@shipsafe/cli 0.2.2 → 0.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/init.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/init.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAkED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC1E;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAU1D"}
|
package/dist/src/cli/init.js
CHANGED
|
@@ -1,7 +1,60 @@
|
|
|
1
1
|
import { randomUUID } from 'node:crypto';
|
|
2
|
+
import * as fs from 'node:fs/promises';
|
|
3
|
+
import * as path from 'node:path';
|
|
2
4
|
import chalk from 'chalk';
|
|
3
5
|
import { loadProjectConfig, saveProjectConfig } from '../config/manager.js';
|
|
4
6
|
import { handleSetupAction } from './setup.js';
|
|
7
|
+
const SHIPSAFE_AI_INSTRUCTION = `
|
|
8
|
+
# ShipSafe Security
|
|
9
|
+
|
|
10
|
+
This project uses ShipSafe for security scanning. When the shipsafe MCP tools are available:
|
|
11
|
+
|
|
12
|
+
1. Run shipsafe_scan at the start of every task to check for security issues
|
|
13
|
+
2. After writing or modifying code, run shipsafe_scan to verify no vulnerabilities were introduced
|
|
14
|
+
3. Before completing any task, confirm the security score is passing
|
|
15
|
+
4. If findings are reported, explain them to the user and suggest fixes
|
|
16
|
+
5. Use shipsafe_check_package before recommending new dependencies
|
|
17
|
+
`.trim();
|
|
18
|
+
const AI_CONFIG_FILES = [
|
|
19
|
+
{ filename: 'CLAUDE.md', tool: 'Claude Code' },
|
|
20
|
+
{ filename: '.cursorrules', tool: 'Cursor' },
|
|
21
|
+
{ filename: '.windsurfrules', tool: 'Windsurf' },
|
|
22
|
+
{ filename: '.github/copilot-instructions.md', tool: 'GitHub Copilot' },
|
|
23
|
+
{ filename: '.clinerules', tool: 'Cline' },
|
|
24
|
+
];
|
|
25
|
+
async function writeAIConfigs(projectDir) {
|
|
26
|
+
const dir = projectDir ?? process.cwd();
|
|
27
|
+
const written = [];
|
|
28
|
+
for (const config of AI_CONFIG_FILES) {
|
|
29
|
+
const filePath = path.join(dir, config.filename);
|
|
30
|
+
// Create parent directory if needed (for .github/copilot-instructions.md)
|
|
31
|
+
const parentDir = path.dirname(filePath);
|
|
32
|
+
await fs.mkdir(parentDir, { recursive: true });
|
|
33
|
+
try {
|
|
34
|
+
// Check if file exists and already has ShipSafe section
|
|
35
|
+
let existing = '';
|
|
36
|
+
try {
|
|
37
|
+
existing = await fs.readFile(filePath, 'utf-8');
|
|
38
|
+
}
|
|
39
|
+
catch {
|
|
40
|
+
// File doesn't exist — that's fine
|
|
41
|
+
}
|
|
42
|
+
if (existing.includes('ShipSafe Security')) {
|
|
43
|
+
continue; // Already configured
|
|
44
|
+
}
|
|
45
|
+
// Append to existing content or create new
|
|
46
|
+
const content = existing
|
|
47
|
+
? existing.trimEnd() + '\n\n' + SHIPSAFE_AI_INSTRUCTION + '\n'
|
|
48
|
+
: SHIPSAFE_AI_INSTRUCTION + '\n';
|
|
49
|
+
await fs.writeFile(filePath, content, 'utf-8');
|
|
50
|
+
written.push(config.tool);
|
|
51
|
+
}
|
|
52
|
+
catch {
|
|
53
|
+
// Skip files we can't write
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
return written;
|
|
57
|
+
}
|
|
5
58
|
/**
|
|
6
59
|
* Main init action — bootstraps a project with a project ID, config file,
|
|
7
60
|
* and optional setup (hooks, MCP, CLAUDE.md).
|
|
@@ -20,6 +73,11 @@ export async function handleInitAction(options) {
|
|
|
20
73
|
// Write the project config
|
|
21
74
|
await saveProjectConfig({ projectId }, projectDir);
|
|
22
75
|
console.log(chalk.green('✓') + ` Created shipsafe.config.json (projectId: ${projectId})`);
|
|
76
|
+
// Write AI assistant config files
|
|
77
|
+
const aiTools = await writeAIConfigs(projectDir ?? process.cwd());
|
|
78
|
+
if (aiTools.length > 0) {
|
|
79
|
+
console.log(chalk.green('✓') + ` AI security rules added for: ${aiTools.join(', ')}`);
|
|
80
|
+
}
|
|
23
81
|
// Run setup unless explicitly skipped
|
|
24
82
|
if (!skipSetup) {
|
|
25
83
|
await handleSetupAction({});
|
|
@@ -28,7 +86,7 @@ export async function handleInitAction(options) {
|
|
|
28
86
|
console.log('');
|
|
29
87
|
console.log(chalk.bold('ShipSafe initialized! Next steps:'));
|
|
30
88
|
console.log(' 1. Run ' + chalk.cyan('shipsafe scan') + ' to run your first security scan');
|
|
31
|
-
console.log(' 2.
|
|
89
|
+
console.log(' 2. Your AI assistant will now auto-scan for security issues');
|
|
32
90
|
console.log(' 3. Run ' + chalk.cyan('shipsafe activate') + ' to unlock full scanning with a license key');
|
|
33
91
|
}
|
|
34
92
|
export function registerInitCommand(program) {
|
package/dist/src/cli/init.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAO/C,MAAM,uBAAuB,GAAG;;;;;;;;;;CAU/B,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,eAAe,GAKhB;IACH,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE;IAC9C,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5C,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE;IAChD,EAAE,QAAQ,EAAE,iCAAiC,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACvE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;CAC3C,CAAC;AAEF,KAAK,UAAU,cAAc,CAAC,UAAkB;IAC9C,MAAM,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEjD,0EAA0E;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,wDAAwD;YACxD,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;YAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC3C,SAAS,CAAC,qBAAqB;YACjC,CAAC;YAED,2CAA2C;YAC3C,MAAM,OAAO,GAAG,QAAQ;gBACtB,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,uBAAuB,GAAG,IAAI;gBAC9D,CAAC,CAAC,uBAAuB,GAAG,IAAI,CAAC;YAEnC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAoB;IACzD,MAAM,EAAE,UAAU,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAElD,0DAA0D;IAC1D,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE3D,IAAI,cAAc,CAAC,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YACf,gDAAgD,cAAc,CAAC,SAAS,8BAA8B,CACzG,CAAC;QACF,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,QAAQ,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAEtD,2BAA2B;IAC3B,MAAM,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,6CAA6C,SAAS,GAAG,CAAC,CAAC;IAE1F,kCAAkC;IAClC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,qCAAqC;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,kCAAkC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CACT,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,6CAA6C,CAC9F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,cAAc,EAAE,sCAAsC,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,gBAAgB,CAAC;YACrB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}
|