aura-security 0.5.2 → 0.5.4

package/dist/database/index.js

@@ -478,24 +478,20 @@ export class AuditorDatabase {
         };
     }
     getAggregateScore() {
-        // Get totals from all audits
-        const stmt = this.db.prepare(`
-      SELECT
-        SUM(critical) as critical,
-        SUM(high) as high,
-        SUM(medium) as medium,
-        SUM(low) as low
-      FROM audits
-    `);
-        const row = stmt.get();
-        const counts = {
-            critical: row.critical || 0,
-            high: row.high || 0,
-            medium: row.medium || 0,
-            low: row.low || 0
-        };
-        const score = calculateSecurityScore(counts);
+        // Get the latest score from score_history (most recent scan)
+        const latest = this.getLatestScore();
         const trend = this.getScoreTrend(undefined, 10);
+        if (latest) {
+            const score = calculateSecurityScore({
+                critical: latest.critical,
+                high: latest.high,
+                medium: latest.medium,
+                low: latest.low
+            });
+            return { ...score, trend };
+        }
+        // No scores yet - return perfect score
+        const score = calculateSecurityScore({ critical: 0, high: 0, medium: 0, low: 0 });
         return { ...score, trend };
     }
     // ============ CLEANUP ============

package/dist/index.js

@@ -344,6 +344,30 @@ async function main() {
                         });
                         console.log(`[AURA] Remote scan complete in ${remoteResult.cloneDuration + remoteResult.scanDuration}ms`);
                         console.log(`[AURA] Found: ${remoteResult.secrets.length} secrets, ${remoteResult.packages.length} vulns`);
+                        // Save to database and calculate score
+                        try {
+                            const db = server.getDatabase();
+                            const auditId = db.saveAudit('code', gitUrl, remoteResult);
+                            console.log(`[AURA] Remote scan saved to database: ${auditId}`);
+                            // Calculate and save security score
+                            const scoreCounts = {
+                                critical: (remoteResult.secrets?.filter((s) => s.severity === 'critical').length || 0) +
+                                    (remoteResult.packages?.filter((p) => p.severity === 'critical').length || 0),
+                                high: (remoteResult.secrets?.filter((s) => s.severity === 'high').length || 0) +
+                                    (remoteResult.packages?.filter((p) => p.severity === 'high').length || 0),
+                                medium: (remoteResult.secrets?.filter((s) => s.severity === 'medium').length || 0) +
+                                    (remoteResult.packages?.filter((p) => p.severity === 'medium').length || 0) +
+                                    (remoteResult.sastFindings?.length || 0),
+                                low: (remoteResult.secrets?.filter((s) => s.severity === 'low').length || 0) +
+                                    (remoteResult.packages?.filter((p) => p.severity === 'low').length || 0) +
+                                    (remoteResult.envFiles?.length || 0)
+                            };
+                            const score = db.saveScore(gitUrl, auditId, scoreCounts);
+                            console.log(`[AURA] Security score: ${score.score} (${score.grade})`);
+                        }
+                        catch (dbErr) {
+                            console.error('[AURA] Failed to save remote scan to database:', dbErr);
+                        }
                         // Convert to audit input and run through pipeline
                         const scanner = new LocalScanner({ targetPath: remoteResult.path });
                         const auditInput = scanner.toAuditorInput(remoteResult);
@@ -500,11 +524,15 @@ async function main() {
                     console.log(`[AURA] Scan result saved to database: ${auditId}`);
                     // Calculate and save security score
                     const scoreCounts = {
-                        critical: scanResult.secrets?.filter((s) => s.severity === 'critical').length || 0,
-                        high: scanResult.secrets?.filter((s) => s.severity === 'high').length || 0,
-                        medium: (scanResult.packages?.filter((p) => p.severity === 'medium').length || 0) +
+                        critical: (scanResult.secrets?.filter((s) => s.severity === 'critical').length || 0) +
+                            (scanResult.packages?.filter((p) => p.severity === 'critical').length || 0),
+                        high: (scanResult.secrets?.filter((s) => s.severity === 'high').length || 0) +
+                            (scanResult.packages?.filter((p) => p.severity === 'high').length || 0),
+                        medium: (scanResult.secrets?.filter((s) => s.severity === 'medium').length || 0) +
+                            (scanResult.packages?.filter((p) => p.severity === 'medium').length || 0) +
                             (scanResult.sastFindings?.length || 0),
-                        low: (scanResult.packages?.filter((p) => p.severity === 'low').length || 0) +
+                        low: (scanResult.secrets?.filter((s) => s.severity === 'low').length || 0) +
+                            (scanResult.packages?.filter((p) => p.severity === 'low').length || 0) +
                             (scanResult.envFiles?.length || 0)
                     };
                     const score = db.saveScore(scanResult.path, auditId, scoreCounts);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aura-security",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "description": "Deterministic security auditing engine with optional AI advisory layer. Run as CLI, CI step, or service. AI does not make enforcement decisions.",
   "type": "module",
   "main": "dist/index.js",