fullshield 3.3.2 → 3.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/CHANGELOG.md +12 -0
  2. package/README.md +5 -5
  3. package/dist/cli/index.js +116 -111
  4. package/models/index.json +1 -1
  5. package/package.json +1 -1
  6. package/templates/action/action.yml +1 -1
  7. package/templates/fullshield-bumps.yml +2 -2
  8. package/templates/github-workflow-action.yml +1 -1
  9. package/templates/github-workflow-diff.yml +1 -1
  10. package/templates/stacks/express.md +5 -0
  11. package/templates/stacks/fastify.md +5 -0
  12. package/templates/stacks/hono.md +5 -0
  13. package/templates/stacks/nest.md +5 -0
  14. package/templates/stacks/next.md +5 -0
  15. package/templates/stranger-check.md +14 -0
package/models/index.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "fullshieldVersion": "3.3.2",
2
+ "fullshieldVersion": "3.4.2",
3
3
  "entries": [
4
4
  {
5
5
  "package": "express",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "fullshield",
3
- "version": "3.3.2",
3
+ "version": "3.4.2",
4
4
  "description": "Full-cycle security scanner for Node.js/TypeScript backends: detect, classify, report, notify, fix, prevent.",
5
5
  "license": "MIT",
6
6
  "type": "module",
package/templates/action/action.yml CHANGED
@@ -45,7 +45,7 @@ runs:
45
45
  uses: actions/setup-node@v7
46
46
  with:
47
47
  node-version: '22'
48
- - name: Install fullshield@3.3.2
48
+ - name: Install fullshield@3.4.2
49
49
  shell: bash
50
50
  run: npm install --global fullshield@${{ inputs.version }}
51
51
  - name: Cache FullShield baseline
package/templates/fullshield-bumps.yml CHANGED
@@ -9,9 +9,9 @@ jobs:
9
9
  runs-on: ubuntu-24.04
10
10
  steps:
11
11
  - uses: actions/checkout@v7
12
- - run: npx fullshield@3.3.2 bumps plan --from .fullshield/last-scan.json
12
+ - run: npx fullshield@3.4.2 bumps plan --from .fullshield/last-scan.json
13
13
  env:
14
14
  FULLSHIELD_EXPERIMENTAL_BUMP_PR: '1'
15
- - run: npx fullshield@3.3.2 bumps open --from .fullshield/last-scan.json
15
+ - run: npx fullshield@3.4.2 bumps open --from .fullshield/last-scan.json
16
16
  env:
17
17
  FULLSHIELD_EXPERIMENTAL_BUMP_PR: '1'
package/templates/github-workflow-action.yml CHANGED
@@ -15,7 +15,7 @@ jobs:
15
15
  # Example Marketplace ref once published: kathanp/fullshield-action@<sha>
16
16
  - uses: ./templates/action
17
17
  with:
18
- version: '3.3.2'
18
+ version: '3.4.2'
19
19
  fail-on: high
20
20
  cache-baseline: 'true'
21
21
  upload-sarif: 'true'
package/templates/github-workflow-diff.yml CHANGED
@@ -10,6 +10,6 @@ jobs:
10
10
  - uses: actions/checkout@v7
11
11
  with:
12
12
  fetch-depth: 0
13
- - run: npx fullshield@3.3.2 scan --diff
13
+ - run: npx fullshield@3.4.2 scan --diff
14
14
  env:
15
15
  FULLSHIELD_EXPERIMENTAL_DIFFSCAN: '1'
package/templates/stacks/express.md ADDED
@@ -0,0 +1,5 @@
1
+ # express
2
+
3
+ mode: monitor
4
+
5
+ This note does not suppress a finding.
package/templates/stacks/fastify.md ADDED
@@ -0,0 +1,5 @@
1
+ # fastify
2
+
3
+ mode: monitor
4
+
5
+ This note does not suppress a finding.
package/templates/stacks/hono.md ADDED
@@ -0,0 +1,5 @@
1
+ # hono
2
+
3
+ mode: monitor
4
+
5
+ This note does not suppress a finding.
package/templates/stacks/nest.md ADDED
@@ -0,0 +1,5 @@
1
+ # nest
2
+
3
+ mode: monitor
4
+
5
+ This note does not suppress a finding.
package/templates/stacks/next.md ADDED
@@ -0,0 +1,5 @@
1
+ # next
2
+
3
+ mode: monitor
4
+
5
+ This note does not suppress a finding.
package/templates/stranger-check.md ADDED
@@ -0,0 +1,14 @@
1
+ # Stranger check
2
+
3
+ Run these steps yourself after a release is on npm. This file is a template. It is not a GitHub workflow and it does not post a status.
4
+
5
+ 1. `npx fullshield@<version> --version`
6
+ 2. `npx fullshield@<version> scan` on a project you own
7
+ 3. `npx fullshield@<version> scan --json`
8
+ 4. `npx fullshield@<version> scan --sarif`
9
+ 5. `npx fullshield@<version> scan --fail-on high`
10
+ 6. `npx fullshield@<version> fix --dry-run`
11
+ 7. `npx fullshield@<version> init`
12
+ 8. `npx fullshield@<version> sbom`
13
+
14
+ No company quote belongs in this file.