qa360 1.3.1 → 1.3.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/examples/accessibility.yml +1 -1
  2. package/examples/api-basic.yml +1 -2
  3. package/examples/complete.yml +15 -20
  4. package/examples/fullstack.yml +12 -11
  5. package/examples/security.yml +5 -11
  6. package/examples/ui-basic.yml +1 -1
  7. package/package.json +1 -1
package/examples/accessibility.yml CHANGED
@@ -2,7 +2,7 @@
2
2
  # WCAG compliance and accessibility testing
3
3
 
4
4
  version: 1
5
- name: "Accessibility Tests"
5
+ name: accessibility-tests
6
6
 
7
7
  gates:
8
8
  - ui
package/examples/api-basic.yml CHANGED
@@ -2,7 +2,7 @@
2
2
  # Simple API smoke tests for REST/GraphQL endpoints
3
3
 
4
4
  version: 1
5
- name: "API Health Check"
5
+ name: api-health-check
6
6
 
7
7
  gates:
8
8
  - api_smoke
@@ -20,4 +20,3 @@ targets:
20
20
  execution:
21
21
  timeout: 30000 # 30 seconds
22
22
  max_retries: 2
23
- on_failure: continue # or 'stop'
package/examples/complete.yml CHANGED
@@ -2,7 +2,7 @@
2
2
  # All quality gates enabled - comprehensive quality assurance
3
3
 
4
4
  version: 1
5
- name: "Complete QA Suite"
5
+ name: complete-qa-suite
6
6
 
7
7
  gates:
8
8
  - api_smoke # API health checks
@@ -11,8 +11,6 @@ gates:
11
11
  - perf # Performance testing
12
12
  - sast # Static security analysis
13
13
  - dast # Dynamic security testing
14
- - secrets # Credentials scanning
15
- - deps # Dependency vulnerabilities
16
14
 
17
15
  targets:
18
16
  api:
@@ -35,25 +33,22 @@ budgets:
35
33
 
36
34
  # Security thresholds
37
35
  security:
38
- sast:
39
- max_critical: 0
40
- max_high: 3
41
-
42
- dast:
43
- max_high: 5
44
-
45
- # Docker Compose integration
46
- hooks:
47
- beforeAll:
48
- - compose: up
49
- timeout: 30000
50
- - wait_on: http://localhost:3000
51
-
52
- afterAll:
53
- - compose: down
36
+ sast_max_high: 3 # Maximum high-severity SAST findings
37
+ secrets_leak: 0 # Must be zero
38
+
39
+ # Docker Compose integration (optional - remove if not using Docker)
40
+ # hooks:
41
+ # beforeAll:
42
+ # - run: "docker compose up -d"
43
+ # timeout: 30000
44
+ # - run: "npx wait-on http://localhost:3000"
45
+ # timeout: 30000
46
+ #
47
+ # afterAll:
48
+ # - run: "docker compose down"
49
+ # timeout: 30000
54
50
 
55
51
  # Execution settings
56
52
  execution:
57
53
  timeout: 120000 # 2 minutes
58
54
  max_retries: 2
59
- on_failure: continue
package/examples/fullstack.yml CHANGED
@@ -2,7 +2,7 @@
2
2
  # Complete testing suite with API, UI, and Performance
3
3
 
4
4
  version: 1
5
- name: "Full Stack Tests"
5
+ name: fullstack-tests
6
6
 
7
7
  gates:
8
8
  - api_smoke
@@ -26,17 +26,18 @@ targets:
26
26
  budgets:
27
27
  perf_p95_ms: 2000 # P95 latency must be < 2000ms
28
28
 
29
- # Hooks for local development
30
- hooks:
31
- beforeAll:
32
- - compose: up
33
- timeout: 30000
34
- - wait_on: http://localhost:3000
35
-
36
- afterAll:
37
- - compose: down
29
+ # Hooks for local development (optional - remove if not using Docker)
30
+ # hooks:
31
+ # beforeAll:
32
+ # - run: "docker compose up -d"
33
+ # timeout: 30000
34
+ # - run: "npx wait-on http://localhost:3000"
35
+ # timeout: 30000
36
+ #
37
+ # afterAll:
38
+ # - run: "docker compose down"
39
+ # timeout: 30000
38
40
 
39
41
  execution:
40
42
  timeout: 60000
41
43
  max_retries: 2
42
- on_failure: continue
package/examples/security.yml CHANGED
@@ -1,14 +1,12 @@
1
1
  # QA360 Example: Security Suite
2
- # Comprehensive security testing (SAST, DAST, secrets, dependencies)
2
+ # Comprehensive security testing (SAST, DAST)
3
3
 
4
4
  version: 1
5
- name: "Security Test Suite"
5
+ name: security-test-suite
6
6
 
7
7
  gates:
8
8
  - sast # Static Application Security Testing
9
9
  - dast # Dynamic Application Security Testing
10
- - secrets # Secrets detection
11
- - deps # Dependency vulnerability scanning
12
10
 
13
11
  targets:
14
12
  api:
@@ -19,14 +17,10 @@ targets:
19
17
 
20
18
  # Security thresholds
21
19
  security:
22
- sast:
23
- max_critical: 0 # Zero critical vulnerabilities allowed
24
- max_high: 3 # Maximum 3 high-severity issues
25
-
26
- dast:
27
- max_high: 5 # Maximum 5 high-severity runtime issues
20
+ sast_max_high: 3 # Maximum high-severity SAST findings
21
+ secrets_leak: 0 # Must be zero
28
22
 
29
23
  # Execution settings
30
24
  execution:
31
25
  timeout: 120000 # Security scans can take longer
32
- on_failure: stop # Stop on first critical finding
26
+ max_retries: 1
package/examples/ui-basic.yml CHANGED
@@ -2,7 +2,7 @@
2
2
  # Basic UI/E2E browser tests
3
3
 
4
4
  version: 1
5
- name: "UI Browser Tests"
5
+ name: ui-browser-tests
6
6
 
7
7
  gates:
8
8
  - ui
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "qa360",
3
- "version": "1.3.1",
3
+ "version": "1.3.3",
4
4
  "description": "QA360 Proof CLI - Quality as Cryptographic Proof",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",