@runa-ai/runa-cli 0.5.34 → 0.5.35

package/dist/index.js

@@ -925,7 +925,7 @@ var CLI_VERSION, HAS_ADMIN_COMMAND;
 var init_version = __esm({
   "src/version.ts"() {
     init_esm_shims();
-    CLI_VERSION = "0.5.34";
+    CLI_VERSION = "0.5.35";
     HAS_ADMIN_COMMAND = false;
   }
 });
@@ -1722,7 +1722,8 @@ function checkBase64ForSecrets(base64String) {
     const decoded = Buffer.from(base64String, "base64").toString("utf-8");
     for (const indicator of BASE64_SECRET_INDICATORS) {
       if (decoded.startsWith(indicator)) {
-        return { found: true, decoded: `${decoded.substring(0, 20)}...` };
+        const secretType = getSecretTypeFromIndicator(indicator);
+        return { found: true, secretType };
       }
     }
     return { found: false };
@@ -1730,6 +1731,18 @@ function checkBase64ForSecrets(base64String) {
     return { found: false };
   }
 }
+function getSecretTypeFromIndicator(indicator) {
+  const indicatorMap = {
+    "sk-": "OpenAI/Stripe API key",
+    ghp_: "GitHub Personal Access Token",
+    gho_: "GitHub OAuth Token",
+    AKIA: "AWS Access Key",
+    eyJ: "JWT Token",
+    vercel_: "Vercel Token",
+    sbp_: "Supabase Token"
+  };
+  return indicatorMap[indicator] ?? "Unknown secret type";
+}
 function isCommentLine(line) {
   const trimmed = line.trim();
   return trimmed.startsWith("//") || trimmed.startsWith("#") || trimmed.startsWith("*") || trimmed.startsWith("/*") || trimmed.startsWith("<!--") || trimmed.startsWith("--");
@@ -1982,7 +1995,7 @@ function scanLineForSecrets(line, lineNumber, filePath) {
         ruleId: "secret/base64-encoded",
         severity: "high",
         title: "Base64-Encoded Secret",
-        description: `Base64-encoded secret detected. Decoded prefix: ${result.decoded}`,
+        description: `Base64-encoded secret detected. Type: ${result.secretType}`,
         location: {
           file: filePath,
           line: lineNumber,

package/dist/internal/vuln-checker/analyzers/secret-analyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-analyzer.d.ts","sourceRoot":"","sources":["../../../../src/internal/vuln-checker/analyzers/secret-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAoB,MAAM,aAAa,CAAC;AAgiClG;;GAEG;AACH,qBAAa,cAAe,YAAW,QAAQ;IAC7C,IAAI,SAAoB;IACxB,UAAU,EAAE,QAAQ,EAAE,CAAc;IAE9B,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAkB7C,cAAc;IAY5B,OAAO,CAAC,UAAU;CAGnB"}
+{"version":3,"file":"secret-analyzer.d.ts","sourceRoot":"","sources":["../../../../src/internal/vuln-checker/analyzers/secret-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAoB,MAAM,aAAa,CAAC;AA2jClG;;GAEG;AACH,qBAAa,cAAe,YAAW,QAAQ;IAC7C,IAAI,SAAoB;IACxB,UAAU,EAAE,QAAQ,EAAE,CAAc;IAE9B,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAkB7C,cAAc;IAY5B,OAAO,CAAC,UAAU;CAGnB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runa-ai/runa-cli",
-  "version": "0.5.34",
+  "version": "0.5.35",
   "private": false,
   "description": "AI-powered DevOps CLI",
   "type": "module",
@@ -53,7 +53,7 @@
     "xstate": "5.25.0",
     "zod": "4.3.5",
     "@runa-ai/runa": "0.5.33",
-    "@runa-ai/runa-xstate-test-plugin": "0.5.28"
+    "@runa-ai/runa-xstate-test-plugin": "0.5.35"
   },
   "engines": {
     "node": ">=20.0.0"