feat: add --oss-host CLI option for custom OSS Index URL

[brianf]

Summary

This PR adds the --oss-host command-line option to jake ddt, enabling users to specify a custom OSS Index host URL for testing, enterprise deployments, or compliance requirements.

⚠️ Important: Dependency Note

This PR depends on ossindex-lib gaining host parameter support.

• Blocked by: feat: add support for configurable OSS Index host URL ossindex-python#23
• Action required: Once the ossindex-lib PR is merged and released, this PR will need to be updated to:
  1. Update pyproject.toml to require the new minimum version of ossindex-lib
  2. Update the commit message/PR description with the actual version requirement

Do not merge this PR until the ossindex-lib changes are released.

Changes

Code Changes

• jake/command/oss.py: Added --oss-host CLI argument
  • Pass host parameter to OssIndex() constructor
  • CLI argument takes precedence over config file
• jake/command/oss.py: Updated OssIndex instantiation to accept custom host

Test Changes

• tests/test_jake.py: Added test_jake_ddt_help_includes_oss_host
  • Verifies --oss-host appears in help text

Documentation Changes

• README.md: Updated usage documentation to include --oss-host
• docs/usage.rst: Updated usage examples
• docs/configuration.rst: Added "Custom OSS Index Host" section

Configuration Methods

Users can configure a custom OSS Index host in three ways:

1. Via command-line argument (highest priority):

jake ddt --oss-host https://custom.ossindex.example.com

2. Via configuration file ($HOME/.oss-index.config):

username: my-username
password: my-password
host: https://custom.ossindex.example.com

3. Default: https://ossindex.sonatype.org

Backward Compatibility

All changes are backward compatible. Existing usage continues to work without modification.

Testing

• ✅ Syntax validation passed
• ✅ Test added for CLI argument presence
• ⚠️ Full test suite not run locally (requires environment setup)

Use Cases

• Testing against staging/development OSS Index environments
• Enterprise deployments with custom OSS Index mirrors
• Compliance with network policies requiring specific endpoints
• Development and debugging workflows

Related

• Depends on: feat: add support for configurable OSS Index host URL ossindex-python#23
• Follows pattern from: auditjs (similar Sonatype scanning tool)

[paul-botsco-2-0]

Thanks for the contribution. Unfortunately some of your commits don't meet our standards. All commits must be signed and have author information set.

The commits to review are:

• 052f1ad899f3a1fe4a687c4a28f613da36a18e0e - unsigned commit 🔑
• 9363e65d56b7f9df5cf254bbcaf5ac46d7fda7d4 - unsigned commit 🔑

See Signed Commits.

[sonarqubecloud]

Quality Gate passed

Issues
3 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud