shiplint 1.3.0 → 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/index.js +1 -0
- package/dist/cli/index.js.map +1 -1
- package/dist/core/scanner.d.ts.map +1 -1
- package/dist/core/scanner.js +5 -1
- package/dist/core/scanner.js.map +1 -1
- package/dist/core/suppression.d.ts +23 -0
- package/dist/core/suppression.d.ts.map +1 -0
- package/dist/core/suppression.js +183 -0
- package/dist/core/suppression.js.map +1 -0
- package/dist/formatters/text.d.ts +1 -0
- package/dist/formatters/text.d.ts.map +1 -1
- package/dist/formatters/text.js +92 -15
- package/dist/formatters/text.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +5 -1
- package/dist/index.js.map +1 -1
- package/dist/rules/base.d.ts +2 -0
- package/dist/rules/base.d.ts.map +1 -1
- package/dist/rules/base.js +2 -0
- package/dist/rules/base.js.map +1 -1
- package/dist/rules/code/dynamic-code-execution.d.ts +13 -0
- package/dist/rules/code/dynamic-code-execution.d.ts.map +1 -0
- package/dist/rules/code/dynamic-code-execution.js +212 -0
- package/dist/rules/code/dynamic-code-execution.js.map +1 -0
- package/dist/rules/code/index.d.ts +6 -0
- package/dist/rules/code/index.d.ts.map +1 -0
- package/dist/rules/code/index.js +11 -0
- package/dist/rules/code/index.js.map +1 -0
- package/dist/rules/code/private-api-usage.d.ts +12 -0
- package/dist/rules/code/private-api-usage.d.ts.map +1 -0
- package/dist/rules/code/private-api-usage.js +234 -0
- package/dist/rules/code/private-api-usage.js.map +1 -0
- package/dist/rules/index.d.ts +1 -0
- package/dist/rules/index.d.ts.map +1 -1
- package/dist/rules/index.js +6 -0
- package/dist/rules/index.js.map +1 -1
- package/dist/rules/privacy/att-tracking-mismatch.d.ts.map +1 -1
- package/dist/rules/privacy/att-tracking-mismatch.js +16 -0
- package/dist/rules/privacy/att-tracking-mismatch.js.map +1 -1
- package/dist/types/index.d.ts +8 -0
- package/dist/types/index.d.ts.map +1 -1
- package/dist/types/index.js.map +1 -1
- package/package.json +1 -1
package/dist/cli/index.js
CHANGED
|
@@ -30,6 +30,7 @@ program
|
|
|
30
30
|
.option('-v, --verbose', 'Show verbose output', false)
|
|
31
31
|
.option('-r, --rules <rules...>', 'Only run specific rules (by ID)')
|
|
32
32
|
.option('-e, --exclude <rules...>', 'Exclude specific rules (by ID)')
|
|
33
|
+
.option('--show-suppressed', 'Show suppressed findings in output', false)
|
|
33
34
|
.action(async (path, options) => {
|
|
34
35
|
try {
|
|
35
36
|
const outputFormat = parseOutputFormat(options.format);
|
package/dist/cli/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;;;AACA;;;;GAIG;AACH,yCAAoC;AACpC,mDAA0C;AAC1C,qDAAgD;AAChD,gDAA6C;AAC7C,gDAAiD;AACjD,gDAAkD;AAClD,iDAA4D;AAC5D,sEAA6C;AAE7C,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,qDAAqD,CAAC;KAClE,OAAO,CAAC,sBAAW,CAAC,OAAO,CAAC,CAAC;AAEhC,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,6DAA6D,CAAC;KAC1E,QAAQ,CAAC,QAAQ,EAAE,gDAAgD,CAAC;KACpE,MAAM,CAAC,uBAAuB,EAAE,kCAAkC,EAAE,MAAM,CAAC;KAC3E,MAAM,CAAC,eAAe,EAAE,qBAAqB,EAAE,KAAK,CAAC;KACrD,MAAM,CAAC,wBAAwB,EAAE,iCAAiC,CAAC;KACnE,MAAM,CAAC,0BAA0B,EAAE,gCAAgC,CAAC;KACpE,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE;IACtC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAI,EAAC;YACxB,IAAI;YACJ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAM,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpB,mFAAmF;QACnF,IAAA,mBAAI,EAAC,IAAA,mCAAoB,EAAC;YACxB,OAAO,EAAE,sBAAW,CAAC,OAAO;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,QAAQ;YAC/B,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC,CAAC;QAEJ,gDAAgD;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACzE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,EAAE,MAAM,CAAC;KACpE,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;IAClB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,mBAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,kBAAkB;SACnC,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,mBAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,oEAAoE,CAAC;KACjF,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAA,0BAAc,GAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,SAAS,iBAAiB,CAAC,MAAc;IACvC,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,uBAAY,CAAC,IAAI,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,uBAAY,CAAC,IAAI,CAAC;QAC3B,KAAK,OAAO;YACV,OAAO,uBAAY,CAAC,KAAK,CAAC;QAC5B;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,6BAA6B,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,OAAO,CAAC,KAAK,EAAE,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;;;AACA;;;;GAIG;AACH,yCAAoC;AACpC,mDAA0C;AAC1C,qDAAgD;AAChD,gDAA6C;AAC7C,gDAAiD;AACjD,gDAAkD;AAClD,iDAA4D;AAC5D,sEAA6C;AAE7C,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,qDAAqD,CAAC;KAClE,OAAO,CAAC,sBAAW,CAAC,OAAO,CAAC,CAAC;AAEhC,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,6DAA6D,CAAC;KAC1E,QAAQ,CAAC,QAAQ,EAAE,gDAAgD,CAAC;KACpE,MAAM,CAAC,uBAAuB,EAAE,kCAAkC,EAAE,MAAM,CAAC;KAC3E,MAAM,CAAC,eAAe,EAAE,qBAAqB,EAAE,KAAK,CAAC;KACrD,MAAM,CAAC,wBAAwB,EAAE,iCAAiC,CAAC;KACnE,MAAM,CAAC,0BAA0B,EAAE,gCAAgC,CAAC;KACpE,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,EAAE,KAAK,CAAC;KACxE,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE;IACtC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAI,EAAC;YACxB,IAAI;YACJ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAM,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpB,mFAAmF;QACnF,IAAA,mBAAI,EAAC,IAAA,mCAAoB,EAAC;YACxB,OAAO,EAAE,sBAAW,CAAC,OAAO;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,QAAQ;YAC/B,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC,CAAC;QAEJ,gDAAgD;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACzE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,EAAE,MAAM,CAAC;KACpE,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;IAClB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,mBAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,kBAAkB;SACnC,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,mBAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,oEAAoE,CAAC;KACjF,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAA,0BAAc,GAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,SAAS,iBAAiB,CAAC,MAAc;IACvC,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,uBAAY,CAAC,IAAI,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,uBAAY,CAAC,IAAI,CAAC;QAC3B,KAAK,OAAO;YACV,OAAO,uBAAY,CAAC,KAAK,CAAC;QAC5B;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,6BAA6B,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,OAAO,CAAC,KAAK,EAAE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/core/scanner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/core/scanner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAM7F;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IACvB,UAAU,EAAE,MAAM,EAAE;IAAS,YAAY,EAAE,MAAM,EAAE;gBAAnD,UAAU,EAAE,MAAM,EAAE,EAAS,YAAY,EAAE,MAAM,EAAE;CAOvE;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA8FpE;AAkCD;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,WAAW,EACpB,KAAK,CAAC,EAAE,IAAI,EAAE,GACb,OAAO,CAAC,OAAO,EAAE,CAAC,CAUpB"}
|
package/dist/core/scanner.js
CHANGED
|
@@ -43,6 +43,7 @@ const fs = __importStar(require("fs"));
|
|
|
43
43
|
const path = __importStar(require("path"));
|
|
44
44
|
const project_parser_js_1 = require("../parsers/project-parser.js");
|
|
45
45
|
const index_js_1 = require("../rules/index.js");
|
|
46
|
+
const suppression_js_1 = require("./suppression.js");
|
|
46
47
|
/**
|
|
47
48
|
* Error thrown when invalid rule IDs are specified
|
|
48
49
|
*/
|
|
@@ -124,6 +125,8 @@ async function scan(options) {
|
|
|
124
125
|
console.warn(`⚠️ ${ruleErrors.length} rule(s) failed to run: ${ruleErrors.join(', ')}. Use --verbose for details.`);
|
|
125
126
|
}
|
|
126
127
|
const duration = Date.now() - startTime;
|
|
128
|
+
// Apply suppression (inline comments + .shiplintignore)
|
|
129
|
+
const { activeFindings, suppressedFindings } = (0, suppression_js_1.applySuppression)(findings, options.path);
|
|
127
130
|
// Determine project type and framework detection method from discovery
|
|
128
131
|
const projectType = deriveProjectType(discovery);
|
|
129
132
|
const frameworkDetectionMethod = deriveFrameworkDetectionMethod(discovery, context);
|
|
@@ -132,7 +135,8 @@ async function scan(options) {
|
|
|
132
135
|
return {
|
|
133
136
|
projectPath: options.path,
|
|
134
137
|
timestamp: new Date(),
|
|
135
|
-
findings,
|
|
138
|
+
findings: activeFindings,
|
|
139
|
+
suppressedFindings,
|
|
136
140
|
rulesRun,
|
|
137
141
|
duration,
|
|
138
142
|
projectType,
|
package/dist/core/scanner.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/core/scanner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/core/scanner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,oBA8FC;AAqCD,0CAaC;AArLD;;GAEG;AACH,uCAAyB;AACzB,2CAA6B;AAE7B,oEAAkF;AAElF,gDAAwF;AACxF,qDAAoD;AAEpD;;GAEG;AACH,MAAa,iBAAkB,SAAQ,KAAK;IACvB;IAA6B;IAAhD,YAAmB,UAAoB,EAAS,YAAsB;QACpE,KAAK,CACH,uBAAuB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAChD,oBAAoB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9C,CAAC;QAJe,eAAU,GAAV,UAAU,CAAU;QAAS,iBAAY,GAAZ,YAAY,CAAU;QAKpE,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AARD,8CAQC;AAED;;GAEG;AACH,MAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC;AAED;;GAEG;AACI,KAAK,UAAU,IAAI,CAAC,OAAoB;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,6BAA6B;IAC7B,MAAM,SAAS,GAAG,IAAA,mCAAe,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD,sBAAsB;IACtB,MAAM,OAAO,GAAG,IAAA,qCAAiB,EAAC,SAAS,CAAC,CAAC;IAE7C,+BAA+B;IAC/B,IAAI,KAAa,CAAC;IAElB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,qDAAqD;QACrD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEhF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,iBAAiB,CACzB,UAAU,EACV,mBAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,YAAY,CACpB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,KAAK,GAAG,UAAU,CAAC;IACrB,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,KAAK,GAAG,IAAA,4BAAiB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CACpB,sDAAsD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,mBAAQ,CAAC;IACnB,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CACpB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,MAAM,2BAA2B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACvH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,wDAAwD;IACxD,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAA,iCAAgB,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAExF,uEAAuE;IACvE,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,wBAAwB,GAAG,8BAA8B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpF,MAAM,kBAAkB,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B;IAE5E,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,QAAQ,EAAE,cAAc;QACxB,kBAAkB;QAClB,QAAQ;QACR,QAAQ;QACR,WAAW;QACX,wBAAwB;QACxB,kBAAkB;QAClB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,SAA2B;IACpD,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAE7C,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,WAAW,CAAC;IACpE,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAE5E,IAAI,YAAY,IAAI,eAAe;QAAE,OAAO,MAAM,CAAC;IACnD,IAAI,YAAY;QAAE,OAAO,WAAW,CAAC;IACrC,IAAI,eAAe;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,8BAA8B,CACrC,SAA2B,EAC3B,OAAoB;IAEpB,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAC3C,oEAAoE;IACpE,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;IAExD,IAAI,UAAU,IAAI,aAAa;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe,CACnC,OAAoB,EACpB,KAAc;IAEd,MAAM,UAAU,GAAG,KAAK,IAAI,mBAAQ,CAAC;IACrC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
import type { Finding } from '../types/index.js';
|
|
2
|
+
export interface IgnoreEntry {
|
|
3
|
+
ruleId: string;
|
|
4
|
+
filePath?: string;
|
|
5
|
+
}
|
|
6
|
+
/**
|
|
7
|
+
* Parse a .shiplintignore file
|
|
8
|
+
*/
|
|
9
|
+
export declare function parseShiplintIgnore(content: string): IgnoreEntry[];
|
|
10
|
+
/**
|
|
11
|
+
* Load .shiplintignore from project root
|
|
12
|
+
*/
|
|
13
|
+
export declare function loadShiplintIgnore(projectPath: string): IgnoreEntry[];
|
|
14
|
+
export interface SuppressionResult {
|
|
15
|
+
activeFindings: Finding[];
|
|
16
|
+
suppressedFindings: Finding[];
|
|
17
|
+
}
|
|
18
|
+
/**
|
|
19
|
+
* Apply suppression rules to findings.
|
|
20
|
+
* Returns active and suppressed findings separately.
|
|
21
|
+
*/
|
|
22
|
+
export declare function applySuppression(findings: Finding[], projectPath: string): SuppressionResult;
|
|
23
|
+
//# sourceMappingURL=suppression.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"suppression.d.ts","sourceRoot":"","sources":["../../src/core/suppression.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAIjD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE,CAiBlE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,EAAE,CAKrE;AAmFD,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,kBAAkB,EAAE,OAAO,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAgCnB"}
|
|
@@ -0,0 +1,183 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.parseShiplintIgnore = parseShiplintIgnore;
|
|
37
|
+
exports.loadShiplintIgnore = loadShiplintIgnore;
|
|
38
|
+
exports.applySuppression = applySuppression;
|
|
39
|
+
/**
|
|
40
|
+
* Suppression support for ShipLint
|
|
41
|
+
*
|
|
42
|
+
* Two mechanisms:
|
|
43
|
+
* 1. Inline comments: // shiplint-disable-next-line [rule-id]
|
|
44
|
+
* 2. .shiplintignore file: rule-id or rule-id:path/to/file.swift
|
|
45
|
+
*/
|
|
46
|
+
const fs = __importStar(require("fs"));
|
|
47
|
+
const path = __importStar(require("path"));
|
|
48
|
+
const DISABLE_NEXT_LINE_PATTERN = /shiplint-disable-next-line(?:\s+(\S+))?/;
|
|
49
|
+
/**
|
|
50
|
+
* Parse a .shiplintignore file
|
|
51
|
+
*/
|
|
52
|
+
function parseShiplintIgnore(content) {
|
|
53
|
+
const entries = [];
|
|
54
|
+
for (const rawLine of content.split('\n')) {
|
|
55
|
+
const line = rawLine.trim();
|
|
56
|
+
if (!line || line.startsWith('#'))
|
|
57
|
+
continue;
|
|
58
|
+
const colonIndex = line.indexOf(':');
|
|
59
|
+
if (colonIndex > 0) {
|
|
60
|
+
entries.push({
|
|
61
|
+
ruleId: line.substring(0, colonIndex),
|
|
62
|
+
filePath: line.substring(colonIndex + 1),
|
|
63
|
+
});
|
|
64
|
+
}
|
|
65
|
+
else {
|
|
66
|
+
entries.push({ ruleId: line });
|
|
67
|
+
}
|
|
68
|
+
}
|
|
69
|
+
return entries;
|
|
70
|
+
}
|
|
71
|
+
/**
|
|
72
|
+
* Load .shiplintignore from project root
|
|
73
|
+
*/
|
|
74
|
+
function loadShiplintIgnore(projectPath) {
|
|
75
|
+
const ignorePath = path.join(projectPath, '.shiplintignore');
|
|
76
|
+
if (!fs.existsSync(ignorePath))
|
|
77
|
+
return [];
|
|
78
|
+
const content = fs.readFileSync(ignorePath, 'utf-8');
|
|
79
|
+
return parseShiplintIgnore(content);
|
|
80
|
+
}
|
|
81
|
+
/**
|
|
82
|
+
* Check if a finding is suppressed by .shiplintignore
|
|
83
|
+
*/
|
|
84
|
+
function isSuppressedByIgnoreFile(finding, ignoreEntries, projectPath) {
|
|
85
|
+
for (const entry of ignoreEntries) {
|
|
86
|
+
if (entry.ruleId !== finding.ruleId)
|
|
87
|
+
continue;
|
|
88
|
+
if (!entry.filePath) {
|
|
89
|
+
// Rule suppressed everywhere
|
|
90
|
+
return `.shiplintignore: ${entry.ruleId}`;
|
|
91
|
+
}
|
|
92
|
+
// Rule suppressed in specific file - check if finding's location matches
|
|
93
|
+
if (finding.location) {
|
|
94
|
+
const findingRelPath = path.isAbsolute(finding.location)
|
|
95
|
+
? path.relative(projectPath, finding.location)
|
|
96
|
+
: finding.location;
|
|
97
|
+
if (findingRelPath === entry.filePath || finding.location === entry.filePath) {
|
|
98
|
+
return `.shiplintignore: ${entry.ruleId}:${entry.filePath}`;
|
|
99
|
+
}
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
return null;
|
|
103
|
+
}
|
|
104
|
+
// Cache for file contents used in inline suppression checks
|
|
105
|
+
const fileContentCache = new Map();
|
|
106
|
+
function getFileLines(filePath) {
|
|
107
|
+
if (fileContentCache.has(filePath))
|
|
108
|
+
return fileContentCache.get(filePath);
|
|
109
|
+
try {
|
|
110
|
+
if (!fs.existsSync(filePath))
|
|
111
|
+
return null;
|
|
112
|
+
const lines = fs.readFileSync(filePath, 'utf-8').split('\n');
|
|
113
|
+
fileContentCache.set(filePath, lines);
|
|
114
|
+
return lines;
|
|
115
|
+
}
|
|
116
|
+
catch {
|
|
117
|
+
return null;
|
|
118
|
+
}
|
|
119
|
+
}
|
|
120
|
+
/**
|
|
121
|
+
* Check if a finding is suppressed by an inline comment
|
|
122
|
+
*/
|
|
123
|
+
function isSuppressedByInlineComment(finding, projectPath) {
|
|
124
|
+
if (!finding.location || !finding.line || finding.line <= 1)
|
|
125
|
+
return null;
|
|
126
|
+
const filePath = path.isAbsolute(finding.location)
|
|
127
|
+
? finding.location
|
|
128
|
+
: path.join(projectPath, finding.location);
|
|
129
|
+
const lines = getFileLines(filePath);
|
|
130
|
+
if (!lines)
|
|
131
|
+
return null;
|
|
132
|
+
// Check line N-1 (0-indexed: finding.line - 2)
|
|
133
|
+
const prevLineIndex = finding.line - 2;
|
|
134
|
+
if (prevLineIndex < 0 || prevLineIndex >= lines.length)
|
|
135
|
+
return null;
|
|
136
|
+
const prevLine = lines[prevLineIndex];
|
|
137
|
+
const match = prevLine.match(DISABLE_NEXT_LINE_PATTERN);
|
|
138
|
+
if (!match)
|
|
139
|
+
return null;
|
|
140
|
+
const specifiedRuleId = match[1];
|
|
141
|
+
if (!specifiedRuleId) {
|
|
142
|
+
// No rule ID = suppress all rules on next line
|
|
143
|
+
return 'inline: shiplint-disable-next-line';
|
|
144
|
+
}
|
|
145
|
+
if (specifiedRuleId === finding.ruleId) {
|
|
146
|
+
return `inline: shiplint-disable-next-line ${specifiedRuleId}`;
|
|
147
|
+
}
|
|
148
|
+
// Rule ID doesn't match
|
|
149
|
+
return null;
|
|
150
|
+
}
|
|
151
|
+
/**
|
|
152
|
+
* Apply suppression rules to findings.
|
|
153
|
+
* Returns active and suppressed findings separately.
|
|
154
|
+
*/
|
|
155
|
+
function applySuppression(findings, projectPath) {
|
|
156
|
+
// Clear file content cache
|
|
157
|
+
fileContentCache.clear();
|
|
158
|
+
const ignoreEntries = loadShiplintIgnore(projectPath);
|
|
159
|
+
const activeFindings = [];
|
|
160
|
+
const suppressedFindings = [];
|
|
161
|
+
for (const finding of findings) {
|
|
162
|
+
// Check .shiplintignore first
|
|
163
|
+
let reason = isSuppressedByIgnoreFile(finding, ignoreEntries, projectPath);
|
|
164
|
+
// Check inline comment
|
|
165
|
+
if (!reason) {
|
|
166
|
+
reason = isSuppressedByInlineComment(finding, projectPath);
|
|
167
|
+
}
|
|
168
|
+
if (reason) {
|
|
169
|
+
suppressedFindings.push({
|
|
170
|
+
...finding,
|
|
171
|
+
suppressed: true,
|
|
172
|
+
suppressionReason: reason,
|
|
173
|
+
});
|
|
174
|
+
}
|
|
175
|
+
else {
|
|
176
|
+
activeFindings.push(finding);
|
|
177
|
+
}
|
|
178
|
+
}
|
|
179
|
+
// Clear cache after use
|
|
180
|
+
fileContentCache.clear();
|
|
181
|
+
return { activeFindings, suppressedFindings };
|
|
182
|
+
}
|
|
183
|
+
//# sourceMappingURL=suppression.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"suppression.js","sourceRoot":"","sources":["../../src/core/suppression.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,kDAiBC;AAKD,gDAKC;AA4FD,4CAmCC;AA/KD;;;;;;GAMG;AACH,uCAAyB;AACzB,2CAA6B;AAG7B,MAAM,yBAAyB,GAAG,yCAAyC,CAAC;AAO5E;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAAe;IACjD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC;gBACrC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,WAAmB;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAC/B,OAAgB,EAChB,aAA4B,EAC5B,WAAmB;IAEnB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,SAAS;QAE9C,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,6BAA6B;YAC7B,OAAO,oBAAoB,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,yEAAyE;QACzE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACtD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAC9C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrB,IAAI,cAAc,KAAK,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7E,OAAO,oBAAoB,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoB,CAAC;AAErD,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;IAC3E,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAClC,OAAgB,EAChB,WAAmB;IAEnB,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QAChD,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,+CAA+C;IAC/C,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACvC,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEpE,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,+CAA+C;QAC/C,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,IAAI,eAAe,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,sCAAsC,eAAe,EAAE,CAAC;IACjE,CAAC;IAED,wBAAwB;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAOD;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,QAAmB,EACnB,WAAmB;IAEnB,2BAA2B;IAC3B,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAEzB,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,cAAc,GAAc,EAAE,CAAC;IACrC,MAAM,kBAAkB,GAAc,EAAE,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,8BAA8B;QAC9B,IAAI,MAAM,GAAG,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAE3E,uBAAuB;QACvB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,kBAAkB,CAAC,IAAI,CAAC;gBACtB,GAAG,OAAO;gBACV,UAAU,EAAE,IAAI;gBAChB,iBAAiB,EAAE,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAEzB,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;AAChD,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/formatters/text.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/formatters/text.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,mBAAmB,CAAC;AAiH7D;;GAEG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA4GpE"}
|
package/dist/formatters/text.js
CHANGED
|
@@ -41,6 +41,16 @@ function getConfidenceLabel(confidence) {
|
|
|
41
41
|
return 'low confidence';
|
|
42
42
|
}
|
|
43
43
|
}
|
|
44
|
+
/**
|
|
45
|
+
* Severity sort order
|
|
46
|
+
*/
|
|
47
|
+
const SEVERITY_ORDER = {
|
|
48
|
+
critical: 0,
|
|
49
|
+
high: 1,
|
|
50
|
+
medium: 2,
|
|
51
|
+
low: 3,
|
|
52
|
+
info: 4,
|
|
53
|
+
};
|
|
44
54
|
/**
|
|
45
55
|
* Format a single finding
|
|
46
56
|
*/
|
|
@@ -75,31 +85,75 @@ async function formatFinding(finding, index) {
|
|
|
75
85
|
}
|
|
76
86
|
return lines.join('\n');
|
|
77
87
|
}
|
|
88
|
+
/**
|
|
89
|
+
* Get scanner name from rule ID
|
|
90
|
+
*/
|
|
91
|
+
function getScannerFromRuleId(ruleId) {
|
|
92
|
+
if (ruleId.startsWith('privacy-'))
|
|
93
|
+
return 'Privacy';
|
|
94
|
+
if (ruleId.startsWith('auth-'))
|
|
95
|
+
return 'Auth';
|
|
96
|
+
if (ruleId.startsWith('metadata-'))
|
|
97
|
+
return 'Metadata';
|
|
98
|
+
if (ruleId.startsWith('config-'))
|
|
99
|
+
return 'Config';
|
|
100
|
+
if (ruleId.startsWith('code-'))
|
|
101
|
+
return 'Code Analysis';
|
|
102
|
+
return 'Other';
|
|
103
|
+
}
|
|
78
104
|
/**
|
|
79
105
|
* Format scan results as text
|
|
80
106
|
*/
|
|
81
107
|
async function formatText(result) {
|
|
82
108
|
const c = await getChalk();
|
|
83
109
|
const lines = [];
|
|
110
|
+
const suppressedCount = result.suppressedFindings?.length ?? 0;
|
|
111
|
+
const suppressedSuffix = suppressedCount > 0 ? ` (${suppressedCount} suppressed)` : '';
|
|
84
112
|
// Header
|
|
85
113
|
lines.push(c.bold.underline('\n🛡️ ShipLint Scan Results\n'));
|
|
86
114
|
lines.push(`📁 Project: ${result.projectPath}`);
|
|
87
115
|
lines.push(`🕐 Scanned: ${result.timestamp.toISOString()}`);
|
|
88
116
|
lines.push(`⏱️ Duration: ${result.duration}ms`);
|
|
89
117
|
lines.push(`📊 Rules run: ${result.rulesRun.length}`);
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
lines.push(c.green.bold('✅ No issues found! Your app looks ready for review.'));
|
|
93
|
-
lines.push('');
|
|
94
|
-
return lines.join('\n');
|
|
118
|
+
if (suppressedCount > 0) {
|
|
119
|
+
lines.push(`🔇 Suppressed: ${suppressedCount}`);
|
|
95
120
|
}
|
|
96
|
-
|
|
121
|
+
lines.push('');
|
|
122
|
+
// Count by severity
|
|
97
123
|
const bySeverity = new Map();
|
|
98
124
|
for (const finding of result.findings) {
|
|
99
125
|
const existing = bySeverity.get(finding.severity) ?? [];
|
|
100
126
|
existing.push(finding);
|
|
101
127
|
bySeverity.set(finding.severity, existing);
|
|
102
128
|
}
|
|
129
|
+
const criticalCount = bySeverity.get(index_js_1.Severity.Critical)?.length ?? 0;
|
|
130
|
+
const highCount = bySeverity.get(index_js_1.Severity.High)?.length ?? 0;
|
|
131
|
+
const mediumCount = bySeverity.get(index_js_1.Severity.Medium)?.length ?? 0;
|
|
132
|
+
// ═══ SHIP VERDICT ═══
|
|
133
|
+
// NOT READY only when CRITICAL findings exist
|
|
134
|
+
// REVIEW when HIGH or MEDIUM findings exist (no CRITICAL)
|
|
135
|
+
// PASS otherwise (only LOW/INFO, or no findings)
|
|
136
|
+
if (criticalCount > 0) {
|
|
137
|
+
lines.push(c.red.bold('═'.repeat(60)));
|
|
138
|
+
lines.push(c.red.bold(` ❌ NOT READY — ${criticalCount} critical issue(s) found${suppressedSuffix}`));
|
|
139
|
+
lines.push(c.red.bold('═'.repeat(60)));
|
|
140
|
+
}
|
|
141
|
+
else if (highCount > 0 || mediumCount > 0) {
|
|
142
|
+
lines.push(c.yellow.bold('═'.repeat(60)));
|
|
143
|
+
lines.push(c.yellow.bold(` ⚠️ REVIEW — ${result.findings.length} issue(s) found (no critical)${suppressedSuffix}`));
|
|
144
|
+
lines.push(c.yellow.bold('═'.repeat(60)));
|
|
145
|
+
}
|
|
146
|
+
else {
|
|
147
|
+
lines.push(c.green.bold('═'.repeat(60)));
|
|
148
|
+
lines.push(c.green.bold(` ✅ PASS — 0 critical issues. Your app looks ready for review.${suppressedSuffix}`));
|
|
149
|
+
lines.push(c.green.bold('═'.repeat(60)));
|
|
150
|
+
if (result.findings.length === 0) {
|
|
151
|
+
lines.push('');
|
|
152
|
+
return lines.join('\n');
|
|
153
|
+
}
|
|
154
|
+
}
|
|
155
|
+
lines.push('');
|
|
156
|
+
// Summary by severity
|
|
103
157
|
lines.push(c.bold('📊 Summary:'));
|
|
104
158
|
const severityOrder = [index_js_1.Severity.Critical, index_js_1.Severity.High, index_js_1.Severity.Medium, index_js_1.Severity.Low, index_js_1.Severity.Info];
|
|
105
159
|
for (const severity of severityOrder) {
|
|
@@ -110,19 +164,42 @@ async function formatText(result) {
|
|
|
110
164
|
}
|
|
111
165
|
}
|
|
112
166
|
lines.push('');
|
|
113
|
-
//
|
|
114
|
-
|
|
115
|
-
|
|
167
|
+
// Scanner breakdown
|
|
168
|
+
const byScanner = new Map();
|
|
169
|
+
for (const finding of result.findings) {
|
|
170
|
+
const scanner = getScannerFromRuleId(finding.ruleId);
|
|
171
|
+
const existing = byScanner.get(scanner) ?? [];
|
|
172
|
+
existing.push(finding);
|
|
173
|
+
byScanner.set(scanner, existing);
|
|
174
|
+
}
|
|
175
|
+
lines.push(c.bold('🔧 Scanner Breakdown:'));
|
|
176
|
+
for (const [scanner, findings] of byScanner.entries()) {
|
|
177
|
+
const critCount = findings.filter(f => f.severity === index_js_1.Severity.Critical || f.severity === index_js_1.Severity.High).length;
|
|
178
|
+
const tag = critCount > 0 ? c.red(`(${critCount} critical/high)`) : c.green('(clean)');
|
|
179
|
+
lines.push(` ${scanner}: ${findings.length} finding(s) ${tag}`);
|
|
180
|
+
}
|
|
181
|
+
lines.push('');
|
|
182
|
+
// Findings grouped by severity
|
|
116
183
|
const sortedFindings = [...result.findings].sort((a, b) => {
|
|
117
|
-
|
|
118
|
-
return order[a.severity] - order[b.severity];
|
|
184
|
+
return SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity];
|
|
119
185
|
});
|
|
120
|
-
|
|
121
|
-
|
|
186
|
+
let currentSeverity = null;
|
|
187
|
+
let findingIndex = 0;
|
|
188
|
+
for (const finding of sortedFindings) {
|
|
189
|
+
if (finding.severity !== currentSeverity) {
|
|
190
|
+
currentSeverity = finding.severity;
|
|
191
|
+
const color = getSeverityColor(currentSeverity);
|
|
192
|
+
const count = bySeverity.get(currentSeverity)?.length ?? 0;
|
|
193
|
+
lines.push('');
|
|
194
|
+
lines.push(color(`${'─'.repeat(60)}`));
|
|
195
|
+
lines.push(color(` ${currentSeverity.toUpperCase()} (${count})`));
|
|
196
|
+
lines.push(color(`${'─'.repeat(60)}`));
|
|
197
|
+
lines.push('');
|
|
198
|
+
}
|
|
199
|
+
const formattedFinding = await formatFinding(finding, findingIndex);
|
|
122
200
|
lines.push(formattedFinding);
|
|
123
201
|
lines.push('');
|
|
124
|
-
|
|
125
|
-
lines.push('');
|
|
202
|
+
findingIndex++;
|
|
126
203
|
}
|
|
127
204
|
return lines.join('\n');
|
|
128
205
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/formatters/text.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/formatters/text.ts"],"names":[],"mappings":";;AAwHA,gCA4GC;AA/ND,gDAAyD;AAEzD,iCAAiC;AACjC,IAAI,KAAqC,CAAC;AAE1C,KAAK,UAAU,QAAQ;IACrB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,mBAAQ,CAAC,QAAQ;YACpB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,mBAAQ,CAAC,IAAI;YAChB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,mBAAQ,CAAC,MAAM;YAClB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,mBAAQ,CAAC,GAAG;YACf,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,mBAAQ,CAAC,IAAI;YAChB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,UAAsB;IAChD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,qBAAU,CAAC,IAAI;YAClB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,qBAAU,CAAC,MAAM;YACpB,OAAO,mBAAmB,CAAC;QAC7B,KAAK,qBAAU,CAAC,GAAG;YACjB,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,cAAc,GAA2B;IAC7C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,KAAa;IAC1D,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC3B,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS;IACT,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAC9G,CAAC;IAEF,yBAAyB;IACzB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5C,cAAc;IACd,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEjD,eAAe;IACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAc;IAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,UAAU,CAAC;IACtD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,UAAU,CAAC,MAAkB;IACjD,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAG,MAAM,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvF,SAAS;IACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,kBAAkB,eAAe,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,mBAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,mBAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,mBAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAEjE,uBAAuB;IACvB,8CAA8C;IAC9C,0DAA0D;IAC1D,iDAAiD;IACjD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,aAAa,2BAA2B,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACvG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,SAAS,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,MAAM,gCAAgC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACtH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC/G,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,CAAC,mBAAQ,CAAC,QAAQ,EAAE,mBAAQ,CAAC,IAAI,EAAE,mBAAQ,CAAC,MAAM,EAAE,mBAAQ,CAAC,GAAG,EAAE,mBAAQ,CAAC,IAAI,CAAC,CAAC;IACvG,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QACpD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC/C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,mBAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,mBAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAChH,MAAM,GAAG,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,SAAS,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,KAAK,QAAQ,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,+BAA+B;IAC/B,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxD,OAAO,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAI,eAAe,GAAoB,IAAI,CAAC;IAC5C,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;YACzC,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;YACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,WAAW,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,YAAY,EAAE,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -7,5 +7,6 @@ export * from './types/index.js';
|
|
|
7
7
|
export * from './parsers/index.js';
|
|
8
8
|
export { allRules, ruleRegistry, getRule, getRules, getRulesExcluding, MissingCameraPurposeRule, MissingLocationPurposeRule, LocationAlwaysUnjustifiedRule, ATTTrackingMismatchRule, ThirdPartyLoginNoSIWARule, } from './rules/index.js';
|
|
9
9
|
export { scan, scanWithContext } from './core/scanner.js';
|
|
10
|
+
export { applySuppression, parseShiplintIgnore, loadShiplintIgnore } from './core/suppression.js';
|
|
10
11
|
export { format, formatText, formatJSON, formatSARIF } from './formatters/index.js';
|
|
11
12
|
//# sourceMappingURL=index.d.ts.map
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAGnC,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,OAAO,EACP,QAAQ,EACR,iBAAiB,EACjB,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAGnC,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,OAAO,EACP,QAAQ,EACR,iBAAiB,EACjB,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGlG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -19,7 +19,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
19
19
|
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
20
20
|
};
|
|
21
21
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
22
|
-
exports.formatSARIF = exports.formatJSON = exports.formatText = exports.format = exports.scanWithContext = exports.scan = exports.ThirdPartyLoginNoSIWARule = exports.ATTTrackingMismatchRule = exports.LocationAlwaysUnjustifiedRule = exports.MissingLocationPurposeRule = exports.MissingCameraPurposeRule = exports.getRulesExcluding = exports.getRules = exports.getRule = exports.ruleRegistry = exports.allRules = void 0;
|
|
22
|
+
exports.formatSARIF = exports.formatJSON = exports.formatText = exports.format = exports.loadShiplintIgnore = exports.parseShiplintIgnore = exports.applySuppression = exports.scanWithContext = exports.scan = exports.ThirdPartyLoginNoSIWARule = exports.ATTTrackingMismatchRule = exports.LocationAlwaysUnjustifiedRule = exports.MissingLocationPurposeRule = exports.MissingCameraPurposeRule = exports.getRulesExcluding = exports.getRules = exports.getRule = exports.ruleRegistry = exports.allRules = void 0;
|
|
23
23
|
// Types
|
|
24
24
|
__exportStar(require("./types/index.js"), exports);
|
|
25
25
|
// Parsers
|
|
@@ -40,6 +40,10 @@ Object.defineProperty(exports, "ThirdPartyLoginNoSIWARule", { enumerable: true,
|
|
|
40
40
|
var scanner_js_1 = require("./core/scanner.js");
|
|
41
41
|
Object.defineProperty(exports, "scan", { enumerable: true, get: function () { return scanner_js_1.scan; } });
|
|
42
42
|
Object.defineProperty(exports, "scanWithContext", { enumerable: true, get: function () { return scanner_js_1.scanWithContext; } });
|
|
43
|
+
var suppression_js_1 = require("./core/suppression.js");
|
|
44
|
+
Object.defineProperty(exports, "applySuppression", { enumerable: true, get: function () { return suppression_js_1.applySuppression; } });
|
|
45
|
+
Object.defineProperty(exports, "parseShiplintIgnore", { enumerable: true, get: function () { return suppression_js_1.parseShiplintIgnore; } });
|
|
46
|
+
Object.defineProperty(exports, "loadShiplintIgnore", { enumerable: true, get: function () { return suppression_js_1.loadShiplintIgnore; } });
|
|
43
47
|
// Formatters
|
|
44
48
|
var index_js_2 = require("./formatters/index.js");
|
|
45
49
|
Object.defineProperty(exports, "format", { enumerable: true, get: function () { return index_js_2.format; } });
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;AAEH,QAAQ;AACR,mDAAiC;AAEjC,UAAU;AACV,qDAAmC;AAEnC,QAAQ;AACR,6CAW0B;AAVxB,oGAAA,QAAQ,OAAA;AACR,wGAAA,YAAY,OAAA;AACZ,mGAAA,OAAO,OAAA;AACP,oGAAA,QAAQ,OAAA;AACR,6GAAA,iBAAiB,OAAA;AACjB,oHAAA,wBAAwB,OAAA;AACxB,sHAAA,0BAA0B,OAAA;AAC1B,yHAAA,6BAA6B,OAAA;AAC7B,mHAAA,uBAAuB,OAAA;AACvB,qHAAA,yBAAyB,OAAA;AAG3B,OAAO;AACP,gDAA0D;AAAjD,kGAAA,IAAI,OAAA;AAAE,6GAAA,eAAe,OAAA;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;AAEH,QAAQ;AACR,mDAAiC;AAEjC,UAAU;AACV,qDAAmC;AAEnC,QAAQ;AACR,6CAW0B;AAVxB,oGAAA,QAAQ,OAAA;AACR,wGAAA,YAAY,OAAA;AACZ,mGAAA,OAAO,OAAA;AACP,oGAAA,QAAQ,OAAA;AACR,6GAAA,iBAAiB,OAAA;AACjB,oHAAA,wBAAwB,OAAA;AACxB,sHAAA,0BAA0B,OAAA;AAC1B,yHAAA,6BAA6B,OAAA;AAC7B,mHAAA,uBAAuB,OAAA;AACvB,qHAAA,yBAAyB,OAAA;AAG3B,OAAO;AACP,gDAA0D;AAAjD,kGAAA,IAAI,OAAA;AAAE,6GAAA,eAAe,OAAA;AAC9B,wDAAkG;AAAzF,kHAAA,gBAAgB,OAAA;AAAE,qHAAA,mBAAmB,OAAA;AAAE,oHAAA,kBAAkB,OAAA;AAElE,aAAa;AACb,kDAAoF;AAA3E,kGAAA,MAAM,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,uGAAA,WAAW,OAAA"}
|
package/dist/rules/base.d.ts
CHANGED
|
@@ -9,6 +9,7 @@ export declare function makeFinding(rule: Pick<Rule, 'id' | 'name' | 'severity'
|
|
|
9
9
|
title?: string;
|
|
10
10
|
description: string;
|
|
11
11
|
location?: string;
|
|
12
|
+
line?: number;
|
|
12
13
|
fixGuidance: string;
|
|
13
14
|
documentationURL?: string;
|
|
14
15
|
}): Finding;
|
|
@@ -19,6 +20,7 @@ export declare function makeCustomFinding(rule: Pick<Rule, 'id' | 'guidelineRefe
|
|
|
19
20
|
title: string;
|
|
20
21
|
description: string;
|
|
21
22
|
location?: string;
|
|
23
|
+
line?: number;
|
|
22
24
|
fixGuidance: string;
|
|
23
25
|
documentationURL?: string;
|
|
24
26
|
}): Finding;
|
package/dist/rules/base.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/rules/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE7E;;GAEG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,oBAAoB,CAAC,EAClF,OAAO,EAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACA,OAAO,
|
|
1
|
+
{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/rules/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE7E;;GAEG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,oBAAoB,CAAC,EAClF,OAAO,EAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACA,OAAO,CAaT;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,oBAAoB,CAAC,EAC7C,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE;IACP,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACA,OAAO,CAaT"}
|
package/dist/rules/base.js
CHANGED
|
@@ -13,6 +13,7 @@ function makeFinding(rule, options) {
|
|
|
13
13
|
title: options.title ?? rule.name,
|
|
14
14
|
description: options.description,
|
|
15
15
|
location: options.location,
|
|
16
|
+
line: options.line,
|
|
16
17
|
guideline: rule.guidelineReference,
|
|
17
18
|
fixGuidance: options.fixGuidance,
|
|
18
19
|
documentationURL: options.documentationURL,
|
|
@@ -29,6 +30,7 @@ function makeCustomFinding(rule, severity, confidence, options) {
|
|
|
29
30
|
title: options.title,
|
|
30
31
|
description: options.description,
|
|
31
32
|
location: options.location,
|
|
33
|
+
line: options.line,
|
|
32
34
|
guideline: rule.guidelineReference,
|
|
33
35
|
fixGuidance: options.fixGuidance,
|
|
34
36
|
documentationURL: options.documentationURL,
|
package/dist/rules/base.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/rules/base.ts"],"names":[],"mappings":";;AAQA,
|
|
1
|
+
{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/rules/base.ts"],"names":[],"mappings":";;AAQA,kCAuBC;AAKD,8CAyBC;AAxDD;;GAEG;AACH,SAAgB,WAAW,CACzB,IAAkF,EAClF,OAOC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI;QACjC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,IAAI,CAAC,kBAAkB;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAC/B,IAA6C,EAC7C,QAAkB,EAClB,UAAsB,EACtB,OAOC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ;QACR,UAAU;QACV,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,IAAI,CAAC,kBAAkB;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Rule: Dynamic Code Execution (§2.5.2)
|
|
3
|
+
*
|
|
4
|
+
* Detects patterns that load or execute code dynamically at runtime,
|
|
5
|
+
* which Apple prohibits for App Store apps:
|
|
6
|
+
* - JSContext().evaluateScript
|
|
7
|
+
* - dlopen / dlsym
|
|
8
|
+
* - NSClassFromString with suspicious (non-standard) classes
|
|
9
|
+
* - Runtime code loading patterns (NSBundle load, etc.)
|
|
10
|
+
*/
|
|
11
|
+
import type { Rule } from '../../types/index.js';
|
|
12
|
+
export declare const DynamicCodeExecutionRule: Rule;
|
|
13
|
+
//# sourceMappingURL=dynamic-code-execution.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"dynamic-code-execution.d.ts","sourceRoot":"","sources":["../../../src/rules/code/dynamic-code-execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,IAAI,EAAwB,MAAM,sBAAsB,CAAC;AAoEvE,eAAO,MAAM,wBAAwB,EAAE,IAgItC,CAAC"}
|