feat(report): wrap POST /report/import endpoint

[Valyrian-Code]

Adds Report.import_report() as a wrapper for POST /report/import, completing the report workflow alongside generate_report() and download_report().

The method imports external SPDX RDF reports via multipart upload and returns the scheduled reportImport job ID (int).

API Details

Validated against Fossology 4.4.0 / API 1.6.2.

• Endpoint: POST /report/import
• Query params: upload, reportFormat (spdxrdf currently required)
• Multipart field: report
• Optional params: addConcludedAsDecisions, groupName header

Success response:

{
  "code": 201,
  "message": <job_id_int>,
  "type": "INFO"
}

Tests

test_report.py now covers:

• Successful round-trip flow:
  generate_report() → download_report() → import_report()
• Unauthorized requests
• 500 server errors
• Malformed API responses

All 17 tests pass against the live Fossology container.

Refs #52.

cc @deveaud-m

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds support for importing external SPDX reports into a Fossology upload and validates the new API behavior with tests.

Changes:

• Introduce Fossology.import_report() that uploads a report file and schedules a reportImport job.
• Add integration/unit tests covering success, authorization failure, server error, and unparseable API responses.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

File	Description
fossology/report.py	Adds import_report() API wrapper with response handling and errors.
tests/test_report.py	Adds tests for report import scenarios (success + failure modes).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Valyrian-Code]

All five review points addressed in 989ecab:

1. Format alignment — added a comment in test_import_report clarifying that ReportFormat.SPDX2 produces SPDX 2.x RDF, matching the spdxrdf format accepted by import_report().

2. Mocked 403 handling — test_import_report_nogroup now uses @responses.activate with a mocked 403, removing environment-dependent authorization behavior.

3. Docstring type fix — updated group to str | None to match the method signature.

4. Consistent error identifiers — all import_report error paths now use the same {upload.uploadname} (id={upload.id}) format. Tests updated accordingly.

5. Validation — all 17 tests in test_report.py pass locally against the live Fossology 4.4.0 container.

[Valyrian-Code]

Trimmed the implementation after a second review pass.

The previous try/except (ValueError, KeyError, TypeError) block and its associated test only handled a contrived response shape (201 without a message field) that the server does not actually produce. Unlike generate_report(), there is no regex parsing here that requires defensive handling.

The implementation is now simply:

return int(response.json()["message"])

This removes unnecessary complexity and cuts 25 lines from the diff.

All 16 tests in test_report.py pass locally against the live Fossology 4.4.0 container.