chore(ci): iast_defaults test from hatch to riot (#13374)

## Description

Move the `iast_default` tests from hatch to riot. 

## Checklist
- [X] PR author has checked that all the criteria below are met
- The PR description includes an overview of the change
- The PR description articulates the motivation for the change
- The change includes tests OR the PR description describes a testing
strategy
- The PR description notes risks associated with the change, if any
- Newly-added code is easy to change
- The change follows the [library release note
guidelines](https://ddtrace.readthedocs.io/en/stable/releasenotes.html)
- The change includes or references documentation updates if necessary
- Backport labels are set (if
[applicable](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting))

## Reviewer Checklist
- [x] Reviewer has checked that all the criteria below are met 
- Title is accurate
- All changes are related to the pull request's stated goal
- Avoids breaking
[API](https://ddtrace.readthedocs.io/en/stable/versioning.html#interfaces)
changes
- Testing strategy adequately addresses listed risks
- Newly-added code is easy to change
- Release note makes sense to a user of the library
- If necessary, author has acknowledged and discussed the performance
implications of this PR as reported in the benchmarks PR comment
- Backport labels are set in a manner that is consistent with the
[release branch maintenance
policy](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting)

---------

Signed-off-by: Juanjo Alvarez <[email protected]>

Author: juanjux

.riot/requirements/1403768.txt

@@ -0,0 +1,32 @@
+#
+# This file is autogenerated by pip-compile with Python 3.12
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/1403768.in
+#
+astunparse==1.6.3
+attrs==25.3.0
+certifi==2025.4.26
+cffi==1.17.1
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+cryptography==44.0.3
+grpcio==1.71.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pycparser==2.22
+pycryptodome==3.22.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+requests==2.32.3
+simplejson==3.20.1
+six==1.17.0
+sortedcontainers==2.4.0
+urllib3==2.4.0
+wheel==0.45.1

.riot/requirements/17ae74f.txt

@@ -0,0 +1,34 @@
+#
+# This file is autogenerated by pip-compile with Python 3.10
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/17ae74f.in
+#
+astunparse==1.6.3
+attrs==25.3.0
+certifi==2025.4.26
+cffi==1.17.1
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+cryptography==44.0.3
+exceptiongroup==1.2.2
+grpcio==1.71.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pycparser==2.22
+pycryptodome==3.22.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+requests==2.32.3
+simplejson==3.20.1
+six==1.17.0
+sortedcontainers==2.4.0
+tomli==2.2.1
+urllib3==2.4.0
+wheel==0.45.1

.riot/requirements/1a81d2a.txt

@@ -0,0 +1,32 @@
+#
+# This file is autogenerated by pip-compile with Python 3.13
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/1a81d2a.in
+#
+astunparse==1.6.3
+attrs==25.3.0
+certifi==2025.4.26
+cffi==1.17.1
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+cryptography==44.0.3
+grpcio==1.71.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pycparser==2.22
+pycryptodome==3.22.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+requests==2.32.3
+simplejson==3.20.1
+six==1.17.0
+sortedcontainers==2.4.0
+urllib3==2.4.0
+wheel==0.45.1

.riot/requirements/31639df.txt

@@ -0,0 +1,32 @@
+#
+# This file is autogenerated by pip-compile with Python 3.11
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/31639df.in
+#
+astunparse==1.6.3
+attrs==25.3.0
+certifi==2025.4.26
+cffi==1.17.1
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+cryptography==44.0.3
+grpcio==1.71.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pycparser==2.22
+pycryptodome==3.22.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+requests==2.32.3
+simplejson==3.20.1
+six==1.17.0
+sortedcontainers==2.4.0
+urllib3==2.4.0
+wheel==0.45.1

.riot/requirements/7b9a280.txt

@@ -0,0 +1,34 @@
+#
+# This file is autogenerated by pip-compile with Python 3.9
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/7b9a280.in
+#
+astunparse==1.6.3
+attrs==25.3.0
+certifi==2025.4.26
+cffi==1.17.1
+charset-normalizer==3.4.2
+coverage[toml]==7.8.0
+cryptography==44.0.3
+exceptiongroup==1.2.2
+grpcio==1.71.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pycparser==2.22
+pycryptodome==3.22.0
+pytest==8.3.5
+pytest-cov==6.1.1
+pytest-mock==3.14.0
+requests==2.32.3
+simplejson==3.20.1
+six==1.17.0
+sortedcontainers==2.4.0
+tomli==2.2.1
+urllib3==2.4.0
+wheel==0.45.1

.riot/requirements/f2b3dd3.txt

@@ -0,0 +1,34 @@
+#
+# This file is autogenerated by pip-compile with Python 3.8
+# by the following command:
+#
+#    pip-compile --no-annotate .riot/requirements/f2b3dd3.in
+#
+astunparse==1.6.3
+attrs==25.3.0
+certifi==2025.4.26
+cffi==1.17.1
+charset-normalizer==3.4.2
+coverage[toml]==7.6.1
+cryptography==44.0.3
+exceptiongroup==1.2.2
+grpcio==1.70.0
+hypothesis==6.45.0
+idna==3.10
+iniconfig==2.1.0
+mock==5.2.0
+opentracing==2.4.0
+packaging==25.0
+pluggy==1.5.0
+pycparser==2.22
+pycryptodome==3.22.0
+pytest==8.3.5
+pytest-cov==5.0.0
+pytest-mock==3.14.0
+requests==2.32.3
+simplejson==3.20.1
+six==1.17.0
+sortedcontainers==2.4.0
+tomli==2.2.1
+urllib3==2.2.3
+wheel==0.45.1

hatch.toml

@@ -246,40 +246,6 @@ flask = ["~=2.3"]
 python = ["3.8", "3.11", "3.13"]
 flask = ["~=3.0"]
 
-## ASM IAST module
-
-[envs.appsec_iast_default]
-template = "appsec_iast_default"
-dependencies = [
-    "pytest",
-    "pytest-cov",
-    "pytest-asyncio",
-    "hypothesis",
-    "requests",
-    "urllib3",
-    "pycryptodome",
-    "cryptography",
-    "astunparse",
-    "simplejson",
-    "grpcio",
-]
-
-[envs.appsec_iast_default.env-vars]
-_DD_IAST_PATCH_MODULES = "benchmarks.,tests.appsec."
-DD_IAST_REQUEST_SAMPLING = "100"
-DD_IAST_DEDUPLICATION_ENABLED = "false"
-
-
-[envs.appsec_iast_default.scripts]
-test = [
-    "uname -a",
-    "pip freeze",
-    "python -m pytest --no-ddtrace {args:tests/appsec/iast/}",
-]
-
-[[envs.appsec_iast_default.matrix]]
-python = ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
-
 ## ASM Native IAST module
 
 [envs.appsec_iast_native]

lib-injection/sources/min_compatible_versions.csv

@@ -240,6 +240,25 @@ def select_pys(min_version: str = MIN_PYTHON_VERSION, max_version: str = MAX_PYT
                 "rich": latest,
             },
         ),
+        Venv(
+            name="appsec_iast_default",
+            command="pytest {cmdargs} tests/appsec/iast/",
+            pys=select_pys(),
+            pkgs={
+                "requests": latest,
+                "urllib3": latest,
+                "pycryptodome": latest,
+                "cryptography": latest,
+                "astunparse": latest,
+                "simplejson": latest,
+                "grpcio": latest,
+            },
+            env={
+                "_DD_IAST_PATCH_MODULES": "benchmarks.,tests.appsec.",
+                "DD_IAST_REQUEST_SAMPLING": "100",
+                "DD_IAST_DEDUPLICATION_ENABLED": "false",
+            },
+        ),
         Venv(
             name="tracer",
             command="pytest -v {cmdargs} tests/tracer/",