pr-checkmate 1.4.0 → 1.6.0

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.logger = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = void 0;
+exports.logger = exports.runSecurityScan = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = void 0;
 exports.runAllChecks = runAllChecks;
 exports.runChecks = runChecks;
 /**
@@ -20,6 +20,8 @@ var prettier_autoformat_2 = require("./scripts/prettier-autoformat");
 Object.defineProperty(exports, "runPrettier", { enumerable: true, get: function () { return prettier_autoformat_2.runPrettier; } });
 var spellcheck_2 = require("./scripts/spellcheck");
 Object.defineProperty(exports, "runSpellcheck", { enumerable: true, get: function () { return spellcheck_2.runSpellcheck; } });
+var security_1 = require("./scripts/security");
+Object.defineProperty(exports, "runSecurityScan", { enumerable: true, get: function () { return security_1.runSecurityScan; } });
 var utils_1 = require("./utils");
 Object.defineProperty(exports, "logger", { enumerable: true, get: function () { return utils_1.logger; } });
 /**
@@ -30,6 +32,7 @@ async function runAllChecks() {
     await (0, lint_1.runLint)();
     await (0, dependency_check_1.runDependencyCheck)();
     await (0, spellcheck_1.runSpellcheck)();
+    // await runSecurityScan();
     await (0, prettier_autoformat_1.runPrettier)(); // Last to commit any fixes
 }
 /**

package/dist/scripts/index.js

@@ -18,12 +18,14 @@ exports.runJob = runJob;
 const dependency_check_1 = require("./dependency-check");
 const prettier_autoformat_1 = require("./prettier-autoformat");
 const spellcheck_1 = require("./spellcheck");
+const security_1 = require("./security");
 const utils_1 = require("../utils");
 const lint_1 = require("./lint");
 __exportStar(require("./dependency-check"), exports);
 __exportStar(require("./lint"), exports);
 __exportStar(require("./prettier-autoformat"), exports);
 __exportStar(require("./spellcheck"), exports);
+__exportStar(require("./security"), exports);
 async function runJob(jobName) {
     utils_1.logger.info(`🚀 Running job: ${jobName}`);
     try {
@@ -31,6 +33,7 @@ async function runJob(jobName) {
             case 'all':
                 await (0, lint_1.runLint)();
                 await (0, dependency_check_1.runDependencyCheck)();
+                // await runSecurityScan();
                 try {
                     await (0, prettier_autoformat_1.runPrettier)();
                 }
@@ -56,6 +59,9 @@ async function runJob(jobName) {
             case 'spellcheck':
                 await (0, spellcheck_1.runSpellcheck)();
                 break;
+            case 'security':
+                await (0, security_1.runSecurityScan)();
+                break;
             default:
                 utils_1.logger.warn(`[runJob]: Unknown job "${jobName}". Available: all, lint, deps, prettier, spellcheck`);
         }

package/dist/scripts/prettier-autoformat.js

@@ -28,7 +28,7 @@ function cleanupTempIgnoreFile(filePath) {
         }
     }
     catch (err) {
-        utils_1.logger.warn(`⚠️ Failed to cleanup temp file: ${filePath}\n${err}`);
+        utils_1.logger.warn(`[cleanupTempIgnoreFile]: ⚠️ Failed to cleanup temp file: ${filePath}\n${err}`);
     }
 }
 async function runPrettier() {

package/dist/scripts/security.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSecurityScan = runSecurityScan;
+const execa_1 = require("execa");
+const utils_1 = require("../utils");
+const fs_1 = require("fs");
+const child_process_1 = require("child_process");
+async function runSecurityScan() {
+    utils_1.logger.info('🔐 Running secret scan with gitleaks-secret-scanner...');
+    try {
+        let headSha = process.env.HEAD_SHA;
+        if (!headSha) {
+            try {
+                headSha = (0, child_process_1.execSync)('git rev-parse HEAD').toString().trim();
+                process.env.HEAD_SHA = headSha;
+                utils_1.logger.info(`ℹ️ Detected HEAD_SHA=${headSha}`);
+            }
+            catch {
+                utils_1.logger.warn('⚠️ Could not determine HEAD SHA, skipping diff-mode ci');
+            }
+        }
+        const cmd = (0, fs_1.existsSync)('node_modules/.bin/gitleaks-secret-scanner')
+            ? './node_modules/.bin/gitleaks-secret-scanner'
+            : 'npx gitleaks-secret-scanner';
+        await (0, execa_1.execa)(cmd, ['--diff-mode', 'ci', '--html-report', 'gitleaks-report.html'], {
+            stdio: 'inherit',
+            env: process.env,
+        });
+        utils_1.logger.info('✅ Secret scan completed');
+    }
+    catch (err) {
+        utils_1.logger.error('❌ Secrets found or scan failed');
+        throw err;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.4.0",
+    "version": "1.6.0",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",
@@ -35,6 +35,7 @@
         "lint": "eslint \"src/**/*.{ts,tsx}\" --fix",
         "prettier": "prettier --write \"src/**/*.{ts,tsx,js,jsx,json,md}\"",
         "spellcheck": "cspell '**/*.{ts,tsx,js,jsx,md,json}' --no-progress",
+        "scan:secrets": "gitleaks-secret-scanner --diff-mode ci --html-report gitleaks-report.html",
         "test": "echo 'Tests coming soon'",
         "clean": "rm -rf dist",
         "release": "standard-version"
@@ -54,19 +55,20 @@
     "author": "Artur Polishchuk",
     "license": "LicenseRef-Proprietary",
     "dependencies": {
+        "@typescript-eslint/eslint-plugin": "^8.47.0",
+        "@typescript-eslint/parser": "^8.47.0",
         "cspell": "^9.3.2",
         "dotenv": "^17.2.3",
         "eslint": ">=8.0.0",
+        "eslint-config-prettier": "^9.1.2",
+        "eslint-plugin-import": "^2.29.0",
+        "eslint-plugin-prettier": "^5.5.4",
         "execa": "^9.6.0",
+        "gitleaks-secret-scanner": "^1.2.2",
         "inquirer": "^13.0.1",
         "prettier": ">=3.0.0",
         "ts-node": "^10.9.1",
-        "typescript": "^5.9.3",
-        "@typescript-eslint/eslint-plugin": "^8.47.0",
-        "@typescript-eslint/parser": "^8.47.0",
-        "eslint-config-prettier": "^9.1.2",
-        "eslint-plugin-import": "^2.29.0",
-        "eslint-plugin-prettier": "^5.5.4"
+        "typescript": "^5.9.3"
     },
     "devDependencies": {
         "standard-version": "^9.5.0"