Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Sourcery command line interface can be installed by running:
pip install sourcery
Once installed you need to log in with:
sourcery login
which will open up a browser tab and ask for confirmation. This is only needed once per computer.
You can also log in via providing your token:
sourcery login --token YOUR_TOKEN
To review a file or a directory (recursively) with Sourcery, use the
sourcery review
command:
sourcery review example_file.py
To apply the changes suggested by Sourcery, use the --fix
option:
sourcery review --fix {file_or_directory}
Sourcery provides a few options for running. You can list them by running
sourcery review --help
sourcery review --help
Usage: sourcery review [OPTIONS] [SRC]...
Review SRC files/directories. Reads from stdin when SRC is -
Options:
--diff TEXT Run only on changed code with diff command (e.g.
"git diff")
--enable TEXT Only run the specified rule or tag. This option
can be used multiple times.
--disable TEXT Skip the specified rule or tag. This option can
be used multiple times.
--check Return exit code 1 if unsolved issues found.
--fix Automatically fix issues where possible.
--config FILE Location of the Sourcery YAML config file. Can be
a file or URL.
--csv Output in CSV format
--verbose Verbose output with explanation and code
snippets.
--summary / --no-summary Flag to determine whether to print a summary of
the review. Default: true.
-h, --help Show this message and exit.
Sourcery reads configuration settings from .sourcery.yaml
in the project
directory. Full details are described
here.
Sourcery works great with pre-commit. Once you
have it installed, add this to the
.pre-commit-config.yaml
in your repository:
repos:
- repo: https://github.com/sourcery-ai/sourcery
rev: v1.31.0
hooks:
- id: sourcery
# The best way to use Sourcery in a pre-commit hook:
# * review only changed lines:
# * omit the summary
args: [--diff=git diff HEAD, --no-summary]
To review all changes compared to the main
branch:
args: [--diff=git diff main]
If you want Sourcery to automatically apply the suggested changes,add the
--fix
option:
args: [--diff=git diff HEAD, --fix]
If Sourcery is the first pre-commit hook that you've added to your project,
you'll also need to run pre-commit install
.
For the majority of projects, the best usage of Sourcery in the CI is to review only the code of the current PR.
You can use the script below to detect Sourcery violations that are present in
the current code but not in the main
branch:
pip install sourcery
# Store your Sourcery token as a secret in your CI environment.
sourcery login --token $SOURCERY_TOKEN
sourcery review --diff "git diff main" .
Instead of main
, you can pick another branch as well. For example, in GitHub
Actions you can use
--diff="git diff ${{ github.event.pull_request.base.sha }}"
FAQs
Magically refactor Python
We found that sourcery-nightly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.