git-cli-scanner 1.1.6 → 1.2.1

package/dist/cli.js

@@ -808,10 +808,11 @@ var Spinner = class {
 };
 
 // src/cli.ts
+var import_child_process2 = require("child_process");
 var fs3 = __toESM(require("fs"));
 var path3 = __toESM(require("path"));
 var program = new import_commander.Command();
-program.name("git-cli-scanner").description("Interactive Git hooks vulnerability scanner").version("1.1.6");
+program.name("git-cli-scanner").description("Interactive Git hooks vulnerability scanner").version("1.2.1");
 program.command("init").description("Install pre-commit hook for automatic scanning").action(() => {
   info("Setting up pre-commit hook...");
   try {
@@ -832,6 +833,10 @@ exec < /dev/tty
 npx git-cli-scanner scan --hook
 `;
     fs3.writeFileSync(hookPath, hookContent, { mode: 493 });
+    try {
+      (0, import_child_process2.execSync)("git config --unset core.hooksPath", { stdio: "ignore" });
+    } catch (e) {
+    }
     success("Pre-commit hook installed!");
     info("Every `git commit` will now automatically scan your staged files.");
   } catch (err) {
@@ -863,16 +868,22 @@ program.command("disable").description("Remove the pre-commit hook and disable a
 program.command("scan").description("Scan staged files for vulnerabilities").option("--show-sol", "Show solutions for vulnerabilities").option("--hook", "Internal flag used when running as a git hook").action(async (options) => {
   info("Git CLI Scanner running...");
   try {
-    const spinner = new Spinner([
+    const spinnerMsgs = options.hook ? [
       "Scanning staged files for vulnerabilities...",
       "Analyzing code patterns...",
       "Checking for exposed API keys...",
+      "Thinking..."
+    ] : [
+      "Scanning entire repository for vulnerabilities...",
+      "Analyzing code patterns...",
+      "Checking for exposed API keys...",
       "Inspecting hidden files and directories...",
       "Thinking..."
-    ]);
+    ];
+    const spinner = new Spinner(spinnerMsgs);
     spinner.start();
     await new Promise((resolve2) => setTimeout(resolve2, 3e3));
-    const issues = await scanDiff();
+    const issues = options.hook ? await scanDiff() : await scanDirectory(process.cwd());
     if (issues.length > 0) {
       const blockerIssues = issues.filter((i) => i.severity !== "dummy");
       spinner.fail(`Found ${issues.length} potential vulnerabilities! (${blockerIssues.length} blockers)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-cli-scanner",
-  "version": "1.1.6",
+  "version": "1.2.1",
   "description": "A powerful interactive CLI tool that scans your codebase for hardcoded secrets, API keys, passwords, and private keys before they reach your Git history.",
   "main": "dist/cli.js",
   "scripts": {