securewithtrace 0.11.0 → 0.13.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +19 -0
- package/dist/index.js +2046 -1680
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -53,6 +53,7 @@ tracecli vulnerabilities list --severity HIGH
|
|
|
53
53
|
|
|
54
54
|
- **Authenticate securely** with device authorization flow (`auth login/logout/status`)
|
|
55
55
|
- **List and filter repositories** connected to your Trace organization (`repo list`, `repo filter`)
|
|
56
|
+
- **Find repositories by dependency** with optional version filtering (`repo list --dependency`)
|
|
56
57
|
- **Clone repositories** with secure token handling (`repo clone`)
|
|
57
58
|
- **Filter vulnerabilities** by repo, severity, and status (`vulnerabilities list`)
|
|
58
59
|
- **Export results as JSON or TSV** for automation (`vulnerabilities list --output json`)
|
|
@@ -65,8 +66,13 @@ tracecli vulnerabilities list --severity HIGH
|
|
|
65
66
|
tracecli auth login
|
|
66
67
|
tracecli auth status
|
|
67
68
|
tracecli auth logout
|
|
69
|
+
tracecli auth org list
|
|
70
|
+
tracecli auth org current
|
|
71
|
+
tracecli auth org switch <organization-id-or-slug>
|
|
68
72
|
```
|
|
69
73
|
|
|
74
|
+
When your account belongs to multiple organizations, use `tracecli auth org switch` to set the active organization context used by repository, vulnerability, and pentest commands.
|
|
75
|
+
|
|
70
76
|
### Repositories
|
|
71
77
|
|
|
72
78
|
```bash
|
|
@@ -82,6 +88,18 @@ tracecli repo list --filter "platform=GITHUB" --filter "repo:trace" --filter "st
|
|
|
82
88
|
# Alias command for filtering
|
|
83
89
|
tracecli repo filter --filter "language:typescript" --filter "branch=main"
|
|
84
90
|
|
|
91
|
+
# Find repositories that use a specific dependency
|
|
92
|
+
tracecli repo list --dependency lodash
|
|
93
|
+
|
|
94
|
+
# Filter by dependency at a specific version
|
|
95
|
+
tracecli repo list --dependency lodash@4.17.21
|
|
96
|
+
|
|
97
|
+
# Filter by scoped package with partial version match
|
|
98
|
+
tracecli repo list --dependency @types/node@20
|
|
99
|
+
|
|
100
|
+
# Dependency results as JSON
|
|
101
|
+
tracecli repo list --dependency react --json | jq '.[].fullName'
|
|
102
|
+
|
|
85
103
|
# Clone by owner/repo shorthand
|
|
86
104
|
tracecli repo clone securewithtrace/trace
|
|
87
105
|
|
|
@@ -136,6 +154,7 @@ Repository filter options:
|
|
|
136
154
|
- `--filter`: repeatable advanced expression in the form `<field><operator><value>`
|
|
137
155
|
- Supported fields: `platform`, `status`, `url`, `repo`, `branch`, `language`
|
|
138
156
|
- Supported operators: `=` (exact), `!=` (not exact), `:` (contains), `!:` (not contains)
|
|
157
|
+
- `--dependency`: filter by dependency name with optional `@version` (e.g. `lodash`, `lodash@4.17`, `@types/node@20`)
|
|
139
158
|
|
|
140
159
|
### Pentests
|
|
141
160
|
|