@gitguardian.com" },
]
maintainers = [
    { name = "GitGuardian", email = "support@gitguardian.com" },
]
keywords = [
    "cli",
    "devsecops",
    "security-tools",
    "gitguardian",
    "mcp"
]
classifiers = [
    "Development Status :: 4 - Beta",
    "Intended Audience :: Developers",
    "Intended Audience :: End Users/Desktop",
    "Natural Language :: English",
    "Environment :: Console",
    "Programming Language :: Python",
    "Programming Language :: Python :: 3.13",
    "Operating System :: OS Independent",
    "Topic :: Security",
]
license = "MIT"
readme = "README.md"
requires-python = ">=3.10"
dependencies = [
    "developer-mcp-server",
    "secops-mcp-server",
    "mcp~=1.24",  # CVE-2025-66416 / GHSA-9h52-p55h-vw2f: DNS rebinding vulnerability
]

[project.urls]
Homepage = "https://github.com/GitGuardian/ggmcp"

[dependency-groups]
dev = [
    "mypy~=1.18",
    "pytest~=8.4",
    "pytest-asyncio~=1.2",
    "pytest-cov~=7.0",
    "pytest-mock~=3.15",
    "ruff~=0.14",
    "vcrpy~=8.0",
    "pyyaml~=6.0",
]

[project.scripts]
developer-mcp-server = "developer_mcp_server.run:run_mcp_server"
secops-mcp-server = "secops_mcp_server.run:run_mcp_server"

[tool.uv.workspace]
members = ["packages/*"]

[tool.uv.sources]
"gg-api-core" = { workspace = true }
"developer-mcp-server" = { workspace = true }
"secops-mcp-server" = { workspace = true }

[tool.ruff]
line-length = 120
exclude = [
    ".bzr",
    ".direnv",
    ".eggs",
    ".git",
    ".hg",
    ".mypy_cache",
    ".nox",
    ".pants.d",
    ".pytype",
    ".ruff_cache",
    ".svn",
    ".tox",
    ".venv",
    "__pycache__",
    "__pypackages__",
    "_build",
    "buck-out",
    "build",
    "dist",
    "node_modules",
    "venv",
    "scripts",
]

[tool.ruff.lint.pydocstyle]
convention = "google"

[tool.ruff.lint]
exclude = ["__init__.py"]
select = ["E", "F", "I", "W"]
ignore = ["E501", "E741", "F402", "F823", "W293"]


[tool.ruff.format]
indent-style = "space"
skip-magic-trailing-comma = false
line-ending = "auto"
docstring-code-format = true

[tool.pytest.ini_options]
asyncio_mode = "auto"
python_files = ["test_*.py"]
python_classes = ["Test*"]
python_functions = ["test_*"]
markers = [
    "asyncio", # mark a test as an asynchronous test
    "vcr_test", # mark a test as using VCR cassettes (disables auto-mocking)
]

[tool.mypy]
python_version = "3.10"
warn_return_any = true
warn_unused_configs = true
warn_redundant_casts = true
warn_unused_ignores = true
disallow_untyped_defs = false  # Start lenient, can be enabled later
check_untyped_defs = true
no_implicit_optional = true
strict_optional = true
ignore_missing_imports = true  # For packages without type stubs
show_error_codes = true
pretty = true

[tool.commitizen]
name = "cz_conventional_commits"
tag_format = "v$version"
update_changelog_on_bump = true
gpg_sign = true
version_files = [
    "pyproject.toml:version",
]