macwarden 1.1.0 → 1.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +50 -0
- package/README.md +7 -5
- package/SECURITY.md +2 -2
- package/dist/bounded-file.js +1 -1
- package/dist/commands/bake/out-errors.js +1 -0
- package/dist/commands/bake/write-out.js +1 -1
- package/dist/commands/handlers.js +1 -1
- package/dist/commands/inspect.js +1 -1
- package/dist/commands/inventory.js +1 -1
- package/dist/commands/recommend.js +1 -1
- package/dist/commands/respond.js +1 -1
- package/dist/commands/revoke.js +1 -1
- package/dist/commands/rotate.js +1 -1
- package/dist/commands/scan.js +1 -1
- package/dist/commands/verify.js +1 -1
- package/dist/commands/watch.js +1 -1
- package/dist/credential-recognition.js +1 -1
- package/dist/decode/index.js +1 -1
- package/dist/decode/recognition.js +1 -1
- package/dist/environment.js +1 -1
- package/dist/errors.js +1 -1
- package/dist/grade/index.js +1 -1
- package/dist/grouped-runs.js +1 -1
- package/dist/input/index.js +1 -1
- package/dist/input/lndconnect.js +1 -1
- package/dist/instant.js +1 -0
- package/dist/lnd/grpc.js +1 -1
- package/dist/lnd/index.js +1 -1
- package/dist/lnd/middleware-proto.js +1 -1
- package/dist/lnd/tls-identity.js +1 -1
- package/dist/online.js +1 -1
- package/dist/output/index.js +1 -1
- package/dist/output/scan-formats.js +1 -1
- package/dist/process-error-context.js +1 -1
- package/dist/protected-path.js +1 -1
- package/dist/registry/index.js +1 -1
- package/dist/registry/process-domain.js +1 -1
- package/dist/report/access-review.js +1 -1
- package/dist/root-key-id.js +1 -0
- package/dist/runtime.js +1923 -636
- package/dist/scan/agent-configs.js +1 -1
- package/dist/scan/git-history.js +1 -1
- package/dist/scan/ignore.js +1 -1
- package/dist/scan/index.js +1 -1
- package/dist/scan/mcp-context.js +1 -1
- package/dist/scan/nwc-match.js +1 -1
- package/dist/scan/patterns.js +1 -1
- package/dist/scan/redact.js +1 -1
- package/dist/secret.js +1 -1
- package/dist/version.js +1 -1
- package/dist/watch/alert-throttle.js +1 -1
- package/dist/watch/alert.js +1 -1
- package/dist/watch/canary.js +1 -1
- package/dist/watch/output-queue.js +1 -1
- package/dist/watch/usage.js +1 -1
- package/package.json +1 -1
- package/schemas/output/attenuate.schema.json +28 -1
- package/schemas/output/bake.schema.json +28 -1
- package/schemas/output/inspect.schema.json +7 -2
- package/schemas/output/inventory.schema.json +28 -1
- package/schemas/output/macwarden.schema.json +329 -0
- package/schemas/output/recommend.schema.json +28 -1
- package/schemas/output/respond.schema.json +28 -1
- package/schemas/output/revoke.schema.json +28 -1
- package/schemas/output/rotate.schema.json +28 -1
- package/schemas/output/scan.schema.json +8 -3
- package/schemas/output/verify.schema.json +28 -1
- package/schemas/output/watch.schema.json +28 -1
|
@@ -36,6 +36,9 @@
|
|
|
36
36
|
},
|
|
37
37
|
{
|
|
38
38
|
"$ref": "#/$defs/result"
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
"$ref": "#/$defs/help"
|
|
39
42
|
}
|
|
40
43
|
]
|
|
41
44
|
},
|
|
@@ -65,7 +68,14 @@
|
|
|
65
68
|
"then": {
|
|
66
69
|
"properties": {
|
|
67
70
|
"result": {
|
|
68
|
-
"
|
|
71
|
+
"oneOf": [
|
|
72
|
+
{
|
|
73
|
+
"$ref": "#/$defs/result"
|
|
74
|
+
},
|
|
75
|
+
{
|
|
76
|
+
"$ref": "#/$defs/help"
|
|
77
|
+
}
|
|
78
|
+
]
|
|
69
79
|
},
|
|
70
80
|
"error": {
|
|
71
81
|
"type": "null"
|
|
@@ -431,6 +441,23 @@
|
|
|
431
441
|
}
|
|
432
442
|
}
|
|
433
443
|
},
|
|
444
|
+
"help": {
|
|
445
|
+
"type": "object",
|
|
446
|
+
"additionalProperties": false,
|
|
447
|
+
"required": [
|
|
448
|
+
"usage"
|
|
449
|
+
],
|
|
450
|
+
"properties": {
|
|
451
|
+
"usage": {
|
|
452
|
+
"type": "array",
|
|
453
|
+
"minItems": 1,
|
|
454
|
+
"items": {
|
|
455
|
+
"type": "string",
|
|
456
|
+
"pattern": "^macwarden respond "
|
|
457
|
+
}
|
|
458
|
+
}
|
|
459
|
+
}
|
|
460
|
+
},
|
|
434
461
|
"result": {
|
|
435
462
|
"type": "object",
|
|
436
463
|
"additionalProperties": false,
|
|
@@ -36,6 +36,9 @@
|
|
|
36
36
|
},
|
|
37
37
|
{
|
|
38
38
|
"$ref": "#/$defs/result"
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
"$ref": "#/$defs/help"
|
|
39
42
|
}
|
|
40
43
|
]
|
|
41
44
|
},
|
|
@@ -65,7 +68,14 @@
|
|
|
65
68
|
"then": {
|
|
66
69
|
"properties": {
|
|
67
70
|
"result": {
|
|
68
|
-
"
|
|
71
|
+
"oneOf": [
|
|
72
|
+
{
|
|
73
|
+
"$ref": "#/$defs/result"
|
|
74
|
+
},
|
|
75
|
+
{
|
|
76
|
+
"$ref": "#/$defs/help"
|
|
77
|
+
}
|
|
78
|
+
]
|
|
69
79
|
},
|
|
70
80
|
"error": {
|
|
71
81
|
"type": "null"
|
|
@@ -285,6 +295,23 @@
|
|
|
285
295
|
}
|
|
286
296
|
]
|
|
287
297
|
},
|
|
298
|
+
"help": {
|
|
299
|
+
"type": "object",
|
|
300
|
+
"additionalProperties": false,
|
|
301
|
+
"required": [
|
|
302
|
+
"usage"
|
|
303
|
+
],
|
|
304
|
+
"properties": {
|
|
305
|
+
"usage": {
|
|
306
|
+
"type": "array",
|
|
307
|
+
"minItems": 1,
|
|
308
|
+
"items": {
|
|
309
|
+
"type": "string",
|
|
310
|
+
"pattern": "^macwarden revoke "
|
|
311
|
+
}
|
|
312
|
+
}
|
|
313
|
+
}
|
|
314
|
+
},
|
|
288
315
|
"result": {
|
|
289
316
|
"oneOf": [
|
|
290
317
|
{
|
|
@@ -36,6 +36,9 @@
|
|
|
36
36
|
},
|
|
37
37
|
{
|
|
38
38
|
"$ref": "#/$defs/result"
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
"$ref": "#/$defs/help"
|
|
39
42
|
}
|
|
40
43
|
]
|
|
41
44
|
},
|
|
@@ -65,7 +68,14 @@
|
|
|
65
68
|
"then": {
|
|
66
69
|
"properties": {
|
|
67
70
|
"result": {
|
|
68
|
-
"
|
|
71
|
+
"oneOf": [
|
|
72
|
+
{
|
|
73
|
+
"$ref": "#/$defs/result"
|
|
74
|
+
},
|
|
75
|
+
{
|
|
76
|
+
"$ref": "#/$defs/help"
|
|
77
|
+
}
|
|
78
|
+
]
|
|
69
79
|
},
|
|
70
80
|
"error": {
|
|
71
81
|
"type": "null"
|
|
@@ -285,6 +295,23 @@
|
|
|
285
295
|
}
|
|
286
296
|
]
|
|
287
297
|
},
|
|
298
|
+
"help": {
|
|
299
|
+
"type": "object",
|
|
300
|
+
"additionalProperties": false,
|
|
301
|
+
"required": [
|
|
302
|
+
"usage"
|
|
303
|
+
],
|
|
304
|
+
"properties": {
|
|
305
|
+
"usage": {
|
|
306
|
+
"type": "array",
|
|
307
|
+
"minItems": 1,
|
|
308
|
+
"items": {
|
|
309
|
+
"type": "string",
|
|
310
|
+
"pattern": "^macwarden rotate "
|
|
311
|
+
}
|
|
312
|
+
}
|
|
313
|
+
}
|
|
314
|
+
},
|
|
288
315
|
"result": {
|
|
289
316
|
"oneOf": [
|
|
290
317
|
{
|
|
@@ -14,7 +14,7 @@
|
|
|
14
14
|
"type": "array", "maxItems": 1, "items": { "const": "shallow-history" }
|
|
15
15
|
},
|
|
16
16
|
"result": {
|
|
17
|
-
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/result" }]
|
|
17
|
+
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/result" }, { "$ref": "#/$defs/help" }]
|
|
18
18
|
},
|
|
19
19
|
"error": {
|
|
20
20
|
"oneOf": [{ "type": "null" }, { "$ref": "#/$defs/error" }]
|
|
@@ -25,7 +25,7 @@
|
|
|
25
25
|
"if": { "properties": { "ok": { "const": true } }, "required": ["ok"] },
|
|
26
26
|
"then": {
|
|
27
27
|
"properties": {
|
|
28
|
-
"result": { "$ref": "#/$defs/result" },
|
|
28
|
+
"result": { "oneOf": [{ "$ref": "#/$defs/result" }, { "$ref": "#/$defs/help" }] },
|
|
29
29
|
"error": { "type": "null" }
|
|
30
30
|
}
|
|
31
31
|
},
|
|
@@ -38,6 +38,11 @@
|
|
|
38
38
|
}
|
|
39
39
|
],
|
|
40
40
|
"$defs": {
|
|
41
|
+
"help": {
|
|
42
|
+
"description": "macwarden scan --help --json: the command synopsis lines (SPEC.md, Output > Help).",
|
|
43
|
+
"type": "object", "additionalProperties": false, "required": ["usage"],
|
|
44
|
+
"properties": { "usage": { "type": "array", "minItems": 1, "items": { "type": "string", "pattern": "^macwarden scan " } } }
|
|
45
|
+
},
|
|
41
46
|
"agentLocation": {
|
|
42
47
|
"type": "object",
|
|
43
48
|
"additionalProperties": false,
|
|
@@ -146,7 +151,7 @@
|
|
|
146
151
|
},
|
|
147
152
|
"context": { "description": "Only when the credential is a string value inside an MCP server entry of a JSON config (an AI agent configuration).", "const": "mcp-config" },
|
|
148
153
|
"alsoAt": {
|
|
149
|
-
"description": "
|
|
154
|
+
"description": "With --git-history (a finding with commit): the same file content was also added at other paths. On a work-tree finding (no commit): the same file is also reachable under other hard-link names within the same path argument. One finding stands for all of them: count is how many other paths, paths lists up to five.",
|
|
150
155
|
"type": "object",
|
|
151
156
|
"additionalProperties": false,
|
|
152
157
|
"required": ["count", "paths"],
|
|
@@ -36,6 +36,9 @@
|
|
|
36
36
|
},
|
|
37
37
|
{
|
|
38
38
|
"$ref": "#/$defs/result"
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
"$ref": "#/$defs/help"
|
|
39
42
|
}
|
|
40
43
|
]
|
|
41
44
|
},
|
|
@@ -65,7 +68,14 @@
|
|
|
65
68
|
"then": {
|
|
66
69
|
"properties": {
|
|
67
70
|
"result": {
|
|
68
|
-
"
|
|
71
|
+
"oneOf": [
|
|
72
|
+
{
|
|
73
|
+
"$ref": "#/$defs/result"
|
|
74
|
+
},
|
|
75
|
+
{
|
|
76
|
+
"$ref": "#/$defs/help"
|
|
77
|
+
}
|
|
78
|
+
]
|
|
69
79
|
},
|
|
70
80
|
"error": {
|
|
71
81
|
"type": "null"
|
|
@@ -340,6 +350,23 @@
|
|
|
340
350
|
"preimage-exposure"
|
|
341
351
|
]
|
|
342
352
|
},
|
|
353
|
+
"help": {
|
|
354
|
+
"type": "object",
|
|
355
|
+
"additionalProperties": false,
|
|
356
|
+
"required": [
|
|
357
|
+
"usage"
|
|
358
|
+
],
|
|
359
|
+
"properties": {
|
|
360
|
+
"usage": {
|
|
361
|
+
"type": "array",
|
|
362
|
+
"minItems": 1,
|
|
363
|
+
"items": {
|
|
364
|
+
"type": "string",
|
|
365
|
+
"pattern": "^macwarden verify "
|
|
366
|
+
}
|
|
367
|
+
}
|
|
368
|
+
}
|
|
369
|
+
},
|
|
343
370
|
"result": {
|
|
344
371
|
"type": "object",
|
|
345
372
|
"additionalProperties": false,
|
|
@@ -36,6 +36,9 @@
|
|
|
36
36
|
},
|
|
37
37
|
{
|
|
38
38
|
"$ref": "#/$defs/result"
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
"$ref": "#/$defs/help"
|
|
39
42
|
}
|
|
40
43
|
]
|
|
41
44
|
},
|
|
@@ -65,7 +68,14 @@
|
|
|
65
68
|
"then": {
|
|
66
69
|
"properties": {
|
|
67
70
|
"result": {
|
|
68
|
-
"
|
|
71
|
+
"oneOf": [
|
|
72
|
+
{
|
|
73
|
+
"$ref": "#/$defs/result"
|
|
74
|
+
},
|
|
75
|
+
{
|
|
76
|
+
"$ref": "#/$defs/help"
|
|
77
|
+
}
|
|
78
|
+
]
|
|
69
79
|
},
|
|
70
80
|
"error": {
|
|
71
81
|
"type": "null"
|
|
@@ -285,6 +295,23 @@
|
|
|
285
295
|
}
|
|
286
296
|
]
|
|
287
297
|
},
|
|
298
|
+
"help": {
|
|
299
|
+
"type": "object",
|
|
300
|
+
"additionalProperties": false,
|
|
301
|
+
"required": [
|
|
302
|
+
"usage"
|
|
303
|
+
],
|
|
304
|
+
"properties": {
|
|
305
|
+
"usage": {
|
|
306
|
+
"type": "array",
|
|
307
|
+
"minItems": 1,
|
|
308
|
+
"items": {
|
|
309
|
+
"type": "string",
|
|
310
|
+
"pattern": "^macwarden watch "
|
|
311
|
+
}
|
|
312
|
+
}
|
|
313
|
+
}
|
|
314
|
+
},
|
|
288
315
|
"result": {
|
|
289
316
|
"type": "object",
|
|
290
317
|
"additionalProperties": false,
|