Release v0.0.29
This release has exciting new features such as CI
command to scan source code for vulnerabilities within CI/CD ♾️ pipeline, docker support, GitHub Action support. 🎉
What's New?
- Code-Pathfinder is now available in docker hub. Give it a try by pulling
shivasurya/code-pathfinder:stable-latest
🐳 - GitHub Action is now supported and you can start scanning source code. 🎉
# add as step to github action yaml file
- name: Code-Pathfinder SAST Scan
uses: shivasurya/code-pathfinder@main
with:
command: 'ci'
project: '.'
output-file: 'output.json'
output: 'json'
ruleset: 'cpf/java'
- Code-Pathfinder now supports CI command to scan for vulnerabilities in source code. ♾️
$ pathfinder ci --project /src/code-pathfinder/test-src --ruleset cpf/java --output json --output-file output.json
...
Executing in CI mode ♾️
Checkout Code-pathfinder rules registry here
What's Changed
- Bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot in #151
- feature: Implement CI based pathfinder scan - part 1 by @shivasurya in #153
- feature: Implement CI scan using pathfinder rules by @shivasurya in #155
- Bump astro from 4.15.12 to 4.16.3 in /docs in the npm_and_yarn group across 1 directory by @dependabot in #157
- ✨ Add GitHub Action template with action.yml by @shivasurya in #156
- fixed docker 🐳 tag mistake by @shivasurya in #158
- release: Bump/v0.0.29 by @shivasurya in #159
Full Changelog: v0.0.28...v0.0.29