codeslick-cli 1.2.5 → 1.3.0

package/README.md

@@ -155,6 +155,8 @@ codeslick scan [files...] [options]
 - `--severity, -s <level>` - Override severity threshold (critical|high|medium|low)
 - `--fix` - Auto-apply fixes where possible (experimental)
 - `--json` - Output results as JSON (for CI/CD)
+- `--verify` - **NEW**: Run security scan + tests (combined pass/fail) ⭐
+- `--test-command <cmd>` - Custom test command (e.g., "npm test", "pytest")
 
 **Default Behavior:** Scans only **staged files** for fast pre-commit feedback.
 
@@ -167,6 +169,10 @@ codeslick scan --verbose          # Show all issues (including MEDIUM/LOW)
 codeslick scan src/**/*.js        # Scan specific files/patterns
 codeslick scan --json             # JSON output (for CI/CD)
 codeslick scan --severity high    # Temporarily override threshold
+
+# NEW: Test Execution Integration (v1.3)
+codeslick scan --verify           # Run security scan + tests (both must pass)
+codeslick scan --verify --test-command "pytest --cov"  # Custom test command
 ```
 
 ---
@@ -246,7 +252,19 @@ The `.codeslick.json` file controls how CodeSlick scans your code.
     "**/test/**",
     "**/tests/**"
   ],
-  "languages": ["javascript", "typescript", "python", "java", "go"]
+  "languages": ["javascript", "typescript", "python", "java", "go"],
+
+  // NEW: Pass/Fail Thresholds (v1.3)
+  "thresholdEnabled": true,
+  "thresholdBlockCritical": true,
+  "thresholdBlockHigh": false,
+  "thresholdMaxVulnerabilities": 50,
+  "thresholdMaxEpss": 70,
+  "thresholdExemptPaths": ["**/__tests__/**", "vendor/**"],
+
+  // NEW: Test Execution Integration (v1.3)
+  "testCommand": "npm test",
+  "testTimeout": 300000
 }
 ```
 
@@ -260,6 +278,16 @@ The `.codeslick.json` file controls how CodeSlick scans your code.
 | `exclude` | string[] | See above | Glob patterns to exclude from scanning |
 | `languages` | string[] | All | Languages to scan: `javascript`, `typescript`, `python`, `java`, `go` |
 | `telemetry` | boolean | `true` | Enable anonymous usage analytics |
+| **Thresholds (v1.3)** | | | |
+| `thresholdEnabled` | boolean | `true` | Enable pass/fail threshold enforcement |
+| `thresholdBlockCritical` | boolean | `true` | Block on CRITICAL vulnerabilities |
+| `thresholdBlockHigh` | boolean | `false` | Block on HIGH severity vulnerabilities |
+| `thresholdMaxVulnerabilities` | number | `50` | Max total vulnerabilities allowed |
+| `thresholdMaxEpss` | number | `70` | Max EPSS score (0-100, exploitability %) |
+| `thresholdExemptPaths` | string[] | `[]` | Glob patterns exempt from thresholds |
+| **Test Execution (v1.3)** | | | |
+| `testCommand` | string | Auto-detect | Test command to run with `--verify` flag |
+| `testTimeout` | number | `300000` | Test execution timeout (milliseconds) |
 
 ### Severity Thresholds
 
@@ -319,7 +347,13 @@ jobs:
       - uses: actions/setup-node@v3
         with:
           node-version: 18
+
+      # Option 1: Security scan only
       - run: npx codeslick-cli scan --json > results.json
+
+      # Option 2: Security scan + tests (v1.3) ⭐
+      - run: npx codeslick-cli scan --verify
+
       - uses: actions/upload-artifact@v3
         if: always()
         with:
@@ -525,7 +559,26 @@ MIT License - see [LICENSE](../../LICENSE) for details.
 - **Issues**: https://github.com/VitorLourenco/codeslick2/issues
 - **Email**: support@codeslick.dev
 
-## What's New in v1.2
+## What's New in v1.3 ⭐
+
+**Pass/Fail Thresholds + Test Execution Integration** (February 2026)
+
+- **`--verify` Flag** - Run security scan + tests in one command (both must pass)
+- **Granular Thresholds** - Configure exactly what blocks commits (CRITICAL only, HIGH+, max count, EPSS score)
+- **Path Exemptions** - Exclude test files, vendor code, docs from threshold enforcement
+- **Auto-Detect Test Frameworks** - Supports npm test, pytest, go test, maven, gradle
+- **Combined Pass/Fail** - Exit code 0 only if BOTH security AND tests pass
+- **CLI Default: Enabled** - Thresholds enforce by default (configurable in `.codeslick.json`)
+
+**Example:**
+```bash
+cs scan --verify  # Run security scan + tests
+# ✓ Analyzed 50 files (0 CRITICAL)
+# ✓ Tests passed (127 tests, 0 failures)
+# Exit code: 0 (commit allowed)
+```
+
+### v1.2 Features
 
 - **Go Language Support** - Added comprehensive Go security analysis with 26 security checks
 - **AI-Generated Code Detection** - Detects AI hallucinations and code smells in Go code
@@ -550,10 +603,11 @@ MIT License - see [LICENSE](../../LICENSE) for details.
 
 ## Roadmap
 
-### v1.3 (Coming Soon)
+### v1.4 (Coming Q2 2026)
 - Custom rule configuration
 - IDE integration (VS Code extension)
 - Enhanced auto-fix support
+- Smart exemption suggestions (ML-based)
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeslick-cli",
-  "version": "1.2.5",
+  "version": "1.3.0",
   "description": "CodeSlick CLI tool for pre-commit security scanning",
   "main": "dist/index.js",
   "bin": {