chore(ci): move the pygoat CI step from hatch to riot

.riot/requirements/115ddbf.txt

@@ -0,0 +1,24 @@
+#
+# This file is autogenerated by pip-compile with Python 3.12
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/115ddbf.in
+#
+attrs==25.3.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+pyyaml==6.0.1
+requests==2.32.3
+sortedcontainers==2.4.0
+urllib3==2.4.0

.riot/requirements/a19438c.txt

@@ -0,0 +1,27 @@
+#
+# This file is autogenerated by pip-compile with Python 3.10
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/a19438c.in
+#
+attrs==25.3.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+exceptiongroup==1.3.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+pyyaml==6.0.1
+requests==2.32.3
+sortedcontainers==2.4.0
+tomli==2.2.1
+typing-extensions==4.13.2
+urllib3==2.4.0

.riot/requirements/d74f3e1.txt

@@ -0,0 +1,24 @@
+#
+# This file is autogenerated by pip-compile with Python 3.11
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/d74f3e1.in
+#
+attrs==25.3.0
+certifi==2025.4.26
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+pyyaml==6.0.1
+requests==2.32.3
+sortedcontainers==2.4.0
+urllib3==2.4.0

hatch.toml

@@ -832,35 +832,3 @@ matrix.tested_pytest_plugin_version.env-vars = [
     { key = "_TESTED_PYTEST_LEGACY_PLUGIN", value = "false", if = ["v2"]}
 ]
 
-[envs.appsec_integrations_pygoat]
-template = "appsec_integrations_pygoat"
-dependencies = [
-    "pytest",
-    "pytest-cov",
-    "requests",
-    "hypothesis",
-    "pyyaml==6.0.1",
-]
-
-[envs.appsec_integrations_pygoat.env-vars]
-DD_CIVISIBILITY_ITR_ENABLED = "0"
-DD_IAST_REQUEST_SAMPLING = "100"
-DD_IAST_ENABLED = "true"
-_DD_IAST_DEBUG = "false"
-DD_IAST_VULNERABILITIES_PER_REQUEST = "100"
-DD_REMOTE_CONFIGURATION_ENABLED = "true"
-DD_IAST_DEDUPLICATION_ENABLED = "false"
-DD_TRACE_AGENT_URL = "http://0.0.0.0:9126"
-DD_FAST_BUILD = "1"
-PYTHONDONTWRITEBYTECODE = "1"
-PYTHONUNBUFFERED = "1"
-
-[envs.appsec_integrations_pygoat.scripts]
-test = [
-    "uname -a",
-    "pip freeze",
-    "bash tests/appsec/integrations/pygoat_tests/run_pygoat.sh {args:tests/appsec/integrations/pygoat_tests/}",
-]
-
-[[envs.appsec_integrations_pygoat.matrix]]
-python = ["3.10", "3.11", "3.12"]

lib-injection/sources/min_compatible_versions.csv

@@ -155,6 +155,7 @@ pytest-xdist,0
 python-consul,>=1.1
 python-memcached,0
 python-multipart,0
+pyyaml,==6.0.1
 ragas,==0.1.21
 redis,~=2.0
 redis-py-cluster,>=2.0

min_compatible_versions.csv

@@ -155,6 +155,7 @@ pytest-xdist,0
 python-consul,>=1.1
 python-memcached,0
 python-multipart,0
+pyyaml,==6.0.1
 ragas,==0.1.21
 redis,~=2.0
 redis-py-cluster,>=2.0

riotfile.py

@@ -1118,6 +1118,28 @@ def select_pys(min_version: str = MIN_PYTHON_VERSION, max_version: str = MAX_PYT
                 Venv(command="python tests/ddtrace_run.py pytest {cmdargs} tests/contrib/pymemcache/autopatch/"),
             ],
         ),
+        Venv(
+            name="appsec_integrations_pygoat",
+            pys=["3.10", "3.11", "3.12"],
+            pkgs={
+                "requests": latest,
+                "pyyaml": "==6.0.1",
+            },
+            env={
+                "DD_CIVISIBILITY_ITR_ENABLED": "false",
+                "DD_IAST_REQUEST_SAMPLING": "100",
+                "DD_IAST_ENABLED": "true",
+                "_DD_IAST_DEBUG": "false",
+                "DD_IAST_VULNERABILITIES_PER_REQUEST": "100",
+                "DD_REMOTE_CONFIGURATION_ENABLED": "true",
+                "DD_IAST_DEDUPLICATION_ENABLED": "false",
+                "DD_TRACE_AGENT_URL": "http://0.0.0.0:9126",
+                "DD_FAST_BUILD": "1",
+                "PYDONTWRITEBYTECODE": "1",
+                "PYTHONUNBUFFERED": "1",
+            },
+            command="bash tests/appsec/integrations/pygoat_tests/run_pygoat.sh tests/appsec/integrations/pygoat_tests/",
+        ),
         Venv(
             name="pynamodb",
             command="pytest {cmdargs} tests/contrib/pynamodb",

tests/appsec/suitespec.yml

@@ -103,7 +103,7 @@ suites:
       - tests/appsec/integrations/pygoat_tests/*
       - tests/snapshots/tests.appsec.*
     retry: 2
-    runner: hatch
+    runner: riot
     snapshot: true
   appsec_integrations_packages:
     env: