@appland/scanner 1.52.2 → 1.52.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (137) hide show
  1. package/CHANGELOG.md +970 -0
  2. package/built/algorithms/dataStructures/graph/GraphEdge.js +1 -1
  3. package/built/algorithms/dataStructures/graph/GraphEdge.js.map +1 -1
  4. package/built/algorithms/dataStructures/graph/GraphVertex.js +1 -1
  5. package/built/algorithms/dataStructures/graph/GraphVertex.js.map +1 -1
  6. package/built/algorithms/dataStructures/linked-list/LinkedListNode.js +1 -1
  7. package/built/algorithms/dataStructures/linked-list/LinkedListNode.js.map +1 -1
  8. package/built/analyzer/recordSecrets.js +1 -1
  9. package/built/analyzer/recordSecrets.js.map +1 -1
  10. package/built/appMapIndex.js +2 -2
  11. package/built/appMapIndex.js.map +1 -1
  12. package/built/check.js +2 -2
  13. package/built/check.js.map +1 -1
  14. package/built/cli/ci/command.js +1 -1
  15. package/built/cli/ci/command.js.map +1 -1
  16. package/built/cli/fail.js +1 -1
  17. package/built/cli/fail.js.map +1 -1
  18. package/built/cli/merge/command.js +1 -1
  19. package/built/cli/merge/command.js.map +1 -1
  20. package/built/cli/reportUploadURL.js +2 -2
  21. package/built/cli/reportUploadURL.js.map +1 -1
  22. package/built/cli/resolveAppId.js +1 -1
  23. package/built/cli/resolveAppId.js.map +1 -1
  24. package/built/cli/scan/command.js +6 -3
  25. package/built/cli/scan/command.js.map +1 -1
  26. package/built/cli/updateCommitStatus.js +3 -3
  27. package/built/cli/updateCommitStatus.js.map +1 -1
  28. package/built/cli/upload.js +5 -5
  29. package/built/cli/upload.js.map +1 -1
  30. package/built/cli/validateFile.js +1 -1
  31. package/built/cli/validateFile.js.map +1 -1
  32. package/built/cli.js +0 -0
  33. package/built/configuration/configurationProvider.js +19 -15
  34. package/built/configuration/configurationProvider.js.map +1 -1
  35. package/built/database/index.js +1 -1
  36. package/built/database/index.js.map +1 -1
  37. package/built/database/visit.js +4 -2
  38. package/built/database/visit.js.map +1 -1
  39. package/built/integration/appland/app/exists.js +3 -3
  40. package/built/integration/appland/app/exists.js.map +1 -1
  41. package/built/integration/appland/mapset/create.js +1 -1
  42. package/built/integration/appland/mapset/create.js.map +1 -1
  43. package/built/integration/appland/retry.js +2 -2
  44. package/built/integration/appland/retry.js.map +1 -1
  45. package/built/integration/appland/scannerJob/merge.js +1 -1
  46. package/built/integration/appland/scannerJob/merge.js.map +1 -1
  47. package/built/openapi/method.js +1 -1
  48. package/built/openapi/method.js.map +1 -1
  49. package/built/openapi/model.js +1 -1
  50. package/built/openapi/model.js.map +1 -1
  51. package/built/openapi/provider.js +3 -3
  52. package/built/openapi/provider.js.map +1 -1
  53. package/built/report/findingsReport.js +7 -7
  54. package/built/report/findingsReport.js.map +1 -1
  55. package/built/report/summaryReport.js +3 -3
  56. package/built/report/summaryReport.js.map +1 -1
  57. package/built/ruleChecker.js +5 -5
  58. package/built/ruleChecker.js.map +1 -1
  59. package/built/rules/authzBeforeAuthn.js +1 -1
  60. package/built/rules/authzBeforeAuthn.js.map +1 -1
  61. package/built/rules/circularDependency.js +9 -9
  62. package/built/rules/circularDependency.js.map +1 -1
  63. package/built/rules/deserializationOfUntrustedData.js +1 -1
  64. package/built/rules/deserializationOfUntrustedData.js.map +1 -1
  65. package/built/rules/execOfUntrustedCommand.js +1 -1
  66. package/built/rules/execOfUntrustedCommand.js.map +1 -1
  67. package/built/rules/{http500 → http-500}/metadata.js +0 -0
  68. package/built/rules/http-500/metadata.js.map +1 -0
  69. package/built/rules/{http500 → http-500}/rule.js +0 -0
  70. package/built/rules/http-500/rule.js.map +1 -0
  71. package/built/rules/illegalPackageDependency.js +1 -1
  72. package/built/rules/illegalPackageDependency.js.map +1 -1
  73. package/built/rules/incompatibleHttpClientRequest.js +2 -2
  74. package/built/rules/incompatibleHttpClientRequest.js.map +1 -1
  75. package/built/rules/jobNotCancelled.js +2 -2
  76. package/built/rules/jobNotCancelled.js.map +1 -1
  77. package/built/rules/lib/matchEvent.js +1 -1
  78. package/built/rules/lib/matchEvent.js.map +1 -1
  79. package/built/rules/lib/parseRuleDescription.js +2 -1
  80. package/built/rules/lib/parseRuleDescription.js.map +1 -1
  81. package/built/rules/lib/util.js +8 -6
  82. package/built/rules/lib/util.js.map +1 -1
  83. package/built/rules/logoutWithoutSessionReset.js +1 -1
  84. package/built/rules/logoutWithoutSessionReset.js.map +1 -1
  85. package/built/rules/missingAuthentication.js +1 -1
  86. package/built/rules/missingAuthentication.js.map +1 -1
  87. package/built/rules/nPlusOneQuery.js +1 -1
  88. package/built/rules/nPlusOneQuery.js.map +1 -1
  89. package/built/rules/queryFromInvalidPackage.js +1 -1
  90. package/built/rules/queryFromInvalidPackage.js.map +1 -1
  91. package/built/rules/queryFromView.js +1 -1
  92. package/built/rules/queryFromView.js.map +1 -1
  93. package/built/rules/secretInLog.js +6 -2
  94. package/built/rules/secretInLog.js.map +1 -1
  95. package/built/rules/slowFunctionCall.js +1 -1
  96. package/built/rules/slowFunctionCall.js.map +1 -1
  97. package/built/rules/slowHttpServerRequest.js +1 -1
  98. package/built/rules/slowHttpServerRequest.js.map +1 -1
  99. package/built/rules/tooManyJoins.js +1 -1
  100. package/built/rules/tooManyJoins.js.map +1 -1
  101. package/built/rules/tooManyUpdates.js +1 -1
  102. package/built/rules/tooManyUpdates.js.map +1 -1
  103. package/built/rules/unbatchedMaterializedQuery.js +2 -2
  104. package/built/rules/unbatchedMaterializedQuery.js.map +1 -1
  105. package/built/rules/updateInGetRequest.js +1 -1
  106. package/built/rules/updateInGetRequest.js.map +1 -1
  107. package/built/sampleConfig/default.yml +1 -1
  108. package/built/scope/sqlTransactionScope.js +1 -1
  109. package/built/scope/sqlTransactionScope.js.map +1 -1
  110. package/doc/rules/{authzBeforeAuthn.md → authz-before-authn.md} +0 -0
  111. package/doc/rules/{circularDependency.md → circular-dependency.md} +0 -0
  112. package/doc/rules/{deserializationOfUntrustedData.md → deserialization-of-untrusted-data.md} +0 -0
  113. package/doc/rules/{execOfUntrustedCommand.md → exec-of-untrusted-command.md} +0 -0
  114. package/doc/rules/{http500.md → http-500.md} +0 -0
  115. package/doc/rules/{illegalPackageDependency.md → illegal-package-dependency.md} +0 -0
  116. package/doc/rules/{incompatibleHttpClientRequest.md → incompatible-http-client-request.md} +0 -0
  117. package/doc/rules/{insecureCompare.md → insecure-compare.md} +0 -0
  118. package/doc/rules/{jobNotCancelled.md → job-not-cancelled.md} +0 -0
  119. package/doc/rules/{logoutWithoutSessionReset.md → logout-without-session-reset.md} +0 -0
  120. package/doc/rules/{missingAuthentication.md → missing-authentication.md} +0 -0
  121. package/doc/rules/{missingContentType.md → missing-content-type.md} +0 -0
  122. package/doc/rules/{nPlusOneQuery.md → n-plus-one-query.md} +0 -0
  123. package/doc/rules/{queryFromInvalidPackage.md → query-from-invalid-package.md} +0 -0
  124. package/doc/rules/{queryFromView.md → query-from-view.md} +0 -0
  125. package/doc/rules/{rpcWithoutCircuitBreaker.md → rpc-without-circuit-breaker.md} +0 -0
  126. package/doc/rules/{saveWithoutValidation.md → save-without-validation.md} +0 -0
  127. package/doc/rules/{secretInLog.md → secret-in-log.md} +0 -0
  128. package/doc/rules/{slowFunctionCall.md → slow-function-call.md} +0 -0
  129. package/doc/rules/{slowHttpServerRequest.md → slow-http-server-request.md} +0 -0
  130. package/doc/rules/{slowQuery.md → slow-query.md} +0 -0
  131. package/doc/rules/{tooManyJoins.md → too-many-joins.md} +0 -0
  132. package/doc/rules/{tooManyUpdates.md → too-many-updates.md} +0 -0
  133. package/doc/rules/{unbatchedMaterializedQuery.md → unbatched-materialized-query.md} +0 -0
  134. package/doc/rules/{updateInGetRequest.md → update-in-get-request.md} +0 -0
  135. package/package.json +4 -8
  136. package/built/rules/http500/metadata.js.map +0 -1
  137. package/built/rules/http500/rule.js.map +0 -1
package/CHANGELOG.md ADDED
@@ -0,0 +1,970 @@
1
+ # [@appland/scanner-v1.52.5](https://github.com/applandinc/appmap-js/compare/@appland/scanner-v1.52.4...@appland/scanner-v1.52.5) (2022-05-02)
2
+
3
+
4
+ ### Bug Fixes
5
+
6
+ * Fix front matter for self-contained rules ([e02b454](https://github.com/applandinc/appmap-js/commit/e02b45443f1eeb2dff564d588559c258ce457446))
7
+
8
+ ## [1.52.4](https://github.com/applandinc/scanner/compare/v1.52.3...v1.52.4) (2022-04-28)
9
+
10
+
11
+ ### Bug Fixes
12
+
13
+ * Don't traverse null property ([19cf111](https://github.com/applandinc/scanner/commit/19cf1117d5ba3a7cc4e56f214a38244814886bac))
14
+
15
+ ## [1.52.3](https://github.com/applandinc/scanner/compare/v1.52.2...v1.52.3) (2022-04-28)
16
+
17
+
18
+ ### Bug Fixes
19
+
20
+ * Don't enable query-from-view by default ([3c87485](https://github.com/applandinc/scanner/commit/3c87485333f18638c18b5a61542691b71d86bda8))
21
+
22
+ ## [1.52.2](https://github.com/applandinc/scanner/compare/v1.52.1...v1.52.2) (2022-04-27)
23
+
24
+
25
+ ### Bug Fixes
26
+
27
+ * Disable circular-dependency in default config ([0fb1864](https://github.com/applandinc/scanner/commit/0fb18644dc6a211f509138689a758d634f02a4bf))
28
+
29
+ ## [1.52.1](https://github.com/applandinc/scanner/compare/v1.52.0...v1.52.1) (2022-04-27)
30
+
31
+
32
+ ### Bug Fixes
33
+
34
+ * Don't traverse a null property value ([eab7ca4](https://github.com/applandinc/scanner/commit/eab7ca4fd18c5473656d4cf473638ec125612832))
35
+
36
+ # [1.52.0](https://github.com/applandinc/scanner/compare/v1.51.1...v1.52.0) (2022-04-07)
37
+
38
+
39
+ ### Features
40
+
41
+ * Rule can be specified in a directory ([e929407](https://github.com/applandinc/scanner/commit/e929407c738aa0f29e55a22de6a06496c87b02ca))
42
+
43
+ ## [1.51.1](https://github.com/applandinc/scanner/compare/v1.51.0...v1.51.1) (2022-04-01)
44
+
45
+
46
+ ### Bug Fixes
47
+
48
+ * Upgrade `@appland/models` to v1.14.5 ([68f2382](https://github.com/applandinc/scanner/commit/68f2382812ef19f5c273a895f51c7e42f58cb7b5))
49
+
50
+ # [1.51.0](https://github.com/applandinc/scanner/compare/v1.50.0...v1.51.0) (2022-03-25)
51
+
52
+
53
+ ### Bug Fixes
54
+
55
+ * Validate appId before running command ([45af060](https://github.com/applandinc/scanner/commit/45af060df4d1f34990162f0089d85ec80569fc9d))
56
+
57
+
58
+ ### Features
59
+
60
+ * 'a' is an alias for 'app' ([4b2d9c7](https://github.com/applandinc/scanner/commit/4b2d9c74b40d41b71c1702fee8f08d7a7d1d1ed2))
61
+
62
+ # [1.50.0](https://github.com/applandinc/scanner/compare/v1.49.1...v1.50.0) (2022-03-25)
63
+
64
+
65
+ ### Bug Fixes
66
+
67
+ * resolve AppMap path via appMapDir ([ef398a4](https://github.com/applandinc/scanner/commit/ef398a43d3cc37e6b26a265151b3a518f82d49d2))
68
+
69
+
70
+ ### Features
71
+
72
+ * Add branch, commit, environment CLI options ([bffa805](https://github.com/applandinc/scanner/commit/bffa805e18936d2b78a8bda546b5bf8bef46ac5b))
73
+ * Resolve git branch and commit from the environment if available ([105f055](https://github.com/applandinc/scanner/commit/105f0559357b7efc25ca0f0ca21832165ad2a0a4))
74
+
75
+ ## [1.49.1](https://github.com/applandinc/scanner/compare/v1.49.0...v1.49.1) (2022-03-23)
76
+
77
+
78
+ ### Bug Fixes
79
+
80
+ * Print count of total and unique findings ([8252b19](https://github.com/applandinc/scanner/commit/8252b19d7df08d4ae1843390d3e9d20e0cadad8a))
81
+ * Provide more complete finding messages ([484d7d2](https://github.com/applandinc/scanner/commit/484d7d291368cec957e1c5322017c25c78b101db))
82
+
83
+ # [1.49.0](https://github.com/applandinc/scanner/compare/v1.48.0...v1.49.0) (2022-03-23)
84
+
85
+
86
+ ### Bug Fixes
87
+
88
+ * Extract multiple secrets from a return value ([3607a93](https://github.com/applandinc/scanner/commit/3607a93a33e94172456699c08ab0056f7205cf6c))
89
+ * Recognize Symbol :failure as return value ([12849f9](https://github.com/applandinc/scanner/commit/12849f9d98d59813b30ed15b04e3eaa567410384))
90
+ * Switch from command scope to root scope ([8372ef5](https://github.com/applandinc/scanner/commit/8372ef522750f01d0c776bf1e7e7629a91134551))
91
+
92
+
93
+ ### Features
94
+
95
+ * Command scope falls back on root scope ([3940eff](https://github.com/applandinc/scanner/commit/3940eff634ac326053dee3c776f20c6c0208ce4c))
96
+ * Rename job and command labels ([112050e](https://github.com/applandinc/scanner/commit/112050ed26066244101ea4fe48a5652d21273b28))
97
+
98
+ # [1.48.0](https://github.com/applandinc/scanner/compare/v1.47.0...v1.48.0) (2022-03-21)
99
+
100
+
101
+ ### Features
102
+
103
+ * Add additional relatedEvents ([91ad9c1](https://github.com/applandinc/scanner/commit/91ad9c1b497f7ea2fb53b3797d005fdbab1165c7))
104
+ * relatedEvents contains the match event ([a0885de](https://github.com/applandinc/scanner/commit/a0885defdf690098e58593735d8a90d058018255))
105
+
106
+ # [1.47.0](https://github.com/applandinc/scanner/compare/v1.46.3...v1.47.0) (2022-03-17)
107
+
108
+
109
+ ### Bug Fixes
110
+
111
+ * Don't fail doc parsing on new docs ([58761f6](https://github.com/applandinc/scanner/commit/58761f6112af8dcd8735b90cd1ba30ea4c08770d))
112
+
113
+
114
+ ### Features
115
+
116
+ * Enable deserializationOfUntrustedData by default ([b99b729](https://github.com/applandinc/scanner/commit/b99b7292e602f20a072543439dea02560b21d250))
117
+ * Enable execOfUntrustedCommand by default ([998c2fe](https://github.com/applandinc/scanner/commit/998c2feb6c75925f5fb9b2035d285ec54b08d9be))
118
+ * Rename 'sanitize' to 'deserialize.sanitize' ([0403ebb](https://github.com/applandinc/scanner/commit/0403ebb3ff49da22137dbcaf729c67b2231750ea))
119
+ * Rename label 'public' to 'access.public' ([098ae70](https://github.com/applandinc/scanner/commit/098ae70825388a9195e38a29b355ba59cf457d6b))
120
+ * Rule for exec-of-untrusted-command ([bea4fb3](https://github.com/applandinc/scanner/commit/bea4fb319972ded78f7d2858c4344ac3a3c05a03))
121
+
122
+ ## [1.46.3](https://github.com/applandinc/scanner/compare/v1.46.2...v1.46.3) (2022-03-17)
123
+
124
+
125
+ ### Bug Fixes
126
+
127
+ * Better error message when server not configured ([e9c7c35](https://github.com/applandinc/scanner/commit/e9c7c35ad809efc1abdc883aa7b8345bf1752aab))
128
+ * Correctly enumerate transaction events ([ecc9bfc](https://github.com/applandinc/scanner/commit/ecc9bfcab8e5b0c35a21db98d5bbfd4d6aca2c5f))
129
+
130
+ ## [1.46.2](https://github.com/applandinc/scanner/compare/v1.46.1...v1.46.2) (2022-03-11)
131
+
132
+
133
+ ### Bug Fixes
134
+
135
+ * Don't error out on extra BEGIN when detecting transactions ([b3938f4](https://github.com/applandinc/scanner/commit/b3938f4397c7c2b9727e707a7df370881ae2cc65))
136
+
137
+ ## [1.46.1](https://github.com/applandinc/scanner/compare/v1.46.0...v1.46.1) (2022-02-17)
138
+
139
+
140
+ ### Bug Fixes
141
+
142
+ * Update SQL parser ([10be27e](https://github.com/applandinc/scanner/commit/10be27e8b365eb9080dfc8ff6edb2ee0d3fadd15))
143
+
144
+ # [1.46.0](https://github.com/applandinc/scanner/compare/v1.45.0...v1.46.0) (2022-02-15)
145
+
146
+
147
+ ### Features
148
+
149
+ * Retry AppMap upload on failure ([136b59a](https://github.com/applandinc/scanner/commit/136b59a5d2f75e1ebfb533f19341680aa3050239))
150
+
151
+ # [1.45.0](https://github.com/applandinc/scanner/compare/v1.44.3...v1.45.0) (2022-02-14)
152
+
153
+
154
+ ### Bug Fixes
155
+
156
+ * Pick up SQL parser fixes ([01904db](https://github.com/applandinc/scanner/commit/01904db4c12ea5f85028c34b066b9cc9bc2ec546))
157
+ * Specify Content-Length in bytes rather than chars ([b24c6a4](https://github.com/applandinc/scanner/commit/b24c6a4f32b0bb7360777ab72aa090c4b91fa810))
158
+
159
+
160
+ ### Features
161
+
162
+ * Pare down the default scan config ([7f48e77](https://github.com/applandinc/scanner/commit/7f48e774b5a48af8657b736dfb619145f9785426))
163
+
164
+ ## [1.44.3](https://github.com/applandinc/scanner/compare/v1.44.2...v1.44.3) (2022-02-11)
165
+
166
+
167
+ ### Bug Fixes
168
+
169
+ * Provide the `metadata` param during AppMap creation ([fc1b39b](https://github.com/applandinc/scanner/commit/fc1b39bb5fc3323ae582fb499c4b9425898a5afe))
170
+
171
+ ## [1.44.2](https://github.com/applandinc/scanner/compare/v1.44.1...v1.44.2) (2022-02-10)
172
+
173
+
174
+ ### Bug Fixes
175
+
176
+ * Add missing dependency 'glob' ([92fe31c](https://github.com/applandinc/scanner/commit/92fe31c8d1367d31a9f21eb6e6225e2fe378432b))
177
+
178
+ ## [1.44.1](https://github.com/applandinc/scanner/compare/v1.44.0...v1.44.1) (2022-02-09)
179
+
180
+
181
+ ### Bug Fixes
182
+
183
+ * Fix 'merge --fail' ([3d371d9](https://github.com/applandinc/scanner/commit/3d371d9cb4512162d8ce6806ee22943ab0143877))
184
+
185
+ # [1.44.0](https://github.com/applandinc/scanner/compare/v1.43.0...v1.44.0) (2022-02-09)
186
+
187
+
188
+ ### Features
189
+
190
+ * Upgrade SQL parser ([6b585e6](https://github.com/applandinc/scanner/commit/6b585e6ea16048f0e57643d6f20528f5da0aadda))
191
+
192
+ # [1.43.0](https://github.com/applandinc/scanner/compare/v1.42.0...v1.43.0) (2022-02-08)
193
+
194
+
195
+ ### Features
196
+
197
+ * Add CLI 'merge' command ([5144b3d](https://github.com/applandinc/scanner/commit/5144b3d883946697442ce5393512367e53db752c))
198
+ * Implement 'merge' command options --fail and --update-commit-status ([49706c2](https://github.com/applandinc/scanner/commit/49706c2ffc7ec7450c5138da8abf3d5f16a49166))
199
+
200
+ # [1.42.0](https://github.com/applandinc/scanner/compare/v1.41.1...v1.42.0) (2022-02-04)
201
+
202
+
203
+ ### Bug Fixes
204
+
205
+ * Integrate the SQL cache and collect performance data ([b0d393b](https://github.com/applandinc/scanner/commit/b0d393b4ab12ce3baeeaebadad1c0184aacc2927))
206
+ * Missing import ([042a79c](https://github.com/applandinc/scanner/commit/042a79cca1552adea0cc7f6339c4eb1abe2e00da))
207
+
208
+
209
+ ### Features
210
+
211
+ * Accelerate scanning by indexing the AppMap ([5414da1](https://github.com/applandinc/scanner/commit/5414da1f628fbd44912c7c89b7f174d438162027))
212
+ * Cache normalized SQL and query AST ([ba3377f](https://github.com/applandinc/scanner/commit/ba3377f002c69379447ab89b83933e6ace7190a5))
213
+ * LRU cache for queries ([14883dd](https://github.com/applandinc/scanner/commit/14883ddd5af636db0320934692b4bf92f223069f))
214
+ * Update @appland/models and implement sqlWarning ([460e2a3](https://github.com/applandinc/scanner/commit/460e2a380b98f2c144cf835445c2da4cae7efa32))
215
+ * Update SQL parser ([691c051](https://github.com/applandinc/scanner/commit/691c051602b2f328a1c6d9eeeac704e3aead684d))
216
+
217
+
218
+ ### Reverts
219
+
220
+ * Remove cache of events by type and label ([28374c2](https://github.com/applandinc/scanner/commit/28374c297d516a0f0a89fce50adedd6ff7044f4f))
221
+
222
+ ## [1.41.1](https://github.com/applandinc/scanner/compare/v1.41.0...v1.41.1) (2022-02-04)
223
+
224
+
225
+ ### Bug Fixes
226
+
227
+ * use relative path for doc files ([2e0b5d6](https://github.com/applandinc/scanner/commit/2e0b5d6febd7ccbe20b4ed489fbc964c68054df1))
228
+
229
+ # [1.41.0](https://github.com/applandinc/scanner/compare/v1.40.3...v1.41.0) (2022-02-04)
230
+
231
+
232
+ ### Features
233
+
234
+ * add description and doc url to rule definitions ([0c237e4](https://github.com/applandinc/scanner/commit/0c237e4d3a4b6a3d6d2c12000d09ffb86fcd390d))
235
+
236
+ ## [1.40.3](https://github.com/applandinc/scanner/compare/v1.40.2...v1.40.3) (2022-02-04)
237
+
238
+
239
+ ### Bug Fixes
240
+
241
+ * Prevent accumulation of AppMap data while scanning ([cd8ff93](https://github.com/applandinc/scanner/commit/cd8ff93846f436e7d73a125304bbb5e7c568cd8d))
242
+
243
+ ## [1.40.2](https://github.com/applandinc/scanner/compare/v1.40.1...v1.40.2) (2022-02-03)
244
+
245
+
246
+ ### Bug Fixes
247
+
248
+ * Upload no longer appends AppMap directory to files ([6e28b1c](https://github.com/applandinc/scanner/commit/6e28b1cd01e0d70b175d568702caacb267d435d2))
249
+
250
+ ## [1.40.1](https://github.com/applandinc/scanner/compare/v1.40.0...v1.40.1) (2022-02-02)
251
+
252
+
253
+ ### Bug Fixes
254
+
255
+ * Resolve a case of unhandled promises during upload ([1bf5f90](https://github.com/applandinc/scanner/commit/1bf5f908236fc0ee9f9410fc889f0afad05b5c48))
256
+
257
+ # [1.40.0](https://github.com/applandinc/scanner/compare/v1.39.1...v1.40.0) (2022-02-02)
258
+
259
+
260
+ ### Bug Fixes
261
+
262
+ * Improve Mapset and Findings upload ([055758b](https://github.com/applandinc/scanner/commit/055758ba3a23a90a62f125ca8eec8cb796471d7b))
263
+ * Remove redundant rule in default.yml sample config ([72ad9f8](https://github.com/applandinc/scanner/commit/72ad9f8f4def9a7ca2f4534545cc72413a86034e))
264
+ * Remove unused import ([bfc3fe6](https://github.com/applandinc/scanner/commit/bfc3fe67823984c20a8055c6843df73996f83856))
265
+ * Use FormData to efficiently upload AppMaps ([b8b43ee](https://github.com/applandinc/scanner/commit/b8b43ee0626207d5302312749cfd7fa5a288c966))
266
+
267
+
268
+ ### Features
269
+
270
+ * Upload AppMaps, then create a Mapset, then Findings ([3403834](https://github.com/applandinc/scanner/commit/3403834dd50c446e7fa59a67038e48016d0e9f1c))
271
+
272
+ ## [1.39.1](https://github.com/applandinc/scanner/compare/v1.39.0...v1.39.1) (2022-02-01)
273
+
274
+
275
+ ### Bug Fixes
276
+
277
+ * Finding hash now includes rule id ([10db345](https://github.com/applandinc/scanner/commit/10db345ef472a45ad2d892a4b1df6bc7f70681cf))
278
+
279
+ # [1.39.0](https://github.com/applandinc/scanner/compare/v1.38.0...v1.39.0) (2022-01-28)
280
+
281
+
282
+ ### Bug Fixes
283
+
284
+ * http-500 looks for 500 status specifically ([02a406f](https://github.com/applandinc/scanner/commit/02a406f50da3fbb33b2f758150a056011610a4cf))
285
+
286
+
287
+ ### Features
288
+
289
+ * Print stack trace in CLI finding output ([edfb41a](https://github.com/applandinc/scanner/commit/edfb41af083902b71676a2899bcac6aa04b0a820))
290
+
291
+ # [1.38.0](https://github.com/applandinc/scanner/compare/v1.37.1...v1.38.0) (2022-01-26)
292
+
293
+
294
+ ### Features
295
+
296
+ * Deduplicate findings in the report ([49b2db9](https://github.com/applandinc/scanner/commit/49b2db920ed702e54915574a322f286825f0d8e2))
297
+
298
+ ## [1.37.1](https://github.com/applandinc/scanner/compare/v1.37.0...v1.37.1) (2022-01-25)
299
+
300
+
301
+ ### Bug Fixes
302
+
303
+ * Fix Java example link ([831afd7](https://github.com/applandinc/scanner/commit/831afd75921cacdd15aa4b6f30cbe821aecbc8cf))
304
+
305
+ # [1.37.0](https://github.com/applandinc/scanner/compare/v1.36.1...v1.37.0) (2022-01-25)
306
+
307
+
308
+ ### Features
309
+
310
+ * Update rule deserializationOfUntrustedData and add a test ([25fa0b5](https://github.com/applandinc/scanner/commit/25fa0b5cb746857c7234eba18160530b795a9acb))
311
+
312
+ ## [1.36.1](https://github.com/applandinc/scanner/compare/v1.36.0...v1.36.1) (2022-01-24)
313
+
314
+
315
+ ### Bug Fixes
316
+
317
+ * Only process a couple appmaps at a time ([0ec9a37](https://github.com/applandinc/scanner/commit/0ec9a377991213d7dd1fe5f152d037ee52ccd86f))
318
+
319
+ # [1.36.0](https://github.com/applandinc/scanner/compare/v1.35.1...v1.36.0) (2022-01-21)
320
+
321
+
322
+ ### Bug Fixes
323
+
324
+ * authz-before-authn finding event is the event that provides authorization ([30c4b50](https://github.com/applandinc/scanner/commit/30c4b503e7005a9d5efe21e72d1a99e596551e79))
325
+
326
+
327
+ ### Features
328
+
329
+ * Add more rules to default config ([06a2bf5](https://github.com/applandinc/scanner/commit/06a2bf5735db83df91771caa5855c57971b43eff))
330
+ * Add rule deserialization-of-untrusted-data ([cb80d48](https://github.com/applandinc/scanner/commit/cb80d48553895b450274629a2e2a085a7b648a98))
331
+ * Add rule logout-without-session-reset ([d7ae001](https://github.com/applandinc/scanner/commit/d7ae001e490540e94d422db93102f5fba1dfb234))
332
+
333
+ ## [1.35.1](https://github.com/applandinc/scanner/compare/v1.35.0...v1.35.1) (2022-01-19)
334
+
335
+
336
+ ### Bug Fixes
337
+
338
+ * Upload the entire findings JSON ([f502d0e](https://github.com/applandinc/scanner/commit/f502d0e646980b580a81c3f87e800e2b6459732a))
339
+
340
+ # [1.35.0](https://github.com/applandinc/scanner/compare/v1.34.1...v1.35.0) (2022-01-18)
341
+
342
+
343
+ ### Features
344
+
345
+ * Update CWE references ([b036dcd](https://github.com/applandinc/scanner/commit/b036dcde862b61ad5aa09a2fe4747c6971a3853c))
346
+
347
+ ## [1.34.1](https://github.com/applandinc/scanner/compare/v1.34.0...v1.34.1) (2022-01-14)
348
+
349
+
350
+ ### Bug Fixes
351
+
352
+ * Upgrade @appland/client to v1.1.3 ([223441a](https://github.com/applandinc/scanner/commit/223441ab9c768482cdc3a1320c3913990401b0ff))
353
+
354
+ # [1.34.0](https://github.com/applandinc/scanner/compare/v1.33.2...v1.34.0) (2022-01-14)
355
+
356
+
357
+ ### Bug Fixes
358
+
359
+ * Replace id with rule in rule doc front matter (reqd by Jekyll) ([ac5391d](https://github.com/applandinc/scanner/commit/ac5391d00672747ac956610275659cc1a110c742))
360
+
361
+
362
+ ### Features
363
+
364
+ * Add references to rule definitions ([d9d29d7](https://github.com/applandinc/scanner/commit/d9d29d7b9a949deae1c746ad9d8bb3c4229e41ee))
365
+ * Add scope to rule doc front matter ([660582d](https://github.com/applandinc/scanner/commit/660582d9e22781a20c77abf9082f50c528f2341c))
366
+ * Add scope to rule doc front matter ([9fa209b](https://github.com/applandinc/scanner/commit/9fa209bba9c3336a8b73ea09075b424c19dd4299))
367
+ * Generate front matter from Rule info ([e1f64fd](https://github.com/applandinc/scanner/commit/e1f64fda238a0b78ec8f4b9301bd1546296ccd7b))
368
+ * Include labels in rule doc front matter ([e4d26ec](https://github.com/applandinc/scanner/commit/e4d26ec3c4ac0d2b51f4f7fe90f900cce120db96))
369
+ * Publish to NPM ([8dc5c85](https://github.com/applandinc/scanner/commit/8dc5c85f48d291048e24aa95212a575e89ad4175))
370
+
371
+ ## [1.33.2](https://github.com/applandinc/scanner/compare/v1.33.1...v1.33.2) (2022-01-12)
372
+
373
+
374
+ ### Bug Fixes
375
+
376
+ * Flag insecure comparison correctly in more cases ([abaf078](https://github.com/applandinc/scanner/commit/abaf078a37ccc8dfe9b85074e26924b130a422c7))
377
+
378
+ ## [1.33.1](https://github.com/applandinc/scanner/compare/v1.33.0...v1.33.1) (2022-01-10)
379
+
380
+
381
+ ### Bug Fixes
382
+
383
+ * Mark package as public ([aa18d96](https://github.com/applandinc/scanner/commit/aa18d96110057c8bb1711e7142ef1f0a7df509be))
384
+
385
+ # [1.33.0](https://github.com/applandinc/scanner/compare/v1.32.0...v1.33.0) (2022-01-10)
386
+
387
+
388
+ ### Features
389
+
390
+ * Publish to NPM ([b39f16d](https://github.com/applandinc/scanner/commit/b39f16d5ab867528d8bcf3cfda67f71e59064a7d))
391
+
392
+ # [1.32.0](https://github.com/applandinc/scanner/compare/v1.31.2...v1.32.0) (2022-01-07)
393
+
394
+
395
+ ### Bug Fixes
396
+
397
+ * Fix default config path ([bb28a87](https://github.com/applandinc/scanner/commit/bb28a87ff25f99d86a44e17b0d7b3cd50a68b32c))
398
+ * Tweak the findings output ([b16f552](https://github.com/applandinc/scanner/commit/b16f5520703a99eff6b51bcf6ce5c3406c13cfb2))
399
+ * Update @appland/models for DFS dependency traversal fix ([bacc707](https://github.com/applandinc/scanner/commit/bacc70748c4df5352bb181f764929c99ffe026a2))
400
+
401
+
402
+ ### Features
403
+
404
+ * Print the path to the scanner config file ([531f531](https://github.com/applandinc/scanner/commit/531f53125b3faf0a619c409ee2dd8fd30d308aba))
405
+
406
+ ## [1.31.2](https://github.com/applandinc/scanner/compare/v1.31.1...v1.31.2) (2022-01-06)
407
+
408
+
409
+ ### Bug Fixes
410
+
411
+ * Upload all findings from ci ([ba0190d](https://github.com/applandinc/scanner/commit/ba0190ded67d74cf8697a5736e9a277fce18ab10))
412
+
413
+ ## [1.31.1](https://github.com/applandinc/scanner/compare/v1.31.0...v1.31.1) (2022-01-06)
414
+
415
+
416
+ ### Bug Fixes
417
+
418
+ * ci command always merges server finding status ([091b932](https://github.com/applandinc/scanner/commit/091b932d12ae91e71afb494124a0c027baae580e))
419
+
420
+ # [1.31.0](https://github.com/applandinc/scanner/compare/v1.30.0...v1.31.0) (2022-01-05)
421
+
422
+
423
+ ### Bug Fixes
424
+
425
+ * Remove postPullRequestComment because it doesn't work ([54f4797](https://github.com/applandinc/scanner/commit/54f4797977c8979d26b95be4890f7793af8434a7))
426
+ * Remove unused imports ([f4e1eeb](https://github.com/applandinc/scanner/commit/f4e1eebc2e1d7cc2b1735623251d3319a496ccef))
427
+ * Update @appland/client ([f48dbd0](https://github.com/applandinc/scanner/commit/f48dbd0bf3d0ba385ac5f8058ee64a2cca2dd12c))
428
+
429
+
430
+ ### Features
431
+
432
+ * Add @appland/models and @appland/client as dependencies ([23559b8](https://github.com/applandinc/scanner/commit/23559b89dfa5bff507e6b96eaee47b82af10bccd))
433
+ * Add CI command to scan, upload, and update commit status ([9c3908f](https://github.com/applandinc/scanner/commit/9c3908fbce819d6feffd0b6e264b6b53b23ee3ed))
434
+ * Fetch finding status from the server and incorporate into the client output ([981729f](https://github.com/applandinc/scanner/commit/981729fccd4455b54fd32eb2c3932e813e18d2b6))
435
+ * Refactor CLI into subcommands ([d27e05f](https://github.com/applandinc/scanner/commit/d27e05f976d0e2a0e8b3f8824e46caee17fc4c83))
436
+ * Remove @appland/models types, use types defined in the package dependency ([f872b5c](https://github.com/applandinc/scanner/commit/f872b5c614519f54adfc029206e324642fce122d))
437
+ * Tune the console report of findings ([34aaf65](https://github.com/applandinc/scanner/commit/34aaf6599e21f4523439a735254948d431bd5dea))
438
+ * Upload findings to AppMap server ([9cf0148](https://github.com/applandinc/scanner/commit/9cf0148e407ef2a990a490dbdd2fbad71055044a))
439
+
440
+ # [1.30.0](https://github.com/applandinc/scanner/compare/v1.29.1...v1.30.0) (2021-12-14)
441
+
442
+
443
+ ### Features
444
+
445
+ * Add additional summary data to the findings report ([5e38336](https://github.com/applandinc/scanner/commit/5e38336b273fb408457b864f9a6f0b759f6775a5))
446
+ * Findings report includes the user-provided configuration ([ac4fda7](https://github.com/applandinc/scanner/commit/ac4fda77edcc31731a31392bca7655f7383c0213))
447
+
448
+ ## [1.29.1](https://github.com/applandinc/scanner/compare/v1.29.0...v1.29.1) (2021-12-10)
449
+
450
+
451
+ ### Bug Fixes
452
+
453
+ * Workaround for event.message being null ([b9408c9](https://github.com/applandinc/scanner/commit/b9408c9d9b3089c2fb919620461f86d8bad2ad4e))
454
+
455
+ # [1.29.0](https://github.com/applandinc/scanner/compare/v1.28.0...v1.29.0) (2021-12-09)
456
+
457
+
458
+ ### Bug Fixes
459
+
460
+ * Let the console handle the line breaks, because they are happening in the wrong place anyway ([51cabe7](https://github.com/applandinc/scanner/commit/51cabe77a13596b1898a32aa6b06bd61129d9365))
461
+
462
+
463
+ ### Features
464
+
465
+ * Continue adding rules ([2d90d2d](https://github.com/applandinc/scanner/commit/2d90d2d6c3b1b77e322346a6a283b1a36367532a))
466
+ * Port tests to new architecture ([07b074a](https://github.com/applandinc/scanner/commit/07b074a91e47ab8f6ba0971c1bdac9eda5bc756f))
467
+ * Separate the rule name from check id ([633ab1f](https://github.com/applandinc/scanner/commit/633ab1f8f7ef9fad31b009baedd776b86536e093))
468
+ * Update @appland/models for upgraded SQL parsing ([717b707](https://github.com/applandinc/scanner/commit/717b70706e1bea81efdae4cee718d1c5340ef8d6))
469
+
470
+ # [1.28.0](https://github.com/applandinc/scanner/compare/v1.27.0...v1.28.0) (2021-12-06)
471
+
472
+
473
+ ### Bug Fixes
474
+
475
+ * Perform unix- and mac-friendly JSON schema fixup ([eedcdae](https://github.com/applandinc/scanner/commit/eedcdaed9f28d47e9e028ff3b203386c4a408ddd))
476
+ * Remove incorrect MatchPatternConfig from schema ([2986007](https://github.com/applandinc/scanner/commit/298600772247672b784d1b83aeb8bbe26da4996f))
477
+
478
+
479
+ ### Features
480
+
481
+ * Implement case-insensitive pattern test ([ee0e825](https://github.com/applandinc/scanner/commit/ee0e82502347dd6ffe506ccded466cb26a3615cd))
482
+ * Unify filter patterns ([ece354d](https://github.com/applandinc/scanner/commit/ece354d6b023eb1bdd53a7a4d2b26482ce6874b7))
483
+
484
+ # [1.27.0](https://github.com/applandinc/scanner/compare/v1.26.0...v1.27.0) (2021-12-04)
485
+
486
+
487
+ ### Features
488
+
489
+ * implement count joins logic in the scanner ([9461db7](https://github.com/applandinc/scanner/commit/9461db7dc7b12ee13aae5c63095c7b2ac65a4b17))
490
+
491
+ # [1.26.0](https://github.com/applandinc/scanner/compare/v1.25.2...v1.26.0) (2021-12-03)
492
+
493
+
494
+ ### Bug Fixes
495
+
496
+ * unbatchedMaterializedQuery handles null ast ([9433d10](https://github.com/applandinc/scanner/commit/9433d100f111b8ebf5f4537d720b4e247ade98f7))
497
+
498
+
499
+ ### Features
500
+
501
+ * Add graph data structures and algorithms ported to TS ([3e56554](https://github.com/applandinc/scanner/commit/3e56554e69f742e4e79e79fd89017ac5955162df))
502
+ * circularDependency scanner ([e24a5cc](https://github.com/applandinc/scanner/commit/e24a5ccd63cf72da8f4d95b064ac2ab228da39e0))
503
+ * Detect all cycles in the graph ([e55b7d4](https://github.com/applandinc/scanner/commit/e55b7d4384d4c2242e7cded8b1a73cf6630fac11))
504
+ * Display a group message and occurrance count ([e64dbf1](https://github.com/applandinc/scanner/commit/e64dbf1f0d77f5b5ba1a6e3f39b3a38cfec73c44))
505
+ * Find specific event sequences that lead to a cycle ([b790053](https://github.com/applandinc/scanner/commit/b7900533f080b86f677c30ee35923623618ec371))
506
+
507
+ ## [1.25.2](https://github.com/applandinc/scanner/compare/v1.25.1...v1.25.2) (2021-12-01)
508
+
509
+
510
+ ### Bug Fixes
511
+
512
+ * Pack JSON files into native binaries ([b39849a](https://github.com/applandinc/scanner/commit/b39849a29c4f658208e771e46992bca59344e20b))
513
+
514
+ ## [1.25.1](https://github.com/applandinc/scanner/compare/v1.25.0...v1.25.1) (2021-12-01)
515
+
516
+
517
+ ### Bug Fixes
518
+
519
+ * Deploy native binaries ([cda6369](https://github.com/applandinc/scanner/commit/cda6369de1fdf59abaa78dceee33e9b1e3d09c82))
520
+
521
+ # [1.25.0](https://github.com/applandinc/scanner/compare/v1.24.1...v1.25.0) (2021-12-01)
522
+
523
+
524
+ ### Bug Fixes
525
+
526
+ * Correct schema of scanner 'exclude' ([42f00be](https://github.com/applandinc/scanner/commit/42f00beb083d13a08e4f8ead34936cf3e6bca6ad))
527
+ * Don't flag authz-before-authn if permission is denied ([03cf321](https://github.com/applandinc/scanner/commit/03cf321236d1d2a2cb240c1e9deed064c1a57f4e))
528
+ * Simplify assertion exclude filter check ([14d4676](https://github.com/applandinc/scanner/commit/14d46763c96cb89bb039bc416b103acc7df21ebd))
529
+
530
+
531
+ ### Features
532
+
533
+ * SQL strings can be filtered ([be3ac6f](https://github.com/applandinc/scanner/commit/be3ac6f679835757c0edb0e9d6ae7e1b65412121))
534
+
535
+ ## [1.24.1](https://github.com/applandinc/scanner/compare/v1.24.0...v1.24.1) (2021-11-29)
536
+
537
+
538
+ ### Bug Fixes
539
+
540
+ * Export labels in assertion spec ([aaf9fbb](https://github.com/applandinc/scanner/commit/aaf9fbb83785ef85161a05e77b6429144bf62ca0))
541
+
542
+ # [1.24.0](https://github.com/applandinc/scanner/compare/v1.23.0...v1.24.0) (2021-11-29)
543
+
544
+
545
+ ### Features
546
+
547
+ * Scanner for job not cancelled ([2ec0488](https://github.com/applandinc/scanner/commit/2ec0488f619de85c4dfaefa3a45addcdffae9816))
548
+
549
+ # [1.23.0](https://github.com/applandinc/scanner/compare/v1.22.2...v1.23.0) (2021-11-22)
550
+
551
+
552
+ ### Bug Fixes
553
+
554
+ * Ensure existance of constants for all labels ([451eddb](https://github.com/applandinc/scanner/commit/451eddb50d486724edb8f3f8117ba21993e63385))
555
+ * Update rails sample app config ([551a67d](https://github.com/applandinc/scanner/commit/551a67dd92ce2a2d02de1aed08f17431cdc2d2a5))
556
+
557
+
558
+ ### Features
559
+
560
+ * Reconcile and standardize scanner options ([e5dcedb](https://github.com/applandinc/scanner/commit/e5dcedbefb4b504ff0752db6d9d51e6e11944bbd))
561
+ * Support regexp or function as filter expression ([88a5fab](https://github.com/applandinc/scanner/commit/88a5fabaf7e6b995f8d730f3221ee7597686cfdb))
562
+ * Validate configuration schema before scanning ([53d4e9d](https://github.com/applandinc/scanner/commit/53d4e9d1395e8020e358000c4e3a8f8f53eb7890))
563
+ * Validate scanner properties against Options defined by JSON schema ([cbd9167](https://github.com/applandinc/scanner/commit/cbd9167a49b3725bab4cfef333750b4c5e806788))
564
+
565
+ ## [1.22.2](https://github.com/applandinc/scanner/compare/v1.22.1...v1.22.2) (2021-11-17)
566
+
567
+
568
+ ### Bug Fixes
569
+
570
+ * Expose finding hash ([6ef2565](https://github.com/applandinc/scanner/commit/6ef256571894c9b5eae4c11ad499c2a148308d85))
571
+
572
+ ## [1.22.1](https://github.com/applandinc/scanner/compare/v1.22.0...v1.22.1) (2021-11-16)
573
+
574
+
575
+ ### Bug Fixes
576
+
577
+ * disable yarn cache ([baae1a3](https://github.com/applandinc/scanner/commit/baae1a37064df1a276941715816940aedc49ad74))
578
+
579
+ # [1.22.0](https://github.com/applandinc/scanner/compare/v1.21.0...v1.22.0) (2021-11-16)
580
+
581
+
582
+ ### Bug Fixes
583
+
584
+ * Copy sampleConfig files to built directory ([f89d7aa](https://github.com/applandinc/scanner/commit/f89d7aac435407b81c07b6cc4c6f107a9950c3d4))
585
+ * Ensure existance of built directory when copying sample config ([0e047ed](https://github.com/applandinc/scanner/commit/0e047edaa3564d771d417ab69e3483d99eafa85c))
586
+ * Fail the scan when no appmap dir or file is specified ([501deae](https://github.com/applandinc/scanner/commit/501deae182fb4aa51d07480ec0de230f78cbf994))
587
+
588
+
589
+ ### Features
590
+
591
+ * Update default config with no-label scanners ([c1c7a6f](https://github.com/applandinc/scanner/commit/c1c7a6fd98b4ce48aebcf144dbb18a963fab18df))
592
+
593
+ # [1.21.0](https://github.com/applandinc/scanner/compare/v1.20.1...v1.21.0) (2021-11-16)
594
+
595
+
596
+ ### Features
597
+
598
+ * Find unbatched materialized query ([2e3535b](https://github.com/applandinc/scanner/commit/2e3535b7443c18b279ef6f5e5901926f064cefff))
599
+ * Specify types for scanner options and export as JSON schema ([ed197ca](https://github.com/applandinc/scanner/commit/ed197cab2db49d7c7adbe8caea537984f9a98676))
600
+
601
+ ## [1.20.1](https://github.com/applandinc/scanner/compare/v1.20.0...v1.20.1) (2021-11-12)
602
+
603
+
604
+ ### Bug Fixes
605
+
606
+ * Remove broken scope 'appmap' ([fad8ffa](https://github.com/applandinc/scanner/commit/fad8ffaa4959db973bacdf7589a208a78c479c40))
607
+ * Update and correct use of scopes and enumerateScope by scanners ([9395113](https://github.com/applandinc/scanner/commit/939511379654f59b89d2976970e3da457062baa9))
608
+ * Update Rails Sample App use of scanners ([1e64211](https://github.com/applandinc/scanner/commit/1e64211854a8b93e4a56272801d4b913b6905c0a))
609
+
610
+ # [1.20.0](https://github.com/applandinc/scanner/compare/v1.19.0...v1.20.0) (2021-11-09)
611
+
612
+
613
+ ### Features
614
+
615
+ * Scan for authorization before authentication ([3d3b1eb](https://github.com/applandinc/scanner/commit/3d3b1eb21870728e02cd4fb064325f7d2e274f89))
616
+
617
+ # [1.19.0](https://github.com/applandinc/scanner/compare/v1.18.0...v1.19.0) (2021-11-09)
618
+
619
+
620
+ ### Bug Fixes
621
+
622
+ * Upgrade semantic-release ([45dad94](https://github.com/applandinc/scanner/commit/45dad947ba13be458cda12ea920dc22ff9d02d94))
623
+
624
+
625
+ ### Features
626
+
627
+ * Scan for too many joins ([1de7bfc](https://github.com/applandinc/scanner/commit/1de7bfcf40b39dd521bc7676ed0842a50a0ef742))
628
+
629
+ # [1.18.0](https://github.com/applandinc/scanner/compare/v1.17.0...v1.18.0) (2021-11-04)
630
+
631
+
632
+ ### Bug Fixes
633
+
634
+ * Disable IDE links when exporting findings to a file ([9bbea63](https://github.com/applandinc/scanner/commit/9bbea638402fc9ed7bce7dd3ef9ebe4ef7a8fea0))
635
+
636
+
637
+ ### Features
638
+
639
+ * Add AssertionSpec type for scanner definitions ([74de27a](https://github.com/applandinc/scanner/commit/74de27a071eeb689950e5e5d1da8c19804d3d537))
640
+ * Add CI integration docs ([1dc0ad4](https://github.com/applandinc/scanner/commit/1dc0ad462f6602f704e737fb737960cff8f65081))
641
+ * Add OpenAPI generation for http_client_request ([1fc93e1](https://github.com/applandinc/scanner/commit/1fc93e181ac6ac1d335a49fda72582f81f13802e))
642
+ * Add scanner for slow method calls ([e5366fa](https://github.com/applandinc/scanner/commit/e5366fa31a4fe506e1ad27c9b0a16f7310f8610b))
643
+ * Analyze and print OpenAPI breaking changes ([858f833](https://github.com/applandinc/scanner/commit/858f83383f136bd329e7e83dd2f488f1c6f2d33e))
644
+ * OpenAPI schema are cached by host ([4b2ac60](https://github.com/applandinc/scanner/commit/4b2ac60d74e326325759ddf0f83b8ab9d3d91ecb))
645
+ * Report distinct finding messages in the final summary ([3f946ba](https://github.com/applandinc/scanner/commit/3f946bab9cc2bf7e8ba83e219687002a6241822f))
646
+
647
+ # [1.17.0](https://github.com/applandinc/scanner/compare/v1.16.0...v1.17.0) (2021-10-21)
648
+
649
+
650
+ ### Bug Fixes
651
+
652
+ * Fix env var name for commit status ([444491c](https://github.com/applandinc/scanner/commit/444491c453113c1eb5b80f4a168e236d86c63f54))
653
+ * Increase the threshold for "too-many-updates" ([0b69a6e](https://github.com/applandinc/scanner/commit/0b69a6eef97d49e036f6d484a2b7ecc9fe1a4314))
654
+ * Remove unused import ([44bb518](https://github.com/applandinc/scanner/commit/44bb5181e023e033c22b41e35c365a9e25680d07))
655
+ * Report the total match number for n+1 and too-many-updates ([ae4c015](https://github.com/applandinc/scanner/commit/ae4c01539ff174401643ca8145df15be348576eb))
656
+
657
+
658
+ ### Features
659
+
660
+ * Assertion can choose whether to check all events in the scope, or just the root ([5993f2c](https://github.com/applandinc/scanner/commit/5993f2c388f155194faa5573c90d2c2ad58d3419))
661
+ * Check rpc-without-circuit-breaker ([8eed0b0](https://github.com/applandinc/scanner/commit/8eed0b0b9f01336f6c52ce9e4f3bc196ddaf0de1))
662
+ * Optional pull request comments ([dd953d2](https://github.com/applandinc/scanner/commit/dd953d2c0636a66e550fdbd67ad7dbf5d4e6e83c))
663
+ * Report related events in a Finding ([9c75bdd](https://github.com/applandinc/scanner/commit/9c75bdd7d2a98db246d914f7d8320a55483d1766))
664
+
665
+ # [1.17.0](https://github.com/applandinc/scanner/compare/v1.16.0...v1.17.0) (2021-10-21)
666
+
667
+
668
+ ### Bug Fixes
669
+
670
+ * Fix env var name for commit status ([444491c](https://github.com/applandinc/scanner/commit/444491c453113c1eb5b80f4a168e236d86c63f54))
671
+ * Increase the threshold for "too-many-updates" ([0b69a6e](https://github.com/applandinc/scanner/commit/0b69a6eef97d49e036f6d484a2b7ecc9fe1a4314))
672
+ * Remove unused import ([44bb518](https://github.com/applandinc/scanner/commit/44bb5181e023e033c22b41e35c365a9e25680d07))
673
+ * Report the total match number for n+1 and too-many-updates ([ae4c015](https://github.com/applandinc/scanner/commit/ae4c01539ff174401643ca8145df15be348576eb))
674
+
675
+
676
+ ### Features
677
+
678
+ * Assertion can choose whether to check all events in the scope, or just the root ([5993f2c](https://github.com/applandinc/scanner/commit/5993f2c388f155194faa5573c90d2c2ad58d3419))
679
+ * Check rpc-without-circuit-breaker ([8eed0b0](https://github.com/applandinc/scanner/commit/8eed0b0b9f01336f6c52ce9e4f3bc196ddaf0de1))
680
+ * Optional pull request comments ([dd953d2](https://github.com/applandinc/scanner/commit/dd953d2c0636a66e550fdbd67ad7dbf5d4e6e83c))
681
+ * Report related events in a Finding ([9c75bdd](https://github.com/applandinc/scanner/commit/9c75bdd7d2a98db246d914f7d8320a55483d1766))
682
+
683
+ # [1.16.0](https://github.com/applandinc/scanner/compare/v1.15.0...v1.16.0) (2021-10-19)
684
+
685
+
686
+ ### Bug Fixes
687
+
688
+ * Fix titled summary ([29dfe5e](https://github.com/applandinc/scanner/commit/29dfe5e9350f9c4108135d4e9aad92f3be376ee3))
689
+
690
+
691
+ ### Features
692
+
693
+ * Add doc/architecture.md ([06ca4c5](https://github.com/applandinc/scanner/commit/06ca4c5bad5380d477cf862ac007d6e3cb88b4eb))
694
+ * Assertion is instantiated once for each scope occurrance, simplifying bookkeeping ([b007bc9](https://github.com/applandinc/scanner/commit/b007bc9094c63296dcf295dcee51eca39a64f475))
695
+ * Describe scopes in architecture doc ([27b1ebb](https://github.com/applandinc/scanner/commit/27b1ebb7244f64dbd062029683621b25adba4f4e))
696
+ * Implement scopes ([07cc23e](https://github.com/applandinc/scanner/commit/07cc23ed871a2ffce6e2dee477a4b259d650cc79))
697
+ * Update architecture doc with Scope concept ([043e4d9](https://github.com/applandinc/scanner/commit/043e4d9babb5f6cc290bfba95336d68fcad1d0de))
698
+
699
+ # [1.15.0](https://github.com/applandinc/scanner/compare/v1.14.0...v1.15.0) (2021-10-15)
700
+
701
+
702
+ ### Features
703
+
704
+ * Illegal package dependency ([1b31cea](https://github.com/applandinc/scanner/commit/1b31cea8ccad8f52470eb880fcfd0d245578ba2f))
705
+
706
+ # [1.14.0](https://github.com/applandinc/scanner/compare/v1.13.0...v1.14.0) (2021-10-15)
707
+
708
+
709
+ ### Bug Fixes
710
+
711
+ * Fix error/warning of n+1 query check ([6065085](https://github.com/applandinc/scanner/commit/606508585c32b1b5705cd62bbf90239295e006a4))
712
+
713
+
714
+ ### Features
715
+
716
+ * Better findings report generation ([0065442](https://github.com/applandinc/scanner/commit/00654427f6850317e948d01d5cde6ae6a2b20c3b))
717
+ * Scan for http 500 error ([dd2dfb6](https://github.com/applandinc/scanner/commit/dd2dfb66983935e4649adfa9c009cf3b5dffe2bf))
718
+
719
+ # [1.13.0](https://github.com/applandinc/scanner/compare/v1.12.4...v1.13.0) (2021-10-15)
720
+
721
+
722
+ ### Bug Fixes
723
+
724
+ * Fix short name for validateBeforeSave ([0cc4bcc](https://github.com/applandinc/scanner/commit/0cc4bccb2fa0fd1ff46fbbc036ebb1c3a934282b))
725
+ * Fixes to scanners ([b1a264a](https://github.com/applandinc/scanner/commit/b1a264a5c9dede1fc38ddfc12281365a09bfe75f))
726
+
727
+
728
+ ### Features
729
+
730
+ * Add JSON reporting ([fe70006](https://github.com/applandinc/scanner/commit/fe700063d9b9f3c4c493178edc9a404e4dd81234))
731
+ * Find insecure comparison of secrets ([fd3f80e](https://github.com/applandinc/scanner/commit/fd3f80ebd520c8cc257dd321e84d23fbd74f7385))
732
+
733
+ ## [1.12.4](https://github.com/applandinc/scanner/compare/v1.12.3...v1.12.4) (2021-10-06)
734
+
735
+
736
+ ### Bug Fixes
737
+
738
+ * await github responses ([ee4fd29](https://github.com/applandinc/scanner/commit/ee4fd29dc3786b1447de5c732d45a8723ebf2081))
739
+
740
+ ## [1.12.3](https://github.com/applandinc/scanner/compare/v1.12.2...v1.12.3) (2021-10-06)
741
+
742
+
743
+ ### Bug Fixes
744
+
745
+ * stringify response object ([69225a9](https://github.com/applandinc/scanner/commit/69225a9dfa1791becfde17a1d882b04f0fd5232f))
746
+
747
+ ## [1.12.2](https://github.com/applandinc/scanner/compare/v1.12.1...v1.12.2) (2021-10-06)
748
+
749
+
750
+ ### Bug Fixes
751
+
752
+ * use callback to print github responses ([7645931](https://github.com/applandinc/scanner/commit/76459314940310c1bc5a79449abbe215d8739bff))
753
+
754
+ ## [1.12.1](https://github.com/applandinc/scanner/compare/v1.12.0...v1.12.1) (2021-10-06)
755
+
756
+
757
+ ### Bug Fixes
758
+
759
+ * print github commit status responses ([c798deb](https://github.com/applandinc/scanner/commit/c798deb3706ada35e7306a482d56e1dbd77e83a9))
760
+
761
+ # [1.12.0](https://github.com/applandinc/scanner/compare/v1.11.2...v1.12.0) (2021-10-05)
762
+
763
+
764
+ ### Features
765
+
766
+ * Configure scanner properties from YAML ([690ed5f](https://github.com/applandinc/scanner/commit/690ed5f4b6dfadde23de11446c1e93abe95ff89e))
767
+ * Enumerate labels which are used in the scanner ([827d56f](https://github.com/applandinc/scanner/commit/827d56fa80ac9c21ac5ce2e09d0552df5b64045d))
768
+
769
+ ## [1.11.2](https://github.com/applandinc/scanner/compare/v1.11.1...v1.11.2) (2021-10-05)
770
+
771
+
772
+ ### Bug Fixes
773
+
774
+ * include secretsRegexes.json into built directory ([b733283](https://github.com/applandinc/scanner/commit/b7332835566f2b7bf03f3b14601cb14b641105dc))
775
+
776
+ ## [1.11.1](https://github.com/applandinc/scanner/compare/v1.11.0...v1.11.1) (2021-10-05)
777
+
778
+
779
+ ### Bug Fixes
780
+
781
+ * properly read owner/repo/sha ([ca02937](https://github.com/applandinc/scanner/commit/ca0293774a552ede96a4804faba2782e815299e7))
782
+
783
+ # [1.11.0](https://github.com/applandinc/scanner/compare/v1.10.0...v1.11.0) (2021-10-01)
784
+
785
+
786
+ ### Bug Fixes
787
+
788
+ * Don't write results into appmap index dir (which may not exist) ([ff402cb](https://github.com/applandinc/scanner/commit/ff402cbbe31636bad48247b1d18549998288075e))
789
+ * Fix declaration of Event#returnValue ([97b4b36](https://github.com/applandinc/scanner/commit/97b4b364587f7f0685719ae1171af0c30ffe265a))
790
+ * Implement proper usage of HTTP status and mime_type ([bb56aef](https://github.com/applandinc/scanner/commit/bb56aef2c7b62520779b40e3dc0fd213ae731c74))
791
+ * Leave absolute paths alone when generating links ([ab9f358](https://github.com/applandinc/scanner/commit/ab9f358151af69529406cee070501d812446b27b))
792
+
793
+
794
+ ### Features
795
+
796
+ * Add a generic secret regexp ([7fa5e22](https://github.com/applandinc/scanner/commit/7fa5e229f145eda8e14f291ad95442216ba8f726))
797
+ * Deeper verbose logging ([970171c](https://github.com/applandinc/scanner/commit/970171c6903e3b6d0fb14324a98135aa7d4717ec))
798
+ * Enable multiple matches, custom messages, and problem level ([206c9b5](https://github.com/applandinc/scanner/commit/206c9b58e457673cb2403666d9c41c834c40c2fe))
799
+ * Enable validation of a single AppMap file ([a75e336](https://github.com/applandinc/scanner/commit/a75e3367c28c8c01bc518b745b9984666e54acea))
800
+ * Find actual allocated secrets in logs ([29471a5](https://github.com/applandinc/scanner/commit/29471a5585f4114744381ec73e91320fe01d79b4))
801
+ * Refactor command printed output and exit status codes ([c6a134a](https://github.com/applandinc/scanner/commit/c6a134ac33cf95c00a80994421f26ecef6806755))
802
+
803
+ # [1.10.0](https://github.com/applandinc/scanner/compare/v1.9.0...v1.10.0) (2021-10-01)
804
+
805
+
806
+ ### Features
807
+
808
+ * Scanner are classes with named fields ([2bce496](https://github.com/applandinc/scanner/commit/2bce4969c715e913430023e182e0369544bc85ca))
809
+
810
+ # [1.9.0](https://github.com/applandinc/scanner/compare/v1.8.0...v1.9.0) (2021-10-01)
811
+
812
+
813
+ ### Features
814
+
815
+ * post commit status to GitHub ([5298ff2](https://github.com/applandinc/scanner/commit/5298ff24e7c1e5feec13a39365584ef181fa64e2))
816
+
817
+ # [1.8.0](https://github.com/applandinc/scanner/compare/v1.7.0...v1.8.0) (2021-09-30)
818
+
819
+
820
+ ### Bug Fixes
821
+
822
+ * Match slow query if any include pattern matches ([1478b9a](https://github.com/applandinc/scanner/commit/1478b9a2d47867ef32621025cc492f0c5420e432))
823
+
824
+
825
+ ### Features
826
+
827
+ * Scan for SQL update in GET/HEAD request ([e00a85e](https://github.com/applandinc/scanner/commit/e00a85e664f21ddfb6f1409633c556f324f4ee86))
828
+
829
+ # [1.7.0](https://github.com/applandinc/scanner/compare/v1.6.2...v1.7.0) (2021-09-29)
830
+
831
+
832
+ ### Features
833
+
834
+ * Update GitHub token format ([e765624](https://github.com/applandinc/scanner/commit/e76562405c8a28c050297f3bb6c5b16f69704f84))
835
+
836
+ ## [1.6.2](https://github.com/applandinc/scanner/compare/v1.6.1...v1.6.2) (2021-09-23)
837
+
838
+
839
+ ### Bug Fixes
840
+
841
+ * replace ms with s ([83f0cf2](https://github.com/applandinc/scanner/commit/83f0cf20f615110c5c5ad6c265df98db0e250364))
842
+
843
+ ## [1.6.1](https://github.com/applandinc/scanner/compare/v1.6.0...v1.6.1) (2021-09-23)
844
+
845
+
846
+ ### Bug Fixes
847
+
848
+ * Update [@appmap](https://github.com/appmap) deps ([f2b1cda](https://github.com/applandinc/scanner/commit/f2b1cdac1b7c1a7bc40f6ad0a3752e7227d5225e))
849
+
850
+ # [1.6.0](https://github.com/applandinc/scanner/compare/v1.5.6...v1.6.0) (2021-09-22)
851
+
852
+
853
+ ### Bug Fixes
854
+
855
+ * Change default assertions config to be .js ([58a9c4d](https://github.com/applandinc/scanner/commit/58a9c4d6421582a3119b1c36b9a61f5ab3978642))
856
+
857
+
858
+ ### Features
859
+
860
+ * Pass state to VS Code links ([94efff9](https://github.com/applandinc/scanner/commit/94efff906a5e97aaeda896641381fec46c930d55))
861
+
862
+ ## [1.5.6](https://github.com/applandinc/scanner/compare/v1.5.5...v1.5.6) (2021-09-21)
863
+
864
+
865
+ ### Bug Fixes
866
+
867
+ * Fix path appmaps for IDE links ([3344d40](https://github.com/applandinc/scanner/commit/3344d405000d345563a79555d14b9c28ef1b01e0))
868
+
869
+ ## [1.5.5](https://github.com/applandinc/scanner/compare/v1.5.4...v1.5.5) (2021-09-21)
870
+
871
+
872
+ ### Bug Fixes
873
+
874
+ * Fix path to appmap's cli ([1f38306](https://github.com/applandinc/scanner/commit/1f383064541684f858d32d80557222a0c7a92c59))
875
+
876
+ ## [1.5.4](https://github.com/applandinc/scanner/compare/v1.5.3...v1.5.4) (2021-09-21)
877
+
878
+
879
+ ### Bug Fixes
880
+
881
+ * Revert bin path ([4d72f53](https://github.com/applandinc/scanner/commit/4d72f53d325896332a30f56ad2d324e6298b28ec))
882
+
883
+ ## [1.5.3](https://github.com/applandinc/scanner/compare/v1.5.2...v1.5.3) (2021-09-21)
884
+
885
+
886
+ ### Bug Fixes
887
+
888
+ * Fix hashbang ([325e4d6](https://github.com/applandinc/scanner/commit/325e4d6420c89de537bc11cedae3ef8a33d9ce45))
889
+
890
+ ## [1.5.2](https://github.com/applandinc/scanner/compare/v1.5.1...v1.5.2) (2021-09-21)
891
+
892
+
893
+ ### Bug Fixes
894
+
895
+ * Add executable with hashbang ([ab42f06](https://github.com/applandinc/scanner/commit/ab42f06605b2b0c740abbbf75cff714a4785eaa4))
896
+
897
+ ## [1.5.1](https://github.com/applandinc/scanner/compare/v1.5.0...v1.5.1) (2021-09-21)
898
+
899
+
900
+ ### Bug Fixes
901
+
902
+ * Fix bin path ([13bdc01](https://github.com/applandinc/scanner/commit/13bdc017e187a78e215da79f69e406972d78e44e))
903
+
904
+ # [1.5.0](https://github.com/applandinc/scanner/compare/v1.4.0...v1.5.0) (2021-09-20)
905
+
906
+
907
+ ### Features
908
+
909
+ * Add summary by scanners ([a3e9465](https://github.com/applandinc/scanner/commit/a3e9465d095e41d82da855d1df35389beb4cea5e))
910
+
911
+ # [1.4.0](https://github.com/applandinc/scanner/compare/v1.3.0...v1.4.0) (2021-09-08)
912
+
913
+
914
+ ### Features
915
+
916
+ * Rename 'failures' to 'matches' ([a1675a6](https://github.com/applandinc/scanner/commit/a1675a65ebf9b6a198113255624247a707aa3d7b))
917
+ * Write scanner results into AppMap index ([ed029bf](https://github.com/applandinc/scanner/commit/ed029bfb40826e4542f55c8a42daa1dbf2b11f56))
918
+
919
+ # [1.3.0](https://github.com/applandinc/scanner/compare/v1.2.0...v1.3.0) (2021-09-08)
920
+
921
+
922
+ ### Bug Fixes
923
+
924
+ * Clarify the role of assertion config id ([d72493a](https://github.com/applandinc/scanner/commit/d72493accc711be1edf48a245df8ed71db3b25fb))
925
+
926
+
927
+ ### Features
928
+
929
+ * Enable configuration of builtin scanners via YAML ([3f3cd16](https://github.com/applandinc/scanner/commit/3f3cd16d25d6dd4b2849eb4f26ab83ba6a00d2cd))
930
+ * Rename some scanners to better indicate the problem ([6338ab2](https://github.com/applandinc/scanner/commit/6338ab2ada1ae767b97dac4a031fa18b2c5fdb2d))
931
+ * typedef EventFilter ([3876792](https://github.com/applandinc/scanner/commit/3876792d09ea683c01efafcec34a367f74912fd9))
932
+
933
+ # [1.2.0](https://github.com/applandinc/scanner/compare/v1.1.0...v1.2.0) (2021-09-08)
934
+
935
+
936
+ ### Bug Fixes
937
+
938
+ * Detect query from view as mvc.template label ([24e164f](https://github.com/applandinc/scanner/commit/24e164f776299bd0b4c90f5d12f14ea7019ba3e0))
939
+ * Don't report repated matches of N+1 query ([9105ac8](https://github.com/applandinc/scanner/commit/9105ac86a740637f02fcc5274af1cb7713408d44))
940
+ * Remove import of string from yargs ([4124d95](https://github.com/applandinc/scanner/commit/4124d95f675074fceb45988fe2bba0c67e9ba0e3))
941
+
942
+
943
+ ### Features
944
+
945
+ * Add new scanners ([99430f2](https://github.com/applandinc/scanner/commit/99430f245db57cf5aa876dbfc8fb0d0c0e491326))
946
+ * Copy query normalization code from @appland/models ([5d49afb](https://github.com/applandinc/scanner/commit/5d49afbe60a8b0f02e7f996eb72ca6fac8d1c2e1))
947
+ * Ensure that certain events are leaf nodes ([4e9d15b](https://github.com/applandinc/scanner/commit/4e9d15b2f79ca097d6d8f42bc61e5d927632b664))
948
+ * Ensure that validate is called before save ([eb20b44](https://github.com/applandinc/scanner/commit/eb20b443dcb9c0cf154261c32f680a9e22e31454))
949
+ * N+1 query scanner ([b767024](https://github.com/applandinc/scanner/commit/b767024eda016519066daa24f0d609873c4aefe2))
950
+
951
+ # [1.1.0](https://github.com/applandinc/scanner/compare/v1.0.1...v1.1.0) (2021-09-07)
952
+
953
+
954
+ ### Features
955
+
956
+ * Read configuration from yaml ([bc166f4](https://github.com/applandinc/scanner/commit/bc166f4dbed7dc4a7cbf7fd58c7d172c6bcac53f))
957
+
958
+ ## [1.0.1](https://github.com/applandinc/scanner/compare/v1.0.0...v1.0.1) (2021-09-07)
959
+
960
+
961
+ ### Bug Fixes
962
+
963
+ * Rename package to `scanners` ([1bd10cd](https://github.com/applandinc/scanner/commit/1bd10cd3bdf1310930a23ebdfec453aa9e700829))
964
+
965
+ # 1.0.0 (2021-09-07)
966
+
967
+
968
+ ### Features
969
+
970
+ * Initial release ([cbea9f3](https://github.com/applandinc/scanner/commit/cbea9f38f5d7f612716a21a3fd7db342f889e88a))