ikanban 0.4.6 → 0.4.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ikanban",
-  "version": "0.4.6",
+  "version": "0.4.7",
   "description": "iKanban CLI: AI and security scans of your own repo, with results filed into iKanban",
   "bin": { "ikanban": "bin/ikanban.js" },
   "files": ["bin", "lib", "hooks", "scanners", "README.md", "LICENSE.md"],

package/scanners/ikanban-dastscan.py

@@ -56,7 +56,7 @@ import urllib.request
 from datetime import datetime, timezone
 from pathlib import Path
 
-DASTSCAN_VERSION = "1.3.0"
+DASTSCAN_VERSION = "1.3.1"
 
 SEVERITIES = ["critical", "high", "medium", "low", "info"]
 SEVERITY_RANK = {s: i for i, s in enumerate(SEVERITIES)}
@@ -521,9 +521,12 @@ class Pipeline:
         if not ok:
             self._off(data or "this iKanban server has no Pipelines")
 
-    def start(self):
+    def start(self, url=""):
+        # Plan 11 H14: the URL as the running event's detail, so iKASecure's DAST targets list
+        # shows "Scanning…" on that target.
         self._post("pipeline-events", {"task": self.task, "stage": self.stage, "status": "running",
-                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}"})
+                                       "run": PIPE_RUN, "source": "laptop", "actor": f"ikanban-{self.stage}",
+                                       "detail": url[:300] or None})
 
     def log(self, line):
         """One progress line, sent as it happens (masked like the report). A failure only turns Pipelines off."""
@@ -553,9 +556,10 @@ def run_main(stage, main_fn, argv=None):
     pre.add_argument("--team", default=os.environ.get("IKANBAN_TEAM_ID", ""))
     pre.add_argument("--token", default=os.environ.get("VIBE_API_TOKEN", ""))
     pre.add_argument("--base-url", default=os.environ.get("IKANBAN_BASE_URL", "https://api.i-kanban.com"))
+    pre.add_argument("--url", default="")
     known, _ = pre.parse_known_args(raw)
     pl = Pipeline(stage, known.task, known.task_team or known.team, known.base_url, known.token)
-    pl.start()
+    pl.start(known.url.strip())
     global PIPE
     PIPE = pl if pl.on else None
     try: