fullshield 2.3.0 → 3.0.0

package/dist/workspaces.js

@@ -1,2 +1,3 @@
-import {existsSync,readFileSync}from'fs';import {join}from'path';function k(s,i={}){if(!i.experimental&&process.env.FULLSHIELD_EXPERIMENTAL_PLATFORM!=="1")return [];let e=join(s,"package.json");if(!existsSync(e))return [];try{let r=JSON.parse(readFileSync(e,"utf8"));if(Array.isArray(r.workspaces))return r.workspaces;if(Array.isArray(r.workspaces?.packages))return r.workspaces.packages}catch{return []}let t=join(s,"pnpm-workspace.yaml");return existsSync(t)?readFileSync(t,"utf8").split(`
-`).map(r=>r.replace(/^-+\s*/,"").trim()).filter(r=>r.length>0&&!r.startsWith("packages:")):[]}export{k as listWorkspaces};
+import {existsSync,readFileSync,readdirSync}from'fs';import {join}from'path';function p(t){let e=join(t,"package.json");if(!existsSync(e))return [];try{let r=JSON.parse(readFileSync(e,"utf8"));if(Array.isArray(r.workspaces))return r.workspaces.filter(n=>typeof n=="string");if(Array.isArray(r.workspaces?.packages))return r.workspaces.packages.filter(n=>typeof n=="string")}catch{return []}let s=join(t,"pnpm-workspace.yaml");return existsSync(s)?readFileSync(s,"utf8").split(`
+`).map(r=>r.replace(/^-+\s*/,"").trim()).filter(r=>r.length>0&&!r.startsWith("packages:")):[]}function g(t,e){let s=e.replace(/\\/g,"/").replace(/^\.\//,"");if(!s.includes("*"))return [s];let r=s.indexOf("/*");if(r<0)return [];let n=s.slice(0,r);try{return readdirSync(join(t,n),{withFileTypes:!0}).filter(i=>i.isDirectory()).map(i=>`${n}/${i.name}`).sort()}catch{return []}}function m(t){let e=new Set;for(let s of p(t))for(let r of g(t,s))r!==""&&r!=="."&&e.add(r);return e.size>1}function k(t,e={}){return !e.experimental&&process.env.FULLSHIELD_EXPERIMENTAL_PLATFORM!=="1"?[]:p(t)}
+export{m as isMultiWorkspaceProject,k as listWorkspaces};

package/models/index.json

@@ -1,5 +1,5 @@
 {
-  "fullshieldVersion": "2.3.0",
+  "fullshieldVersion": "3.0.0",
   "entries": [
     {
       "package": "express",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullshield",
-  "version": "2.3.0",
+  "version": "3.0.0",
   "description": "Full-cycle security scanner for Node.js/TypeScript backends: detect, classify, report, notify, fix, prevent.",
   "license": "MIT",
   "type": "module",

package/templates/action/action.yml

@@ -9,7 +9,7 @@ inputs:
   version:
     description: 'Pinned fullshield npm version'
     required: false
-    default: '2.3.0'
+    default: '3.0.0'
   fail-on:
     description: 'Minimum severity that fails the job'
     required: false
@@ -45,7 +45,7 @@ runs:
       uses: actions/setup-node@v7
       with:
         node-version: '22'
-    - name: Install fullshield@2.3.0
+    - name: Install fullshield@3.0.0
       shell: bash
       run: npm install --global fullshield@${{ inputs.version }}
     - name: Cache FullShield baseline

package/templates/github-workflow-action.yml

@@ -15,7 +15,7 @@ jobs:
       # Example Marketplace ref once published: kathanp/fullshield-action@<sha>
       - uses: ./templates/action
         with:
-          version: '2.3.0'
+          version: '3.0.0'
           fail-on: high
           cache-baseline: 'true'
           upload-sarif: 'true'

package/templates/policy/fullshield.policy.json

@@ -0,0 +1,8 @@
+{
+  "requiredModules": ["secrets", "deps", "sast", "config"],
+  "failOn": {
+    "main": "critical",
+    "*": "high"
+  },
+  "exceptions": []
+}