git-cli-scanner 1.1.2 → 1.1.4

package/dist/cli.js

@@ -538,117 +538,131 @@ var init_logger = __esm({
 // src/utils/explorer.ts
 var explorer_exports = {};
 __export(explorer_exports, {
-  explorePrompt: () => explorePrompt
+  runExplorer: () => runExplorer
 });
-var import_core, import_picocolors3, fs2, path2, explorePrompt;
+async function scanFile(filePath, baseDir) {
+  console.log(`
+${import_picocolors3.default.dim("  Scanning")} ${import_picocolors3.default.cyan(path2.basename(filePath))}${import_picocolors3.default.dim("...")}`);
+  const issues = await scanDirectory(path2.dirname(filePath));
+  const relativePath = path2.relative(baseDir, filePath).replace(/\\/g, "/");
+  const fileIssues = issues.filter((i) => {
+    const issuePath = i.file.replace(/\\/g, "/");
+    return issuePath === relativePath || issuePath === path2.basename(filePath);
+  });
+  if (fileIssues.length === 0) {
+    console.log(import_picocolors3.default.green("\n  No vulnerabilities found in this file.\n"));
+  } else {
+    console.log(`
+  ${import_picocolors3.default.bold(`Found ${fileIssues.length} issue(s):`)}
+`);
+    fileIssues.forEach((issue) => {
+      const severity = issue.severity === "high" ? import_picocolors3.default.red("HIGH") : issue.severity === "medium" ? import_picocolors3.default.yellow("MEDIUM") : import_picocolors3.default.dim("DUMMY");
+      const indicator = issue.severity === "dummy" ? import_picocolors3.default.dim("\u25CB") : "\u25CF";
+      console.log(`  ${indicator} ${severity} ${import_picocolors3.default.dim("\xB7")} ${issue.type}`);
+      console.log(`    ${import_picocolors3.default.dim("Line:")}  ${issue.line || "?"}`);
+      console.log(`    ${import_picocolors3.default.dim("Match:")} ${issue.match.substring(0, 60)}`);
+      if (issue.solution) {
+        console.log(`    ${import_picocolors3.default.dim("Fix:")}   ${import_picocolors3.default.green(issue.solution)}`);
+      }
+      console.log();
+    });
+  }
+}
+function buildChoices(dirPath) {
+  const choices = [];
+  choices.push({
+    name: import_picocolors3.default.dim(".. (go back)"),
+    value: "__BACK__"
+  });
+  let entries = [];
+  try {
+    entries = fs2.readdirSync(dirPath, { withFileTypes: true });
+  } catch (err) {
+    return choices;
+  }
+  entries = entries.filter((e) => e.name !== ".git" && e.name !== "node_modules");
+  entries.sort((a, b) => {
+    if (a.isDirectory() && !b.isDirectory()) return -1;
+    if (!a.isDirectory() && b.isDirectory()) return 1;
+    return a.name.localeCompare(b.name);
+  });
+  for (const entry of entries) {
+    if (entry.isDirectory()) {
+      choices.push({
+        name: `${import_picocolors3.default.blue("/")}${entry.name}`,
+        value: path2.join(dirPath, entry.name),
+        description: "folder"
+      });
+    } else {
+      choices.push({
+        name: ` ${entry.name}`,
+        value: path2.join(dirPath, entry.name),
+        description: `${(fs2.statSync(path2.join(dirPath, entry.name)).size / 1024).toFixed(1)} KB`
+      });
+    }
+  }
+  choices.push({
+    name: import_picocolors3.default.dim("Exit explorer"),
+    value: "__EXIT__"
+  });
+  return choices;
+}
+async function runExplorer(startDir) {
+  let currentDir = path2.resolve(startDir);
+  const baseDir = currentDir;
+  console.log(`
+${import_picocolors3.default.bold("Git CLI Scanner")} ${import_picocolors3.default.dim("\xB7 Interactive Explorer")}`);
+  console.log(import_picocolors3.default.dim("  Use arrow keys to navigate, Enter to select\n"));
+  while (true) {
+    const choices = buildChoices(currentDir);
+    let selected;
+    try {
+      selected = await (0, import_prompts2.select)({
+        message: `${import_picocolors3.default.cyan(currentDir)}`,
+        choices,
+        pageSize: 20,
+        loop: false
+      });
+    } catch (err) {
+      break;
+    }
+    if (selected === "__EXIT__") {
+      break;
+    }
+    if (selected === "__BACK__") {
+      currentDir = path2.dirname(currentDir);
+      continue;
+    }
+    try {
+      const stat = fs2.statSync(selected);
+      if (stat.isDirectory()) {
+        currentDir = selected;
+      } else {
+        await scanFile(selected, baseDir);
+        const next = await (0, import_prompts2.select)({
+          message: "What next?",
+          choices: [
+            { name: "Continue browsing", value: "continue" },
+            { name: "Exit explorer", value: "exit" }
+          ]
+        });
+        if (next === "exit") break;
+      }
+    } catch (err) {
+      console.log(import_picocolors3.default.red(`  Cannot access: ${selected}`));
+    }
+  }
+  console.log(import_picocolors3.default.dim("\n  Explorer closed.\n"));
+}
+var import_prompts2, import_picocolors3, fs2, path2;
 var init_explorer = __esm({
   "src/utils/explorer.ts"() {
     "use strict";
-    import_core = require("@inquirer/core");
+    import_prompts2 = require("@inquirer/prompts");
     import_picocolors3 = __toESM(require("picocolors"));
     fs2 = __toESM(require("fs"));
     path2 = __toESM(require("path"));
     init_scanner();
-    explorePrompt = (0, import_core.createPrompt)(
-      (config, done) => {
-        const [currentPath, setCurrentPath] = (0, import_core.useState)(config.currentDir);
-        const [selectedIndex, setSelectedIndex] = (0, import_core.useState)(0);
-        const [scanResult, setScanResult] = (0, import_core.useState)(null);
-        const [scanningFile, setScanningFile] = (0, import_core.useState)(null);
-        const prefix = (0, import_core.usePrefix)({ status: "idle" });
-        let items = [];
-        try {
-          items = fs2.readdirSync(currentPath, { withFileTypes: true });
-        } catch (err) {
-        }
-        items.sort((a, b) => {
-          if (a.isDirectory() && !b.isDirectory()) return -1;
-          if (!a.isDirectory() && b.isDirectory()) return 1;
-          return a.name.localeCompare(b.name);
-        });
-        const choices = [
-          { name: "\u{1F519} Go Back (or press Left Arrow)", type: "back" },
-          ...items.map((i) => ({
-            name: i.isDirectory() ? `\u{1F4C1} ${i.name}` : `\u{1F4C4} ${i.name}`,
-            type: i.isDirectory() ? "dir" : "file",
-            nameRaw: i.name
-          }))
-        ];
-        (0, import_core.useKeypress)(async (key, rl) => {
-          if ((0, import_core.isEnterKey)(key) || key.name === "right") {
-            const selected = choices[selectedIndex];
-            if (selected.type === "back") {
-              setCurrentPath(path2.dirname(currentPath));
-              setSelectedIndex(0);
-              setScanResult(null);
-            } else if (selected.type === "dir") {
-              setCurrentPath(path2.join(currentPath, selected.nameRaw));
-              setSelectedIndex(0);
-              setScanResult(null);
-            } else if (selected.type === "file") {
-              const fullPath = path2.join(currentPath, selected.nameRaw);
-              setScanningFile(fullPath);
-              setScanResult(null);
-              const issues = await scanDirectory(currentPath);
-              const fileIssues = issues.filter((i) => i.file === path2.relative(process.cwd(), fullPath).replace(/\\/g, "/"));
-              setScanResult(fileIssues);
-              setScanningFile(null);
-            }
-          } else if (key.name === "left") {
-            setCurrentPath(path2.dirname(currentPath));
-            setSelectedIndex(0);
-            setScanResult(null);
-          } else if ((0, import_core.isUpKey)(key)) {
-            setSelectedIndex((prev) => prev > 0 ? prev - 1 : choices.length - 1);
-            setScanResult(null);
-          } else if ((0, import_core.isDownKey)(key)) {
-            setSelectedIndex((prev) => prev < choices.length - 1 ? prev + 1 : 0);
-            setScanResult(null);
-          } else if (key.name === "c" && key.ctrl) {
-            done("");
-          }
-        });
-        const page = (0, import_core.usePagination)({
-          items: choices,
-          active: selectedIndex,
-          renderItem: ({ item, isActive }) => {
-            if (isActive) {
-              return import_picocolors3.default.cyan(`\u276F ${item.name}`);
-            }
-            return `  ${item.name}`;
-          },
-          pageSize: 15,
-          loop: false
-        });
-        let message = `${prefix} ${import_picocolors3.default.bold("Exploring:")} ${import_picocolors3.default.cyan(currentPath)}
-
-${page}`;
-        if (scanResult) {
-          message += `
-
-${import_picocolors3.default.bold("Scan Results for " + choices[selectedIndex].nameRaw + ":")}
-`;
-          if (scanResult.length === 0) {
-            message += import_picocolors3.default.green("\u2714 No vulnerabilities found in this file.\n");
-          } else {
-            scanResult.forEach((issue) => {
-              message += `  ${issue.severity === "high" ? import_picocolors3.default.red("\u25CF HIGH") : issue.severity === "medium" ? import_picocolors3.default.yellow("\u25CF MEDIUM") : import_picocolors3.default.dim("\u25CB DUMMY")} \xB7 ${issue.type}
-`;
-              if (issue.solution) {
-                message += `    Fix: ${import_picocolors3.default.green(issue.solution)}
-`;
-              }
-            });
-          }
-        } else if (scanningFile) {
-          message += `
-
-${import_picocolors3.default.yellow("Scanning...")} (Please wait)
-`;
-        }
-        return message;
-      }
-    );
   }
 });
 
@@ -659,9 +673,9 @@ init_logger();
 
 // src/utils/prompts.ts
 var import_prompts = require("@inquirer/prompts");
-async function askToContinue() {
+async function askToContinue(isHook = true) {
   return await (0, import_prompts.confirm)({
-    message: "Vulnerabilities were found! Do you still want to continue with the commit?",
+    message: isHook ? "Vulnerabilities were found! Do you still want to continue with the commit?" : "Vulnerabilities were found! Do you want to ignore them?",
     default: false
   });
 }
@@ -713,7 +727,7 @@ var Spinner = class {
 var fs3 = __toESM(require("fs"));
 var path3 = __toESM(require("path"));
 var program = new import_commander.Command();
-program.name("git-cli-scanner").description("Interactive Git hooks vulnerability scanner").version("1.1.2");
+program.name("git-cli-scanner").description("Interactive Git hooks vulnerability scanner").version("1.1.4");
 program.command("init").description("Install pre-commit hook for automatic scanning").action(() => {
   info("Setting up pre-commit hook...");
   try {
@@ -731,7 +745,7 @@ program.command("init").description("Install pre-commit hook for automatic scann
 # git-cli-scanner pre-commit hook
 # exec < /dev/tty is required to allow interactive prompts in git hooks
 exec < /dev/tty
-npx git-cli-scanner scan
+npx git-cli-scanner scan --hook
 `;
     fs3.writeFileSync(hookPath, hookContent, { mode: 493 });
     success("Pre-commit hook installed!");
@@ -762,7 +776,7 @@ program.command("disable").description("Remove the pre-commit hook and disable a
     error(`Failed to disable: ${err.message}`);
   }
 });
-program.command("scan").description("Interactive vulnerability scan for staged files").option("--show-sol", "Show solutions for vulnerabilities").action(async (options) => {
+program.command("scan").description("Scan staged files for vulnerabilities").option("--show-sol", "Show solutions for vulnerabilities").option("--hook", "Internal flag used when running as a git hook").action(async (options) => {
   info("Git CLI Scanner running...");
   try {
     const spinner = new Spinner([
@@ -773,7 +787,7 @@ program.command("scan").description("Interactive vulnerability scan for staged f
       "Thinking..."
     ]);
     spinner.start();
-    await new Promise((resolve) => setTimeout(resolve, 3e3));
+    await new Promise((resolve2) => setTimeout(resolve2, 3e3));
     const issues = await scanDiff();
     if (issues.length > 0) {
       const blockerIssues = issues.filter((i) => i.severity !== "dummy");
@@ -781,15 +795,15 @@ program.command("scan").description("Interactive vulnerability scan for staged f
       const { printIssues: printIssues2 } = (init_logger(), __toCommonJS(logger_exports));
       printIssues2(issues, options.showSol);
       if (blockerIssues.length === 0) {
-        info("No high or medium vulnerabilities found. Safe to commit!");
+        info(options.hook ? "No high or medium vulnerabilities found. Safe to commit!" : "No high or medium vulnerabilities found.");
         process.exit(0);
       }
-      const shouldContinue = await askToContinue();
+      const shouldContinue = await askToContinue(options.hook);
       if (shouldContinue) {
-        info("Proceeding with commit despite vulnerabilities.");
+        info(options.hook ? "Proceeding with commit despite vulnerabilities." : "Proceeding despite vulnerabilities.");
         process.exit(0);
       } else {
-        error("Commit aborted. Please edit your files and try again.");
+        error(options.hook ? "Commit aborted. Please edit your files and try again." : "Scan aborted. Please fix the issues.");
         process.exit(1);
       }
     } else {
@@ -818,7 +832,7 @@ program.command("scan-all [dir]").description("Scan an entire directory or codeb
     ]);
     spinner.start();
     const { scanDirectory: scanDirectory2 } = await Promise.resolve().then(() => (init_scanner(), scanner_exports));
-    await new Promise((resolve) => setTimeout(resolve, 2e3));
+    await new Promise((resolve2) => setTimeout(resolve2, 2e3));
     const issues = await scanDirectory2(scanDir);
     if (issues.length > 0) {
       const blockerIssues = issues.filter((i) => i.severity !== "dummy");
@@ -841,8 +855,8 @@ program.command("scan-all [dir]").description("Scan an entire directory or codeb
 });
 program.command("explore").description("Launch an interactive Terminal UI to browse and scan files").action(async () => {
   try {
-    const { explorePrompt: explorePrompt2 } = (init_explorer(), __toCommonJS(explorer_exports));
-    await explorePrompt2({ currentDir: process.cwd() });
+    const { runExplorer: runExplorer2 } = (init_explorer(), __toCommonJS(explorer_exports));
+    await runExplorer2(process.cwd());
     process.exit(0);
   } catch (err) {
     if (err.name === "ExitPromptError" || err.message?.includes("closed")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-cli-scanner",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "A powerful interactive CLI tool that scans your codebase for hardcoded secrets, API keys, passwords, and private keys before they reach your Git history.",
   "main": "dist/cli.js",
   "scripts": {