safegres 1.23.0 → 1.24.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -2
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -435,13 +435,20 @@ Or the first-party action, which installs the CLI, runs that config, and turns t
|
|
|
435
435
|
job summary, annotations and a sticky PR comment:
|
|
436
436
|
|
|
437
437
|
```yaml
|
|
438
|
-
- uses: constructive-io/constructive/packages/safegres@
|
|
438
|
+
- uses: constructive-io/constructive/packages/safegres@safegres-action-v1
|
|
439
439
|
with:
|
|
440
|
-
out: safegres-reports
|
|
441
440
|
comment: true # sticky PR comment (needs pull-requests: write)
|
|
442
441
|
upload-sarif: true # code scanning (needs security-events: write)
|
|
443
442
|
```
|
|
444
443
|
|
|
444
|
+
`safegres-action-v1` is a moving tag on the action's latest v1; `@main` tracks the monorepo tip.
|
|
445
|
+
The reports are uploaded as the `safegres-reports` artifact by default — that artifact *is* the
|
|
446
|
+
next run's baseline, so a job that suppresses it (`upload-reports: false`) can never show a delta.
|
|
447
|
+
|
|
448
|
+
Auditing a pgpm workspace (`source.pgpm`) adds `version: local`, which runs the repo's own safegres
|
|
449
|
+
rather than installing one: that path deploys through `pgsql-test`, an optional peer only the
|
|
450
|
+
workspace has.
|
|
451
|
+
|
|
445
452
|
On a pull request it also measures the delta for you: it picks the base branch's most recent run
|
|
446
453
|
that *is* a sane comparison — succeeded, younger than 48 hours, and audited a commit in this
|
|
447
454
|
branch's merge-base history — downloads its report, and names the run it chose in the summary and
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "safegres",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.24.0",
|
|
4
4
|
"author": "Constructive <developers@constructive.io>",
|
|
5
5
|
"description": "Postgres security and performance auditor: RLS, grants and effective-access analysis plus index and policy-cost checks, scored on two independent axes. One connection, no framework.",
|
|
6
6
|
"main": "index.js",
|
|
@@ -83,7 +83,7 @@
|
|
|
83
83
|
"@types/node": "^22.0.0",
|
|
84
84
|
"@types/pg": "^8.20.4",
|
|
85
85
|
"makage": "^0.3.0",
|
|
86
|
-
"pgsql-test": "^5.13.
|
|
86
|
+
"pgsql-test": "^5.13.2"
|
|
87
87
|
},
|
|
88
|
-
"gitHead": "
|
|
88
|
+
"gitHead": "608acc891de5197ad3cb4bfd0babe1050dbec24a"
|
|
89
89
|
}
|