chore(iast): add more leak testing to CI

[juanjux]

Description

Reuse (with some refactoring) the existing leak testing script to add it's funcionality as a new CI step. Also adds some command line arguments to the script to configure it's behaviour and ensures no dependency on the running shell environment.

Signed-off-by: Juanjo Alvarez [email protected]

Checklist

• PR author has checked that all the criteria below are met
• The PR description includes an overview of the change
• The PR description articulates the motivation for the change
• The change includes tests OR the PR description describes a testing strategy
• The PR description notes risks associated with the change, if any
• Newly-added code is easy to change
• The change follows the library release note guidelines
• The change includes or references documentation updates if necessary
• Backport labels are set (if applicable)

Reviewer Checklist

• Reviewer has checked that all the criteria below are met
• Title is accurate
• All changes are related to the pull request's stated goal
• Avoids breaking API changes
• Testing strategy adequately addresses listed risks
• Newly-added code is easy to change
• Release note makes sense to a user of the library
• If necessary, author has acknowledged and discussed the performance implications of this PR as reported in the benchmarks PR comment
• Backport labels are set in a manner that is consistent with the release branch maintenance policy

[github-actions]

CODEOWNERS have been resolved as:

tests/appsec/iast_aggregated_memcheck/__init__.py                       @DataDog/asm-python
tests/appsec/iast_aggregated_memcheck/test_aggregated_memleaks.py       @DataDog/asm-python
.gitlab/tests/appsec.yml                                                @DataDog/asm-python
hatch.toml                                                              @DataDog/python-guild
scripts/iast/mod_leak_functions.py                                      @DataDog/asm-python
scripts/iast/test_leak_functions.py                                     @DataDog/asm-python

[datadog-dd-trace-py-rkomorn]

Datadog Report

Branch report: juanjux/better-leak-script-and-testing
Commit report: a307f58
Test service: dd-trace-py

✅ 0 Failed, 3514 Passed, 3195 Skipped, 36m 1.49s Total duration (1h 2m 6.59s time saved)

[pr-commenter]

Benchmarks

Benchmark execution time: 2024-09-13 10:43:52

Comparing candidate commit a307f58 in PR branch juanjux/better-leak-script-and-testing with baseline commit ff2206a in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 354 metrics, 46 unstable metrics.

[juanjux]

Moved back to draft until I can fix the timeouts in the new test.