@sphior/scan 0.1.3 → 0.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +6 -6
- package/package.json +1 -1
package/dist/cli.js
CHANGED
|
@@ -17170,8 +17170,8 @@ function runCli(argv, ctx = {}) {
|
|
|
17170
17170
|
}
|
|
17171
17171
|
const flags2 = parseFlags(rest);
|
|
17172
17172
|
if (!existsSync(dir) || !statSync2(dir).isDirectory()) {
|
|
17173
|
-
logErr(`error:
|
|
17174
|
-
logErr("
|
|
17173
|
+
logErr(`error: directory not found: ${dir}`);
|
|
17174
|
+
logErr(" Nothing was scanned, so this is not a clean result. Check the path.");
|
|
17175
17175
|
return { exitCode: 2, error: "dir_not_found" };
|
|
17176
17176
|
}
|
|
17177
17177
|
const files = collectSourceFiles(dir);
|
|
@@ -17195,7 +17195,7 @@ function runCli(argv, ctx = {}) {
|
|
|
17195
17195
|
}
|
|
17196
17196
|
}
|
|
17197
17197
|
if (files.length === 0) {
|
|
17198
|
-
logErr(`warning: ${dir}
|
|
17198
|
+
logErr(`warning: no scannable files found in ${dir} (0 files scanned).`);
|
|
17199
17199
|
}
|
|
17200
17200
|
const counts = result.findings.reduce((acc, f) => {
|
|
17201
17201
|
acc[f.severity] = (acc[f.severity] ?? 0) + 1;
|
|
@@ -17206,9 +17206,9 @@ function runCli(argv, ctx = {}) {
|
|
|
17206
17206
|
);
|
|
17207
17207
|
if (ctx.isTty && !flags2.sarif && !flags2.json && !flags2["fix-context"]) {
|
|
17208
17208
|
logErr("");
|
|
17209
|
-
logErr(" --fix-context fc.json AI
|
|
17210
|
-
logErr(" --sarif out.sarif GitHub code scanning / CI
|
|
17211
|
-
logErr(" --fail-on high
|
|
17209
|
+
logErr(" --fix-context fc.json hand findings to an AI agent to fix");
|
|
17210
|
+
logErr(" --sarif out.sarif for GitHub code scanning / CI dashboards");
|
|
17211
|
+
logErr(" --fail-on high exit 1 if anything at or above this severity (CI)");
|
|
17212
17212
|
}
|
|
17213
17213
|
let exitCode = 0;
|
|
17214
17214
|
const failOn = flags2["fail-on"];
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@sphior/scan",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.4",
|
|
4
4
|
"description": "Deterministic source scanner — hardcoded secrets and insecure patterns (CWE) with AST/taint analysis. No AI, no network, no source upload. CLI + LSP for editors and CI.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|