cdk-insights 1.4.0 → 1.6.0

package/README.md

@@ -160,6 +160,8 @@ Aspects.of(app).add(new CdkInsightsAspect());
 app.synth();
 ```
 
+Run synth with `CDK_DEBUG=true` so CDK records stack traces for each construct. On `aws-cdk-lib` ≥ 2.252.0, findings on deferred or post-construction property assignments (lifecycle rules, env vars, role policies, `Lazy.string`/`Lazy.any` values) now point at the property setter line — not the construct constructor — automatically. Older CDKs continue to work; you'll just get construct-level attribution.
+
 ### Suppressing Findings
 
 Two channels, both feed into the same scan output, SARIF, severity counts, and PR comments:

package/dist/analysis/templateLevel/checks/schemaDrift/checkSchemaDrift.d.ts

@@ -0,0 +1,18 @@
+import { type SchemaChange } from '../../../../constants/cdkSchemaChanges';
+import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../types/analysis.types';
+import type { RuleRegistry } from '../../../../types/rules.types';
+type RuleRegistryLike = RuleRegistry;
+type SchemaChangeRegistry = Record<string, SchemaChange[]>;
+/**
+ * Inner function exposed for unit tests so cdkVersion and the registries can be
+ * injected directly. Production callers should use `checkSchemaDrift`.
+ */
+export declare const findSchemaDriftFindings: (template: CloudFormationStack, createFinding: CreateFindingFunction, cdkVersion: string | null, schemaChanges?: SchemaChangeRegistry, rules?: RuleRegistryLike) => AnalysisResults;
+/**
+ * Template-level check: surface known L1 schema-drift events that may have
+ * affected rule coverage in the user's CDK version.
+ *
+ * Silent fallback when the user's aws-cdk-lib version cannot be resolved.
+ */
+export declare const checkSchemaDrift: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
+export {};

package/dist/analysis/templateLevel/checks/schemaDrift/checkSchemaDrift.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/analysis/templateLevel/types.d.ts

@@ -11,8 +11,9 @@ import type { CloudFormationStack, CreateFindingFunction, AnalysisResults, Sever
  * TL-LIMIT-xxx = Service limit checks
  * TL-XRES-xxx  = Cross-resource anti-pattern checks
  * TL-POL-xxx   = Policy analysis checks
+ * TL-DRIFT-xxx = CDK L1 schema-drift checks
  */
-export type TemplateLevelCategory = 'serviceLimits' | 'crossResourceAntiPatterns' | 'policyAnalysis';
+export type TemplateLevelCategory = 'serviceLimits' | 'crossResourceAntiPatterns' | 'policyAnalysis' | 'schemaDrift';
 /**
  * A template-level check function.
  * Receives the FULL CloudFormation stack (all resources).