finalize uv migration restore ruff config and migrate integrations

Author: ayushgupta704

integrations/bbot/Dockerfile

@@ -1,4 +1,5 @@
 FROM python:3.12-slim
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 # Environment variables
 ENV PROJECT_PATH=/opt/deploy/bbot
@@ -17,9 +18,8 @@ WORKDIR ${PROJECT_PATH}
 # Copy application files and requirements
 COPY requirements.txt app.py ./
 
-# Upgrade pip and install Python packages
-RUN pip install --no-cache-dir --upgrade pip && \
-    pip install --no-cache-dir -r requirements.txt
+# Install Python packages
+RUN uv pip install --system -r requirements.txt
 
 # Pre-install BBOT dependencies & Make script executable
 RUN bbot --install-all-deps -y --force && \

integrations/malware_tools_analyzers/Dockerfile

@@ -1,4 +1,5 @@
 FROM python:3.11-slim
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 ARG TARGETARCH
 
@@ -42,8 +43,7 @@ WORKDIR ${PYTHONPATH}/stringsifter
 COPY ./requirements/stringsifter-requirements.txt ./stringsifter/wrapper.py ./
 # Installed at system level because virtualenv does not work as expected
 # ModuleNotFoundError: No module named 'pybind11' while trying to build
-RUN pip3 install --no-cache-dir --upgrade pip \
-    && pip3 install --no-cache-dir -r stringsifter-requirements.txt \
+RUN uv pip install --system -r stringsifter-requirements.txt \
     && chmod +x wrapper.py
 
 # Build Qiling
@@ -53,44 +53,41 @@ COPY ./requirements/qiling-requirements.txt ./qiling/analyze.py ./
 RUN if [[ $TARGETARCH == "amd64" ]]; then \
     python3 -m venv venv \
     && . venv/bin/activate \
-    && pip3 install --no-cache-dir --upgrade pip \
-    && pip3 install --no-cache-dir -r qiling-requirements.txt; fi
+    && uv pip install --system -r qiling-requirements.txt; fi
 
 # Then Build every possible other Python application inside its virtual environment
 # Build guelfo's PEFrame
 WORKDIR ${PYTHONPATH}/peframe
 COPY ./requirements/peframe-requirements.txt ./
 RUN python3 -m venv venv \
     && . venv/bin/activate \
-    && pip3 install --no-cache-dir --upgrade pip \
-    && pip3 install --no-cache-dir -r peframe-requirements.txt --no-cache-dir
+    && uv pip install --system -r peframe-requirements.txt --no-cache-dir
 
 # Install guelfo's artifacts
 # there is no version management on this project so we just pull the most recent changes
 WORKDIR ${PYTHONPATH}/artifacts
 RUN python3 -m venv venv \
     && . venv/bin/activate \
-    && pip3 install --no-cache-dir --upgrade pip \
+
     && git clone https://github.com/guelfoweb/artifacts.git \
     && cd artifacts \
-    && pip install --no-cache-dir -r requirements.txt \
+    && uv pip install -r requirements.txt \
     && chmod +x artifacts.py
 
 # Build APKiD
 WORKDIR ${PYTHONPATH}/apkid
 COPY ./requirements/apkid-requirements.txt ./
 RUN python3 -m venv venv \
     && . venv/bin/activate \
-    && pip3 install --no-cache-dir --upgrade pip \
-    && pip3 install --no-cache-dir -r apkid-requirements.txt
+    && uv pip install --system -r apkid-requirements.txt
 
 # Install DroidLysis
 WORKDIR "${PYTHONPATH}/droidlysis"
 COPY ./requirements/droidlysis-requirements.txt ./
 RUN python3 -m venv venv \
  && . venv/bin/activate \
- && pip3 install --no-cache-dir --upgrade pip \
- && pip3 install --no-cache-dir -r droidlysis-requirements.txt --no-cache-dir \
+
+ && uv pip install -r droidlysis-requirements.txt --no-cache-dir \
  && mkdir -p ~/softs \
  && cd ~/softs \
  && wget -q https://bitbucket.org/iBotPeaches/apktool/downloads/apktool_2.9.3.jar \
@@ -102,7 +99,7 @@ RUN python3 -m venv venv \
  && mkdir -p "${PYTHONPATH}/droidlysis/out" "${PYTHONPATH}/droidlysis/conf" /root/.cache/droidlysis \
  && chown -R ${USER}:${USER} /root/.cache/droidlysis \
  && chmod 711 /root/ \
- && DROIDLYSIS_PATH="$(pip3 show droidlysis | grep Location | cut -d ' ' -f 2)" \
+ && DROIDLYSIS_PATH="$(uv pip show droidlysis | grep Location | cut -d ' ' -f 2)" \
  && cp "${DROIDLYSIS_PATH}/conf/"*.conf "${PYTHONPATH}/droidlysis/conf/" \
  && rm -f "${PYTHONPATH}/droidlysis/conf/general.conf"
 COPY ./droidlysis/general.conf ${PYTHONPATH}/droidlysis/conf/general.conf
@@ -112,8 +109,7 @@ WORKDIR ${PYTHONPATH}/mobsf
 COPY ./requirements/mobsf-requirements.txt ./
 RUN python3 -m venv venv \
     && . venv/bin/activate \
-    && pip3 install --no-cache-dir --upgrade pip \
-    && pip3 install --no-cache-dir -r mobsf-requirements.txt \
+    && uv pip install --system -r mobsf-requirements.txt \
     && mkdir -p /root/.semgrep/ \
     && chown -R ${USER}:${USER} /root/.semgrep \
     && chmod 711 /root
@@ -130,8 +126,7 @@ WORKDIR ${PYTHONPATH}/flask
 COPY app.py ./requirements/flask-requirements.txt entrypoint.sh ./
 RUN python3 -m venv venv \
     && . venv/bin/activate \
-    && pip3 install --no-cache-dir --upgrade pip \
-    && pip3 install --no-cache-dir -r flask-requirements.txt \
+    && uv pip install --system -r flask-requirements.txt \
     && chmod +x entrypoint.sh
 
 # Cleanup

integrations/nuclei_analyzer/Dockerfile

@@ -1,4 +1,5 @@
 FROM projectdiscovery/nuclei:v3.7.0
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 ENV LOG_PATH=/var/log/intel_owl/nuclei_analyzer
 ENV USER=nuclei-user
@@ -17,8 +18,7 @@ WORKDIR /app
 COPY app.py requirements.txt entrypoint.sh ./
 RUN python3 -m venv venv \
     && . venv/bin/activate \
-    && pip3 install --no-cache-dir --upgrade pip \
-    && pip3 install --no-cache-dir -r requirements.txt \
+    && uv pip install -r requirements.txt \
     && rm -rf ~/.cache/pip/*
 
 # Create log directory with proper permissions

integrations/pcap_analyzers/Dockerfile

@@ -1,5 +1,6 @@
 # https://github.com/jasonish/docker-suricata/tree/master/7.0
 FROM jasonish/suricata:7.0
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 ENV PROJECT_PATH=/opt/deploy
 ENV LOG_PATH=/var/log/intel_owl/pcap_analyzers
@@ -18,7 +19,7 @@ COPY crontab /etc/cron.d/suricata
 COPY config/suricata/etc/* /etc/suricata/
 COPY config/suricata/rules/* /var/lib/suricata/rules/
 
-RUN pip3 install -r requirements.txt --no-cache-dir \
+RUN uv pip install --system -r requirements.txt \
     && chown -R ${USER}:${USER} . /etc/suricata /var/lib/suricata \
     && mkdir -p ${LOG_PATH}/suricata/ \
     && touch /var/log/cron.log ${LOG_PATH}/suricata/suricata.log \

integrations/phishing_analyzers/Dockerfile

@@ -1,4 +1,5 @@
 FROM python:3.12.3
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 ENV PROJECT_PATH=/opt/deploy
 ENV LOG_PATH=/var/log/intel_owl/phishing_analyzers
@@ -13,7 +14,6 @@ RUN useradd -ms /bin/bash ${USER}
 RUN DEBIAN_FRONTEND=noninteractive apt-get update -qq \
     && apt-get install -y --no-install-recommends \
     libvulkan1 libu2f-udev fonts-liberation gosu \
-    && pip3 install --no-cache-dir --upgrade pip \
     # Cleanup
     && apt-get remove --purge -y gcc \
     && apt-get clean \
@@ -26,7 +26,7 @@ WORKDIR ${PROJECT_PATH}/phishing_analyzers
 COPY --chown=${USER}:${USER} app.py requirements.txt entrypoint.sh ./
 COPY --chown=${USER}:${USER} analyzers/* ./analyzers/
 RUN chmod u+x entrypoint.sh \
-    && pip3 install -r requirements.txt --no-cache-dir \
+    && uv pip install --system -r requirements.txt \
     && playwright install chromium --with-deps \
     && chmod -R o+rX /ms-playwright
 

integrations/phunter/Dockerfile

@@ -1,4 +1,5 @@
 FROM python:3.12-slim
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 # Install dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends git
@@ -12,10 +13,8 @@ WORKDIR /app
 # Copy requirements file and app.py to the working directory
 COPY requirements.txt app.py ./
 
-# Upgrade pip and install Python packages
-RUN pip install --no-cache-dir --upgrade pip && \
-    pip install --no-cache-dir -r requirements.txt && \
-    pip install --no-cache-dir -r /app/Phunter/requirements.txt
+# Install Python packages
+RUN uv pip install --system -r requirements.txt -r /app/Phunter/requirements.txt
 
 # Expose port
 EXPOSE 5612

integrations/thug/Dockerfile

@@ -1,6 +1,7 @@
 # This base image is the one currently (02/2025) updated by the maintainer
 # but it does not support ARM
 FROM thughoneyclient/thug:v6.20
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 USER root
 ENV PROJECT_PATH=/opt/deploy
@@ -16,7 +17,7 @@ RUN apt-get update -qq \
 WORKDIR ${PROJECT_PATH}/flask
 COPY app.py requirements.txt entrypoint.sh ./
 
-RUN pip3 install -r requirements.txt --no-cache-dir \
+RUN uv pip install --system -r requirements.txt \
     && mkdir -p ${PROJECT_PATH}/thug \
     && chown -R ${USER}:${USER} . ${PROJECT_PATH}/thug \
     && chmod +x entrypoint.sh

integrations/tor_analyzers/Dockerfile

@@ -1,4 +1,5 @@
 FROM python:3.14-slim
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 ENV PROJECT_PATH=/opt/deploy
 ENV LOG_PATH=/var/log/intel_owl/tor_analyzers
@@ -28,7 +29,7 @@ RUN apt-get remove --purge -y git gcc \
 WORKDIR ${PROJECT_PATH}/tor-flask
 COPY app.py requirements.txt entrypoint.sh ./
 
-RUN pip3 install -r requirements.txt --no-cache-dir \
+RUN uv pip install --system -r requirements.txt \
     && chown -R ${USER}:${USER} . \
     && chmod +x entrypoint.sh
 

pyproject.toml

@@ -153,6 +153,16 @@ managed = true
 line-length = 110
 target-version = "py311"
 
+exclude = [
+    "venv",
+    "frontend",
+    "node_modules",
+    "migrations",
+    "docs",
+    "virtualenv",
+    "configuration/ldap_config.py",
+]
+
 [tool.ruff.lint]
 select = [
     "E",   # pycodestyle errors
@@ -163,22 +173,45 @@ select = [
     "C4",  # flake8-comprehensions
     "DJ",  # flake8-django
 ]
+
 ignore = [
     "E231",  # missing whitespace after ','
     "E501",  # line too long - handled by formatter, remaining are strings/comments
     "W605",  # invalid escape sequence
-    "UP",    # pyupgrade
-    "C4",    # flake8-comprehensions
     "UP006", # Use `list` instead of `List` for type annotation
     "UP035", # deprecated imports from typing module
-    "DJ012",
-    "DJ001",
-    "DJ008",
+    "UP007", # Use `X | Y` for type annotations instead of Optional/Union (defer to follow-up)
+    "UP010", # Unnecessary `from __future__ import` (defer to follow-up)
+    "UP015", # Unnecessary mode argument in open() (defer to follow-up)
+    "UP017", # Use `datetime.UTC` alias (defer to follow-up)
+    "UP032", # Use f-string instead of format() (defer to follow-up)
+    "UP034", # Extraneous parentheses (defer to follow-up)
+    "UP037", # Remove quotes from type annotation (defer to follow-up)
+    "UP041", # Replace aliased errors with TimeoutError (defer to follow-up)
+    "UP045", # Use `X | None` instead of Optional[X] (defer to follow-up)
+    "C403",  # Unnecessary list comprehension - set (defer to follow-up)
+    "C408",  # Unnecessary dict() call (defer to follow-up)
+    "C417",  # Unnecessary map() usage (defer to follow-up)
+    "C420",  # Unnecessary dict comprehension (defer to follow-up)
 ]
 
+[tool.ruff.lint.per-file-ignores]
+"__init__.py" = ["F401"]  # unused imports in __init__ files
+"api_app/decorators.py" = ["N801"]  # classproperty names are intentionally lowercase
+"api_app/models.py" = ["DJ012", "DJ001", "DJ008"]
+"api_app/analyzables_manager/models.py" = ["DJ001"]
+"api_app/analyzers_manager/models.py" = ["DJ008"]
+"api_app/visualizers_manager/models.py" = ["DJ008", "DJ001"]
+"authentication/models.py" = ["DJ008"]
+"api_app/data_model_manager/models.py" = ["DJ008", "DJ012"]
+"api_app/user_events_manager/**" = ["DJ012", "DJ001", "DJ008"]
+
 [tool.ruff.lint.isort]
 known-first-party = ["certego_saas"]
 
 [tool.ruff.format]
 quote-style = "double"
 indent-style = "space"
+
+[tool.codereviewdoctor]
+disable = ["missing-reverse-migration"]