Pin dependencies and relocate plugin files (#3)

Addresses review feedback:

1. Pin all dependencies to exact versions (crowdstrike-falconpy==1.6.1,
   pylint==4.0.5, pytest==9.0.2).

2. Move requirements.txt, pyproject.toml, .pylintrc, tests/, test-scripts.sh,
   test-e2e.sh, and .env.example into plugins/fusion-workflows/ since they
   are specific to that plugin.

CI workflow paths updated accordingly. conftest.py sys.path simplified
now that tests live closer to the scripts they test.

Author: mraible

.github/workflows/main.yml

@@ -20,11 +20,11 @@ jobs:
           python-version: "3.12"
           cache: pip
       - name: Install dependencies
-        run: pip install -r requirements.txt
+        run: pip install -r plugins/fusion-workflows/requirements.txt
       - name: Pylint
-        run: pylint plugins/fusion-workflows/skills/fusion-workflows/scripts/*.py
+        run: pylint --rcfile=plugins/fusion-workflows/.pylintrc plugins/fusion-workflows/skills/fusion-workflows/scripts/*.py
       - name: Shellcheck
-        run: shellcheck test-scripts.sh test-e2e.sh
+        run: shellcheck plugins/fusion-workflows/test-scripts.sh plugins/fusion-workflows/test-e2e.sh
 
   test:
     runs-on: ubuntu-latest
@@ -36,9 +36,9 @@ jobs:
           python-version: "3.12"
           cache: pip
       - name: Install dependencies
-        run: pip install -r requirements.txt
+        run: pip install -r plugins/fusion-workflows/requirements.txt
       - name: Run tests
-        run: pytest tests/ -v
+        run: pytest plugins/fusion-workflows/tests/ -v
 
   validate:
     runs-on: ubuntu-latest

.env.example plugins/fusion-workflows/.env.example.env.example renamed to plugins/fusion-workflows/.env.example

@@ -0,0 +1,3 @@
+crowdstrike-falconpy==1.6.1
+pylint==4.0.5
+pytest==9.0.2

.pylintrc plugins/fusion-workflows/.pylintrc.pylintrc renamed to plugins/fusion-workflows/.pylintrc

@@ -12,8 +12,8 @@
 
 set -euo pipefail
 
-REPO_ROOT="$(cd "$(dirname "$0")" && pwd)"
-SCRIPTS_DIR="$REPO_ROOT/plugins/fusion-workflows/skills/fusion-workflows/scripts"
+PLUGIN_DIR="$(cd "$(dirname "$0")" && pwd)"
+SCRIPTS_DIR="$PLUGIN_DIR/skills/fusion-workflows/scripts"
 PASS=0
 FAIL=0
 SKIP=0
@@ -46,9 +46,9 @@ echo "────────────────────────
 
 # Check credentials
 if [[ -z "${CS_CLIENT_ID:-}" || -z "${CS_CLIENT_SECRET:-}" ]]; then
-    if [[ -f "$REPO_ROOT/.env" ]]; then
+    if [[ -f "$PLUGIN_DIR/.env" ]]; then
         # shellcheck disable=SC1091
-        source "$REPO_ROOT/.env" 2>/dev/null || true
+        source "$PLUGIN_DIR/.env" 2>/dev/null || true
     fi
 fi
 

pyproject.toml plugins/fusion-workflows/pyproject.tomlpyproject.toml renamed to plugins/fusion-workflows/pyproject.toml

@@ -9,9 +9,9 @@
 
 set -euo pipefail
 
-REPO_ROOT="$(cd "$(dirname "$0")" && pwd)"
-SCRIPTS_DIR="$REPO_ROOT/plugins/fusion-workflows/skills/fusion-workflows/scripts"
-ASSETS_DIR="$REPO_ROOT/plugins/fusion-workflows/skills/fusion-workflows/assets"
+PLUGIN_DIR="$(cd "$(dirname "$0")" && pwd)"
+SCRIPTS_DIR="$PLUGIN_DIR/skills/fusion-workflows/scripts"
+ASSETS_DIR="$PLUGIN_DIR/skills/fusion-workflows/assets"
 PASS=0
 FAIL=0
 SKIP=0
@@ -37,9 +37,9 @@ echo "────────────────────────
 
 # Check for credentials
 if [[ -z "${CS_CLIENT_ID:-}" || -z "${CS_CLIENT_SECRET:-}" ]]; then
-    if [[ -f "$REPO_ROOT/.env" ]]; then
+    if [[ -f "$PLUGIN_DIR/.env" ]]; then
         # shellcheck disable=SC1091
-        source "$REPO_ROOT/.env" 2>/dev/null || true
+        source "$PLUGIN_DIR/.env" 2>/dev/null || true
     fi
 fi
 

plugins/fusion-workflows/requirements.txt

@@ -12,8 +12,6 @@
 SCRIPTS_DIR = os.path.join(
     os.path.dirname(__file__),
     "..",
-    "plugins",
-    "fusion-workflows",
     "skills",
     "fusion-workflows",
     "scripts",
@@ -29,7 +27,9 @@ def clean_env(monkeypatch):
     monkeypatch.delenv("CS_CLIENT_ID", raising=False)
     monkeypatch.delenv("CS_CLIENT_SECRET", raising=False)
     monkeypatch.delenv("CS_BASE_URL", raising=False)
-    monkeypatch.delenv("CS_ENV_FILE", raising=False)
+    # Point CS_ENV_FILE to a nonexistent path so load_env() won't walk up
+    # and find a real .env file on the developer's machine.
+    monkeypatch.setenv("CS_ENV_FILE", "/nonexistent/.env")
     cs_auth.reset_client()