supercov 1.2.0-x86_64-linux-gnu → 2.0.0-x86_64-linux-gnu

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 969173b17a30e27f86d3017cb35022bdaee26bb9726c78157a6022510e8df070
-  data.tar.gz: 1ccca54e811f1935491f6a88fab9a7f2f5b0c3ceccf8cb3ad87d15e54cf71997
+  metadata.gz: 4505765730c33f2599ed2378eee96df3dbb08be008838476013887d77b8aba41
+  data.tar.gz: 82a4b8d71352cf2f869e8d45c988b1521e54fb9b1539d3dd2c7aeac625075494
 SHA512:
-  metadata.gz: 85c57f82f1811e696fd4a5ed3e51a8031027787a7a87f7fc691471021619a0c1ff3e85e460949f1b75c2db76a54f61f4b609e8cd6f007765f5e06fec21e4fbce
-  data.tar.gz: 4d92eda1cfae461f589787f55ebabd3d09d7d64115a8c168600c17b53692ecd4f976006388e57f374677fcba31dc91903b3f7621858caaafa2219ef302909d49
+  metadata.gz: cf0d43adebba7b93796728a827cb140d77f9302f84d33e3d669c6cb3f1994a86f01323347b13c7132fbc9545eb480827c17a5fbea4f190aba7ccf2e991902d10
+  data.tar.gz: 3cd157299602fdbd578d4bf9ab07d9414f47cd1c51775c4dd1f0f94b0334ef2782b846f8e88dd539f2f487e0a7a766b7c398e7d684f45ba4a8fdf03b2ad66ed0

data/README.md

@@ -1,8 +1,8 @@
-![Code quality and coverage for coding agents](https://raw.githubusercontent.com/supercorp-ai/supercov/main/supercov.jpg)
+![Coverage, security and code quality for coding agents](https://raw.githubusercontent.com/supercorp-ai/supercov/main/supercov.jpg)
 
-**Code quality and coverage for coding agents**
+**Coverage, security and code quality for coding agents**
 
-**Supercov tells your coding agent what to fix and what to test.** It scores your code quality with [Jev](https://typesafe.ai), runs the test command you already use, and turns uncovered paths into small, actionable queries. Your agent picks a target, writes a focused test or a focused refactor, proves what improved, and keeps going.
+**Supercov tells your coding agent what to fix and what to test.** It scores your code quality and flags security risks with [Jev](https://typesafe.ai), runs the test command you already use, and turns uncovered paths into small, actionable queries. Your agent picks a target, writes a focused test or a focused refactor, proves what improved, and keeps going.
 
 Paste this to your coding agent to start:
 
@@ -56,6 +56,18 @@ Jev charges for what it reads and nothing for what it writes, so a megabyte of
 source costs a little over a cent. Answers are cached by content, so a second
 run pays only for what changed. See [Understanding quality](docs/quality.md).
 
+## Find security risks
+
+```bash
+npx supercov security
+npx supercov security patch   # what a change introduced
+```
+
+Twelve security checks asked of every file with the same key, from injection
+and secrets in source to paths and redirects taken from a request. Nothing is
+averaged: a file is clean, or it names what fired, with the line and the code on
+it where Jev confirms one. See [Security surface](docs/security.md).
+
 ## Start with the suite you already have
 
 ```bash
@@ -102,6 +114,19 @@ npx supercov -- npm test
 npx supercov diff <previous-run-id> latest
 ```
 
+Want to hand the evidence to a person? Generate one private, interactive file:
+
+```bash
+npx supercov report
+```
+
+The report opens in your browser with up to ten recent runs in a visual history.
+Selecting a run compares it with the previous snapshot automatically. It has no
+server, external assets, account, or file picker. It is written to
+`.supercov/reports/`, where the store's own `.gitignore` keeps it out of git.
+You can attach that one file directly to a pull request; a reviewer downloads
+it and double-clicks it.
+
 Use whichever complete test command the repository already trusts:
 
 ```bash
@@ -286,6 +311,9 @@ npx supercov runs latest line app/checkout/session.ts:64
 
 # What changed between two runs
 npx supercov diff <previous-run-id> latest
+
+# A portable interactive report for a person
+npx supercov report
 ```
 
 Collections accept `--limit` and `--offset` and print a copyable next-page command. Machine-readable output is available with `--json` when an integration needs it.
@@ -299,9 +327,9 @@ The Supercov CLI does not contact a Supercov service during a coverage run. Pack
 Supercov does not rewrite your source files, tests, imports, reporter list, runner configuration, dependency tree, or normal build output. An existing user-created `supercov/` directory is never adopted.
 
 ```bash
-npx supercov clean --dry-run   # preview cleanup
-npx supercov clean --keep 20   # keep the 20 newest runs
-npx supercov clean             # remove all runs and the build cache
+npx supercov runs clean --dry-run   # preview cleanup
+npx supercov runs clean --keep 20   # keep the 20 newest runs
+npx supercov runs clean             # remove all runs and the build cache
 ```
 
 ## Documentation
@@ -315,6 +343,7 @@ npx supercov clean             # remove all runs and the build cache
 - [Supported languages and test suites](https://supercov.com/docs/supported-suites)
 - [Understanding coverage](https://supercov.com/docs/coverage-model)
 - [Runs and evidence](https://supercov.com/docs/evidence)
+- [Portable HTML reports](https://supercov.com/docs/reports)
 - [Files, privacy, and cleanup](https://supercov.com/docs/workspace-isolation)
 - [Trusting a result](https://supercov.com/docs/verification)
 - [Speed and storage](https://supercov.com/docs/performance)
@@ -328,3 +357,4 @@ npx supercov clean             # remove all runs and the build cache
 - [@DaVinciTachyon](https://github.com/DaVinciTachyon)
 - [@Uhbif2](https://github.com/Uhbif2)
 - [@maik-intellicoach](https://github.com/maik-intellicoach)
+- [@untitaker](https://github.com/untitaker)

data/lib/supercov.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Supercov
-  VERSION = "1.2.0"
+  VERSION = "2.0.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: supercov
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 2.0.0
 platform: x86_64-linux-gnu
 authors:
 - Supercorp
@@ -44,5 +44,5 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements: []
 rubygems_version: 3.6.9
 specification_version: 4
-summary: Code quality and coverage for coding agents
+summary: Coverage, security and code quality for coding agents
 test_files: []