fix: add support for pyproject.toml and env.yml/env.yaml files

pyproject.toml

@@ -1,3 +1,6 @@
 [build-system]
-requires = ["setuptools>=42"]
+requires = ["setuptools>=42", "insecure-package"
+
+    ]
 build-backend = "setuptools.build_meta"
+

safety/scan/command.py

@@ -45,7 +45,6 @@ class ScannableEcosystems(Enum):
     """Enum representing scannable ecosystems."""
     PYTHON = Ecosystem.PYTHON.value
 
-
 def process_report(
     obj: Any, console: Console, report: ReportModel, output: str,
     save_as: Optional[Tuple[str, Path]], **kwargs
@@ -314,6 +313,8 @@ def scan(ctx: typer.Context,
     with console.status(wait_msg, spinner=DEFAULT_SPINNER) as status:
         for path, analyzed_file in process_files(paths=file_paths,
                                                  config=config):
+            print("now here", analyzed_file.dependency_results.dependencies)
+            print("now here", analyzed_file.file_type)
             count += len(analyzed_file.dependency_results.dependencies)
 
             # Update exit code if vulnerabilities are found

safety/scan/ecosystems/python/dependencies.py

@@ -2,7 +2,7 @@
 from pathlib import Path
 import sys
 from typing import Generator, List, Optional
-
+import toml
 from safety_schemas.models import FileType, PythonDependency
 from safety_schemas.models.package import PythonSpecification
 from ..base import InspectableFile
@@ -270,6 +270,59 @@ def read_virtual_environment_dependencies(f: InspectableFile) -> Generator[Pytho
                 latest_version_without_known_vulnerabilities=None,
                 more_info_url=None)
 
+def read_pyproject_toml_dependencies(file: Path) -> Generator[PythonDependency, None, None]:
+    data = toml.load(file)
+    print(data)
+    dependencies = []
+
+    # Handle 'build-system.requires'
+    if 'build-system' in data and 'requires' in data['build-system']:
+        dependencies.extend(data['build-system']['requires'])
+
+    # Handle 'project.dependencies'
+    if 'project' in data and 'dependencies' in data['project']:
+        dependencies.extend(data['project']['dependencies'])
+
+    # Handle 'project.optional-dependencies'
+    if 'project' in data and 'optional-dependencies' in data['project']:
+        for opt_deps in data['project']['optional-dependencies'].values():
+            dependencies.extend(opt_deps)
+
+    # Handle 'tool.poetry.dependencies'
+    if 'tool' in data and 'poetry' in data['tool'] and 'dependencies' in data['tool']['poetry']:
+        for dep, version in data['tool']['poetry']['dependencies'].items():
+            if isinstance(version, str):
+                dependencies.append(f"{dep}=={version}")
+            else:
+                dependencies.append(dep)
+
+    # Handle 'tool.poetry.dev-dependencies'
+    if 'tool' in data and 'poetry' in data['tool'] and 'dev-dependencies' in data['tool']['poetry']:
+        for dep, version in data['tool']['poetry']['dev-dependencies'].items():
+            if isinstance(version, str):
+                dependencies.append(f"{dep}=={version}")
+            else:
+                dependencies.append(dep)
+
+    print("dependencies")
+    print(dependencies)
+    for dep in dependencies:
+        dep_name, dep_version = (dep.split("==") + [None])[:2]
+        print(dep_name)
+        print(dep_version)
+        yield PythonDependency(
+            name=dep_name,
+            version=dep_version,
+            specifications=[
+                PythonSpecification(f"{dep_name}=={dep_version}" if dep_version else dep_name, found=file)
+            ],
+            found=file,
+            insecure_versions=[],
+            secure_versions=[],
+            latest_version=None,
+            latest_version_without_known_vulnerabilities=None,
+            more_info_url=None
+        )
 
 def get_dependencies(f: InspectableFile) -> List[PythonDependency]:
     """
@@ -291,4 +344,7 @@ def get_dependencies(f: InspectableFile) -> List[PythonDependency]:
     if f.file_type == FileType.VIRTUAL_ENVIRONMENT:
         return list(read_virtual_environment_dependencies(f))
 
-    return []
+    if f.file_type == FileType.PYPROJECT_TOML:
+        return list(read_pyproject_toml_dependencies(Path(f.file.name)))
+
+    return []

safety/scan/finder/file_finder.py

@@ -75,6 +75,7 @@ def __init__(
         self.target = target
         self.include_files = include_files
 
+        print("include_files", include_files)
         # If no handlers are provided, initialize them from the ecosystem mapping
         if not handlers:
             handlers = set(ECOSYSTEM_HANDLER_MAPPING[ecosystem]()
@@ -149,8 +150,17 @@ def process_directory(self, dir_path: str, max_deep: Optional[int] = None) -> Tu
                             files[file_type.value] = set()
                         files[file_type.value].add(inspectable_file)
                         break
+
+                special_files = {'pyproject.toml', 'env.yml', 'env.yaml'}
+                if file_name in special_files:
+                    file_type = FileType(file_name)
+                    inspectable_file = Path(root, file_name)
+                    if file_type.value not in files or not files[file_type.value]:
+                        files[file_type.value] = set()
+                    files[file_type.value].add(inspectable_file)
             level += 1
 
+
         return dir_path, files
 
     def search(self) -> Tuple[str, Dict[str, Set[Path]]]:

safety/scan/finder/handlers.py

@@ -2,8 +2,8 @@
 import os
 from pathlib import Path
 from types import MappingProxyType
-from typing import Dict, List, Optional, Optional, Tuple
-
+from typing import Dict, List, Optional, Set
+import toml
 from safety_schemas.models import Ecosystem, FileType
 
 
@@ -52,7 +52,7 @@ def can_handle(self, root: str, file_name: str, include_files: Dict[FileType, Li
         return None
 
     @abstractmethod
-    def download_required_assets(self, session) -> Dict[str, str]:
+    def download_required_assets(self, session):
         """
         Abstract method to download required assets for handling files. Should be implemented
         by subclasses.
@@ -109,12 +109,10 @@ def __init__(self) -> None:
         super().__init__()
         self.ecosystem = Ecosystem.SAFETY_PROJECT
 
-    def download_required_assets(self, session) -> None:
-        """
-        No required assets to download for Safety project files.
-        """
+    def download_required_assets(self, session):
         pass
 
+
 # Mapping of ecosystems to their corresponding file handlers
 ECOSYSTEM_HANDLER_MAPPING = MappingProxyType({
     Ecosystem.PYTHON: PythonFileHandler,