fullshield 3.4.1 → 3.5.0

package/models/index.json

@@ -1,5 +1,5 @@
 {
-  "fullshieldVersion": "3.4.1",
+  "fullshieldVersion": "3.5.0",
   "entries": [
     {
       "package": "express",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullshield",
-  "version": "3.4.1",
+  "version": "3.5.0",
   "description": "Full-cycle security scanner for Node.js/TypeScript backends: detect, classify, report, notify, fix, prevent.",
   "license": "MIT",
   "type": "module",
@@ -130,6 +130,7 @@
     ],
     "ignore": [
       "test/fixtures/**",
+      "templates/tutorial/**",
       "scripts/doc-version-check.mjs",
       "scripts/autopilot/guard.mjs",
       "docs/current/guard.mjs"

package/templates/action/action.yml

@@ -45,7 +45,7 @@ runs:
       uses: actions/setup-node@v7
       with:
         node-version: '22'
-    - name: Install fullshield@3.4.1
+    - name: Install fullshield@3.5.0
       shell: bash
       run: npm install --global fullshield@${{ inputs.version }}
     - name: Cache FullShield baseline

package/templates/fullshield-bumps.yml

@@ -9,9 +9,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7
-      - run: npx fullshield@3.4.1 bumps plan --from .fullshield/last-scan.json
+      - run: npx fullshield@3.5.0 bumps plan --from .fullshield/last-scan.json
         env:
           FULLSHIELD_EXPERIMENTAL_BUMP_PR: '1'
-      - run: npx fullshield@3.4.1 bumps open --from .fullshield/last-scan.json
+      - run: npx fullshield@3.5.0 bumps open --from .fullshield/last-scan.json
         env:
           FULLSHIELD_EXPERIMENTAL_BUMP_PR: '1'

package/templates/github-workflow-action.yml

@@ -15,7 +15,7 @@ jobs:
       # Example Marketplace ref once published: kathanp/fullshield-action@<sha>
       - uses: ./templates/action
         with:
-          version: '3.4.1'
+          version: '3.5.0'
           fail-on: high
           cache-baseline: 'true'
           upload-sarif: 'true'

package/templates/github-workflow-diff.yml

@@ -10,6 +10,6 @@ jobs:
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - run: npx fullshield@3.4.1 scan --diff
+      - run: npx fullshield@3.5.0 scan --diff
         env:
           FULLSHIELD_EXPERIMENTAL_DIFFSCAN: '1'

package/templates/stranger-check.md

@@ -0,0 +1,14 @@
+# Stranger check
+
+Run these steps yourself after a release is on npm. This file is a template. It is not a GitHub workflow and it does not post a status.
+
+1. `npx fullshield@<version> --version`
+2. `npx fullshield@<version> scan` on a project you own
+3. `npx fullshield@<version> scan --json`
+4. `npx fullshield@<version> scan --sarif`
+5. `npx fullshield@<version> scan --fail-on high`
+6. `npx fullshield@<version> fix --dry-run`
+7. `npx fullshield@<version> init`
+8. `npx fullshield@<version> sbom`
+
+No company quote belongs in this file.

package/templates/tutorial/app.js

@@ -0,0 +1,15 @@
+function demo() {
+  const app = {
+    post(_path, handler) {
+      handler({ body: { name: 'sample' } }, { send(value) { return value; } });
+    },
+  };
+  const req = { body: { name: 'sample' } };
+  const res = { send(value) { return value; } };
+  // checklist: see rules/README.md
+  app.post('/in', () => {
+    res.send(req.body.name);
+  });
+}
+
+demo();