chore(CI): move iast_tdd_propagation to riot

.riot/requirements/190cae7.txt

@@ -0,0 +1,44 @@
+#
+# This file is autogenerated by pip-compile with Python 3.10
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/190cae7.in
+#
+aiosqlite==0.21.0
+attrs==25.3.0
+blinker==1.9.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+click==8.2.1
+coverage[toml]==7.9.0
+exceptiongroup==1.3.0
+flask==3.1.1
+greenlet==3.2.3
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+iso8601==2.1.0
+itsdangerous==2.2.0
+jinja2==3.1.6
+markupsafe==3.0.2
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+peewee==3.18.1
+pluggy==1.6.0
+pony==0.7.19
+pycryptodome==3.23.0
+pygments==2.19.1
+pypika-tortoise==0.6.1
+pytest==8.4.0
+pytest-cov==6.2.1
+pytest-mock==3.14.1
+pytz==2025.2
+requests==2.32.4
+sortedcontainers==2.4.0
+sqlalchemy==2.0.41
+tomli==2.2.1
+tortoise-orm==0.25.1
+typing-extensions==4.14.0
+urllib3==2.4.0
+werkzeug==3.1.3

.riot/requirements/25712c4.txt

@@ -0,0 +1,46 @@
+#
+# This file is autogenerated by pip-compile with Python 3.9
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/25712c4.in
+#
+aiosqlite==0.21.0
+attrs==25.3.0
+blinker==1.9.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+click==8.1.8
+coverage[toml]==7.9.0
+exceptiongroup==1.3.0
+flask==3.1.1
+greenlet==3.2.3
+hypothesis==6.45.0
+idna==3.10
+importlib-metadata==8.7.0
+iniconfig==2.1.0
+iso8601==2.1.0
+itsdangerous==2.2.0
+jinja2==3.1.6
+markupsafe==3.0.2
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+peewee==3.18.1
+pluggy==1.6.0
+pony==0.7.19
+pycryptodome==3.23.0
+pygments==2.19.1
+pypika-tortoise==0.6.1
+pytest==8.4.0
+pytest-cov==6.2.1
+pytest-mock==3.14.1
+pytz==2025.2
+requests==2.32.4
+sortedcontainers==2.4.0
+sqlalchemy==2.0.41
+tomli==2.2.1
+tortoise-orm==0.25.1
+typing-extensions==4.14.0
+urllib3==2.4.0
+werkzeug==3.1.3
+zipp==3.23.0

.riot/requirements/64169ed.txt

@@ -0,0 +1,42 @@
+#
+# This file is autogenerated by pip-compile with Python 3.11
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/64169ed.in
+#
+aiosqlite==0.21.0
+attrs==25.3.0
+blinker==1.9.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+click==8.2.1
+coverage[toml]==7.9.0
+flask==3.1.1
+greenlet==3.2.3
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+iso8601==2.1.0
+itsdangerous==2.2.0
+jinja2==3.1.6
+markupsafe==3.0.2
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+peewee==3.18.1
+pluggy==1.6.0
+pony==0.7.19
+pycryptodome==3.23.0
+pygments==2.19.1
+pypika-tortoise==0.6.1
+pytest==8.4.0
+pytest-cov==6.2.1
+pytest-mock==3.14.1
+pytz==2025.2
+requests==2.32.4
+sortedcontainers==2.4.0
+sqlalchemy==2.0.41
+tortoise-orm==0.25.1
+typing-extensions==4.14.0
+urllib3==2.4.0
+werkzeug==3.1.3

.riot/requirements/77830bc.txt

@@ -0,0 +1,42 @@
+#
+# This file is autogenerated by pip-compile with Python 3.12
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/77830bc.in
+#
+aiosqlite==0.21.0
+attrs==25.3.0
+blinker==1.9.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+click==8.2.1
+coverage[toml]==7.9.0
+flask==3.1.1
+greenlet==3.2.3
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+iso8601==2.1.0
+itsdangerous==2.2.0
+jinja2==3.1.6
+markupsafe==3.0.2
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+peewee==3.18.1
+pluggy==1.6.0
+pony==0.7.19
+pycryptodome==3.23.0
+pygments==2.19.1
+pypika-tortoise==0.6.1
+pytest==8.4.0
+pytest-cov==6.2.1
+pytest-mock==3.14.1
+pytz==2025.2
+requests==2.32.4
+sortedcontainers==2.4.0
+sqlalchemy==2.0.41
+tortoise-orm==0.25.1
+typing-extensions==4.14.0
+urllib3==2.4.0
+werkzeug==3.1.3

.riot/requirements/b1ef26d.txt

@@ -0,0 +1,42 @@
+#
+# This file is autogenerated by pip-compile with Python 3.13
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/b1ef26d.in
+#
+aiosqlite==0.21.0
+attrs==25.3.0
+blinker==1.9.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+click==8.2.1
+coverage[toml]==7.9.0
+flask==3.1.1
+greenlet==3.2.3
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+iso8601==2.1.0
+itsdangerous==2.2.0
+jinja2==3.1.6
+markupsafe==3.0.2
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+peewee==3.18.1
+pluggy==1.6.0
+pony==0.7.19
+pycryptodome==3.23.0
+pygments==2.19.1
+pypika-tortoise==0.6.1
+pytest==8.4.0
+pytest-cov==6.2.1
+pytest-mock==3.14.1
+pytz==2025.2
+requests==2.32.4
+sortedcontainers==2.4.0
+sqlalchemy==2.0.41
+tortoise-orm==0.25.1
+typing-extensions==4.14.0
+urllib3==2.4.0
+werkzeug==3.1.3

hatch.toml

@@ -306,41 +306,6 @@ test = [
 [[envs.appsec_iast_native.matrix]]
 python = ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
 
-## ASM iast_tdd_propagation
-
-[envs.iast_tdd_propagation]
-template = "iast_tdd_propagation"
-dependencies = [
-    "pytest",
-    "pytest-cov",
-    "requests",
-    "hypothesis",
-    "flask",
-    "pycryptodome",
-    "sqlalchemy~=2.0.23",
-    "pony",
-    "aiosqlite",
-    "tortoise-orm",
-    "peewee",
-    "aiosqlite",
-]
-
-[envs.iast_tdd_propagation.env-vars]
-_DD_IAST_PATCH_MODULES = "benchmarks.,tests.appsec."
-DD_IAST_REQUEST_SAMPLING = "100"
-DD_IAST_VULNERABILITIES_PER_REQUEST = "100000"
-DD_IAST_DEDUPLICATION_ENABLED = "false"
-
-[envs.iast_tdd_propagation.scripts]
-test = [
-    "uname -a",
-    "pip freeze",
-    "python -m pytest tests/appsec/iast_tdd_propagation",
-]
-
-[[envs.iast_tdd_propagation.matrix]]
-python = ["3.9", "3.10", "3.11", "3.12", "3.13"]
-
 ## IAST packages integrations
 
 [envs.appsec_integrations_packages]

lib-injection/sources/min_compatible_versions.csv

@@ -126,8 +126,10 @@ opensearch-py[requests],~=1.1.0
 opentelemetry-api,~=1.0.0
 opentelemetry-instrumentation-flask,0
 opentracing,0
+peewee,0
 pika,0
 pinecone-client,0
+pony,0
 protobuf,>3
 psutil,0
 psycopg,~=3.0.0
@@ -181,6 +183,7 @@ structlog,~=20.2.0
 tests/contrib/pyramid/pserve_app,0
 tiktoken,0
 tornado,~=4.5.0
+tortoise-orm,0
 typing-extensions,0
 urllib3,~=1.0
 uwsgi,0

min_compatible_versions.csv

@@ -126,8 +126,10 @@ opensearch-py[requests],~=1.1.0
 opentelemetry-api,~=1.0.0
 opentelemetry-instrumentation-flask,0
 opentracing,0
+peewee,0
 pika,0
 pinecone-client,0
+pony,0
 protobuf,>3
 psutil,0
 psycopg,~=3.0.0
@@ -181,6 +183,7 @@ structlog,~=20.2.0
 tests/contrib/pyramid/pserve_app,0
 tiktoken,0
 tornado,~=4.5.0
+tortoise-orm,0
 typing-extensions,0
 urllib3,~=1.0
 uwsgi,0

riotfile.py

@@ -153,6 +153,27 @@ def select_pys(min_version: str = MIN_PYTHON_VERSION, max_version: str = MAX_PYT
                 "DD_IAST_REQUEST_SAMPLING": "100",
             },
         ),
+        Venv(
+            name="iast_tdd_propagation",
+            pys=select_pys(min_version="3.9"),
+            command="pytest {cmdargs} tests/appsec/iast_tdd_propagation/",
+            pkgs={
+                "requests": latest,
+                "flask": latest,
+                "pycryptodome": latest,
+                "sqlalchemy": "~=2.0.23",
+                "pony": latest,
+                "aiosqlite": latest,
+                "tortoise-orm": latest,
+                "peewee": latest,
+            },
+            env={
+                "_DD_IAST_PATCH_MODULES": "benchmarks.,tests.appsec",
+                "DD_IAST_REQUEST_SAMPLING": "100",
+                "DD_IAST_VULNERABILITIES_PER_REQUEST": "100000",
+                "DD_IAST_DEDUPLICATE_ENABLED": "false",
+            },
+        ),
         Venv(
             name="profile-diff",
             command="python scripts/diff.py {cmdargs}",

tests/appsec/suitespec.yml

@@ -89,7 +89,7 @@ suites:
       - '@remoteconfig'
       - tests/appsec/iast_tdd_propagation/*
     retry: 2
-    runner: hatch
+    runner: riot
     snapshot: true
   appsec_integrations_pygoat:
     parallelism: 3