Make a GET request to the Airbyte API. This method handles authentication and pagination. Args: uri (str): The URI to make

Create a TargetNodeMatcher with dynamically generated attributes. This function creates a specialized TargetNodeMatcher dataclass with attri

Helper function to test a given relationship between node 1 and node 2. Returns the result of a neo4j match query as a set of tuples when giv

Run cartography sync to pull infrastructure data into Neo4j. This command pulls configuration data from multiple sources, lo

Helper function for checking nodes in cartography integration tests. Returns the result of a neo4j match query on the given node label and th

Load node data to the graph with automatic indexing. This is the main entry point for intel modules to write node data to the graph. It

Execute the job by running all statements sequentially. This method executes each statement in the job in order. If any statement

Create a cleanup job from a CartographyNodeSchema. This class method generates a cleanup job that removes stale nodes and re

Convert the job to a dictionary representation. This method serializes the job to a dictionary format suitable for JSON seri

Create a SourceNodeMatcher with dynamically generated attributes. This function creates a specialized SourceNodeMatcher dataclass with attri

Create relationships between existing nodes in the graph. This is the main entry point for intel modules to write relationships between

Create a cleanup job for matchlink relationships. This class method generates a cleanup job specifically for cleaning up stale

Loads a JSON object (dict) from a file. :type file_path: string. :param file_path: Filepath for the file. :return: Di

Classify a GCP HttpError into a canonical category string. Reuses existing helpers (is_api_disabled_error, get_error_reason, etc.) so lo

Execute a GCP API request with retry on transient errors. This function provides two layers of retry: 1. Network-level errors (connectio

Resolve effective access from grants. For each grant, determine which users, groups, and devices can access which devices and services based

Execute an analysis job to enrich existing graph data. This function is designed for use with the cartography.intel.analysis sync stage.

Get a scoped StatsD client with the specified prefix. This function returns a ScopedStatsClient instance that automatically prefixes all

Execute a write query inside a managed transaction with retry logic. This function now includes retry logic for: - Network errors (Conne

Helper function for tests. On the given text string, remove all leading whitespace on each line and remove blank lines, :param text: Text

Execute a scoped analysis job on a specific sub-resource. This function runs analysis queries that are scoped to a particular sub-resource

Create or update ModuleSyncMetadata nodes to track sync operations. This function creates ModuleSyncMetadata nodes that record when specific

Return a concise, single-line summary for a GCP HttpError.

Parse a GitLab CI YAML document. Returns an empty `ParsedCIConfig` on YAML parse error rather than raising — caller can treat absence of jobs

Increment a StatsD counter metric. This method increments a counter metric using the underlying StatsD client. The metric na

Main entrypoint for the command line interface. This method parses command line arguments, configures logging and various se

Generate a Neo4j query from a CartographyNodeSchema to ingest nodes and relationships. This function creates an optimized Neo4j query that c

Get all grants from the ACL/policy file. Tailscale grants define access rules with sources, destinations, and capabilities (

Helper: build an HttpError with the given HTTP status and optional JSON body.

Helper function to remove leading whitespace and blank lines for all strings in the input list. :param queries: The list of strings to clean

Create a normalized package ID for cross-tool matching. The ID format is: {type}|{namespace/}{normalized_name}|{version} The namespace

Check if this framework matches the given filter criteria. Args: short_name: Filter by short name (case-insensitive).

Fetch all pages from a paginated Vercel API endpoint. :param api_session: Authenticated requests session :param url: Full URL of the API

Read a field that the Azure SDK may emit either at the top level of the dict or nested under "properties".

Convert a dictionary date value to Unix epoch timestamp. .. deprecated:: This method is deprecated. Neo4j can handle datetime ingest

Fetch all pages from a GitHub REST API endpoint using Link header pagination. :param token: The GitHub API token as string. :param base_

Return ``(image_uri, image_digest)`` extracted from a raw image reference. Handles the common forms produced by the different container/function

Transforms tags from a list of Azure resources into a standardized list of tag dictionaries. Args: resource_list: List of Azure reso

Load data to the graph using batched operations. This function processes large datasets by splitting them into manageable batches and ex

Extract the module name from a Cartography schema object. This function extracts and formats the module name from a CartographyNodeSchema

Check if an HttpError indicates that a GCP API is not enabled on the project. This utility helps modules gracefully skip syncing when an API

Normalize a Docker command for comparison. Handles Dockerfile instruction prefixes, shell prefixes, BuildKit prefixes, whitespace normal

Parse Dockerfile content and return a structured representation. :param content: Raw Dockerfile content as string :return: ParsedDockerf

Build a transformed-dependency dict for the lockfile/reconcile tests.

Execute the supplied callable with retry logic for transient network errors, EntityNotFound ClientErrors, and BufferErrors.

Call an async function with retries on transient transport exceptions. Uses exponential backoff (1s, 2s, 4s, ...) between retries. Non-m

Fetch paginated results from a REST API endpoint. This function handles pagination by making multiple requests to the API until all pages of

Check if this rule has a framework matching the given criteria. Args: short_name: Filter by framework short name (case-i

Helper to create a ClientError with a specific code.

Fetch and return all data items of the given `resource_type` and `field_name` from Github's paginated GraphQL API as a list, along with infor

Return the current cartography release version.

Check if the exception is a retryable GCP API error. Per Google Cloud documentation (https://cloud.google.com/storage/docs/retry-strategy),

Loads GCPArtifactRegistryRepositoryImage and GCPArtifactRegistryImage nodes and their relationships.

Parse a GitHub Action 'uses' reference. Examples: - actions/checkout@v4 - actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29

Helper to create a GCPProject node for testing.

Transforms GitHub repository ruleset data from API format to Cartography format.

Generate a normalized unique identifier for an application. :param name: Application name :param vendor: Application vendor/publisher

Getting the Azure SQL client

Fetch all pages from a GitLab API endpoint. Handles pagination, rate limiting, and retries automatically. This is the primary utility fo

Make an HTTP request with retry logic and rate limit handling. Implements exponential backoff for retries and handles GitLab rate limit resp

Transform a Scaleway object (dataclass, dict, or list) into a dictionary.

Transform NVD CVE data, filtering to only CVEs present in the graph. Returns a dict keyed by CVE ID for easy merging.

Convert a GitHub GraphQL API URL to a REST API base URL. For github.com: https://api.github.com/graphql -> https://api.github.com For Gi