@clear-capabilities/agentic-security-scanner 0.75.0 → 0.76.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/CHANGELOG.md +57 -0
  2. package/bin/.agentic-security/findings.json +3 -3
  3. package/bin/.agentic-security/last-scan.json +3 -3
  4. package/bin/.agentic-security/last-scan.json.sig +1 -1
  5. package/bin/.agentic-security/scan-history.json +16 -11
  6. package/bin/.agentic-security/streak.json +2 -2
  7. package/bin/agentic-security.js +2 -2
  8. package/dist/838.index.js +152 -0
  9. package/dist/985.index.js +1769 -0
  10. package/dist/agentic-security.mjs +1 -1
  11. package/dist/agentic-security.mjs.sha256 +1 -1
  12. package/package.json +2 -2
  13. package/src/mcp/.agentic-security/findings.json +133 -88
  14. package/src/mcp/.agentic-security/last-scan.json +133 -88
  15. package/src/mcp/.agentic-security/last-scan.json.sig +1 -1
  16. package/src/mcp/.agentic-security/scan-history.json +138 -81
  17. package/src/mcp/.agentic-security/streak.json +4 -4
  18. package/src/mcp/tools.js +17 -2
  19. package/src/sca/.agentic-security/findings.json +1096 -0
  20. package/src/sca/.agentic-security/last-scan.json +1096 -0
  21. package/src/sca/.agentic-security/last-scan.json.sig +1 -0
  22. package/src/sca/.agentic-security/scan-history.json +18 -0
  23. package/src/sca/.agentic-security/streak.json +21 -0
  24. package/src/sca/base-images.json +1 -1
package/src/sca/.agentic-security/last-scan.json.sig ADDED
@@ -0,0 +1 @@
1
+ 99342b625fc05a5daa6e457c0c180e75928cf8fe5611afc10e69bba1b32c2f9d
package/src/sca/.agentic-security/scan-history.json ADDED
@@ -0,0 +1,18 @@
1
+ [
2
+ {
3
+ "timestamp": "2026-05-21T18:12:54.729Z",
4
+ "label": "scan",
5
+ "total": 4,
6
+ "critical": 0,
7
+ "high": 0,
8
+ "medium": 4,
9
+ "low": 0,
10
+ "kev": 0,
11
+ "ids": [
12
+ "struct:dep-confusion.js:56:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
13
+ "struct:dep-confusion.js:58:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
14
+ "struct:sarif-ingest.js:112:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
15
+ "toctou-fs:dep-confusion.js:56"
16
+ ]
17
+ }
18
+ ]
package/src/sca/.agentic-security/streak.json ADDED
@@ -0,0 +1,21 @@
1
+ {
2
+ "firstScanDate": "2026-05-21T18:12:54.750Z",
3
+ "lastScanDate": "2026-05-21T18:12:54.750Z",
4
+ "totalScans": 1,
5
+ "daysCleanCritical": 1,
6
+ "lastCleanDate": "2026-05-21",
7
+ "lastCriticalDate": null,
8
+ "hasEverHadCritical": false,
9
+ "bestDaysCleanCritical": 1,
10
+ "totalFindingsAtFirstScan": 5,
11
+ "totalFindingsAtLastScan": 5,
12
+ "totalFixesInferred": 0,
13
+ "lastGrade": "A",
14
+ "bestGrade": "A",
15
+ "launchCheckPassedAt": null,
16
+ "achievements": [
17
+ "first-scan",
18
+ "grade-a"
19
+ ],
20
+ "previousGrade": null
21
+ }
package/src/sca/base-images.json CHANGED
@@ -32,7 +32,7 @@
32
32
  "14": { "sev": "critical", "eol": "2023-04-30", "message": "Node.js 14 reached EOL on 2023-04-30." },
33
33
  "16": { "sev": "high", "eol": "2023-09-11", "message": "Node.js 16 reached EOL on 2023-09-11." },
34
34
  "18": { "sev": "low", "eol": "2025-04-30", "message": "Node.js 18 enters EOL on 2025-04-30." },
35
- "latest": { "sev": "low", "eol": null, "message": "node:latest is a floating tag — pin to an LTS (e.g. node:22-alpine)." }
35
+ "latest": { "sev": "low", "eol": null, "message": "node:latest is a floating tag — pin to an LTS (e.g. node:24-alpine)." }
36
36
  },
37
37
  "python": {
38
38
  "2": { "sev": "critical", "eol": "2020-01-01", "message": "Python 2 reached EOL on 2020-01-01. Migrate to Python 3." },