@osfactory/har 0.52.0 → 0.53.0

package/dist/index.js

@@ -69193,7 +69193,7 @@ function harnessExists(repoPath) {
 // src/harness/plugins.ts
 init_schema2();
 init_stages();
-var PLUGIN_IDS = ["playwright", "rocketsim", "kerno", "gitleaks"];
+var PLUGIN_IDS = ["playwright", "rocketsim", "kerno", "gitleaks", "trivy"];
 var PluginManifestFileSchema = external_exports.object({
   src: external_exports.string().min(1),
   dest: external_exports.string().min(1),

package/dist/templates/har-boilerplate/STAGES.md

@@ -1,7 +1,7 @@
 # HAR Stages — authoring guide
 
 Stages are the harness's single vocabulary for runnable checks and lifecycle
-actions. Everything — shipped plugins (`playwright`, `rocketsim`, `kerno`, `gitleaks`), your
+actions. Everything — shipped plugins (`playwright`, `rocketsim`, `kerno`, `gitleaks`, `trivy`), your
 project's test/lint commands, bespoke validation scripts — registers in
 `.har/stages.json` with the same schema, and agents interact with stages only
 through that registry (CLI `har env verify`, MCP `har_run_stage` /
@@ -91,6 +91,8 @@ committed.
 
 `har env add-plugin --list` shows available plugins; `har env add-plugin
 playwright` (web), `har env add-plugin rocketsim` (iOS), or `har env
-add-plugin kerno` (backend) or `har env add-plugin gitleaks` (secrets scanning, any stack) installs one. A
+add-plugin kerno` (backend), `har env add-plugin gitleaks` (secrets scanning, any
+stack), or `har env add-plugin trivy` (dependency + IaC security scan, any stack)
+installs one. A
 plugin is just packaging: it copies files, merges `package.json` fragments,
 and registers stages through the exact same registry as `add-stage --custom`.

package/dist/templates/har-boilerplate-cli/STAGES.md

@@ -1,7 +1,7 @@
 # HAR Stages — authoring guide
 
 Stages are the harness's single vocabulary for runnable checks and lifecycle
-actions. Everything — shipped plugins (`playwright`, `rocketsim`, `kerno`, `gitleaks`), your
+actions. Everything — shipped plugins (`playwright`, `rocketsim`, `kerno`, `gitleaks`, `trivy`), your
 project's test/lint commands, bespoke validation scripts — registers in
 `.har/stages.json` with the same schema, and agents interact with stages only
 through that registry (CLI `har env verify`, MCP `har_run_stage` /
@@ -91,6 +91,8 @@ committed.
 
 `har env add-plugin --list` shows available plugins; `har env add-plugin
 playwright` (web), `har env add-plugin rocketsim` (iOS), or `har env
-add-plugin kerno` (backend) or `har env add-plugin gitleaks` (secrets scanning, any stack) installs one. A
+add-plugin kerno` (backend), `har env add-plugin gitleaks` (secrets scanning, any
+stack), or `har env add-plugin trivy` (dependency + IaC security scan, any stack)
+installs one. A
 plugin is just packaging: it copies files, merges `package.json` fragments,
 and registers stages through the exact same registry as `add-stage --custom`.

package/dist/templates/har-boilerplate-ios/STAGES.md

@@ -1,7 +1,7 @@
 # HAR Stages — authoring guide
 
 Stages are the harness's single vocabulary for runnable checks and lifecycle
-actions. Everything — shipped plugins (`playwright`, `rocketsim`, `kerno`, `gitleaks`), your
+actions. Everything — shipped plugins (`playwright`, `rocketsim`, `kerno`, `gitleaks`, `trivy`), your
 project's test/lint commands, bespoke validation scripts — registers in
 `.har/stages.json` with the same schema, and agents interact with stages only
 through that registry (CLI `har env verify`, MCP `har_run_stage` /
@@ -91,6 +91,8 @@ committed.
 
 `har env add-plugin --list` shows available plugins; `har env add-plugin
 playwright` (web), `har env add-plugin rocketsim` (iOS), or `har env
-add-plugin kerno` (backend) or `har env add-plugin gitleaks` (secrets scanning, any stack) installs one. A
+add-plugin kerno` (backend), `har env add-plugin gitleaks` (secrets scanning, any
+stack), or `har env add-plugin trivy` (dependency + IaC security scan, any stack)
+installs one. A
 plugin is just packaging: it copies files, merges `package.json` fragments,
 and registers stages through the exact same registry as `add-stage --custom`.

package/dist/templates/plugins/trivy/.github/workflows/trivy.yml

@@ -0,0 +1,40 @@
+name: Trivy scan
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run Trivy (filesystem scan)
+        uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
+        with:
+          scan-type: fs
+          scan-ref: .
+          scanners: vuln,misconfig
+          severity: HIGH,CRITICAL
+          format: sarif
+          output: trivy-results.sarif
+          exit-code: 0
+      - name: Upload SARIF to GitHub code scanning
+        if: always()
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: trivy-results.sarif
+      - name: Fail on HIGH/CRITICAL findings
+        uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
+        with:
+          scan-type: fs
+          scan-ref: .
+          scanners: vuln,misconfig
+          severity: HIGH,CRITICAL
+          format: table
+          exit-code: 1
+          skip-setup-trivy: true

package/dist/templates/plugins/trivy/.har/stages/TRIVY.md

@@ -0,0 +1,88 @@
+# Trivy Vulnerability & Misconfiguration Scanning
+
+The `vuln-scan` stage runs [Trivy](https://trivy.dev) against the agent's
+worktree: known CVEs in dependency lockfiles (`vuln` scanner) and IaC/config
+misconfigurations in Terraform, Dockerfiles, Kubernetes manifests, Helm charts,
+and CloudFormation (`misconfig` scanner). Full verify (`verify --full`) runs it
+automatically.
+
+Trivy absorbed **tfsec** — its Terraform checks now live in Trivy's `misconfig`
+scanner, so this plugin covers the Terraform/IaC use case without a separate tool.
+
+## What runs
+
+```bash
+trivy fs --scanners vuln,misconfig --severity HIGH,CRITICAL --exit-code 1 \
+  --format json --output .har/artifacts/vuln-scan/report.json <work-dir>
+```
+
+The stage **fails** when any finding at or above the severity threshold exists.
+Findings below the threshold are not reported at all — raise or lower the bar
+via configuration.
+
+## Configuration
+
+Set in `harness.env` (or export before running):
+
+| Variable | Default | Purpose |
+|----------|---------|---------|
+| `HARNESS_TRIVY_SEVERITY` | `HIGH,CRITICAL` | Comma-separated severities that fail the stage (`UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL`) |
+| `HARNESS_TRIVY_SCANNERS` | `vuln,misconfig` | Scanners to run (`vuln`, `misconfig`, `secret`, `license`) |
+| `TRIVY_CACHE_DIR` | `~/.cache/trivy` | Vulnerability DB cache — kept **outside** the worktrees so every slot shares one DB download (~60MB, refreshed every ~6h) |
+
+## Artifacts
+
+| Path | Contents |
+|------|----------|
+| `.har/artifacts/vuln-scan/report.json` | Full Trivy JSON report (machine-readable) |
+| `.har/artifacts/vuln-scan/summary.txt` | Human-readable table (`trivy convert`) |
+
+Artifacts always land in the **main repo root** `.har/artifacts/`, not the worktree.
+
+## Suppressing findings
+
+Add IDs to `.trivyignore` at the repo root — one CVE / check ID per line, no
+trailing comments on the ID line:
+
+```
+# Accepted risk: dev-only dependency, fix tracked in TICKET-123 (expires when bumped)
+CVE-2021-23337
+# Terraform check that conflicts with our architecture
+AVD-AWS-0086
+```
+
+The stage passes the **worktree's** copy via `--ignorefile`, so a suppression
+travels with the change batch that introduces it and gets reviewed in the same
+PR. Prefer fixing (bump the dependency, correct the config) over ignoring.
+
+## Adaptations per repo
+
+- **Container images**: the default stage scans the filesystem only. If the repo
+  builds an image, add a second invocation after the build:
+  `trivy image --severity "$SEVERITY" --exit-code 1 <image:tag>`.
+- **Monorepos**: scope the scan by replacing `"$WORK_DIR"` with a subdirectory,
+  or add `--skip-dirs 'vendor/**,examples/**'`.
+- **Lockfile-only scanning**: Trivy reads lockfiles (`package-lock.json`,
+  `yarn.lock`, `poetry.lock`, `go.sum`, `Cargo.lock`, …). Repos without a
+  lockfile get no dependency findings — commit one for meaningful results.
+- **Secrets**: this harness pairs well with a dedicated secrets stage
+  (gitleaks plugin, which scans git history, not just the checkout). Add
+  `secret` to `HARNESS_TRIVY_SCANNERS` only if you don't run one.
+
+## CI and compliance platforms (Vanta, Drata, …)
+
+The local stage is **pre-merge shift-left** — it keeps findings from ever
+reaching your default branch. Compliance platforms never see local runs.
+
+The optional workflow `.github/workflows/trivy.yml` runs the same scan in CI and
+uploads SARIF to **GitHub code scanning** (the repo's Security tab). That
+org-level layer is what compliance platforms like Vanta ingest as evidence (via
+their GitHub integration). Keep both: local stage to catch early, CI workflow to
+produce the evidence.
+
+## Running
+
+```bash
+./.har/stages/vuln-scan.sh 1        # standalone
+./.har/verify.sh 1 --full           # as part of full verification
+```

package/dist/templates/plugins/trivy/.har/stages/vuln-scan.sh

@@ -0,0 +1,157 @@
+#!/usr/bin/env bash
+# Trivy vulnerability + misconfiguration scan for an agent slot.
+# Scans the agent's worktree filesystem: dependency lockfiles (vuln) and
+# IaC/config files — Terraform, Dockerfile, Kubernetes, CloudFormation (misconfig).
+# Outputs JSON to stdout, human-readable progress to stderr.
+#
+# Usage: ./.har/stages/vuln-scan.sh <agent-id>
+#
+# Tune via harness.env or the environment:
+#   HARNESS_TRIVY_SEVERITY  fail threshold (default: HIGH,CRITICAL)
+#   HARNESS_TRIVY_SCANNERS  scanners to run (default: vuln,misconfig)
+#   TRIVY_CACHE_DIR         vulnerability DB cache (default: ~/.cache/trivy —
+#                           shared across slots so the DB downloads once)
+#
+# Prerequisite: ./.har/launch.sh <agent-id>
+# See: ./.har/stages/TRIVY.md for the full adaptation guide.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HARNESS_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
+REPO_ROOT="$(cd "$HARNESS_DIR/.." && pwd)"
+# agent-slot.sh expects SCRIPT_DIR to be .har/ (slot registry lives there)
+SCRIPT_DIR="$HARNESS_DIR"
+
+# shellcheck source=/dev/null
+source "$HARNESS_DIR/harness.env"
+# shellcheck source=/dev/null
+source "$HARNESS_DIR/agent-slot.sh"
+
+AGENT_ID="${1:?Usage: vuln-scan.sh <agent-id>}"
+
+validate_agent_id "$AGENT_ID"
+
+log() { echo "==> [vuln-scan agent-$AGENT_ID] $*" >&2; }
+
+# ── Preflight ─────────────────────────────────────────────────────────────────
+if ! command -v trivy >/dev/null 2>&1; then
+  echo "Error: trivy CLI not found." >&2
+  echo "  Install: https://trivy.dev/latest/getting-started/installation/" >&2
+  echo "    macOS:  brew install trivy" >&2
+  echo "    Linux:  curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b ~/.local/bin" >&2
+  echo "  Then re-run: ./.har/stages/vuln-scan.sh ${AGENT_ID}" >&2
+  exit 1
+fi
+
+# ── Resolve agent env ─────────────────────────────────────────────────────────
+ENV_FILE="$(resolve_agent_env_file "$AGENT_ID" "$REPO_ROOT")" || {
+  echo "No .env.agent.${AGENT_ID} found." >&2
+  har_suggest_launch "$AGENT_ID" >&2
+  exit 1
+}
+
+set -a
+# shellcheck source=/dev/null
+source "$ENV_FILE"
+set +a
+
+WORK_DIR="$(resolve_agent_work_dir "$ENV_FILE")"
+
+# ── Configuration ─────────────────────────────────────────────────────────────
+SEVERITY="${HARNESS_TRIVY_SEVERITY:-HIGH,CRITICAL}"
+SCANNERS="${HARNESS_TRIVY_SCANNERS:-vuln,misconfig}"
+# One shared DB cache for every slot/worktree — first run downloads ~60MB,
+# subsequent runs reuse it.
+export TRIVY_CACHE_DIR="${TRIVY_CACHE_DIR:-$HOME/.cache/trivy}"
+
+# ── Artifact directory ────────────────────────────────────────────────────────
+ARTIFACT_DIR="$REPO_ROOT/.har/artifacts/vuln-scan"
+mkdir -p "$ARTIFACT_DIR"
+REPORT_JSON="$ARTIFACT_DIR/report.json"
+
+# ── Scan ──────────────────────────────────────────────────────────────────────
+# Use the WORKTREE's .trivyignore (not the main checkout's) so suppressions are
+# reviewed with the code change that introduces them.
+IGNOREFILE_ARGS=()
+if [ -f "$WORK_DIR/.trivyignore" ]; then
+  IGNOREFILE_ARGS=(--ignorefile "$WORK_DIR/.trivyignore")
+fi
+
+log "Scanning $WORK_DIR (scanners: $SCANNERS, fail on: $SEVERITY)..."
+START=$(now_ms)
+
+set +e
+trivy fs \
+  --scanners "$SCANNERS" \
+  --severity "$SEVERITY" \
+  --exit-code 1 \
+  --format json \
+  --output "$REPORT_JSON" \
+  --no-progress \
+  ${IGNOREFILE_ARGS[@]+"${IGNOREFILE_ARGS[@]}"} \
+  "$WORK_DIR" 2> >(sed 's/^/  /' >&2)
+TRIVY_EXIT=$?
+set -e
+
+END=$(now_ms)
+TOTAL_MS=$(( END - START ))
+
+if [ ! -f "$REPORT_JSON" ]; then
+  echo "Error: trivy did not produce a report (exit $TRIVY_EXIT) — see stderr above." >&2
+  exit "$TRIVY_EXIT"
+fi
+
+# Human-readable summary next to the JSON report (best effort)
+trivy convert --format table "$REPORT_JSON" > "$ARTIFACT_DIR/summary.txt" 2>/dev/null || true
+
+# ── Output ────────────────────────────────────────────────────────────────────
+STATUS="pass"
+if [ "$TRIVY_EXIT" -ne 0 ]; then
+  STATUS="fail"
+fi
+
+node -e "
+const fs = require('fs');
+const report = JSON.parse(fs.readFileSync('$REPORT_JSON', 'utf8'));
+const results = report.Results || [];
+let vulnerabilities = 0;
+let misconfigurations = 0;
+let secrets = 0;
+const findings = [];
+for (const r of results) {
+  for (const v of r.Vulnerabilities || []) {
+    vulnerabilities++;
+    findings.push({ type: 'vuln', target: r.Target, id: v.VulnerabilityID, pkg: v.PkgName, installed: v.InstalledVersion, fixed: v.FixedVersion || null, severity: v.Severity, title: (v.Title || '').slice(0, 120) });
+  }
+  for (const m of r.Misconfigurations || []) {
+    misconfigurations++;
+    findings.push({ type: 'misconfig', target: r.Target, id: m.ID, severity: m.Severity, title: (m.Title || '').slice(0, 120) });
+  }
+  for (const s of r.Secrets || []) {
+    secrets++;
+    findings.push({ type: 'secret', target: r.Target, id: s.RuleID, severity: s.Severity, title: (s.Title || '').slice(0, 120) });
+  }
+}
+const out = {
+  status: '$STATUS',
+  stageId: 'vuln-scan',
+  kind: 'test',
+  agent_id: $AGENT_ID,
+  total_ms: $TOTAL_MS,
+  severity_threshold: '$SEVERITY',
+  scanners: '$SCANNERS',
+  counts: { vulnerabilities, misconfigurations, secrets },
+  findings: findings.slice(0, 50),
+  artifacts: [
+    { path: '.har/artifacts/vuln-scan/report.json', kind: 'report' },
+    { path: '.har/artifacts/vuln-scan/summary.txt', kind: 'report' }
+  ]
+};
+process.stdout.write(JSON.stringify(out, null, 2) + '\n');
+"
+
+if [ "$STATUS" = "fail" ]; then
+  log "✗ Findings at or above $SEVERITY — see .har/artifacts/vuln-scan/summary.txt"
+  exit 1
+fi
+log "✓ No findings at or above $SEVERITY (${TOTAL_MS}ms)"

package/dist/templates/plugins/trivy/.trivyignore

@@ -0,0 +1,9 @@
+# .trivyignore — suppress specific Trivy findings (one ID per line, no trailing
+# comments). Prefer fixing over ignoring. Document every entry with a comment
+# line above it saying why and when it can go.
+#
+# Example:
+# # dev-only dependency, fix tracked in TICKET-123
+# CVE-2021-23337
+# # S3 public access is intentional for the www bucket
+# AVD-AWS-0086

package/dist/templates/plugins/trivy/README.md

@@ -0,0 +1,32 @@
+# Trivy plugin
+
+Installs a `vuln-scan` stage that runs [Trivy](https://trivy.dev) against the
+agent's worktree:
+
+- **Dependency vulnerabilities** — known CVEs in lockfiles (`package-lock.json`,
+  `yarn.lock`, `poetry.lock`, `go.sum`, `Cargo.lock`, …)
+- **IaC misconfigurations** — Terraform, Dockerfile, Kubernetes, Helm,
+  CloudFormation (Trivy absorbed tfsec, so this covers the Terraform use case)
+
+```bash
+har env add-plugin trivy            # --skip-ci to omit the GitHub workflow
+```
+
+What it adds:
+
+- `.har/stages/vuln-scan.sh` — the stage, registered in `.har/stages.json` and
+  appended to `verificationStages` (runs on `verify --full`)
+- `.har/stages/TRIVY.md` — adaptation guide (severity threshold, scanners,
+  container-image scanning, monorepo scoping)
+- `.trivyignore` — suppression file scaffold
+- `.github/workflows/trivy.yml` *(optional)* — same scan in CI with SARIF upload
+  to GitHub code scanning; that org-level layer is what compliance platforms
+  like Vanta ingest as evidence
+
+External requirement: the `trivy` binary (`brew install trivy` or the
+[install script](https://trivy.dev/latest/getting-started/installation/)).
+The stage fails fast with an install hint when it is missing.
+
+Fail threshold defaults to `HIGH,CRITICAL` — override with
+`HARNESS_TRIVY_SEVERITY` in `.har/harness.env`. Reports land in
+`.har/artifacts/vuln-scan/`.

package/dist/templates/plugins/trivy/template.manifest.json

@@ -0,0 +1,44 @@
+{
+  "id": "trivy",
+  "stageId": "vuln-scan",
+  "verificationStages": [
+    "typecheck",
+    "unit-tests",
+    "lint",
+    "vuln-scan"
+  ],
+  "stage": {
+    "id": "vuln-scan",
+    "kind": "test",
+    "description": "Trivy vulnerability + IaC misconfiguration scan (dependencies, Terraform, Dockerfile, K8s)",
+    "script": "stages/vuln-scan.sh",
+    "requiresAgentId": true,
+    "artifacts": [
+      {
+        "path": ".har/artifacts/vuln-scan",
+        "kind": "directory",
+        "description": "Trivy JSON report and human-readable summary"
+      },
+      {
+        "path": ".har/artifacts/vuln-scan/report.json",
+        "kind": "report"
+      }
+    ]
+  },
+  "files": [
+    { "src": ".har/stages/vuln-scan.sh", "dest": ".har/stages/vuln-scan.sh", "executable": true },
+    { "src": ".har/stages/TRIVY.md",     "dest": ".har/stages/TRIVY.md" },
+    { "src": ".trivyignore",             "dest": ".trivyignore" }
+  ],
+  "optionalFiles": [
+    { "src": ".github/workflows/trivy.yml", "dest": ".github/workflows/trivy.yml", "skipFlag": "skipCi" }
+  ],
+  "nextSteps": [
+    "Install trivy: brew install trivy (or https://trivy.dev/latest/getting-started/installation/)",
+    "./.har/launch.sh 1",
+    "./.har/stages/vuln-scan.sh 1",
+    "Open .har/artifacts/vuln-scan/summary.txt for findings",
+    "Tune HARNESS_TRIVY_SEVERITY / HARNESS_TRIVY_SCANNERS in .har/harness.env — read .har/stages/TRIVY.md"
+  ],
+  "docsPath": ".har/stages/TRIVY.md"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@osfactory/har",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "description": "Open harness for reproducible multi-agent coding workflows",
   "keywords": [
     "har",