opencode-swarm 6.73.1 → 6.74.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/index.js +17 -13
- package/dist/config/evidence-schema.d.ts +115 -0
- package/dist/index.js +699 -250
- package/dist/tools/pre-check-batch.d.ts +8 -0
- package/dist/tools/sast-baseline.d.ts +126 -0
- package/dist/tools/sast-scan.d.ts +27 -0
- package/package.json +1 -1
package/dist/cli/index.js
CHANGED
|
@@ -15326,7 +15326,7 @@ var init_manager = __esm(() => {
|
|
|
15326
15326
|
});
|
|
15327
15327
|
|
|
15328
15328
|
// src/config/evidence-schema.ts
|
|
15329
|
-
var EVIDENCE_MAX_JSON_BYTES, EVIDENCE_MAX_PATCH_BYTES, EVIDENCE_MAX_TASK_BYTES, EvidenceTypeSchema, EvidenceVerdictSchema, BaseEvidenceSchema, ReviewEvidenceSchema, TestEvidenceSchema, DiffEvidenceSchema, ApprovalEvidenceSchema, NoteEvidenceSchema, RetrospectiveEvidenceSchema, SyntaxEvidenceSchema, PlaceholderEvidenceSchema, SastEvidenceSchema, SbomEvidenceSchema, BuildEvidenceSchema, QualityBudgetEvidenceSchema, SecretscanEvidenceSchema, EvidenceSchema, EvidenceBundleSchema;
|
|
15329
|
+
var EVIDENCE_MAX_JSON_BYTES, EVIDENCE_MAX_PATCH_BYTES, EVIDENCE_MAX_TASK_BYTES, EvidenceTypeSchema, EvidenceVerdictSchema, BaseEvidenceSchema, ReviewEvidenceSchema, TestEvidenceSchema, DiffEvidenceSchema, ApprovalEvidenceSchema, NoteEvidenceSchema, RetrospectiveEvidenceSchema, SyntaxEvidenceSchema, PlaceholderEvidenceSchema, SastFindingSchema, SastEvidenceSchema, SbomEvidenceSchema, BuildEvidenceSchema, QualityBudgetEvidenceSchema, SecretscanEvidenceSchema, EvidenceSchema, EvidenceBundleSchema;
|
|
15330
15330
|
var init_evidence_schema = __esm(() => {
|
|
15331
15331
|
init_zod();
|
|
15332
15332
|
EVIDENCE_MAX_JSON_BYTES = 500 * 1024;
|
|
@@ -15465,19 +15465,20 @@ var init_evidence_schema = __esm(() => {
|
|
|
15465
15465
|
files_with_findings: exports_external.number().int(),
|
|
15466
15466
|
findings_count: exports_external.number().int()
|
|
15467
15467
|
});
|
|
15468
|
+
SastFindingSchema = exports_external.object({
|
|
15469
|
+
rule_id: exports_external.string(),
|
|
15470
|
+
severity: exports_external.enum(["critical", "high", "medium", "low"]),
|
|
15471
|
+
message: exports_external.string(),
|
|
15472
|
+
location: exports_external.object({
|
|
15473
|
+
file: exports_external.string(),
|
|
15474
|
+
line: exports_external.number().int(),
|
|
15475
|
+
column: exports_external.number().int().optional()
|
|
15476
|
+
}),
|
|
15477
|
+
remediation: exports_external.string().optional()
|
|
15478
|
+
});
|
|
15468
15479
|
SastEvidenceSchema = BaseEvidenceSchema.extend({
|
|
15469
15480
|
type: exports_external.literal("sast"),
|
|
15470
|
-
findings: exports_external.array(
|
|
15471
|
-
rule_id: exports_external.string(),
|
|
15472
|
-
severity: exports_external.enum(["critical", "high", "medium", "low"]),
|
|
15473
|
-
message: exports_external.string(),
|
|
15474
|
-
location: exports_external.object({
|
|
15475
|
-
file: exports_external.string(),
|
|
15476
|
-
line: exports_external.number().int(),
|
|
15477
|
-
column: exports_external.number().int().optional()
|
|
15478
|
-
}),
|
|
15479
|
-
remediation: exports_external.string().optional()
|
|
15480
|
-
})).default([]),
|
|
15481
|
+
findings: exports_external.array(SastFindingSchema).default([]),
|
|
15481
15482
|
engine: exports_external.enum(["tier_a", "tier_a+tier_b"]),
|
|
15482
15483
|
files_scanned: exports_external.number().int(),
|
|
15483
15484
|
findings_count: exports_external.number().int(),
|
|
@@ -15486,7 +15487,10 @@ var init_evidence_schema = __esm(() => {
|
|
|
15486
15487
|
high: exports_external.number().int(),
|
|
15487
15488
|
medium: exports_external.number().int(),
|
|
15488
15489
|
low: exports_external.number().int()
|
|
15489
|
-
})
|
|
15490
|
+
}),
|
|
15491
|
+
new_findings: exports_external.array(SastFindingSchema).optional(),
|
|
15492
|
+
pre_existing_findings: exports_external.array(SastFindingSchema).optional(),
|
|
15493
|
+
baseline_used: exports_external.boolean().optional()
|
|
15490
15494
|
});
|
|
15491
15495
|
SbomEvidenceSchema = BaseEvidenceSchema.extend({
|
|
15492
15496
|
type: exports_external.literal("sbom"),
|
|
@@ -289,6 +289,22 @@ export declare const PlaceholderEvidenceSchema: z.ZodObject<{
|
|
|
289
289
|
findings_count: z.ZodNumber;
|
|
290
290
|
}, z.core.$strip>;
|
|
291
291
|
export type PlaceholderEvidence = z.infer<typeof PlaceholderEvidenceSchema>;
|
|
292
|
+
export declare const SastFindingSchema: z.ZodObject<{
|
|
293
|
+
rule_id: z.ZodString;
|
|
294
|
+
severity: z.ZodEnum<{
|
|
295
|
+
medium: "medium";
|
|
296
|
+
low: "low";
|
|
297
|
+
high: "high";
|
|
298
|
+
critical: "critical";
|
|
299
|
+
}>;
|
|
300
|
+
message: z.ZodString;
|
|
301
|
+
location: z.ZodObject<{
|
|
302
|
+
file: z.ZodString;
|
|
303
|
+
line: z.ZodNumber;
|
|
304
|
+
column: z.ZodOptional<z.ZodNumber>;
|
|
305
|
+
}, z.core.$strip>;
|
|
306
|
+
remediation: z.ZodOptional<z.ZodString>;
|
|
307
|
+
}, z.core.$strip>;
|
|
292
308
|
export declare const SastEvidenceSchema: z.ZodObject<{
|
|
293
309
|
task_id: z.ZodString;
|
|
294
310
|
timestamp: z.ZodString;
|
|
@@ -331,6 +347,39 @@ export declare const SastEvidenceSchema: z.ZodObject<{
|
|
|
331
347
|
medium: z.ZodNumber;
|
|
332
348
|
low: z.ZodNumber;
|
|
333
349
|
}, z.core.$strip>;
|
|
350
|
+
new_findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
351
|
+
rule_id: z.ZodString;
|
|
352
|
+
severity: z.ZodEnum<{
|
|
353
|
+
medium: "medium";
|
|
354
|
+
low: "low";
|
|
355
|
+
high: "high";
|
|
356
|
+
critical: "critical";
|
|
357
|
+
}>;
|
|
358
|
+
message: z.ZodString;
|
|
359
|
+
location: z.ZodObject<{
|
|
360
|
+
file: z.ZodString;
|
|
361
|
+
line: z.ZodNumber;
|
|
362
|
+
column: z.ZodOptional<z.ZodNumber>;
|
|
363
|
+
}, z.core.$strip>;
|
|
364
|
+
remediation: z.ZodOptional<z.ZodString>;
|
|
365
|
+
}, z.core.$strip>>>;
|
|
366
|
+
pre_existing_findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
367
|
+
rule_id: z.ZodString;
|
|
368
|
+
severity: z.ZodEnum<{
|
|
369
|
+
medium: "medium";
|
|
370
|
+
low: "low";
|
|
371
|
+
high: "high";
|
|
372
|
+
critical: "critical";
|
|
373
|
+
}>;
|
|
374
|
+
message: z.ZodString;
|
|
375
|
+
location: z.ZodObject<{
|
|
376
|
+
file: z.ZodString;
|
|
377
|
+
line: z.ZodNumber;
|
|
378
|
+
column: z.ZodOptional<z.ZodNumber>;
|
|
379
|
+
}, z.core.$strip>;
|
|
380
|
+
remediation: z.ZodOptional<z.ZodString>;
|
|
381
|
+
}, z.core.$strip>>>;
|
|
382
|
+
baseline_used: z.ZodOptional<z.ZodBoolean>;
|
|
334
383
|
}, z.core.$strip>;
|
|
335
384
|
export type SastEvidence = z.infer<typeof SastEvidenceSchema>;
|
|
336
385
|
export declare const SbomEvidenceSchema: z.ZodObject<{
|
|
@@ -722,6 +771,39 @@ export declare const EvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
|
722
771
|
medium: z.ZodNumber;
|
|
723
772
|
low: z.ZodNumber;
|
|
724
773
|
}, z.core.$strip>;
|
|
774
|
+
new_findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
775
|
+
rule_id: z.ZodString;
|
|
776
|
+
severity: z.ZodEnum<{
|
|
777
|
+
medium: "medium";
|
|
778
|
+
low: "low";
|
|
779
|
+
high: "high";
|
|
780
|
+
critical: "critical";
|
|
781
|
+
}>;
|
|
782
|
+
message: z.ZodString;
|
|
783
|
+
location: z.ZodObject<{
|
|
784
|
+
file: z.ZodString;
|
|
785
|
+
line: z.ZodNumber;
|
|
786
|
+
column: z.ZodOptional<z.ZodNumber>;
|
|
787
|
+
}, z.core.$strip>;
|
|
788
|
+
remediation: z.ZodOptional<z.ZodString>;
|
|
789
|
+
}, z.core.$strip>>>;
|
|
790
|
+
pre_existing_findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
791
|
+
rule_id: z.ZodString;
|
|
792
|
+
severity: z.ZodEnum<{
|
|
793
|
+
medium: "medium";
|
|
794
|
+
low: "low";
|
|
795
|
+
high: "high";
|
|
796
|
+
critical: "critical";
|
|
797
|
+
}>;
|
|
798
|
+
message: z.ZodString;
|
|
799
|
+
location: z.ZodObject<{
|
|
800
|
+
file: z.ZodString;
|
|
801
|
+
line: z.ZodNumber;
|
|
802
|
+
column: z.ZodOptional<z.ZodNumber>;
|
|
803
|
+
}, z.core.$strip>;
|
|
804
|
+
remediation: z.ZodOptional<z.ZodString>;
|
|
805
|
+
}, z.core.$strip>>>;
|
|
806
|
+
baseline_used: z.ZodOptional<z.ZodBoolean>;
|
|
725
807
|
}, z.core.$strip>, z.ZodObject<{
|
|
726
808
|
task_id: z.ZodString;
|
|
727
809
|
timestamp: z.ZodString;
|
|
@@ -1108,6 +1190,39 @@ export declare const EvidenceBundleSchema: z.ZodObject<{
|
|
|
1108
1190
|
medium: z.ZodNumber;
|
|
1109
1191
|
low: z.ZodNumber;
|
|
1110
1192
|
}, z.core.$strip>;
|
|
1193
|
+
new_findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
1194
|
+
rule_id: z.ZodString;
|
|
1195
|
+
severity: z.ZodEnum<{
|
|
1196
|
+
medium: "medium";
|
|
1197
|
+
low: "low";
|
|
1198
|
+
high: "high";
|
|
1199
|
+
critical: "critical";
|
|
1200
|
+
}>;
|
|
1201
|
+
message: z.ZodString;
|
|
1202
|
+
location: z.ZodObject<{
|
|
1203
|
+
file: z.ZodString;
|
|
1204
|
+
line: z.ZodNumber;
|
|
1205
|
+
column: z.ZodOptional<z.ZodNumber>;
|
|
1206
|
+
}, z.core.$strip>;
|
|
1207
|
+
remediation: z.ZodOptional<z.ZodString>;
|
|
1208
|
+
}, z.core.$strip>>>;
|
|
1209
|
+
pre_existing_findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
1210
|
+
rule_id: z.ZodString;
|
|
1211
|
+
severity: z.ZodEnum<{
|
|
1212
|
+
medium: "medium";
|
|
1213
|
+
low: "low";
|
|
1214
|
+
high: "high";
|
|
1215
|
+
critical: "critical";
|
|
1216
|
+
}>;
|
|
1217
|
+
message: z.ZodString;
|
|
1218
|
+
location: z.ZodObject<{
|
|
1219
|
+
file: z.ZodString;
|
|
1220
|
+
line: z.ZodNumber;
|
|
1221
|
+
column: z.ZodOptional<z.ZodNumber>;
|
|
1222
|
+
}, z.core.$strip>;
|
|
1223
|
+
remediation: z.ZodOptional<z.ZodString>;
|
|
1224
|
+
}, z.core.$strip>>>;
|
|
1225
|
+
baseline_used: z.ZodOptional<z.ZodBoolean>;
|
|
1111
1226
|
}, z.core.$strip>, z.ZodObject<{
|
|
1112
1227
|
task_id: z.ZodString;
|
|
1113
1228
|
timestamp: z.ZodString;
|