briff-scan 0.1.0 → 0.1.1

package/README.md

@@ -35,9 +35,12 @@ jobs:
   scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with: { node-version: 22 }
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 22
+          check-latest: true # newest 22.x, not the runner's cached one
+          package-manager-cache: false
       - run: npx briff-scan@0
         env:
           BRIFF_API_URL: https://app.briff.dev
@@ -66,11 +69,17 @@ BRIFF_TOKEN=brf_... npx briff-scan@0 --all-repos --root ~/code   # every git rep
 | `--repo-name <name>`  |                 | `GITHUB_REPOSITORY` in Actions, else the folder name |
 | `--all-repos`         |                 | off: the root is one repo                            |
 | `--include-worktrees` |                 | off (with `--all-repos`)                             |
+| `--exclude <name>`    |                 | none; repeatable or comma-separated                  |
 | `--max-depth <n>`     |                 | 6                                                    |
 | `--chunk <n>`         |                 | 10 repos per upload (with `--all-repos`)             |
 | `--dry-run`           |                 | off                                                  |
 | `--json`              |                 | off: machine-readable output                         |
 
+`--exclude` skips a repo by the exact name Briff would get: its path under `--root` with
+`--all-repos` (`--exclude work/site,old-app`), else the `--repo-name` / folder name. Use it on a
+machine that scans a folder of repos when one of them already runs the GitHub Action, so it is
+not uploaded twice.
+
 Exit codes: 0 done, 1 the scan or upload failed, 2 bad options.
 
 ## Licence

package/dist/cli.mjs

@@ -7387,6 +7387,9 @@ Options:
   --all-repos           Scan every git repo under --root as its own repo, named by
                         its path relative to the root (a folder like ~/code)
   --include-worktrees   With --all-repos: also scan linked git worktrees
+  --exclude <name>      Skip the repo with this name, exactly as Briff would get it
+                        (the path under --root with --all-repos, else --repo-name);
+                        repeatable, or comma-separated: --exclude a,b
   --max-depth <n>       How deep to look for files (default 6)
   --chunk <n>           With --all-repos: repos per upload (default 10)
   --dry-run             Print what would be sent; send nothing
@@ -7402,6 +7405,10 @@ function positiveInt(value, flag, min) {
   const n = Number(value);
   return Number.isInteger(n) && n >= min ? n : `${flag} must be an integer >= ${min}`;
 }
+function parseExclude(values) {
+  const names = (values ?? []).flatMap((v) => v.split(",")).map((v) => v.trim().replace(/\/+$/, "")).filter((v) => v.length > 0);
+  return [...new Set(names)];
+}
 function resolveRepoName(flag, env, root) {
   const explicit = flag?.trim();
   if (explicit) return explicit;
@@ -7423,6 +7430,7 @@ function parseCliArgs(argv, env, cwd) {
         "repo-name": { type: "string" },
         "all-repos": { type: "boolean", default: false },
         "include-worktrees": { type: "boolean", default: false },
+        exclude: { type: "string", multiple: true },
         "max-depth": { type: "string" },
         chunk: { type: "string" },
         "dry-run": { type: "boolean", default: false },
@@ -7472,6 +7480,7 @@ function parseCliArgs(argv, env, cwd) {
       token,
       root,
       mode: allRepos ? { kind: "all", includeWorktrees: values["include-worktrees"] } : { kind: "single", repoName: resolveRepoName(values["repo-name"], env, root) },
+      exclude: parseExclude(values.exclude),
       source: env.GITHUB_ACTIONS === "true" ? "github" : "local",
       dryRun: values["dry-run"],
       json: values.json,
@@ -8225,6 +8234,12 @@ async function readGroup(group, root, warn) {
   return { name: group.name, path: group.name, ecosystem: "npm", dependencies, runtimes };
 }
 async function collectRepos(root, mode, options) {
+  const exclude = new Set(options.exclude ?? []);
+  const skip = (name) => options.warn(`skip ${name}: excluded with --exclude`);
+  if (mode.kind === "single" && exclude.has(mode.repoName)) {
+    skip(mode.repoName);
+    return [];
+  }
   const discovered = await discoverRepos(root, {
     includeWorktrees: mode.kind === "single" || mode.includeWorktrees,
     maxDepth: options.maxDepth
@@ -8236,7 +8251,18 @@ async function collectRepos(root, mode, options) {
       lockfiles: discovered.flatMap((r) => r.lockfiles),
       runtimeFiles: discovered.flatMap((r) => r.runtimeFiles)
     }
-  ] : discovered;
+  ] : discovered.filter((group) => {
+    if (!exclude.has(group.name)) return true;
+    skip(group.name);
+    return false;
+  });
+  if (mode.kind === "all") {
+    const found = new Set(discovered.map((group) => group.name));
+    for (const name of exclude) {
+      if (!found.has(name))
+        options.warn(`--exclude ${name}: no repo with a lockfile or runtime file has that name`);
+    }
+  }
   const payloads = [];
   for (const group of groups) {
     const payload = await readGroup(group, root, options.warn);
@@ -8251,7 +8277,7 @@ import { randomUUID } from "node:crypto";
 // package.json
 var package_default = {
   name: "briff-scan",
-  version: "0.1.0",
+  version: "0.1.1",
   description: "Briff scanner: reads lockfiles and runtime files and sends package names, installed versions and runtimes to Briff. No source code leaves the machine.",
   keywords: [
     "briff",
@@ -8347,6 +8373,7 @@ async function run(argv, env, io) {
   try {
     const payloads = await collectRepos(options.root, options.mode, {
       maxDepth: options.maxDepth,
+      exclude: options.exclude,
       warn: io.err
     });
     if (options.dryRun) {
@@ -8370,6 +8397,8 @@ async function run(argv, env, io) {
     if (!options.json) io.out(summary(options.root, payloads));
     if (payloads.length === 0) {
       if (options.json) io.out(JSON.stringify({ root: options.root, uploaded: [] }, null, 2));
+      else if (options.mode.kind === "single" && options.exclude.includes(options.mode.repoName))
+        io.out("nothing to upload");
       else io.out("no lockfile or runtime file found; nothing to upload");
       return 0;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "briff-scan",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Briff scanner: reads lockfiles and runtime files and sends package names, installed versions and runtimes to Briff. No source code leaves the machine.",
   "keywords": [
     "briff",