codeslick-cli 1.2.0 → 1.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -19
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# @codeslick/cli
|
|
2
2
|
|
|
3
|
-
**CodeSlick CLI** - Pre-commit security scanner for JavaScript, TypeScript, Python, and
|
|
3
|
+
**CodeSlick CLI** - Pre-commit security scanner for JavaScript, TypeScript, Python, Java, and Go.
|
|
4
4
|
|
|
5
5
|
Catch security vulnerabilities before they enter your codebase with automated pre-commit scanning.
|
|
6
6
|
|
|
@@ -9,11 +9,11 @@ Catch security vulnerabilities before they enter your codebase with automated pr
|
|
|
9
9
|
- **Local Security Scanning** - No API calls required, fully offline
|
|
10
10
|
- **Pre-commit Hook Integration** - Automatically scans staged files before each commit
|
|
11
11
|
- **Fast Analysis** - <3s for 10 files using CodeSlick's analyzer engine
|
|
12
|
-
- **Multi-language Support** - JavaScript, TypeScript, Python, Java
|
|
12
|
+
- **Multi-language Support** - JavaScript, TypeScript, Python, Java, Go
|
|
13
13
|
- **Configurable Thresholds** - Block commits on CRITICAL, HIGH, MEDIUM, or LOW severity
|
|
14
14
|
- **Beautiful Terminal Output** - Color-coded results with CVSS scores and fix suggestions
|
|
15
15
|
- **CI/CD Ready** - JSON output mode for automation
|
|
16
|
-
- **OWASP Top 10:2025 Compliant** -
|
|
16
|
+
- **OWASP Top 10:2025 Compliant** - 294 comprehensive security checks
|
|
17
17
|
|
|
18
18
|
## Prerequisites
|
|
19
19
|
|
|
@@ -246,7 +246,7 @@ The `.codeslick.json` file controls how CodeSlick scans your code.
|
|
|
246
246
|
"**/test/**",
|
|
247
247
|
"**/tests/**"
|
|
248
248
|
],
|
|
249
|
-
"languages": ["javascript", "typescript", "python", "java"]
|
|
249
|
+
"languages": ["javascript", "typescript", "python", "java", "go"]
|
|
250
250
|
}
|
|
251
251
|
```
|
|
252
252
|
|
|
@@ -258,7 +258,7 @@ The `.codeslick.json` file controls how CodeSlick scans your code.
|
|
|
258
258
|
| `severity` | string | `"critical"` | Severity threshold: `critical`, `high`, `medium`, `low` |
|
|
259
259
|
| `autofix` | boolean | `false` | Enable auto-fix (experimental) |
|
|
260
260
|
| `exclude` | string[] | See above | Glob patterns to exclude from scanning |
|
|
261
|
-
| `languages` | string[] | All | Languages to scan: `javascript`, `typescript`, `python`, `java` |
|
|
261
|
+
| `languages` | string[] | All | Languages to scan: `javascript`, `typescript`, `python`, `java`, `go` |
|
|
262
262
|
| `telemetry` | boolean | `true` | Enable anonymous usage analytics |
|
|
263
263
|
|
|
264
264
|
### Severity Thresholds
|
|
@@ -282,8 +282,9 @@ CodeSlick CLI uses the same analysis engine as the GitHub App and WebTool.
|
|
|
282
282
|
| **TypeScript** | 56 checks | Type errors, property validation, AI code |
|
|
283
283
|
| **Python** | 47 checks | Django/Flask security, pickle, exec(), secrets |
|
|
284
284
|
| **Java** | 32 checks | Log4j, Spring Security, SQL injection, deserialization |
|
|
285
|
+
| **Go** | 26 checks | SQL injection, command injection, TLS misconfig, race conditions |
|
|
285
286
|
|
|
286
|
-
**Total**:
|
|
287
|
+
**Total**: 294 comprehensive security checks
|
|
287
288
|
|
|
288
289
|
### OWASP Top 10:2025 Compliance
|
|
289
290
|
|
|
@@ -509,16 +510,6 @@ Typical scan times on a 2020 MacBook Pro:
|
|
|
509
510
|
| 100 | Mixed | <20s |
|
|
510
511
|
| 500 | Mixed | <60s |
|
|
511
512
|
|
|
512
|
-
## Comparison with Alternatives
|
|
513
|
-
|
|
514
|
-
| Tool | Local Scanning | Pre-commit Hook | Offline | Languages | OWASP 2025 |
|
|
515
|
-
|------|----------------|----------------|---------|-----------|------------|
|
|
516
|
-
| **CodeSlick CLI** | ✅ | ✅ | ✅ | 4 | 95% |
|
|
517
|
-
| Snyk CLI | ✅ | ✅ | ❌ (API required) | Many | Partial |
|
|
518
|
-
| SonarLint CLI | ✅ | ✅ | ✅ | Many | Partial |
|
|
519
|
-
| Semgrep | ✅ | ✅ | ✅ | Many | Partial |
|
|
520
|
-
| ESLint | ✅ | ✅ | ✅ | JS/TS only | No |
|
|
521
|
-
|
|
522
513
|
## Contributing
|
|
523
514
|
|
|
524
515
|
We welcome contributions! Please see [CONTRIBUTING.md](../../CONTRIBUTING.md) for guidelines.
|
|
@@ -534,7 +525,15 @@ MIT License - see [LICENSE](../../LICENSE) for details.
|
|
|
534
525
|
- **Issues**: https://github.com/VitorLourenco/codeslick2/issues
|
|
535
526
|
- **Email**: support@codeslick.dev
|
|
536
527
|
|
|
537
|
-
## What's New in v1.
|
|
528
|
+
## What's New in v1.2
|
|
529
|
+
|
|
530
|
+
- **Go Language Support** - Added comprehensive Go security analysis with 26 security checks
|
|
531
|
+
- **AI-Generated Code Detection** - Detects AI hallucinations and code smells in Go code
|
|
532
|
+
- **294 Total Security Checks** - Now supporting 5 languages (JavaScript, TypeScript, Python, Java, Go)
|
|
533
|
+
- **Race Condition Detection** - Go-specific concurrency vulnerability detection
|
|
534
|
+
- **TLS Security Checks** - Detects InsecureSkipVerify and weak TLS configurations in Go
|
|
535
|
+
|
|
536
|
+
### v1.1 Features
|
|
538
537
|
|
|
539
538
|
- **Update Notifications** - CLI notifies you when a new version is available
|
|
540
539
|
- **Anonymous Telemetry** - Usage stats for dashboard analytics (disable with `cs config set telemetry false`)
|
|
@@ -547,11 +546,11 @@ MIT License - see [LICENSE](../../LICENSE) for details.
|
|
|
547
546
|
- **Staged Files by Default** - Fast pre-commit scans (<1s for most commits)
|
|
548
547
|
- **Quick Mode** - Skip TypeScript type checking with `--quick` for even faster scans
|
|
549
548
|
- **Smart Output** - Only shows CRITICAL and HIGH issues by default (use `--verbose` for all)
|
|
550
|
-
- **
|
|
549
|
+
- **294 Security Checks** - OWASP Top 10:2025 compliant
|
|
551
550
|
|
|
552
551
|
## Roadmap
|
|
553
552
|
|
|
554
|
-
### v1.
|
|
553
|
+
### v1.3 (Coming Soon)
|
|
555
554
|
- Custom rule configuration
|
|
556
555
|
- IDE integration (VS Code extension)
|
|
557
556
|
- Enhanced auto-fix support
|