@eurekadevsecops/radar 1.9.6 → 1.9.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -12,8 +12,7 @@ jobs:
|
|
|
12
12
|
name: Security Scan
|
|
13
13
|
runs-on: ubuntu-latest
|
|
14
14
|
steps:
|
|
15
|
-
- uses: eurekadevsecops/scan-action@
|
|
15
|
+
- uses: eurekadevsecops/scan-action@v2
|
|
16
16
|
with:
|
|
17
17
|
scanners: gitleaks,opengrep,grype
|
|
18
18
|
token: ${{ secrets.EUREKA_AGENT_TOKEN }}
|
|
19
|
-
profile: ${{ vars.EUREKA_PROFILE }}
|
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,12 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [1.9.7](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.6...v1.9.7) (2026-01-29)
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
### CI/CD
|
|
7
|
+
|
|
8
|
+
* Upgrade to scan-action@v2 ([#55](https://github.com/EurekaDevSecOps/radarctl/issues/55)) ([48a26a3](https://github.com/EurekaDevSecOps/radarctl/commit/48a26a3f8a5874cb9d2ea976a695ee53a8eb5940))
|
|
9
|
+
|
|
3
10
|
## [1.9.6](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.5...v1.9.6) (2026-01-23)
|
|
4
11
|
|
|
5
12
|
|
package/README.md
CHANGED
|
@@ -256,16 +256,15 @@ radar scan -s opengrep,gitleaks,grype -o report.sarif
|
|
|
256
256
|
|
|
257
257
|
### Upload Findings to Eureka ASPM
|
|
258
258
|
|
|
259
|
-
See all findings in one place with deduplication, trend tracking, and risk prioritization. To upload results to **Eureka ASPM**, provide your API credentials
|
|
259
|
+
See all findings in one place with deduplication, trend tracking, and risk prioritization. To upload results to **Eureka ASPM**, provide your API credentials through the `EUREKA_AGENT_TOKEN` environment variable. When set, Radar CLI automatically uploads results after each scan — letting you view your full scan history and all findings in the **Eureka ASPM Dashboard**.
|
|
260
260
|
|
|
261
261
|
```bash
|
|
262
262
|
export EUREKA_AGENT_TOKEN=<your token>
|
|
263
|
-
export EUREKA_PROFILE=<your profile ID>
|
|
264
263
|
|
|
265
264
|
radar scan -s opengrep,gitleaks,grype
|
|
266
265
|
```
|
|
267
266
|
|
|
268
|
-
NOTE: To prevent Radar CLI from uploading scan findings even when you have `EUREKA_AGENT_TOKEN`
|
|
267
|
+
NOTE: To prevent Radar CLI from uploading scan findings even when you have `EUREKA_AGENT_TOKEN` set, you can pass the `-l/--local` option on the command line.
|
|
269
268
|
|
|
270
269
|
---
|
|
271
270
|
|
|
@@ -289,7 +288,6 @@ Telemetry is **off by default**.
|
|
|
289
288
|
Radar does **not** send any data externally unless you explicitly provide:
|
|
290
289
|
|
|
291
290
|
* `EUREKA_AGENT_TOKEN`
|
|
292
|
-
* `EUREKA_PROFILE`
|
|
293
291
|
|
|
294
292
|
When provided:
|
|
295
293
|
|
|
@@ -307,7 +305,7 @@ When omitted:
|
|
|
307
305
|
| Issue | Cause | Solution |
|
|
308
306
|
| --------------------------------------------- | ----------------------------------- | --------------------------------------------------------- |
|
|
309
307
|
| ❌ `report.sarif` not found | Scan failed or invalid scanner list | Check scanner names and ensure Docker is running |
|
|
310
|
-
| ⚠️ No findings uploaded | Missing or invalid token
|
|
308
|
+
| ⚠️ No findings uploaded | Missing or invalid token | Set `EUREKA_AGENT_TOKEN` |
|
|
311
309
|
| 🧱 `radar: command not found` | CLI not installed globally | Run `npm i -g @eurekadevsecops/radar` again |
|
|
312
310
|
|
|
313
311
|
---
|
package/package.json
CHANGED
package/src/commands/scan.js
CHANGED
|
@@ -65,12 +65,11 @@ module.exports = {
|
|
|
65
65
|
|
|
66
66
|
Runs entirely on your machine — by default, Radar CLI doesn’t upload any findings.
|
|
67
67
|
Your vulnerabilities stay local and private. To upload results to Eureka ASPM,
|
|
68
|
-
provide your API credentials
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
set, you can pass the LOCAL option on the command line.
|
|
68
|
+
provide your API credentials through the 'EUREKA_AGENT_TOKEN' environment variable.
|
|
69
|
+
When set, Radar CLI automatically uploads results after each scan — letting you view
|
|
70
|
+
your full scan history and all findings in the Eureka ASPM Dashboard. To prevent
|
|
71
|
+
Radar CLI from uploading scan findings even when you have 'EUREKA_AGENT_TOKEN' set,
|
|
72
|
+
you can pass the LOCAL option on the command line.
|
|
74
73
|
|
|
75
74
|
Exit codes:
|
|
76
75
|
0 - Clean and successful scan. No errors, warnings, or notes.
|