cdk-insights 1.4.0 → 1.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/dist/aspects/CdkInsightsAspect.js +45 -45
- package/dist/entry.js +172 -171
- package/dist/helpers/detectCdkVersion/detectCdkVersion.d.ts +26 -0
- package/dist/helpers/detectCdkVersion/detectCdkVersion.test.d.ts +1 -0
- package/dist/helpers/generateSarifOutput/generateSarifOutput.d.ts +23 -12
- package/dist/helpers/loadManifest/loadManifest.d.ts +11 -1
- package/dist/helpers/prComment/formatPrComment.test.d.ts +1 -0
- package/dist/helpers/synthesizeCdkStacks/synthesizeCdkStacks.d.ts +8 -0
- package/dist/index.js +103 -102
- package/dist/types/analysis.types.d.ts +50 -6
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -160,6 +160,8 @@ Aspects.of(app).add(new CdkInsightsAspect());
|
|
|
160
160
|
app.synth();
|
|
161
161
|
```
|
|
162
162
|
|
|
163
|
+
Run synth with `CDK_DEBUG=true` so CDK records stack traces for each construct. On `aws-cdk-lib` ≥ 2.252.0, findings on deferred or post-construction property assignments (lifecycle rules, env vars, role policies, `Lazy.string`/`Lazy.any` values) now point at the property setter line — not the construct constructor — automatically. Older CDKs continue to work; you'll just get construct-level attribution.
|
|
164
|
+
|
|
163
165
|
### Suppressing Findings
|
|
164
166
|
|
|
165
167
|
Two channels, both feed into the same scan output, SARIF, severity counts, and PR comments:
|