@appland/scanner 1.52.4 → 1.54.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (140) hide show
  1. package/CHANGELOG.md +984 -0
  2. package/built/algorithms/dataStructures/graph/GraphEdge.js +1 -1
  3. package/built/algorithms/dataStructures/graph/GraphEdge.js.map +1 -1
  4. package/built/algorithms/dataStructures/graph/GraphVertex.js +1 -1
  5. package/built/algorithms/dataStructures/graph/GraphVertex.js.map +1 -1
  6. package/built/algorithms/dataStructures/linked-list/LinkedListNode.js +1 -1
  7. package/built/algorithms/dataStructures/linked-list/LinkedListNode.js.map +1 -1
  8. package/built/analyzer/recordSecrets.js +1 -1
  9. package/built/analyzer/recordSecrets.js.map +1 -1
  10. package/built/appMapIndex.js +2 -2
  11. package/built/appMapIndex.js.map +1 -1
  12. package/built/check.js +2 -2
  13. package/built/check.js.map +1 -1
  14. package/built/cli/ci/command.js +1 -1
  15. package/built/cli/ci/command.js.map +1 -1
  16. package/built/cli/fail.js +1 -1
  17. package/built/cli/fail.js.map +1 -1
  18. package/built/cli/merge/command.js +1 -1
  19. package/built/cli/merge/command.js.map +1 -1
  20. package/built/cli/reportUploadURL.js +2 -2
  21. package/built/cli/reportUploadURL.js.map +1 -1
  22. package/built/cli/resolveAppId.js +1 -1
  23. package/built/cli/resolveAppId.js.map +1 -1
  24. package/built/cli/scan/command.js +6 -3
  25. package/built/cli/scan/command.js.map +1 -1
  26. package/built/cli/scan.js +15 -3
  27. package/built/cli/scan.js.map +1 -1
  28. package/built/cli/updateCommitStatus.js +3 -3
  29. package/built/cli/updateCommitStatus.js.map +1 -1
  30. package/built/cli/upload.js +5 -5
  31. package/built/cli/upload.js.map +1 -1
  32. package/built/cli/validateFile.js +1 -1
  33. package/built/cli/validateFile.js.map +1 -1
  34. package/built/cli.js +0 -0
  35. package/built/configuration/configurationProvider.js +19 -15
  36. package/built/configuration/configurationProvider.js.map +1 -1
  37. package/built/database/index.js +1 -1
  38. package/built/database/index.js.map +1 -1
  39. package/built/database/visit.js +1 -1
  40. package/built/database/visit.js.map +1 -1
  41. package/built/integration/appland/app/exists.js +3 -3
  42. package/built/integration/appland/app/exists.js.map +1 -1
  43. package/built/integration/appland/mapset/create.js +1 -1
  44. package/built/integration/appland/mapset/create.js.map +1 -1
  45. package/built/integration/appland/retry.js +2 -2
  46. package/built/integration/appland/retry.js.map +1 -1
  47. package/built/integration/appland/scannerJob/merge.js +1 -1
  48. package/built/integration/appland/scannerJob/merge.js.map +1 -1
  49. package/built/openapi/method.js +1 -1
  50. package/built/openapi/method.js.map +1 -1
  51. package/built/openapi/model.js +1 -1
  52. package/built/openapi/model.js.map +1 -1
  53. package/built/openapi/provider.js +3 -3
  54. package/built/openapi/provider.js.map +1 -1
  55. package/built/report/findingsReport.js +7 -7
  56. package/built/report/findingsReport.js.map +1 -1
  57. package/built/report/summaryReport.js +3 -3
  58. package/built/report/summaryReport.js.map +1 -1
  59. package/built/ruleChecker.js +5 -5
  60. package/built/ruleChecker.js.map +1 -1
  61. package/built/rules/authzBeforeAuthn.js +1 -1
  62. package/built/rules/authzBeforeAuthn.js.map +1 -1
  63. package/built/rules/circularDependency.js +9 -9
  64. package/built/rules/circularDependency.js.map +1 -1
  65. package/built/rules/deserializationOfUntrustedData.js +1 -1
  66. package/built/rules/deserializationOfUntrustedData.js.map +1 -1
  67. package/built/rules/execOfUntrustedCommand.js +1 -1
  68. package/built/rules/execOfUntrustedCommand.js.map +1 -1
  69. package/built/rules/{http500 → http-500}/metadata.js +0 -0
  70. package/built/rules/http-500/metadata.js.map +1 -0
  71. package/built/rules/{http500 → http-500}/rule.js +0 -0
  72. package/built/rules/http-500/rule.js.map +1 -0
  73. package/built/rules/illegalPackageDependency.js +1 -1
  74. package/built/rules/illegalPackageDependency.js.map +1 -1
  75. package/built/rules/incompatibleHttpClientRequest.js +2 -2
  76. package/built/rules/incompatibleHttpClientRequest.js.map +1 -1
  77. package/built/rules/jobNotCancelled.js +2 -2
  78. package/built/rules/jobNotCancelled.js.map +1 -1
  79. package/built/rules/lib/matchEvent.js +1 -1
  80. package/built/rules/lib/matchEvent.js.map +1 -1
  81. package/built/rules/lib/parseRuleDescription.js +2 -1
  82. package/built/rules/lib/parseRuleDescription.js.map +1 -1
  83. package/built/rules/lib/util.js +8 -6
  84. package/built/rules/lib/util.js.map +1 -1
  85. package/built/rules/logoutWithoutSessionReset.js +1 -1
  86. package/built/rules/logoutWithoutSessionReset.js.map +1 -1
  87. package/built/rules/missingAuthentication.js +1 -1
  88. package/built/rules/missingAuthentication.js.map +1 -1
  89. package/built/rules/nPlusOneQuery.js +83 -37
  90. package/built/rules/nPlusOneQuery.js.map +1 -1
  91. package/built/rules/queryFromInvalidPackage.js +1 -1
  92. package/built/rules/queryFromInvalidPackage.js.map +1 -1
  93. package/built/rules/queryFromView.js +1 -1
  94. package/built/rules/queryFromView.js.map +1 -1
  95. package/built/rules/secretInLog.js +6 -2
  96. package/built/rules/secretInLog.js.map +1 -1
  97. package/built/rules/slowFunctionCall.js +1 -1
  98. package/built/rules/slowFunctionCall.js.map +1 -1
  99. package/built/rules/slowHttpServerRequest.js +1 -1
  100. package/built/rules/slowHttpServerRequest.js.map +1 -1
  101. package/built/rules/tooManyJoins.js +1 -1
  102. package/built/rules/tooManyJoins.js.map +1 -1
  103. package/built/rules/tooManyUpdates.js +1 -1
  104. package/built/rules/tooManyUpdates.js.map +1 -1
  105. package/built/rules/unbatchedMaterializedQuery.js +2 -2
  106. package/built/rules/unbatchedMaterializedQuery.js.map +1 -1
  107. package/built/rules/updateInGetRequest.js +1 -1
  108. package/built/rules/updateInGetRequest.js.map +1 -1
  109. package/built/scope/sqlTransactionScope.js +1 -1
  110. package/built/scope/sqlTransactionScope.js.map +1 -1
  111. package/doc/rules/{authzBeforeAuthn.md → authz-before-authn.md} +0 -0
  112. package/doc/rules/{circularDependency.md → circular-dependency.md} +0 -0
  113. package/doc/rules/{deserializationOfUntrustedData.md → deserialization-of-untrusted-data.md} +0 -0
  114. package/doc/rules/{execOfUntrustedCommand.md → exec-of-untrusted-command.md} +0 -0
  115. package/doc/rules/{http500.md → http-500.md} +0 -0
  116. package/doc/rules/{illegalPackageDependency.md → illegal-package-dependency.md} +0 -0
  117. package/doc/rules/{incompatibleHttpClientRequest.md → incompatible-http-client-request.md} +0 -0
  118. package/doc/rules/{insecureCompare.md → insecure-compare.md} +0 -0
  119. package/doc/rules/{jobNotCancelled.md → job-not-cancelled.md} +0 -0
  120. package/doc/rules/{logoutWithoutSessionReset.md → logout-without-session-reset.md} +0 -0
  121. package/doc/rules/{missingAuthentication.md → missing-authentication.md} +5 -4
  122. package/doc/rules/{missingContentType.md → missing-content-type.md} +0 -0
  123. package/doc/rules/{nPlusOneQuery.md → n-plus-one-query.md} +0 -0
  124. package/doc/rules/{queryFromInvalidPackage.md → query-from-invalid-package.md} +0 -0
  125. package/doc/rules/{queryFromView.md → query-from-view.md} +0 -0
  126. package/doc/rules/{rpcWithoutCircuitBreaker.md → rpc-without-circuit-breaker.md} +0 -0
  127. package/doc/rules/{saveWithoutValidation.md → save-without-validation.md} +0 -0
  128. package/doc/rules/{secretInLog.md → secret-in-log.md} +0 -0
  129. package/doc/rules/{slowFunctionCall.md → slow-function-call.md} +0 -0
  130. package/doc/rules/{slowHttpServerRequest.md → slow-http-server-request.md} +0 -0
  131. package/doc/rules/{slowQuery.md → slow-query.md} +0 -0
  132. package/doc/rules/{tooManyJoins.md → too-many-joins.md} +0 -0
  133. package/doc/rules/{tooManyUpdates.md → too-many-updates.md} +0 -0
  134. package/doc/rules/{unbatchedMaterializedQuery.md → unbatched-materialized-query.md} +0 -0
  135. package/doc/rules/{updateInGetRequest.md → update-in-get-request.md} +0 -0
  136. package/package.json +6 -8
  137. package/built/cli/progressReporter.js +0 -16
  138. package/built/cli/progressReporter.js.map +0 -1
  139. package/built/rules/http500/metadata.js.map +0 -1
  140. package/built/rules/http500/rule.js.map +0 -1
package/CHANGELOG.md ADDED
@@ -0,0 +1,984 @@
1
+ # [@appland/scanner-v1.54.0](https://github.com/applandinc/appmap-js/compare/@appland/scanner-v1.53.0...@appland/scanner-v1.54.0) (2022-05-03)
2
+
3
+
4
+ ### Features
5
+
6
+ * N+1 queries must have the same common ancestor ([7edb88b](https://github.com/applandinc/appmap-js/commit/7edb88b3dc3938e9edc718b8279e980abbc06423))
7
+
8
+ # [@appland/scanner-v1.53.0](https://github.com/applandinc/appmap-js/compare/@appland/scanner-v1.52.5...@appland/scanner-v1.53.0) (2022-05-02)
9
+
10
+
11
+ ### Features
12
+
13
+ * Show 0-100% progress bar ([570cc3b](https://github.com/applandinc/appmap-js/commit/570cc3bfa255f6f448100b3c38e667fe6187b242))
14
+
15
+ # [@appland/scanner-v1.52.5](https://github.com/applandinc/appmap-js/compare/@appland/scanner-v1.52.4...@appland/scanner-v1.52.5) (2022-05-02)
16
+
17
+
18
+ ### Bug Fixes
19
+
20
+ * Fix front matter for self-contained rules ([e02b454](https://github.com/applandinc/appmap-js/commit/e02b45443f1eeb2dff564d588559c258ce457446))
21
+
22
+ ## [1.52.4](https://github.com/applandinc/scanner/compare/v1.52.3...v1.52.4) (2022-04-28)
23
+
24
+
25
+ ### Bug Fixes
26
+
27
+ * Don't traverse null property ([19cf111](https://github.com/applandinc/scanner/commit/19cf1117d5ba3a7cc4e56f214a38244814886bac))
28
+
29
+ ## [1.52.3](https://github.com/applandinc/scanner/compare/v1.52.2...v1.52.3) (2022-04-28)
30
+
31
+
32
+ ### Bug Fixes
33
+
34
+ * Don't enable query-from-view by default ([3c87485](https://github.com/applandinc/scanner/commit/3c87485333f18638c18b5a61542691b71d86bda8))
35
+
36
+ ## [1.52.2](https://github.com/applandinc/scanner/compare/v1.52.1...v1.52.2) (2022-04-27)
37
+
38
+
39
+ ### Bug Fixes
40
+
41
+ * Disable circular-dependency in default config ([0fb1864](https://github.com/applandinc/scanner/commit/0fb18644dc6a211f509138689a758d634f02a4bf))
42
+
43
+ ## [1.52.1](https://github.com/applandinc/scanner/compare/v1.52.0...v1.52.1) (2022-04-27)
44
+
45
+
46
+ ### Bug Fixes
47
+
48
+ * Don't traverse a null property value ([eab7ca4](https://github.com/applandinc/scanner/commit/eab7ca4fd18c5473656d4cf473638ec125612832))
49
+
50
+ # [1.52.0](https://github.com/applandinc/scanner/compare/v1.51.1...v1.52.0) (2022-04-07)
51
+
52
+
53
+ ### Features
54
+
55
+ * Rule can be specified in a directory ([e929407](https://github.com/applandinc/scanner/commit/e929407c738aa0f29e55a22de6a06496c87b02ca))
56
+
57
+ ## [1.51.1](https://github.com/applandinc/scanner/compare/v1.51.0...v1.51.1) (2022-04-01)
58
+
59
+
60
+ ### Bug Fixes
61
+
62
+ * Upgrade `@appland/models` to v1.14.5 ([68f2382](https://github.com/applandinc/scanner/commit/68f2382812ef19f5c273a895f51c7e42f58cb7b5))
63
+
64
+ # [1.51.0](https://github.com/applandinc/scanner/compare/v1.50.0...v1.51.0) (2022-03-25)
65
+
66
+
67
+ ### Bug Fixes
68
+
69
+ * Validate appId before running command ([45af060](https://github.com/applandinc/scanner/commit/45af060df4d1f34990162f0089d85ec80569fc9d))
70
+
71
+
72
+ ### Features
73
+
74
+ * 'a' is an alias for 'app' ([4b2d9c7](https://github.com/applandinc/scanner/commit/4b2d9c74b40d41b71c1702fee8f08d7a7d1d1ed2))
75
+
76
+ # [1.50.0](https://github.com/applandinc/scanner/compare/v1.49.1...v1.50.0) (2022-03-25)
77
+
78
+
79
+ ### Bug Fixes
80
+
81
+ * resolve AppMap path via appMapDir ([ef398a4](https://github.com/applandinc/scanner/commit/ef398a43d3cc37e6b26a265151b3a518f82d49d2))
82
+
83
+
84
+ ### Features
85
+
86
+ * Add branch, commit, environment CLI options ([bffa805](https://github.com/applandinc/scanner/commit/bffa805e18936d2b78a8bda546b5bf8bef46ac5b))
87
+ * Resolve git branch and commit from the environment if available ([105f055](https://github.com/applandinc/scanner/commit/105f0559357b7efc25ca0f0ca21832165ad2a0a4))
88
+
89
+ ## [1.49.1](https://github.com/applandinc/scanner/compare/v1.49.0...v1.49.1) (2022-03-23)
90
+
91
+
92
+ ### Bug Fixes
93
+
94
+ * Print count of total and unique findings ([8252b19](https://github.com/applandinc/scanner/commit/8252b19d7df08d4ae1843390d3e9d20e0cadad8a))
95
+ * Provide more complete finding messages ([484d7d2](https://github.com/applandinc/scanner/commit/484d7d291368cec957e1c5322017c25c78b101db))
96
+
97
+ # [1.49.0](https://github.com/applandinc/scanner/compare/v1.48.0...v1.49.0) (2022-03-23)
98
+
99
+
100
+ ### Bug Fixes
101
+
102
+ * Extract multiple secrets from a return value ([3607a93](https://github.com/applandinc/scanner/commit/3607a93a33e94172456699c08ab0056f7205cf6c))
103
+ * Recognize Symbol :failure as return value ([12849f9](https://github.com/applandinc/scanner/commit/12849f9d98d59813b30ed15b04e3eaa567410384))
104
+ * Switch from command scope to root scope ([8372ef5](https://github.com/applandinc/scanner/commit/8372ef522750f01d0c776bf1e7e7629a91134551))
105
+
106
+
107
+ ### Features
108
+
109
+ * Command scope falls back on root scope ([3940eff](https://github.com/applandinc/scanner/commit/3940eff634ac326053dee3c776f20c6c0208ce4c))
110
+ * Rename job and command labels ([112050e](https://github.com/applandinc/scanner/commit/112050ed26066244101ea4fe48a5652d21273b28))
111
+
112
+ # [1.48.0](https://github.com/applandinc/scanner/compare/v1.47.0...v1.48.0) (2022-03-21)
113
+
114
+
115
+ ### Features
116
+
117
+ * Add additional relatedEvents ([91ad9c1](https://github.com/applandinc/scanner/commit/91ad9c1b497f7ea2fb53b3797d005fdbab1165c7))
118
+ * relatedEvents contains the match event ([a0885de](https://github.com/applandinc/scanner/commit/a0885defdf690098e58593735d8a90d058018255))
119
+
120
+ # [1.47.0](https://github.com/applandinc/scanner/compare/v1.46.3...v1.47.0) (2022-03-17)
121
+
122
+
123
+ ### Bug Fixes
124
+
125
+ * Don't fail doc parsing on new docs ([58761f6](https://github.com/applandinc/scanner/commit/58761f6112af8dcd8735b90cd1ba30ea4c08770d))
126
+
127
+
128
+ ### Features
129
+
130
+ * Enable deserializationOfUntrustedData by default ([b99b729](https://github.com/applandinc/scanner/commit/b99b7292e602f20a072543439dea02560b21d250))
131
+ * Enable execOfUntrustedCommand by default ([998c2fe](https://github.com/applandinc/scanner/commit/998c2feb6c75925f5fb9b2035d285ec54b08d9be))
132
+ * Rename 'sanitize' to 'deserialize.sanitize' ([0403ebb](https://github.com/applandinc/scanner/commit/0403ebb3ff49da22137dbcaf729c67b2231750ea))
133
+ * Rename label 'public' to 'access.public' ([098ae70](https://github.com/applandinc/scanner/commit/098ae70825388a9195e38a29b355ba59cf457d6b))
134
+ * Rule for exec-of-untrusted-command ([bea4fb3](https://github.com/applandinc/scanner/commit/bea4fb319972ded78f7d2858c4344ac3a3c05a03))
135
+
136
+ ## [1.46.3](https://github.com/applandinc/scanner/compare/v1.46.2...v1.46.3) (2022-03-17)
137
+
138
+
139
+ ### Bug Fixes
140
+
141
+ * Better error message when server not configured ([e9c7c35](https://github.com/applandinc/scanner/commit/e9c7c35ad809efc1abdc883aa7b8345bf1752aab))
142
+ * Correctly enumerate transaction events ([ecc9bfc](https://github.com/applandinc/scanner/commit/ecc9bfcab8e5b0c35a21db98d5bbfd4d6aca2c5f))
143
+
144
+ ## [1.46.2](https://github.com/applandinc/scanner/compare/v1.46.1...v1.46.2) (2022-03-11)
145
+
146
+
147
+ ### Bug Fixes
148
+
149
+ * Don't error out on extra BEGIN when detecting transactions ([b3938f4](https://github.com/applandinc/scanner/commit/b3938f4397c7c2b9727e707a7df370881ae2cc65))
150
+
151
+ ## [1.46.1](https://github.com/applandinc/scanner/compare/v1.46.0...v1.46.1) (2022-02-17)
152
+
153
+
154
+ ### Bug Fixes
155
+
156
+ * Update SQL parser ([10be27e](https://github.com/applandinc/scanner/commit/10be27e8b365eb9080dfc8ff6edb2ee0d3fadd15))
157
+
158
+ # [1.46.0](https://github.com/applandinc/scanner/compare/v1.45.0...v1.46.0) (2022-02-15)
159
+
160
+
161
+ ### Features
162
+
163
+ * Retry AppMap upload on failure ([136b59a](https://github.com/applandinc/scanner/commit/136b59a5d2f75e1ebfb533f19341680aa3050239))
164
+
165
+ # [1.45.0](https://github.com/applandinc/scanner/compare/v1.44.3...v1.45.0) (2022-02-14)
166
+
167
+
168
+ ### Bug Fixes
169
+
170
+ * Pick up SQL parser fixes ([01904db](https://github.com/applandinc/scanner/commit/01904db4c12ea5f85028c34b066b9cc9bc2ec546))
171
+ * Specify Content-Length in bytes rather than chars ([b24c6a4](https://github.com/applandinc/scanner/commit/b24c6a4f32b0bb7360777ab72aa090c4b91fa810))
172
+
173
+
174
+ ### Features
175
+
176
+ * Pare down the default scan config ([7f48e77](https://github.com/applandinc/scanner/commit/7f48e774b5a48af8657b736dfb619145f9785426))
177
+
178
+ ## [1.44.3](https://github.com/applandinc/scanner/compare/v1.44.2...v1.44.3) (2022-02-11)
179
+
180
+
181
+ ### Bug Fixes
182
+
183
+ * Provide the `metadata` param during AppMap creation ([fc1b39b](https://github.com/applandinc/scanner/commit/fc1b39bb5fc3323ae582fb499c4b9425898a5afe))
184
+
185
+ ## [1.44.2](https://github.com/applandinc/scanner/compare/v1.44.1...v1.44.2) (2022-02-10)
186
+
187
+
188
+ ### Bug Fixes
189
+
190
+ * Add missing dependency 'glob' ([92fe31c](https://github.com/applandinc/scanner/commit/92fe31c8d1367d31a9f21eb6e6225e2fe378432b))
191
+
192
+ ## [1.44.1](https://github.com/applandinc/scanner/compare/v1.44.0...v1.44.1) (2022-02-09)
193
+
194
+
195
+ ### Bug Fixes
196
+
197
+ * Fix 'merge --fail' ([3d371d9](https://github.com/applandinc/scanner/commit/3d371d9cb4512162d8ce6806ee22943ab0143877))
198
+
199
+ # [1.44.0](https://github.com/applandinc/scanner/compare/v1.43.0...v1.44.0) (2022-02-09)
200
+
201
+
202
+ ### Features
203
+
204
+ * Upgrade SQL parser ([6b585e6](https://github.com/applandinc/scanner/commit/6b585e6ea16048f0e57643d6f20528f5da0aadda))
205
+
206
+ # [1.43.0](https://github.com/applandinc/scanner/compare/v1.42.0...v1.43.0) (2022-02-08)
207
+
208
+
209
+ ### Features
210
+
211
+ * Add CLI 'merge' command ([5144b3d](https://github.com/applandinc/scanner/commit/5144b3d883946697442ce5393512367e53db752c))
212
+ * Implement 'merge' command options --fail and --update-commit-status ([49706c2](https://github.com/applandinc/scanner/commit/49706c2ffc7ec7450c5138da8abf3d5f16a49166))
213
+
214
+ # [1.42.0](https://github.com/applandinc/scanner/compare/v1.41.1...v1.42.0) (2022-02-04)
215
+
216
+
217
+ ### Bug Fixes
218
+
219
+ * Integrate the SQL cache and collect performance data ([b0d393b](https://github.com/applandinc/scanner/commit/b0d393b4ab12ce3baeeaebadad1c0184aacc2927))
220
+ * Missing import ([042a79c](https://github.com/applandinc/scanner/commit/042a79cca1552adea0cc7f6339c4eb1abe2e00da))
221
+
222
+
223
+ ### Features
224
+
225
+ * Accelerate scanning by indexing the AppMap ([5414da1](https://github.com/applandinc/scanner/commit/5414da1f628fbd44912c7c89b7f174d438162027))
226
+ * Cache normalized SQL and query AST ([ba3377f](https://github.com/applandinc/scanner/commit/ba3377f002c69379447ab89b83933e6ace7190a5))
227
+ * LRU cache for queries ([14883dd](https://github.com/applandinc/scanner/commit/14883ddd5af636db0320934692b4bf92f223069f))
228
+ * Update @appland/models and implement sqlWarning ([460e2a3](https://github.com/applandinc/scanner/commit/460e2a380b98f2c144cf835445c2da4cae7efa32))
229
+ * Update SQL parser ([691c051](https://github.com/applandinc/scanner/commit/691c051602b2f328a1c6d9eeeac704e3aead684d))
230
+
231
+
232
+ ### Reverts
233
+
234
+ * Remove cache of events by type and label ([28374c2](https://github.com/applandinc/scanner/commit/28374c297d516a0f0a89fce50adedd6ff7044f4f))
235
+
236
+ ## [1.41.1](https://github.com/applandinc/scanner/compare/v1.41.0...v1.41.1) (2022-02-04)
237
+
238
+
239
+ ### Bug Fixes
240
+
241
+ * use relative path for doc files ([2e0b5d6](https://github.com/applandinc/scanner/commit/2e0b5d6febd7ccbe20b4ed489fbc964c68054df1))
242
+
243
+ # [1.41.0](https://github.com/applandinc/scanner/compare/v1.40.3...v1.41.0) (2022-02-04)
244
+
245
+
246
+ ### Features
247
+
248
+ * add description and doc url to rule definitions ([0c237e4](https://github.com/applandinc/scanner/commit/0c237e4d3a4b6a3d6d2c12000d09ffb86fcd390d))
249
+
250
+ ## [1.40.3](https://github.com/applandinc/scanner/compare/v1.40.2...v1.40.3) (2022-02-04)
251
+
252
+
253
+ ### Bug Fixes
254
+
255
+ * Prevent accumulation of AppMap data while scanning ([cd8ff93](https://github.com/applandinc/scanner/commit/cd8ff93846f436e7d73a125304bbb5e7c568cd8d))
256
+
257
+ ## [1.40.2](https://github.com/applandinc/scanner/compare/v1.40.1...v1.40.2) (2022-02-03)
258
+
259
+
260
+ ### Bug Fixes
261
+
262
+ * Upload no longer appends AppMap directory to files ([6e28b1c](https://github.com/applandinc/scanner/commit/6e28b1cd01e0d70b175d568702caacb267d435d2))
263
+
264
+ ## [1.40.1](https://github.com/applandinc/scanner/compare/v1.40.0...v1.40.1) (2022-02-02)
265
+
266
+
267
+ ### Bug Fixes
268
+
269
+ * Resolve a case of unhandled promises during upload ([1bf5f90](https://github.com/applandinc/scanner/commit/1bf5f908236fc0ee9f9410fc889f0afad05b5c48))
270
+
271
+ # [1.40.0](https://github.com/applandinc/scanner/compare/v1.39.1...v1.40.0) (2022-02-02)
272
+
273
+
274
+ ### Bug Fixes
275
+
276
+ * Improve Mapset and Findings upload ([055758b](https://github.com/applandinc/scanner/commit/055758ba3a23a90a62f125ca8eec8cb796471d7b))
277
+ * Remove redundant rule in default.yml sample config ([72ad9f8](https://github.com/applandinc/scanner/commit/72ad9f8f4def9a7ca2f4534545cc72413a86034e))
278
+ * Remove unused import ([bfc3fe6](https://github.com/applandinc/scanner/commit/bfc3fe67823984c20a8055c6843df73996f83856))
279
+ * Use FormData to efficiently upload AppMaps ([b8b43ee](https://github.com/applandinc/scanner/commit/b8b43ee0626207d5302312749cfd7fa5a288c966))
280
+
281
+
282
+ ### Features
283
+
284
+ * Upload AppMaps, then create a Mapset, then Findings ([3403834](https://github.com/applandinc/scanner/commit/3403834dd50c446e7fa59a67038e48016d0e9f1c))
285
+
286
+ ## [1.39.1](https://github.com/applandinc/scanner/compare/v1.39.0...v1.39.1) (2022-02-01)
287
+
288
+
289
+ ### Bug Fixes
290
+
291
+ * Finding hash now includes rule id ([10db345](https://github.com/applandinc/scanner/commit/10db345ef472a45ad2d892a4b1df6bc7f70681cf))
292
+
293
+ # [1.39.0](https://github.com/applandinc/scanner/compare/v1.38.0...v1.39.0) (2022-01-28)
294
+
295
+
296
+ ### Bug Fixes
297
+
298
+ * http-500 looks for 500 status specifically ([02a406f](https://github.com/applandinc/scanner/commit/02a406f50da3fbb33b2f758150a056011610a4cf))
299
+
300
+
301
+ ### Features
302
+
303
+ * Print stack trace in CLI finding output ([edfb41a](https://github.com/applandinc/scanner/commit/edfb41af083902b71676a2899bcac6aa04b0a820))
304
+
305
+ # [1.38.0](https://github.com/applandinc/scanner/compare/v1.37.1...v1.38.0) (2022-01-26)
306
+
307
+
308
+ ### Features
309
+
310
+ * Deduplicate findings in the report ([49b2db9](https://github.com/applandinc/scanner/commit/49b2db920ed702e54915574a322f286825f0d8e2))
311
+
312
+ ## [1.37.1](https://github.com/applandinc/scanner/compare/v1.37.0...v1.37.1) (2022-01-25)
313
+
314
+
315
+ ### Bug Fixes
316
+
317
+ * Fix Java example link ([831afd7](https://github.com/applandinc/scanner/commit/831afd75921cacdd15aa4b6f30cbe821aecbc8cf))
318
+
319
+ # [1.37.0](https://github.com/applandinc/scanner/compare/v1.36.1...v1.37.0) (2022-01-25)
320
+
321
+
322
+ ### Features
323
+
324
+ * Update rule deserializationOfUntrustedData and add a test ([25fa0b5](https://github.com/applandinc/scanner/commit/25fa0b5cb746857c7234eba18160530b795a9acb))
325
+
326
+ ## [1.36.1](https://github.com/applandinc/scanner/compare/v1.36.0...v1.36.1) (2022-01-24)
327
+
328
+
329
+ ### Bug Fixes
330
+
331
+ * Only process a couple appmaps at a time ([0ec9a37](https://github.com/applandinc/scanner/commit/0ec9a377991213d7dd1fe5f152d037ee52ccd86f))
332
+
333
+ # [1.36.0](https://github.com/applandinc/scanner/compare/v1.35.1...v1.36.0) (2022-01-21)
334
+
335
+
336
+ ### Bug Fixes
337
+
338
+ * authz-before-authn finding event is the event that provides authorization ([30c4b50](https://github.com/applandinc/scanner/commit/30c4b503e7005a9d5efe21e72d1a99e596551e79))
339
+
340
+
341
+ ### Features
342
+
343
+ * Add more rules to default config ([06a2bf5](https://github.com/applandinc/scanner/commit/06a2bf5735db83df91771caa5855c57971b43eff))
344
+ * Add rule deserialization-of-untrusted-data ([cb80d48](https://github.com/applandinc/scanner/commit/cb80d48553895b450274629a2e2a085a7b648a98))
345
+ * Add rule logout-without-session-reset ([d7ae001](https://github.com/applandinc/scanner/commit/d7ae001e490540e94d422db93102f5fba1dfb234))
346
+
347
+ ## [1.35.1](https://github.com/applandinc/scanner/compare/v1.35.0...v1.35.1) (2022-01-19)
348
+
349
+
350
+ ### Bug Fixes
351
+
352
+ * Upload the entire findings JSON ([f502d0e](https://github.com/applandinc/scanner/commit/f502d0e646980b580a81c3f87e800e2b6459732a))
353
+
354
+ # [1.35.0](https://github.com/applandinc/scanner/compare/v1.34.1...v1.35.0) (2022-01-18)
355
+
356
+
357
+ ### Features
358
+
359
+ * Update CWE references ([b036dcd](https://github.com/applandinc/scanner/commit/b036dcde862b61ad5aa09a2fe4747c6971a3853c))
360
+
361
+ ## [1.34.1](https://github.com/applandinc/scanner/compare/v1.34.0...v1.34.1) (2022-01-14)
362
+
363
+
364
+ ### Bug Fixes
365
+
366
+ * Upgrade @appland/client to v1.1.3 ([223441a](https://github.com/applandinc/scanner/commit/223441ab9c768482cdc3a1320c3913990401b0ff))
367
+
368
+ # [1.34.0](https://github.com/applandinc/scanner/compare/v1.33.2...v1.34.0) (2022-01-14)
369
+
370
+
371
+ ### Bug Fixes
372
+
373
+ * Replace id with rule in rule doc front matter (reqd by Jekyll) ([ac5391d](https://github.com/applandinc/scanner/commit/ac5391d00672747ac956610275659cc1a110c742))
374
+
375
+
376
+ ### Features
377
+
378
+ * Add references to rule definitions ([d9d29d7](https://github.com/applandinc/scanner/commit/d9d29d7b9a949deae1c746ad9d8bb3c4229e41ee))
379
+ * Add scope to rule doc front matter ([660582d](https://github.com/applandinc/scanner/commit/660582d9e22781a20c77abf9082f50c528f2341c))
380
+ * Add scope to rule doc front matter ([9fa209b](https://github.com/applandinc/scanner/commit/9fa209bba9c3336a8b73ea09075b424c19dd4299))
381
+ * Generate front matter from Rule info ([e1f64fd](https://github.com/applandinc/scanner/commit/e1f64fda238a0b78ec8f4b9301bd1546296ccd7b))
382
+ * Include labels in rule doc front matter ([e4d26ec](https://github.com/applandinc/scanner/commit/e4d26ec3c4ac0d2b51f4f7fe90f900cce120db96))
383
+ * Publish to NPM ([8dc5c85](https://github.com/applandinc/scanner/commit/8dc5c85f48d291048e24aa95212a575e89ad4175))
384
+
385
+ ## [1.33.2](https://github.com/applandinc/scanner/compare/v1.33.1...v1.33.2) (2022-01-12)
386
+
387
+
388
+ ### Bug Fixes
389
+
390
+ * Flag insecure comparison correctly in more cases ([abaf078](https://github.com/applandinc/scanner/commit/abaf078a37ccc8dfe9b85074e26924b130a422c7))
391
+
392
+ ## [1.33.1](https://github.com/applandinc/scanner/compare/v1.33.0...v1.33.1) (2022-01-10)
393
+
394
+
395
+ ### Bug Fixes
396
+
397
+ * Mark package as public ([aa18d96](https://github.com/applandinc/scanner/commit/aa18d96110057c8bb1711e7142ef1f0a7df509be))
398
+
399
+ # [1.33.0](https://github.com/applandinc/scanner/compare/v1.32.0...v1.33.0) (2022-01-10)
400
+
401
+
402
+ ### Features
403
+
404
+ * Publish to NPM ([b39f16d](https://github.com/applandinc/scanner/commit/b39f16d5ab867528d8bcf3cfda67f71e59064a7d))
405
+
406
+ # [1.32.0](https://github.com/applandinc/scanner/compare/v1.31.2...v1.32.0) (2022-01-07)
407
+
408
+
409
+ ### Bug Fixes
410
+
411
+ * Fix default config path ([bb28a87](https://github.com/applandinc/scanner/commit/bb28a87ff25f99d86a44e17b0d7b3cd50a68b32c))
412
+ * Tweak the findings output ([b16f552](https://github.com/applandinc/scanner/commit/b16f5520703a99eff6b51bcf6ce5c3406c13cfb2))
413
+ * Update @appland/models for DFS dependency traversal fix ([bacc707](https://github.com/applandinc/scanner/commit/bacc70748c4df5352bb181f764929c99ffe026a2))
414
+
415
+
416
+ ### Features
417
+
418
+ * Print the path to the scanner config file ([531f531](https://github.com/applandinc/scanner/commit/531f53125b3faf0a619c409ee2dd8fd30d308aba))
419
+
420
+ ## [1.31.2](https://github.com/applandinc/scanner/compare/v1.31.1...v1.31.2) (2022-01-06)
421
+
422
+
423
+ ### Bug Fixes
424
+
425
+ * Upload all findings from ci ([ba0190d](https://github.com/applandinc/scanner/commit/ba0190ded67d74cf8697a5736e9a277fce18ab10))
426
+
427
+ ## [1.31.1](https://github.com/applandinc/scanner/compare/v1.31.0...v1.31.1) (2022-01-06)
428
+
429
+
430
+ ### Bug Fixes
431
+
432
+ * ci command always merges server finding status ([091b932](https://github.com/applandinc/scanner/commit/091b932d12ae91e71afb494124a0c027baae580e))
433
+
434
+ # [1.31.0](https://github.com/applandinc/scanner/compare/v1.30.0...v1.31.0) (2022-01-05)
435
+
436
+
437
+ ### Bug Fixes
438
+
439
+ * Remove postPullRequestComment because it doesn't work ([54f4797](https://github.com/applandinc/scanner/commit/54f4797977c8979d26b95be4890f7793af8434a7))
440
+ * Remove unused imports ([f4e1eeb](https://github.com/applandinc/scanner/commit/f4e1eebc2e1d7cc2b1735623251d3319a496ccef))
441
+ * Update @appland/client ([f48dbd0](https://github.com/applandinc/scanner/commit/f48dbd0bf3d0ba385ac5f8058ee64a2cca2dd12c))
442
+
443
+
444
+ ### Features
445
+
446
+ * Add @appland/models and @appland/client as dependencies ([23559b8](https://github.com/applandinc/scanner/commit/23559b89dfa5bff507e6b96eaee47b82af10bccd))
447
+ * Add CI command to scan, upload, and update commit status ([9c3908f](https://github.com/applandinc/scanner/commit/9c3908fbce819d6feffd0b6e264b6b53b23ee3ed))
448
+ * Fetch finding status from the server and incorporate into the client output ([981729f](https://github.com/applandinc/scanner/commit/981729fccd4455b54fd32eb2c3932e813e18d2b6))
449
+ * Refactor CLI into subcommands ([d27e05f](https://github.com/applandinc/scanner/commit/d27e05f976d0e2a0e8b3f8824e46caee17fc4c83))
450
+ * Remove @appland/models types, use types defined in the package dependency ([f872b5c](https://github.com/applandinc/scanner/commit/f872b5c614519f54adfc029206e324642fce122d))
451
+ * Tune the console report of findings ([34aaf65](https://github.com/applandinc/scanner/commit/34aaf6599e21f4523439a735254948d431bd5dea))
452
+ * Upload findings to AppMap server ([9cf0148](https://github.com/applandinc/scanner/commit/9cf0148e407ef2a990a490dbdd2fbad71055044a))
453
+
454
+ # [1.30.0](https://github.com/applandinc/scanner/compare/v1.29.1...v1.30.0) (2021-12-14)
455
+
456
+
457
+ ### Features
458
+
459
+ * Add additional summary data to the findings report ([5e38336](https://github.com/applandinc/scanner/commit/5e38336b273fb408457b864f9a6f0b759f6775a5))
460
+ * Findings report includes the user-provided configuration ([ac4fda7](https://github.com/applandinc/scanner/commit/ac4fda77edcc31731a31392bca7655f7383c0213))
461
+
462
+ ## [1.29.1](https://github.com/applandinc/scanner/compare/v1.29.0...v1.29.1) (2021-12-10)
463
+
464
+
465
+ ### Bug Fixes
466
+
467
+ * Workaround for event.message being null ([b9408c9](https://github.com/applandinc/scanner/commit/b9408c9d9b3089c2fb919620461f86d8bad2ad4e))
468
+
469
+ # [1.29.0](https://github.com/applandinc/scanner/compare/v1.28.0...v1.29.0) (2021-12-09)
470
+
471
+
472
+ ### Bug Fixes
473
+
474
+ * Let the console handle the line breaks, because they are happening in the wrong place anyway ([51cabe7](https://github.com/applandinc/scanner/commit/51cabe77a13596b1898a32aa6b06bd61129d9365))
475
+
476
+
477
+ ### Features
478
+
479
+ * Continue adding rules ([2d90d2d](https://github.com/applandinc/scanner/commit/2d90d2d6c3b1b77e322346a6a283b1a36367532a))
480
+ * Port tests to new architecture ([07b074a](https://github.com/applandinc/scanner/commit/07b074a91e47ab8f6ba0971c1bdac9eda5bc756f))
481
+ * Separate the rule name from check id ([633ab1f](https://github.com/applandinc/scanner/commit/633ab1f8f7ef9fad31b009baedd776b86536e093))
482
+ * Update @appland/models for upgraded SQL parsing ([717b707](https://github.com/applandinc/scanner/commit/717b70706e1bea81efdae4cee718d1c5340ef8d6))
483
+
484
+ # [1.28.0](https://github.com/applandinc/scanner/compare/v1.27.0...v1.28.0) (2021-12-06)
485
+
486
+
487
+ ### Bug Fixes
488
+
489
+ * Perform unix- and mac-friendly JSON schema fixup ([eedcdae](https://github.com/applandinc/scanner/commit/eedcdaed9f28d47e9e028ff3b203386c4a408ddd))
490
+ * Remove incorrect MatchPatternConfig from schema ([2986007](https://github.com/applandinc/scanner/commit/298600772247672b784d1b83aeb8bbe26da4996f))
491
+
492
+
493
+ ### Features
494
+
495
+ * Implement case-insensitive pattern test ([ee0e825](https://github.com/applandinc/scanner/commit/ee0e82502347dd6ffe506ccded466cb26a3615cd))
496
+ * Unify filter patterns ([ece354d](https://github.com/applandinc/scanner/commit/ece354d6b023eb1bdd53a7a4d2b26482ce6874b7))
497
+
498
+ # [1.27.0](https://github.com/applandinc/scanner/compare/v1.26.0...v1.27.0) (2021-12-04)
499
+
500
+
501
+ ### Features
502
+
503
+ * implement count joins logic in the scanner ([9461db7](https://github.com/applandinc/scanner/commit/9461db7dc7b12ee13aae5c63095c7b2ac65a4b17))
504
+
505
+ # [1.26.0](https://github.com/applandinc/scanner/compare/v1.25.2...v1.26.0) (2021-12-03)
506
+
507
+
508
+ ### Bug Fixes
509
+
510
+ * unbatchedMaterializedQuery handles null ast ([9433d10](https://github.com/applandinc/scanner/commit/9433d100f111b8ebf5f4537d720b4e247ade98f7))
511
+
512
+
513
+ ### Features
514
+
515
+ * Add graph data structures and algorithms ported to TS ([3e56554](https://github.com/applandinc/scanner/commit/3e56554e69f742e4e79e79fd89017ac5955162df))
516
+ * circularDependency scanner ([e24a5cc](https://github.com/applandinc/scanner/commit/e24a5ccd63cf72da8f4d95b064ac2ab228da39e0))
517
+ * Detect all cycles in the graph ([e55b7d4](https://github.com/applandinc/scanner/commit/e55b7d4384d4c2242e7cded8b1a73cf6630fac11))
518
+ * Display a group message and occurrance count ([e64dbf1](https://github.com/applandinc/scanner/commit/e64dbf1f0d77f5b5ba1a6e3f39b3a38cfec73c44))
519
+ * Find specific event sequences that lead to a cycle ([b790053](https://github.com/applandinc/scanner/commit/b7900533f080b86f677c30ee35923623618ec371))
520
+
521
+ ## [1.25.2](https://github.com/applandinc/scanner/compare/v1.25.1...v1.25.2) (2021-12-01)
522
+
523
+
524
+ ### Bug Fixes
525
+
526
+ * Pack JSON files into native binaries ([b39849a](https://github.com/applandinc/scanner/commit/b39849a29c4f658208e771e46992bca59344e20b))
527
+
528
+ ## [1.25.1](https://github.com/applandinc/scanner/compare/v1.25.0...v1.25.1) (2021-12-01)
529
+
530
+
531
+ ### Bug Fixes
532
+
533
+ * Deploy native binaries ([cda6369](https://github.com/applandinc/scanner/commit/cda6369de1fdf59abaa78dceee33e9b1e3d09c82))
534
+
535
+ # [1.25.0](https://github.com/applandinc/scanner/compare/v1.24.1...v1.25.0) (2021-12-01)
536
+
537
+
538
+ ### Bug Fixes
539
+
540
+ * Correct schema of scanner 'exclude' ([42f00be](https://github.com/applandinc/scanner/commit/42f00beb083d13a08e4f8ead34936cf3e6bca6ad))
541
+ * Don't flag authz-before-authn if permission is denied ([03cf321](https://github.com/applandinc/scanner/commit/03cf321236d1d2a2cb240c1e9deed064c1a57f4e))
542
+ * Simplify assertion exclude filter check ([14d4676](https://github.com/applandinc/scanner/commit/14d46763c96cb89bb039bc416b103acc7df21ebd))
543
+
544
+
545
+ ### Features
546
+
547
+ * SQL strings can be filtered ([be3ac6f](https://github.com/applandinc/scanner/commit/be3ac6f679835757c0edb0e9d6ae7e1b65412121))
548
+
549
+ ## [1.24.1](https://github.com/applandinc/scanner/compare/v1.24.0...v1.24.1) (2021-11-29)
550
+
551
+
552
+ ### Bug Fixes
553
+
554
+ * Export labels in assertion spec ([aaf9fbb](https://github.com/applandinc/scanner/commit/aaf9fbb83785ef85161a05e77b6429144bf62ca0))
555
+
556
+ # [1.24.0](https://github.com/applandinc/scanner/compare/v1.23.0...v1.24.0) (2021-11-29)
557
+
558
+
559
+ ### Features
560
+
561
+ * Scanner for job not cancelled ([2ec0488](https://github.com/applandinc/scanner/commit/2ec0488f619de85c4dfaefa3a45addcdffae9816))
562
+
563
+ # [1.23.0](https://github.com/applandinc/scanner/compare/v1.22.2...v1.23.0) (2021-11-22)
564
+
565
+
566
+ ### Bug Fixes
567
+
568
+ * Ensure existance of constants for all labels ([451eddb](https://github.com/applandinc/scanner/commit/451eddb50d486724edb8f3f8117ba21993e63385))
569
+ * Update rails sample app config ([551a67d](https://github.com/applandinc/scanner/commit/551a67dd92ce2a2d02de1aed08f17431cdc2d2a5))
570
+
571
+
572
+ ### Features
573
+
574
+ * Reconcile and standardize scanner options ([e5dcedb](https://github.com/applandinc/scanner/commit/e5dcedbefb4b504ff0752db6d9d51e6e11944bbd))
575
+ * Support regexp or function as filter expression ([88a5fab](https://github.com/applandinc/scanner/commit/88a5fabaf7e6b995f8d730f3221ee7597686cfdb))
576
+ * Validate configuration schema before scanning ([53d4e9d](https://github.com/applandinc/scanner/commit/53d4e9d1395e8020e358000c4e3a8f8f53eb7890))
577
+ * Validate scanner properties against Options defined by JSON schema ([cbd9167](https://github.com/applandinc/scanner/commit/cbd9167a49b3725bab4cfef333750b4c5e806788))
578
+
579
+ ## [1.22.2](https://github.com/applandinc/scanner/compare/v1.22.1...v1.22.2) (2021-11-17)
580
+
581
+
582
+ ### Bug Fixes
583
+
584
+ * Expose finding hash ([6ef2565](https://github.com/applandinc/scanner/commit/6ef256571894c9b5eae4c11ad499c2a148308d85))
585
+
586
+ ## [1.22.1](https://github.com/applandinc/scanner/compare/v1.22.0...v1.22.1) (2021-11-16)
587
+
588
+
589
+ ### Bug Fixes
590
+
591
+ * disable yarn cache ([baae1a3](https://github.com/applandinc/scanner/commit/baae1a37064df1a276941715816940aedc49ad74))
592
+
593
+ # [1.22.0](https://github.com/applandinc/scanner/compare/v1.21.0...v1.22.0) (2021-11-16)
594
+
595
+
596
+ ### Bug Fixes
597
+
598
+ * Copy sampleConfig files to built directory ([f89d7aa](https://github.com/applandinc/scanner/commit/f89d7aac435407b81c07b6cc4c6f107a9950c3d4))
599
+ * Ensure existance of built directory when copying sample config ([0e047ed](https://github.com/applandinc/scanner/commit/0e047edaa3564d771d417ab69e3483d99eafa85c))
600
+ * Fail the scan when no appmap dir or file is specified ([501deae](https://github.com/applandinc/scanner/commit/501deae182fb4aa51d07480ec0de230f78cbf994))
601
+
602
+
603
+ ### Features
604
+
605
+ * Update default config with no-label scanners ([c1c7a6f](https://github.com/applandinc/scanner/commit/c1c7a6fd98b4ce48aebcf144dbb18a963fab18df))
606
+
607
+ # [1.21.0](https://github.com/applandinc/scanner/compare/v1.20.1...v1.21.0) (2021-11-16)
608
+
609
+
610
+ ### Features
611
+
612
+ * Find unbatched materialized query ([2e3535b](https://github.com/applandinc/scanner/commit/2e3535b7443c18b279ef6f5e5901926f064cefff))
613
+ * Specify types for scanner options and export as JSON schema ([ed197ca](https://github.com/applandinc/scanner/commit/ed197cab2db49d7c7adbe8caea537984f9a98676))
614
+
615
+ ## [1.20.1](https://github.com/applandinc/scanner/compare/v1.20.0...v1.20.1) (2021-11-12)
616
+
617
+
618
+ ### Bug Fixes
619
+
620
+ * Remove broken scope 'appmap' ([fad8ffa](https://github.com/applandinc/scanner/commit/fad8ffaa4959db973bacdf7589a208a78c479c40))
621
+ * Update and correct use of scopes and enumerateScope by scanners ([9395113](https://github.com/applandinc/scanner/commit/939511379654f59b89d2976970e3da457062baa9))
622
+ * Update Rails Sample App use of scanners ([1e64211](https://github.com/applandinc/scanner/commit/1e64211854a8b93e4a56272801d4b913b6905c0a))
623
+
624
+ # [1.20.0](https://github.com/applandinc/scanner/compare/v1.19.0...v1.20.0) (2021-11-09)
625
+
626
+
627
+ ### Features
628
+
629
+ * Scan for authorization before authentication ([3d3b1eb](https://github.com/applandinc/scanner/commit/3d3b1eb21870728e02cd4fb064325f7d2e274f89))
630
+
631
+ # [1.19.0](https://github.com/applandinc/scanner/compare/v1.18.0...v1.19.0) (2021-11-09)
632
+
633
+
634
+ ### Bug Fixes
635
+
636
+ * Upgrade semantic-release ([45dad94](https://github.com/applandinc/scanner/commit/45dad947ba13be458cda12ea920dc22ff9d02d94))
637
+
638
+
639
+ ### Features
640
+
641
+ * Scan for too many joins ([1de7bfc](https://github.com/applandinc/scanner/commit/1de7bfcf40b39dd521bc7676ed0842a50a0ef742))
642
+
643
+ # [1.18.0](https://github.com/applandinc/scanner/compare/v1.17.0...v1.18.0) (2021-11-04)
644
+
645
+
646
+ ### Bug Fixes
647
+
648
+ * Disable IDE links when exporting findings to a file ([9bbea63](https://github.com/applandinc/scanner/commit/9bbea638402fc9ed7bce7dd3ef9ebe4ef7a8fea0))
649
+
650
+
651
+ ### Features
652
+
653
+ * Add AssertionSpec type for scanner definitions ([74de27a](https://github.com/applandinc/scanner/commit/74de27a071eeb689950e5e5d1da8c19804d3d537))
654
+ * Add CI integration docs ([1dc0ad4](https://github.com/applandinc/scanner/commit/1dc0ad462f6602f704e737fb737960cff8f65081))
655
+ * Add OpenAPI generation for http_client_request ([1fc93e1](https://github.com/applandinc/scanner/commit/1fc93e181ac6ac1d335a49fda72582f81f13802e))
656
+ * Add scanner for slow method calls ([e5366fa](https://github.com/applandinc/scanner/commit/e5366fa31a4fe506e1ad27c9b0a16f7310f8610b))
657
+ * Analyze and print OpenAPI breaking changes ([858f833](https://github.com/applandinc/scanner/commit/858f83383f136bd329e7e83dd2f488f1c6f2d33e))
658
+ * OpenAPI schema are cached by host ([4b2ac60](https://github.com/applandinc/scanner/commit/4b2ac60d74e326325759ddf0f83b8ab9d3d91ecb))
659
+ * Report distinct finding messages in the final summary ([3f946ba](https://github.com/applandinc/scanner/commit/3f946bab9cc2bf7e8ba83e219687002a6241822f))
660
+
661
+ # [1.17.0](https://github.com/applandinc/scanner/compare/v1.16.0...v1.17.0) (2021-10-21)
662
+
663
+
664
+ ### Bug Fixes
665
+
666
+ * Fix env var name for commit status ([444491c](https://github.com/applandinc/scanner/commit/444491c453113c1eb5b80f4a168e236d86c63f54))
667
+ * Increase the threshold for "too-many-updates" ([0b69a6e](https://github.com/applandinc/scanner/commit/0b69a6eef97d49e036f6d484a2b7ecc9fe1a4314))
668
+ * Remove unused import ([44bb518](https://github.com/applandinc/scanner/commit/44bb5181e023e033c22b41e35c365a9e25680d07))
669
+ * Report the total match number for n+1 and too-many-updates ([ae4c015](https://github.com/applandinc/scanner/commit/ae4c01539ff174401643ca8145df15be348576eb))
670
+
671
+
672
+ ### Features
673
+
674
+ * Assertion can choose whether to check all events in the scope, or just the root ([5993f2c](https://github.com/applandinc/scanner/commit/5993f2c388f155194faa5573c90d2c2ad58d3419))
675
+ * Check rpc-without-circuit-breaker ([8eed0b0](https://github.com/applandinc/scanner/commit/8eed0b0b9f01336f6c52ce9e4f3bc196ddaf0de1))
676
+ * Optional pull request comments ([dd953d2](https://github.com/applandinc/scanner/commit/dd953d2c0636a66e550fdbd67ad7dbf5d4e6e83c))
677
+ * Report related events in a Finding ([9c75bdd](https://github.com/applandinc/scanner/commit/9c75bdd7d2a98db246d914f7d8320a55483d1766))
678
+
679
+ # [1.17.0](https://github.com/applandinc/scanner/compare/v1.16.0...v1.17.0) (2021-10-21)
680
+
681
+
682
+ ### Bug Fixes
683
+
684
+ * Fix env var name for commit status ([444491c](https://github.com/applandinc/scanner/commit/444491c453113c1eb5b80f4a168e236d86c63f54))
685
+ * Increase the threshold for "too-many-updates" ([0b69a6e](https://github.com/applandinc/scanner/commit/0b69a6eef97d49e036f6d484a2b7ecc9fe1a4314))
686
+ * Remove unused import ([44bb518](https://github.com/applandinc/scanner/commit/44bb5181e023e033c22b41e35c365a9e25680d07))
687
+ * Report the total match number for n+1 and too-many-updates ([ae4c015](https://github.com/applandinc/scanner/commit/ae4c01539ff174401643ca8145df15be348576eb))
688
+
689
+
690
+ ### Features
691
+
692
+ * Assertion can choose whether to check all events in the scope, or just the root ([5993f2c](https://github.com/applandinc/scanner/commit/5993f2c388f155194faa5573c90d2c2ad58d3419))
693
+ * Check rpc-without-circuit-breaker ([8eed0b0](https://github.com/applandinc/scanner/commit/8eed0b0b9f01336f6c52ce9e4f3bc196ddaf0de1))
694
+ * Optional pull request comments ([dd953d2](https://github.com/applandinc/scanner/commit/dd953d2c0636a66e550fdbd67ad7dbf5d4e6e83c))
695
+ * Report related events in a Finding ([9c75bdd](https://github.com/applandinc/scanner/commit/9c75bdd7d2a98db246d914f7d8320a55483d1766))
696
+
697
+ # [1.16.0](https://github.com/applandinc/scanner/compare/v1.15.0...v1.16.0) (2021-10-19)
698
+
699
+
700
+ ### Bug Fixes
701
+
702
+ * Fix titled summary ([29dfe5e](https://github.com/applandinc/scanner/commit/29dfe5e9350f9c4108135d4e9aad92f3be376ee3))
703
+
704
+
705
+ ### Features
706
+
707
+ * Add doc/architecture.md ([06ca4c5](https://github.com/applandinc/scanner/commit/06ca4c5bad5380d477cf862ac007d6e3cb88b4eb))
708
+ * Assertion is instantiated once for each scope occurrance, simplifying bookkeeping ([b007bc9](https://github.com/applandinc/scanner/commit/b007bc9094c63296dcf295dcee51eca39a64f475))
709
+ * Describe scopes in architecture doc ([27b1ebb](https://github.com/applandinc/scanner/commit/27b1ebb7244f64dbd062029683621b25adba4f4e))
710
+ * Implement scopes ([07cc23e](https://github.com/applandinc/scanner/commit/07cc23ed871a2ffce6e2dee477a4b259d650cc79))
711
+ * Update architecture doc with Scope concept ([043e4d9](https://github.com/applandinc/scanner/commit/043e4d9babb5f6cc290bfba95336d68fcad1d0de))
712
+
713
+ # [1.15.0](https://github.com/applandinc/scanner/compare/v1.14.0...v1.15.0) (2021-10-15)
714
+
715
+
716
+ ### Features
717
+
718
+ * Illegal package dependency ([1b31cea](https://github.com/applandinc/scanner/commit/1b31cea8ccad8f52470eb880fcfd0d245578ba2f))
719
+
720
+ # [1.14.0](https://github.com/applandinc/scanner/compare/v1.13.0...v1.14.0) (2021-10-15)
721
+
722
+
723
+ ### Bug Fixes
724
+
725
+ * Fix error/warning of n+1 query check ([6065085](https://github.com/applandinc/scanner/commit/606508585c32b1b5705cd62bbf90239295e006a4))
726
+
727
+
728
+ ### Features
729
+
730
+ * Better findings report generation ([0065442](https://github.com/applandinc/scanner/commit/00654427f6850317e948d01d5cde6ae6a2b20c3b))
731
+ * Scan for http 500 error ([dd2dfb6](https://github.com/applandinc/scanner/commit/dd2dfb66983935e4649adfa9c009cf3b5dffe2bf))
732
+
733
+ # [1.13.0](https://github.com/applandinc/scanner/compare/v1.12.4...v1.13.0) (2021-10-15)
734
+
735
+
736
+ ### Bug Fixes
737
+
738
+ * Fix short name for validateBeforeSave ([0cc4bcc](https://github.com/applandinc/scanner/commit/0cc4bccb2fa0fd1ff46fbbc036ebb1c3a934282b))
739
+ * Fixes to scanners ([b1a264a](https://github.com/applandinc/scanner/commit/b1a264a5c9dede1fc38ddfc12281365a09bfe75f))
740
+
741
+
742
+ ### Features
743
+
744
+ * Add JSON reporting ([fe70006](https://github.com/applandinc/scanner/commit/fe700063d9b9f3c4c493178edc9a404e4dd81234))
745
+ * Find insecure comparison of secrets ([fd3f80e](https://github.com/applandinc/scanner/commit/fd3f80ebd520c8cc257dd321e84d23fbd74f7385))
746
+
747
+ ## [1.12.4](https://github.com/applandinc/scanner/compare/v1.12.3...v1.12.4) (2021-10-06)
748
+
749
+
750
+ ### Bug Fixes
751
+
752
+ * await github responses ([ee4fd29](https://github.com/applandinc/scanner/commit/ee4fd29dc3786b1447de5c732d45a8723ebf2081))
753
+
754
+ ## [1.12.3](https://github.com/applandinc/scanner/compare/v1.12.2...v1.12.3) (2021-10-06)
755
+
756
+
757
+ ### Bug Fixes
758
+
759
+ * stringify response object ([69225a9](https://github.com/applandinc/scanner/commit/69225a9dfa1791becfde17a1d882b04f0fd5232f))
760
+
761
+ ## [1.12.2](https://github.com/applandinc/scanner/compare/v1.12.1...v1.12.2) (2021-10-06)
762
+
763
+
764
+ ### Bug Fixes
765
+
766
+ * use callback to print github responses ([7645931](https://github.com/applandinc/scanner/commit/76459314940310c1bc5a79449abbe215d8739bff))
767
+
768
+ ## [1.12.1](https://github.com/applandinc/scanner/compare/v1.12.0...v1.12.1) (2021-10-06)
769
+
770
+
771
+ ### Bug Fixes
772
+
773
+ * print github commit status responses ([c798deb](https://github.com/applandinc/scanner/commit/c798deb3706ada35e7306a482d56e1dbd77e83a9))
774
+
775
+ # [1.12.0](https://github.com/applandinc/scanner/compare/v1.11.2...v1.12.0) (2021-10-05)
776
+
777
+
778
+ ### Features
779
+
780
+ * Configure scanner properties from YAML ([690ed5f](https://github.com/applandinc/scanner/commit/690ed5f4b6dfadde23de11446c1e93abe95ff89e))
781
+ * Enumerate labels which are used in the scanner ([827d56f](https://github.com/applandinc/scanner/commit/827d56fa80ac9c21ac5ce2e09d0552df5b64045d))
782
+
783
+ ## [1.11.2](https://github.com/applandinc/scanner/compare/v1.11.1...v1.11.2) (2021-10-05)
784
+
785
+
786
+ ### Bug Fixes
787
+
788
+ * include secretsRegexes.json into built directory ([b733283](https://github.com/applandinc/scanner/commit/b7332835566f2b7bf03f3b14601cb14b641105dc))
789
+
790
+ ## [1.11.1](https://github.com/applandinc/scanner/compare/v1.11.0...v1.11.1) (2021-10-05)
791
+
792
+
793
+ ### Bug Fixes
794
+
795
+ * properly read owner/repo/sha ([ca02937](https://github.com/applandinc/scanner/commit/ca0293774a552ede96a4804faba2782e815299e7))
796
+
797
+ # [1.11.0](https://github.com/applandinc/scanner/compare/v1.10.0...v1.11.0) (2021-10-01)
798
+
799
+
800
+ ### Bug Fixes
801
+
802
+ * Don't write results into appmap index dir (which may not exist) ([ff402cb](https://github.com/applandinc/scanner/commit/ff402cbbe31636bad48247b1d18549998288075e))
803
+ * Fix declaration of Event#returnValue ([97b4b36](https://github.com/applandinc/scanner/commit/97b4b364587f7f0685719ae1171af0c30ffe265a))
804
+ * Implement proper usage of HTTP status and mime_type ([bb56aef](https://github.com/applandinc/scanner/commit/bb56aef2c7b62520779b40e3dc0fd213ae731c74))
805
+ * Leave absolute paths alone when generating links ([ab9f358](https://github.com/applandinc/scanner/commit/ab9f358151af69529406cee070501d812446b27b))
806
+
807
+
808
+ ### Features
809
+
810
+ * Add a generic secret regexp ([7fa5e22](https://github.com/applandinc/scanner/commit/7fa5e229f145eda8e14f291ad95442216ba8f726))
811
+ * Deeper verbose logging ([970171c](https://github.com/applandinc/scanner/commit/970171c6903e3b6d0fb14324a98135aa7d4717ec))
812
+ * Enable multiple matches, custom messages, and problem level ([206c9b5](https://github.com/applandinc/scanner/commit/206c9b58e457673cb2403666d9c41c834c40c2fe))
813
+ * Enable validation of a single AppMap file ([a75e336](https://github.com/applandinc/scanner/commit/a75e3367c28c8c01bc518b745b9984666e54acea))
814
+ * Find actual allocated secrets in logs ([29471a5](https://github.com/applandinc/scanner/commit/29471a5585f4114744381ec73e91320fe01d79b4))
815
+ * Refactor command printed output and exit status codes ([c6a134a](https://github.com/applandinc/scanner/commit/c6a134ac33cf95c00a80994421f26ecef6806755))
816
+
817
+ # [1.10.0](https://github.com/applandinc/scanner/compare/v1.9.0...v1.10.0) (2021-10-01)
818
+
819
+
820
+ ### Features
821
+
822
+ * Scanner are classes with named fields ([2bce496](https://github.com/applandinc/scanner/commit/2bce4969c715e913430023e182e0369544bc85ca))
823
+
824
+ # [1.9.0](https://github.com/applandinc/scanner/compare/v1.8.0...v1.9.0) (2021-10-01)
825
+
826
+
827
+ ### Features
828
+
829
+ * post commit status to GitHub ([5298ff2](https://github.com/applandinc/scanner/commit/5298ff24e7c1e5feec13a39365584ef181fa64e2))
830
+
831
+ # [1.8.0](https://github.com/applandinc/scanner/compare/v1.7.0...v1.8.0) (2021-09-30)
832
+
833
+
834
+ ### Bug Fixes
835
+
836
+ * Match slow query if any include pattern matches ([1478b9a](https://github.com/applandinc/scanner/commit/1478b9a2d47867ef32621025cc492f0c5420e432))
837
+
838
+
839
+ ### Features
840
+
841
+ * Scan for SQL update in GET/HEAD request ([e00a85e](https://github.com/applandinc/scanner/commit/e00a85e664f21ddfb6f1409633c556f324f4ee86))
842
+
843
+ # [1.7.0](https://github.com/applandinc/scanner/compare/v1.6.2...v1.7.0) (2021-09-29)
844
+
845
+
846
+ ### Features
847
+
848
+ * Update GitHub token format ([e765624](https://github.com/applandinc/scanner/commit/e76562405c8a28c050297f3bb6c5b16f69704f84))
849
+
850
+ ## [1.6.2](https://github.com/applandinc/scanner/compare/v1.6.1...v1.6.2) (2021-09-23)
851
+
852
+
853
+ ### Bug Fixes
854
+
855
+ * replace ms with s ([83f0cf2](https://github.com/applandinc/scanner/commit/83f0cf20f615110c5c5ad6c265df98db0e250364))
856
+
857
+ ## [1.6.1](https://github.com/applandinc/scanner/compare/v1.6.0...v1.6.1) (2021-09-23)
858
+
859
+
860
+ ### Bug Fixes
861
+
862
+ * Update [@appmap](https://github.com/appmap) deps ([f2b1cda](https://github.com/applandinc/scanner/commit/f2b1cdac1b7c1a7bc40f6ad0a3752e7227d5225e))
863
+
864
+ # [1.6.0](https://github.com/applandinc/scanner/compare/v1.5.6...v1.6.0) (2021-09-22)
865
+
866
+
867
+ ### Bug Fixes
868
+
869
+ * Change default assertions config to be .js ([58a9c4d](https://github.com/applandinc/scanner/commit/58a9c4d6421582a3119b1c36b9a61f5ab3978642))
870
+
871
+
872
+ ### Features
873
+
874
+ * Pass state to VS Code links ([94efff9](https://github.com/applandinc/scanner/commit/94efff906a5e97aaeda896641381fec46c930d55))
875
+
876
+ ## [1.5.6](https://github.com/applandinc/scanner/compare/v1.5.5...v1.5.6) (2021-09-21)
877
+
878
+
879
+ ### Bug Fixes
880
+
881
+ * Fix path appmaps for IDE links ([3344d40](https://github.com/applandinc/scanner/commit/3344d405000d345563a79555d14b9c28ef1b01e0))
882
+
883
+ ## [1.5.5](https://github.com/applandinc/scanner/compare/v1.5.4...v1.5.5) (2021-09-21)
884
+
885
+
886
+ ### Bug Fixes
887
+
888
+ * Fix path to appmap's cli ([1f38306](https://github.com/applandinc/scanner/commit/1f383064541684f858d32d80557222a0c7a92c59))
889
+
890
+ ## [1.5.4](https://github.com/applandinc/scanner/compare/v1.5.3...v1.5.4) (2021-09-21)
891
+
892
+
893
+ ### Bug Fixes
894
+
895
+ * Revert bin path ([4d72f53](https://github.com/applandinc/scanner/commit/4d72f53d325896332a30f56ad2d324e6298b28ec))
896
+
897
+ ## [1.5.3](https://github.com/applandinc/scanner/compare/v1.5.2...v1.5.3) (2021-09-21)
898
+
899
+
900
+ ### Bug Fixes
901
+
902
+ * Fix hashbang ([325e4d6](https://github.com/applandinc/scanner/commit/325e4d6420c89de537bc11cedae3ef8a33d9ce45))
903
+
904
+ ## [1.5.2](https://github.com/applandinc/scanner/compare/v1.5.1...v1.5.2) (2021-09-21)
905
+
906
+
907
+ ### Bug Fixes
908
+
909
+ * Add executable with hashbang ([ab42f06](https://github.com/applandinc/scanner/commit/ab42f06605b2b0c740abbbf75cff714a4785eaa4))
910
+
911
+ ## [1.5.1](https://github.com/applandinc/scanner/compare/v1.5.0...v1.5.1) (2021-09-21)
912
+
913
+
914
+ ### Bug Fixes
915
+
916
+ * Fix bin path ([13bdc01](https://github.com/applandinc/scanner/commit/13bdc017e187a78e215da79f69e406972d78e44e))
917
+
918
+ # [1.5.0](https://github.com/applandinc/scanner/compare/v1.4.0...v1.5.0) (2021-09-20)
919
+
920
+
921
+ ### Features
922
+
923
+ * Add summary by scanners ([a3e9465](https://github.com/applandinc/scanner/commit/a3e9465d095e41d82da855d1df35389beb4cea5e))
924
+
925
+ # [1.4.0](https://github.com/applandinc/scanner/compare/v1.3.0...v1.4.0) (2021-09-08)
926
+
927
+
928
+ ### Features
929
+
930
+ * Rename 'failures' to 'matches' ([a1675a6](https://github.com/applandinc/scanner/commit/a1675a65ebf9b6a198113255624247a707aa3d7b))
931
+ * Write scanner results into AppMap index ([ed029bf](https://github.com/applandinc/scanner/commit/ed029bfb40826e4542f55c8a42daa1dbf2b11f56))
932
+
933
+ # [1.3.0](https://github.com/applandinc/scanner/compare/v1.2.0...v1.3.0) (2021-09-08)
934
+
935
+
936
+ ### Bug Fixes
937
+
938
+ * Clarify the role of assertion config id ([d72493a](https://github.com/applandinc/scanner/commit/d72493accc711be1edf48a245df8ed71db3b25fb))
939
+
940
+
941
+ ### Features
942
+
943
+ * Enable configuration of builtin scanners via YAML ([3f3cd16](https://github.com/applandinc/scanner/commit/3f3cd16d25d6dd4b2849eb4f26ab83ba6a00d2cd))
944
+ * Rename some scanners to better indicate the problem ([6338ab2](https://github.com/applandinc/scanner/commit/6338ab2ada1ae767b97dac4a031fa18b2c5fdb2d))
945
+ * typedef EventFilter ([3876792](https://github.com/applandinc/scanner/commit/3876792d09ea683c01efafcec34a367f74912fd9))
946
+
947
+ # [1.2.0](https://github.com/applandinc/scanner/compare/v1.1.0...v1.2.0) (2021-09-08)
948
+
949
+
950
+ ### Bug Fixes
951
+
952
+ * Detect query from view as mvc.template label ([24e164f](https://github.com/applandinc/scanner/commit/24e164f776299bd0b4c90f5d12f14ea7019ba3e0))
953
+ * Don't report repated matches of N+1 query ([9105ac8](https://github.com/applandinc/scanner/commit/9105ac86a740637f02fcc5274af1cb7713408d44))
954
+ * Remove import of string from yargs ([4124d95](https://github.com/applandinc/scanner/commit/4124d95f675074fceb45988fe2bba0c67e9ba0e3))
955
+
956
+
957
+ ### Features
958
+
959
+ * Add new scanners ([99430f2](https://github.com/applandinc/scanner/commit/99430f245db57cf5aa876dbfc8fb0d0c0e491326))
960
+ * Copy query normalization code from @appland/models ([5d49afb](https://github.com/applandinc/scanner/commit/5d49afbe60a8b0f02e7f996eb72ca6fac8d1c2e1))
961
+ * Ensure that certain events are leaf nodes ([4e9d15b](https://github.com/applandinc/scanner/commit/4e9d15b2f79ca097d6d8f42bc61e5d927632b664))
962
+ * Ensure that validate is called before save ([eb20b44](https://github.com/applandinc/scanner/commit/eb20b443dcb9c0cf154261c32f680a9e22e31454))
963
+ * N+1 query scanner ([b767024](https://github.com/applandinc/scanner/commit/b767024eda016519066daa24f0d609873c4aefe2))
964
+
965
+ # [1.1.0](https://github.com/applandinc/scanner/compare/v1.0.1...v1.1.0) (2021-09-07)
966
+
967
+
968
+ ### Features
969
+
970
+ * Read configuration from yaml ([bc166f4](https://github.com/applandinc/scanner/commit/bc166f4dbed7dc4a7cbf7fd58c7d172c6bcac53f))
971
+
972
+ ## [1.0.1](https://github.com/applandinc/scanner/compare/v1.0.0...v1.0.1) (2021-09-07)
973
+
974
+
975
+ ### Bug Fixes
976
+
977
+ * Rename package to `scanners` ([1bd10cd](https://github.com/applandinc/scanner/commit/1bd10cd3bdf1310930a23ebdfec453aa9e700829))
978
+
979
+ # 1.0.0 (2021-09-07)
980
+
981
+
982
+ ### Features
983
+
984
+ * Initial release ([cbea9f3](https://github.com/applandinc/scanner/commit/cbea9f38f5d7f612716a21a3fd7db342f889e88a))