ikanban 0.4.1 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ikanban",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "iKanban CLI: AI and security scans of your own repo, with results filed into iKanban",
   "bin": { "ikanban": "bin/ikanban.js" },
   "files": ["bin", "lib", "hooks", "scanners", "README.md", "LICENSE.md"],

package/scanners/ikanban-aiscan.py

@@ -57,7 +57,7 @@ PROMPTFOO_VERSION = "0.123.1"
 # so this string is the release identity. Bump it when publishing a release —
 # a customer pinning a version is pinning this value, and re-uploading different
 # bytes under a version someone already fetched defeats the sha256 they pinned.
-AISCAN_VERSION = "0.5.0"
+AISCAN_VERSION = "0.5.1"
 
 # The ten categories, their labels, and their plugins -- the forward map, copied
 # from promptfoo's OWASP_LLM_TOP_10_MAPPING (src/redteam/constants/frameworks.ts).
@@ -741,6 +741,8 @@ def slug(text: str) -> str:
 # "running" at the start, "passed" / "failed" / "skipped" at the end with a one-line detail,
 # then the report as log chunks. A plan without Pipelines (402) or any error never fails the scan.
 _UUID = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$", re.I)
+# Every iKanban scanner reports into one named lane, not the server's "legacy" lane.
+PIPE_RUN = "security-scan"
 PIPE_CHUNK = 15 * 1024  # the server takes 16 KB per chunk
 LAST_RUN = {"report": "", "detail": "", "skipped": False}
 
@@ -824,7 +826,7 @@ class Pipeline:
 
     def start(self):
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": "running",
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}"})
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}"})
 
     def finish(self, code):
         status = "failed" if code else ("skipped" if LAST_RUN["skipped"] else "passed")
@@ -832,10 +834,10 @@ class Pipeline:
         if code == 1 and not LAST_RUN["skipped"]:
             detail = (detail + " (at or above --fail-on)").strip()
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": status,
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}",
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}",
                                        "detail": detail[:300] or None})
         for chunk in log_chunks(mask_report(LAST_RUN["report"])):
-            self._post("pipeline-logs", {"task": self.task, "stage": self.stage, "text": chunk})
+            self._post("pipeline-logs", {"task": self.task, "run": PIPE_RUN, "stage": self.stage, "text": chunk})
 
 
 def run_main(stage, main_fn, argv=None):

package/scanners/ikanban-dastscan.py

@@ -42,7 +42,7 @@ import urllib.request
 from datetime import datetime, timezone
 from pathlib import Path
 
-DASTSCAN_VERSION = "1.1.0"
+DASTSCAN_VERSION = "1.1.1"
 
 SEVERITIES = ["critical", "high", "medium", "low", "info"]
 SEVERITY_RANK = {s: i for i, s in enumerate(SEVERITIES)}
@@ -266,6 +266,8 @@ def slug(text: str) -> str:
 # "running" at the start, "passed" / "failed" / "skipped" at the end with a one-line detail,
 # then the report as log chunks. A plan without Pipelines (402) or any error never fails the scan.
 _UUID = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$", re.I)
+# Every iKanban scanner reports into one named lane, not the server's "legacy" lane.
+PIPE_RUN = "security-scan"
 PIPE_CHUNK = 15 * 1024  # the server takes 16 KB per chunk
 LAST_RUN = {"report": "", "detail": "", "skipped": False}
 
@@ -349,7 +351,7 @@ class Pipeline:
 
     def start(self):
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": "running",
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}"})
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}"})
 
     def finish(self, code):
         status = "failed" if code else ("skipped" if LAST_RUN["skipped"] else "passed")
@@ -357,10 +359,10 @@ class Pipeline:
         if code == 1 and not LAST_RUN["skipped"]:
             detail = (detail + " (at or above --fail-on)").strip()
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": status,
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}",
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}",
                                        "detail": detail[:300] or None})
         for chunk in log_chunks(mask_report(LAST_RUN["report"])):
-            self._post("pipeline-logs", {"task": self.task, "stage": self.stage, "text": chunk})
+            self._post("pipeline-logs", {"task": self.task, "run": PIPE_RUN, "stage": self.stage, "text": chunk})
 
 
 def run_main(stage, main_fn, argv=None):

package/scanners/ikanban-infrascan.py

@@ -51,7 +51,7 @@ from dataclasses import dataclass, field
 from datetime import datetime, timezone
 from pathlib import Path
 
-INFRASCAN_VERSION = "1.1.0"
+INFRASCAN_VERSION = "1.1.1"
 
 SEVERITIES = ["critical", "high", "medium", "low", "info"]
 SEVERITY_RANK = {s: i for i, s in enumerate(SEVERITIES)}
@@ -577,6 +577,8 @@ def slug(text: str) -> str:
 # "running" at the start, "passed" / "failed" / "skipped" at the end with a one-line detail,
 # then the report as log chunks. A plan without Pipelines (402) or any error never fails the scan.
 _UUID = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$", re.I)
+# Every iKanban scanner reports into one named lane, not the server's "legacy" lane.
+PIPE_RUN = "security-scan"
 PIPE_CHUNK = 15 * 1024  # the server takes 16 KB per chunk
 LAST_RUN = {"report": "", "detail": "", "skipped": False}
 INVENTORY: list = []  # (scope, table rows) per --path, for the report
@@ -661,7 +663,7 @@ class Pipeline:
 
     def start(self):
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": "running",
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}"})
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}"})
 
     def finish(self, code):
         status = "failed" if code else ("skipped" if LAST_RUN["skipped"] else "passed")
@@ -669,10 +671,10 @@ class Pipeline:
         if code == 1 and not LAST_RUN["skipped"]:
             detail = (detail + " (at or above --fail-on)").strip()
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": status,
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}",
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}",
                                        "detail": detail[:300] or None})
         for chunk in log_chunks(mask_report(LAST_RUN["report"])):
-            self._post("pipeline-logs", {"task": self.task, "stage": self.stage, "text": chunk})
+            self._post("pipeline-logs", {"task": self.task, "run": PIPE_RUN, "stage": self.stage, "text": chunk})
 
 
 def run_main(stage, main_fn, argv=None):

package/scanners/ikanban-secscan.py

@@ -64,7 +64,7 @@ from pathlib import Path
 # that npm no longer hosts the package. Starting at 1.0.0 rather than continuing
 # the npm package's 0.1.x line: that counter belonged to the wrapper, not to
 # this file, and reusing it would suggest a continuity that does not exist.
-SECSCAN_VERSION = "1.5.0"
+SECSCAN_VERSION = "1.5.1"
 
 SEVERITIES = ["critical", "high", "medium", "low", "info"]
 SEVERITY_RANK = {s: i for i, s in enumerate(SEVERITIES)}
@@ -901,6 +901,8 @@ def slug(text: str) -> str:
 # "running" at the start, "passed" / "failed" / "skipped" at the end with a one-line detail,
 # then the report as log chunks. A plan without Pipelines (402) or any error never fails the scan.
 _UUID = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$", re.I)
+# Every iKanban scanner reports into one named lane, not the server's "legacy" lane.
+PIPE_RUN = "security-scan"
 PIPE_CHUNK = 15 * 1024  # the server takes 16 KB per chunk
 LAST_RUN = {"report": "", "detail": "", "skipped": False}
 
@@ -984,7 +986,7 @@ class Pipeline:
 
     def start(self):
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": "running",
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}"})
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}"})
 
     def finish(self, code):
         status = "failed" if code else ("skipped" if LAST_RUN["skipped"] else "passed")
@@ -992,10 +994,10 @@ class Pipeline:
         if code == 1 and not LAST_RUN["skipped"]:
             detail = (detail + " (at or above --fail-on)").strip()
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": status,
-                                       "source": "laptop", "actor": f"ikanban-{self.stage}",
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}",
                                        "detail": detail[:300] or None})
         for chunk in log_chunks(mask_report(LAST_RUN["report"])):
-            self._post("pipeline-logs", {"task": self.task, "stage": self.stage, "text": chunk})
+            self._post("pipeline-logs", {"task": self.task, "run": PIPE_RUN, "stage": self.stage, "text": chunk})
 
 
 def run_main(stage, main_fn, argv=None):