kodingo-cli 1.1.9 → 1.1.10

package/dist/commands/scan-repo.js

@@ -66,6 +66,9 @@ const SUPPORTED_EXTENSIONS = [
 const IGNORED_DIRS = [
     "node_modules", ".git", ".kortex", "dist", "build",
     "out", ".next", "coverage", "__pycache__", "vendor",
+    ".venv", "venv", "env", ".env", "site-packages",
+    "virtualenv", ".tox", "eggs", ".eggs", "wheels",
+    "target", ".gradle", ".idea", ".vscode", "bin", "obj",
 ];
 const MAX_SYMBOLS = 200;
 const BATCH_SIZE = 5;

package/dist/commands/security-scan.js

@@ -18,7 +18,7 @@ const graph_builder_1 = require("../utils/graph-builder");
 const security_code_analyzer_1 = require("../utils/security-code-analyzer");
 const context_assembler_1 = require("../utils/context-assembler");
 const ast_parser_1 = require("../utils/ast-parser");
-const IGNORED_DIRS = new Set(["node_modules", ".git", ".kortex", "dist", "build", "vendor", "out", ".next"]);
+const IGNORED_DIRS = new Set(["node_modules", ".git", ".kortex", "dist", "build", "vendor", "out", ".next", ".venv", "venv", "env", "site-packages", "virtualenv", ".tox", "target", ".gradle", ".idea", ".vscode", "bin", "obj"]);
 const SUPPORTED_EXTENSIONS = [".ts", ".tsx", ".js", ".jsx", ".py", ".go", ".rs", ".php", ".java", ".kt", ".rb", ".c", ".cpp", ".html", ".phtml", ".twig", ".blade.php"];
 function walkFiles(dir) {
     const results = [];
@@ -131,13 +131,35 @@ async function securityScanCommand(options = {}) {
             }
             catch { }
             const allCandidates = (0, security_code_analyzer_1.analyzeForSecurityCandidates)(repoRoot, graph, symbols, dynamicRules);
-            // Cap at 30 candidates for LLM judgment — prioritise critical and high severity
+            // Fetch already-confirmed open findings so we don't re-scan them —
+            // they stay visible in the dashboard as open until fixed, but we use
+            // our 30-candidate budget on NEW issues each week.
+            let confirmedFingerprints = new Set();
+            try {
+                const existingRes = await fetch(`${apiUrl}/security/findings?repo=${encodeURIComponent(repoName)}`, {
+                    headers: { "X-Kodingo-Token": token },
+                });
+                if (existingRes.ok) {
+                    const { findings: existingFindings } = await existingRes.json();
+                    existingFindings.forEach((f) => {
+                        confirmedFingerprints.add(`${f.finding_type}:${f.endpoint ?? f.symbol ?? ""}:${f.vulnerability_id ?? ""}`);
+                    });
+                }
+            }
+            catch { }
+            // Filter out already-confirmed findings, then sort by severity and cap at 30
             const SEVERITY_ORDER = { critical: 0, high: 1, moderate: 2, low: 3 };
-            const candidates = allCandidates
+            const newCandidates = allCandidates.filter(c => {
+                const fp = `${c.patternType}:${c.symbol ?? c.file}:${c.file}`;
+                return !confirmedFingerprints.has(fp);
+            });
+            const candidates = newCandidates
                 .sort((a, b) => (SEVERITY_ORDER[a.severity ?? 'low'] ?? 3) - (SEVERITY_ORDER[b.severity ?? 'low'] ?? 3))
                 .slice(0, 30);
-            if (!options.silent && allCandidates.length > 30) {
-                console.log(`  Found ${allCandidates.length} candidates — reviewing top 30 by severity\n`);
+            if (!options.silent) {
+                if (allCandidates.length > 0) {
+                    console.log(`  Found ${allCandidates.length} candidates (${allCandidates.length - newCandidates.length} already tracked as open) — reviewing ${Math.min(candidates.length, 30)} new ones\n`);
+                }
             }
             if (candidates.length === 0) {
                 if (!options.silent)

package/dist/utils/dependency-parser.js

@@ -154,7 +154,7 @@ function parseComposerLock(repoRoot, filePath) {
     }
     return entries;
 }
-const IGNORED_DIRS = new Set(["node_modules", ".git", ".kortex", "dist", "build", "vendor", "out", ".next"]);
+const IGNORED_DIRS = new Set(["node_modules", ".git", ".kortex", "dist", "build", "vendor", "out", ".next", ".venv", "venv", "env", "site-packages", "virtualenv", ".tox", "target", ".gradle", ".idea", ".vscode", "bin", "obj"]);
 function findManifestFiles(repoRoot) {
     const result = { packageJson: [], packageLock: [], composerJson: [], composerLock: [] };
     function walk(dir) {

package/dist/utils/graph-builder.js

@@ -70,6 +70,8 @@ const TS_JS_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx"]);
 const IGNORED_DIRS = [
     "node_modules", ".git", ".kortex", "dist", "build",
     "out", ".next", "coverage", "__pycache__", "vendor",
+    ".venv", "venv", "env", "site-packages", "virtualenv",
+    ".tox", "target", ".gradle", ".idea", ".vscode", "bin", "obj",
 ];
 function walkFiles(dir) {
     const results = [];

package/dist/utils/security-code-analyzer.js

@@ -98,7 +98,7 @@ function analyzeForSecurityCandidates(repoRoot, graph, symbols, dynamicRules = [
         ".java": "java", ".kt": "kotlin", ".rb": "ruby", ".c": "c", ".cpp": "cpp",
         ".html": "html", ".js": "javascript", ".ts": "typescript", ".jsx": "javascript", ".tsx": "typescript"
     };
-    const IGNORED_DIRS = new Set(["node_modules", ".git", "dist", "build", "vendor", "__pycache__", ".next", "out", "coverage"]);
+    const IGNORED_DIRS = new Set(["node_modules", ".git", "dist", "build", "vendor", "__pycache__", ".next", "out", "coverage", ".venv", "venv", "env", "site-packages", "virtualenv", ".tox", "target", ".gradle", ".idea", ".vscode", "bin", "obj"]);
     // Get recently changed files from git (last 30 days) — scan these first
     let priorityFiles = [];
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kodingo-cli",
-  "version": "1.1.9",
+  "version": "1.1.10",
   "description": "Kodingo CLI",
   "license": "MIT",
   "private": false,