refactor(greynoise-vuln): migrate connector to manager-supported mode (#5265)

[jabesq]

Proposed changes

• Pydantic settings — replaced legacy get_config_variable calls with typed ConnectorSettings / GreyNoiseVulnConfig models built on connectors_sdk base classes, enabling manager-supported mode and validating all config at startup.
• Connector class refactor — GreyNoiseVulnConnector now receives settings and helper via constructor injection, decoupling config loading from business logic and making the class independently testable.
• Package structure — added src/connector/__init__.py and src/main.py entry point to satisfy the manager-supported module layout.
• VC319 compliance — when the entity type is not in scope, the original STIX bundle is returned unchanged instead of being silently dropped.
• Code quality clean-up — simplified TLP check, fixed stop_time handling, tightened scope lookup, corrected return type annotation on _generate_stix_bundle.
• Dockerfile layer caching — split COPY into separate layers so source changes don't invalidate the dependency install layer.
• Unit tests — added test_connector.py, test_settings.py, test_main.py and conftest.py, reaching 92% coverage.
• Manifest & schema — set manager_supported: true, regenerated connector_config_schema.json and global manifest.json.
• Config files — updated .env.sample, config.yml.sample, and docker-compose.yml to reflect new Pydantic settings key names.

Related issues

• Closes refactor(greynoise-vulnerability): migrate connector to be connector manager supported #5265

Checklist

• I consider the submitted work as finished
• I have signed my commits using GPG key.
• I tested the code for its functionality using different use cases
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality

Further comments

This PR follows the standard manager-supported migration pattern: a settings.py Pydantic model tree, main.py entry point with constructor injection, and manager_supported: true in the manifest. No functional changes to the enrichment logic itself — GreyNoise CVE API calls, STIX bundle generation, and label/note/software creation are preserved as-is.

[Filigran-Automation]

🤖 [AI-generated]

Hey @jabesq! 👋 I'm Sam, your convention guardian. I reviewed PR #6665 and made one small adjustment to keep it aligned with our conventions:

🏷️ Labels

Action	Label	Reason
✅ Added	filigran team	Per .github/LABELS.md, every pull request must carry exactly one ownership label (filigran team or community). As a Filigran team member's PR, this is the correct ownership label — it was missing.

✅ Your title refactor(greynoise-vuln): migrate connector to manager-supported mode (#5265) already follows the Conventional Commits format perfectly (valid type, lowercase scope, lowercase description, no trailing period, required (#issue) reference).

✅ Your description is thorough and well-structured — proposed changes, linked issue (Closes #5265), and a complete checklist. Great work! 🙌

💡 For future PRs, see the contribution conventions and the label taxonomy.

Thanks for contributing! 🚀

[codecov]

Codecov Report

❌ Patch coverage is 95.30201% with 7 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
internal-enrichment/greynoise-vuln/src/main.py	0.00%	7 Missing ⚠️

❗ There is a different number of reports uploaded between BASE (c6db90a) and HEAD (9f94c68). Click for more details.

HEAD has 111 uploads less than BASE

Flag	BASE (c6db90a)	HEAD (9f94c68)
connectors	115	4

Additional details and impacted files

@@             Coverage Diff             @@
##           master    #6665       +/-   ##
===========================================
- Coverage   31.77%    0.35%   -31.43%     
===========================================
  Files        1977     1888       -89     
  Lines      121783   119187     -2596     
===========================================
- Hits        38700      426    -38274     
- Misses      83083   118761    +35678     

Files with missing lines	Coverage Δ
...nrichment/greynoise-vuln/src/connector/__init__.py	100.00% <100.00%> (ø)
...richment/greynoise-vuln/src/connector/connector.py	100.00% <100.00%> (ø)
...nrichment/greynoise-vuln/src/connector/settings.py	100.00% <100.00%> (ø)
internal-enrichment/greynoise-vuln/src/main.py	0.00% <0.00%> (ø)

... and 1094 files with indirect coverage changes

📢 Thoughts on this report? Let us know!

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

This PR migrates the internal-enrichment/greynoise-vuln connector to the connectors-sdk “manager-supported” structure by introducing typed Pydantic settings, a new package/module layout, and an updated runtime entrypoint—while also adding unit tests and updating deployment/config artifacts to match the new configuration model.

Changes:

• Introduces ConnectorSettings / GreyNoiseVulnConfig based on connectors_sdk and updates the runtime entrypoint to instantiate the helper + connector via constructor injection.
• Refactors connector implementation into src/connector/connector.py and adds test coverage for settings, entrypoint, and core enrichment behaviors.
• Updates Docker/build and configuration artifacts (manifest, schema, samples) for manager-supported mode and new env var namespaces.

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
internal-enrichment/greynoise-vuln/tests/tests_connector/test_settings.py	Adds settings validation tests for the new Pydantic configuration models.
internal-enrichment/greynoise-vuln/tests/tests_connector/test_connector.py	Adds unit tests covering enrichment logic helpers and message processing behavior.
internal-enrichment/greynoise-vuln/tests/test-requirements.txt	Introduces connector-specific pytest dependency set for the new test suite.
internal-enrichment/greynoise-vuln/tests/test_main.py	Adds tests for entrypoint wiring (settings → helper → connector construction).
internal-enrichment/greynoise-vuln/tests/conftest.py	Ensures src/ is importable during tests.
internal-enrichment/greynoise-vuln/src/requirements.txt	Adds connectors-sdk + pydantic dependencies required for manager-supported settings.
internal-enrichment/greynoise-vuln/src/main.py	Replaces legacy config loading with manager-supported settings + dependency injection.
internal-enrichment/greynoise-vuln/src/connector/settings.py	Defines typed connector settings/config models (connectors-sdk + Pydantic).
internal-enrichment/greynoise-vuln/src/connector/connector.py	Moves/refactors connector logic into manager-supported module layout.
internal-enrichment/greynoise-vuln/src/connector/init.py	Exposes connector public API (GreyNoiseVulnConnector, ConnectorSettings).
internal-enrichment/greynoise-vuln/src/config.yml.sample	Removes old sample config from src/ (legacy layout).
internal-enrichment/greynoise-vuln/entrypoint.sh	Removes shell entrypoint (Docker now directly runs Python entrypoint).
internal-enrichment/greynoise-vuln/Dockerfile	Improves layer caching and updates entrypoint to run main.py directly.
internal-enrichment/greynoise-vuln/docker-compose.yml	Updates environment variable names to match new Pydantic namespaces.
internal-enrichment/greynoise-vuln/config.yml.sample	Adds new root-level sample config matching manager-supported namespaces.
internal-enrichment/greynoise-vuln/.env.sample	Adds new env sample using manager-supported variable names.
internal-enrichment/greynoise-vuln/metadata/connector_manifest.json	Sets manager_supported: true and updates verification metadata.
internal-enrichment/greynoise-vuln/metadata/connector_config_schema.json	Adds generated JSON schema for manager-supported configuration.
internal-enrichment/greynoise-vuln/metadata/CONNECTOR_CONFIG_DOC.md	Adds generated human-readable configuration documentation.