fix: strip PEP 508 environment markers in splitToNameVersion (TC-4041)

Prevents environment markers (e.g. "; python_version >= '3.6'") from
leaking into version comparison, which caused false version mismatches.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: a-oren

src/main/java/io/github/guacsec/trustifyda/providers/PythonPipProvider.java

@@ -210,6 +210,11 @@ private static String extractDepFull(String requirementLine) {
   }
 
   private String[] splitToNameVersion(String nameVersion) {
+    // Strip PEP 508 environment markers (everything after ";")
+    int markerIndex = nameVersion.indexOf(';');
+    if (markerIndex != -1) {
+      nameVersion = nameVersion.substring(0, markerIndex).trim();
+    }
     String[] result;
     if (nameVersion.matches(
         "[a-zA-Z0-9-_()]+={2}[0-9]{1,4}[.][0-9]{1,4}(([.][0-9]{1,4})|([.][a-zA-Z0-9]+)|([a-zA-Z0-9]+)|([.][a-zA-Z0-9]+[.][a-z-A-Z0-9]+))?")) {

src/test/java/io/github/guacsec/trustifyda/providers/Python_Provider_Test.java

@@ -267,6 +267,39 @@ void Test_The_ProvideComponent_Path_Should_Throw_Exception() {
         .isThrownBy(() -> new PythonPipProvider(Path.of(".")).provideComponent());
   }
 
+  @Test
+  void getIgnoredDependencies_strips_environment_markers() throws IOException {
+    Path tempFile = Files.createTempFile("requirements", ".txt");
+    try {
+      Files.writeString(
+          tempFile,
+          String.join(
+              System.lineSeparator(),
+              "requests==2.25.1 ; python_version >= \"3.6\" #trustify-da-ignore",
+              "idna==2.10 ; python_version >= \"3.6\" # trustify-da-ignore",
+              "six==1.16.0 ; python_version < \"3.0\" or python_version >= \"3.3\""
+                  + " #trustify-da-ignore",
+              "chardet==4.0.0 ; python_version >= \"3.6\" and sys_platform == \"linux\""
+                  + " #trustify-da-ignore",
+              "flask==2.0.3"));
+      var provider = new PythonPipProvider(tempFile);
+      var ignored = provider.getIgnoredDependencies(Files.readString(tempFile));
+      var ignoredMap =
+          ignored.stream()
+              .collect(
+                  java.util.stream.Collectors.toMap(
+                      com.github.packageurl.PackageURL::getName,
+                      com.github.packageurl.PackageURL::getVersion));
+      assertThat(ignoredMap).containsEntry("requests", "2.25.1");
+      assertThat(ignoredMap).containsEntry("idna", "2.10");
+      assertThat(ignoredMap).containsEntry("six", "1.16.0");
+      assertThat(ignoredMap).containsEntry("chardet", "4.0.0");
+      assertThat(ignoredMap).doesNotContainKey("flask");
+    } finally {
+      Files.deleteIfExists(tempFile);
+    }
+  }
+
   private String dropIgnored(String s) {
     return s.replaceAll("\\s+", "").replaceAll("\"timestamp\":\"[a-zA-Z0-9\\-\\:]+\"", "");
   }