chore(ci): move the pygoat CI step from hatch to riot

[juanjux]

Checklist

• PR author has checked that all the criteria below are met
• The PR description includes an overview of the change
• The PR description articulates the motivation for the change
• The change includes tests OR the PR description describes a testing strategy
• The PR description notes risks associated with the change, if any
• Newly-added code is easy to change
• The change follows the library release note guidelines
• The change includes or references documentation updates if necessary
• Backport labels are set (if applicable)

Reviewer Checklist

• Reviewer has checked that all the criteria below are met
• Title is accurate
• All changes are related to the pull request's stated goal
• Avoids breaking API changes
• Testing strategy adequately addresses listed risks
• Newly-added code is easy to change
• Release note makes sense to a user of the library
• If necessary, author has acknowledged and discussed the performance implications of this PR as reported in the benchmarks PR comment
• Backport labels are set in a manner that is consistent with the release branch maintenance policy

[github-actions]

CODEOWNERS have been resolved as:

.riot/requirements/115ddbf.txt                                          @DataDog/apm-python
.riot/requirements/a19438c.txt                                          @DataDog/apm-python
.riot/requirements/d74f3e1.txt                                          @DataDog/apm-python
hatch.toml                                                              @DataDog/python-guild
riotfile.py                                                             @DataDog/apm-python
tests/appsec/suitespec.yml                                              @DataDog/asm-python

[datadog-datadog-prod-us1]

Datadog Summary

✅ Code Quality    ✅ Code Security    ✅ Dependencies

---

Was this helpful? Give us feedback!

[github-actions]

Bootstrap import analysis

Comparison of import times between this PR and base.

Summary

The average import time from this PR is: 287 ± 5 ms.

The average import time from base is: 289 ± 6 ms.

The import time difference between this PR and base is: -2.1 ± 0.3 ms.

Import time breakdown

The following import paths have shrunk:

ddtrace.auto 2.019 ms (0.70%)

ddtrace.bootstrap.sitecustomize 1.328 ms (0.46%)

ddtrace.bootstrap.preload 1.328 ms (0.46%)

ddtrace.internal.remoteconfig.client 0.660 ms (0.23%)

ddtrace 0.691 ms (0.24%)

ddtrace.internal._unpatched 0.034 ms (0.01%)

json 0.034 ms (0.01%)

json.decoder 0.034 ms (0.01%)

re 0.034 ms (0.01%)

enum 0.034 ms (0.01%)

types 0.034 ms (0.01%)

[pr-commenter]

Benchmarks

Benchmark execution time: 2025-07-10 15:43:30

Comparing candidate commit 62c1584 in PR branch juanjux/iast-integrations-pygoat-to-riot with baseline commit 2d305dd in branch main.

Found 0 performance improvements and 1 performance regressions! Performance is the same for 519 metrics, 2 unstable metrics.

scenario:iastaspects-replace_aspect

• 🟥 execution_time [+715.401ns; +797.587ns] or [+14.987%; +16.709%]

[juanjux]

Closing too many CI mysteries for now.