feat: TEA (Transparency Exchange API) integration - #186

Open

aurangzaib048 wants to merge 40 commits into

sbomify:masterfrom

aurangzaib048:feature/tea-cli

Commits on Mar 17, 2026

feat: add libtea dependency for TEA integration
aurangzaib048
committed
feat: register tea subcommand group in CLI
aurangzaib048
committed
feat: add 'tea fetch' convenience command
aurangzaib048
committed
fix: move tea_group import to top of file to satisfy E402 lint rule
aurangzaib048
committed
fix: address code review findings for TEA CLI
aurangzaib048
committed
fix: restore Sentry DSN default
aurangzaib048
committed
feat: add TEA enrichment source with auto-discovery
aurangzaib048
committed
fix: address review findings for TEA integration
aurangzaib048
committed
chore: switch libtea from TestPyPI to PyPI
aurangzaib048
committed
fix: include CLE data in early exit condition for enrichment registry
aurangzaib048
committed
style: fix ruff formatting in registry.py
aurangzaib048
committed
fix: address comprehensive review findings for TEA integration
aurangzaib048
committed
fix: address PR review findings for TEA integration
aurangzaib048
committed
fix: address second round of PR review findings
aurangzaib048
committed
fix: add registry CLE skip tests and mock TEA in non-TEA tests
aurangzaib048
committed
fix: harden TEA mock fixture and clarify SSRF comment
aurangzaib048
committed
fix: make collection assignment type-safe in tea fetch
aurangzaib048
committed
fix: address review findings — strengthen token hash, modernize types, remove supplier mapping
aurangzaib048
committed
fix: scope metadata cache key by env config and add product-release-uuid test
aurangzaib048
committed
fix: replace hardcoded _CLE_PROVIDERS with provides_cle protocol property
aurangzaib048
committed
fix: clarify provides_cle docstring, fix token cache test, add --auth security hint
aurangzaib048
committed
style: fix ruff formatting in tea CLI
aurangzaib048
committed
fix: clear TEA client cache in conftest fixture for test isolation
aurangzaib048
committed
fix: remove dead fmt.url guard after _select_best_format
aurangzaib048
committed
fix: add clear=True to test_fetch_passes_token env patch
aurangzaib048
committed
fix: cache from_well_known failures to avoid repeated connection attempts
aurangzaib048
committed
fix: retry-limited discovery failures and reject unsafe URLs in supports()
aurangzaib048
committed
fix: guard None media_type, fix client_cache type, remove provides_cle from protocol
aurangzaib048
committed
fix: rename _MAX_DISCOVERY_RETRIES to _MAX_DISCOVERY_ATTEMPTS, clarify provides_cle convention
aurangzaib048
committed
test: add test for supports() rejecting unsafe TEA_BASE_URL
aurangzaib048
committed
fix: resolve mypy strict mode errors in TEA files
aurangzaib048
committed
fix: validate URL scheme in SSRF check and redact URLs in logs
aurangzaib048
committed
fix: resolve DNS in SSRF check and update early-exit comment
aurangzaib048
committed
fix: use ip.is_global to reject multicast/broadcast in SSRF check
aurangzaib048
committed

Commits on Mar 23, 2026