security-harness-kit 0.5.5 → 0.5.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +26 -1
- package/npm-shrinkwrap.json +2 -2
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -133,8 +133,32 @@ Generate a GitHub Actions workflow that scans every pull request:
|
|
|
133
133
|
|
|
134
134
|
```bash
|
|
135
135
|
shk ci init github
|
|
136
|
+
# Add GitHub code scanning alerts and PR annotations:
|
|
137
|
+
shk ci init github --upload-sarif
|
|
136
138
|
```
|
|
137
139
|
|
|
140
|
+
Alternatively, use the repository's composite action after checkout on a Linux or macOS runner:
|
|
141
|
+
|
|
142
|
+
```yaml
|
|
143
|
+
permissions:
|
|
144
|
+
contents: read
|
|
145
|
+
security-events: write
|
|
146
|
+
|
|
147
|
+
steps:
|
|
148
|
+
- uses: actions/checkout@v6
|
|
149
|
+
with:
|
|
150
|
+
persist-credentials: false
|
|
151
|
+
- uses: Kazuki-tam/security-harness-kit@v1
|
|
152
|
+
with:
|
|
153
|
+
path: .
|
|
154
|
+
fail-on: high
|
|
155
|
+
upload-sarif: true
|
|
156
|
+
```
|
|
157
|
+
|
|
158
|
+
Set `upload-sarif: false` when GitHub code scanning is unavailable. Private repositories
|
|
159
|
+
need GitHub Code Security enabled to upload SARIF. Pull requests from forks normally receive
|
|
160
|
+
a read-only token; disable upload for those runs if the repository does not permit SARIF upload.
|
|
161
|
+
|
|
138
162
|
Install the shk agent skill for Claude Code, Codex/Cursor, Copilot, Antigravity, and Windsurf:
|
|
139
163
|
|
|
140
164
|
```bash
|
|
@@ -210,9 +234,10 @@ shk hooks install-ai --tool antigravity
|
|
|
210
234
|
shk hooks install-ai --tool windsurf
|
|
211
235
|
|
|
212
236
|
shk ci init github
|
|
237
|
+
shk ci init github --upload-sarif
|
|
213
238
|
shk ci init github --dry-run
|
|
214
239
|
shk ci init github --mode audit
|
|
215
|
-
shk ci init github --shk-version v0.5.
|
|
240
|
+
shk ci init github --shk-version v0.5.6
|
|
216
241
|
|
|
217
242
|
shk skills install
|
|
218
243
|
shk skills install --tool claude-code --global
|
package/npm-shrinkwrap.json
CHANGED
|
@@ -23,7 +23,7 @@
|
|
|
23
23
|
"hasInstallScript": true,
|
|
24
24
|
"license": "MIT",
|
|
25
25
|
"name": "security-harness-kit",
|
|
26
|
-
"version": "0.5.
|
|
26
|
+
"version": "0.5.6"
|
|
27
27
|
},
|
|
28
28
|
"node_modules/@isaacs/cliui": {
|
|
29
29
|
"engines": {
|
|
@@ -542,5 +542,5 @@
|
|
|
542
542
|
}
|
|
543
543
|
},
|
|
544
544
|
"requires": true,
|
|
545
|
-
"version": "0.5.
|
|
545
|
+
"version": "0.5.6"
|
|
546
546
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"artifactDownloadUrls": [
|
|
3
|
-
"https://github.com/Kazuki-tam/security-harness-kit/releases/download/v0.5.
|
|
3
|
+
"https://github.com/Kazuki-tam/security-harness-kit/releases/download/v0.5.6"
|
|
4
4
|
],
|
|
5
5
|
"bin": {
|
|
6
6
|
"shk": "run-shk.js"
|
|
@@ -85,7 +85,7 @@
|
|
|
85
85
|
"zipExt": ".tar.xz"
|
|
86
86
|
}
|
|
87
87
|
},
|
|
88
|
-
"version": "0.5.
|
|
88
|
+
"version": "0.5.6",
|
|
89
89
|
"volta": {
|
|
90
90
|
"node": "18.14.1",
|
|
91
91
|
"npm": "9.5.0"
|