securewithtrace 0.21.2 → 0.21.3

package/README.md

@@ -129,6 +129,12 @@ tracecli vulnerabilities list --severity CRITICAL --status OPEN
 # Increase result limit
 tracecli vulnerabilities list --limit 100
 
+# Filter by CWE ID
+tracecli vulnerabilities list --filter cweId=CWE-89
+
+# Filter by vulnerability type and scan mode (repeatable)
+tracecli vulnerabilities list --filter vulnerabilityType=SAST --filter scanMode!=DAST
+
 # JSON output for scripting
 tracecli vulnerabilities list --output json | jq '.[].title'
 
@@ -146,6 +152,7 @@ Flags:
 | `--repo <repo>` | | Filter by repository name or `owner/repo` |
 | `--severity <level>` | | Filter by severity |
 | `--status <status>` | | Filter by status |
+| `--filter <expression>` | `-f` | Repeatable filter expression: `field=value` or `field!=value`. Supported fields: `repositoryId`, `severity`, `vulnerabilityType`, `status`, `cweId`, `scanMode` |
 | `--limit <n>` | `-L` | Max results (default: 30, max: 100) |
 | `--output <format>` | `-o` | Output format: `table` (default), `json`, `tsv` |
 | `--web` | `-w` | Open vulnerabilities dashboard in browser |
@@ -222,6 +229,9 @@ tracecli upgrade --check
 # Upgrade to the latest published CLI version
 tracecli upgrade
 
+# Non-interactive upgrade (CI/scripts)
+tracecli upgrade --no-confirm
+
 # Alias
 tracecli self-update
 ```
@@ -231,7 +241,8 @@ Flags:
 | Flag | Shorthand | Description |
 |------|-----------|-------------|
 | `--check` | | Check for updates without installing |
-| `--yes` | `-y` | Skip confirmation prompt before install |
+| `--no-confirm` | | Skip confirmation prompt (for CI/scripts) |
+| `--yes` | `-y` | Skip confirmation prompt (alias: `--no-confirm`) |
 
 ## Security Notes
 

package/dist/index.js

@@ -28922,12 +28922,13 @@ async function promptForUpgradeConfirmation(latestVersion) {
   }
 }
 function createUpgradeCommand() {
-  return new Command("upgrade").alias("self-update").description("Upgrade tracecli to the latest version").option("--check", "Check whether an update is available").option("-y, --yes", "Skip upgrade confirmation prompt").addHelpText(
+  return new Command("upgrade").alias("self-update").description("Upgrade tracecli to the latest version").option("--check", "Check whether an update is available").option("--no-confirm", "Skip upgrade confirmation prompt (for CI/scripts)").option("-y, --yes", "Skip upgrade confirmation prompt (alias: --no-confirm)").addHelpText(
     "after",
     `
 Examples:
   tracecli upgrade
   tracecli upgrade --check
+  tracecli upgrade --no-confirm
   tracecli self-update`
   ).action(async (options) => {
     const availability = await getUpdateAvailability(true);
@@ -28949,7 +28950,7 @@ Examples:
       return;
     }
     const versionLabel = availability.latestVersion ?? "the latest available version";
-    const shouldUpgrade = options.yes ? true : await promptForUpgradeConfirmation(versionLabel);
+    const shouldUpgrade = !options.confirm || !!options.yes ? true : await promptForUpgradeConfirmation(versionLabel);
     if (!shouldUpgrade) {
       console.log("Upgrade cancelled.");
       return;
@@ -28981,6 +28982,34 @@ Examples:
 // src/vulnerabilities/commands.ts
 var DEFAULT_LIMIT3 = 30;
 var MAX_LIMIT3 = 100;
+var VULNERABILITY_FILTER_FIELDS = [
+  "repositoryId",
+  "severity",
+  "vulnerabilityType",
+  "status",
+  "cweId",
+  "scanMode"
+];
+function parseVulnerabilityFilter(expression) {
+  const match = expression.match(/^([^!=]+)(!=|=)(.+)$/);
+  if (!match?.[1] || !match[2] || !match[3]) {
+    return {
+      error: `Invalid filter expression '${expression}'. Expected format: field=value or field!=value (e.g. cweId=CWE-89).`
+    };
+  }
+  const field = match[1].trim();
+  const op = match[2];
+  const value = match[3].trim();
+  if (value.length === 0) {
+    return { error: `Filter value cannot be empty in expression '${expression}'.` };
+  }
+  if (!VULNERABILITY_FILTER_FIELDS.includes(field)) {
+    return {
+      error: `Unknown filter field '${field}'. Supported fields: ${VULNERABILITY_FILTER_FIELDS.join(", ")}.`
+    };
+  }
+  return { field, operator: op === "!=" ? "neq" : "eq", value };
+}
 async function resolveRepositoryIdAuthenticated(organizationId, repoIdentifier) {
   const result = await authenticatedRequest(
     (client) => client.repository.listRepositories({
@@ -29098,6 +29127,11 @@ function createListCommand3() {
       }
       return Math.min(n, MAX_LIMIT3);
     }
+  ).option(
+    "-f, --filter <expression>",
+    "Additional filter expression: field=value or field!=value. Repeatable. Supported fields: vulnerabilityType, cweId, scanMode (and any other API-supported field).",
+    (value, previous) => [...previous, value],
+    []
   ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the vulnerabilities dashboard in a browser").addHelpText(
     "after",
     `
@@ -29105,6 +29139,8 @@ Examples:
   tracecli vulnerabilities list
   tracecli vulnerabilities list --severity CRITICAL --status OPEN
   tracecli vulnerabilities list --repo securewithtrace/trace --limit 50
+  tracecli vulnerabilities list --filter cweId=CWE-89
+  tracecli vulnerabilities list --filter vulnerabilityType=SAST --filter scanMode=sast
   tracecli vulnerabilities list --output json | jq '.[].title'
   tracecli vulnerabilities list --output tsv | cut -f1,7
   tracecli vulnerabilities list --web`
@@ -29131,6 +29167,14 @@ Examples:
       if (options.status) {
         conditions.push({ field: "status", operator: "eq", value: options.status });
       }
+      for (const expression of options.filter) {
+        const parsed = parseVulnerabilityFilter(expression);
+        if ("error" in parsed) {
+          console.error(parsed.error);
+          process.exit(1);
+        }
+        conditions.push({ field: parsed.field, operator: parsed.operator, value: parsed.value });
+      }
       const filterBody = {
         filters: conditions.length > 0 ? { operator: "and", conditions } : void 0,
         defaultBranchOnly: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.21.2",
+  "version": "0.21.3",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {