Commit Graph
40 Commits
Author SHA1 Message Date
Abhisek Datta 9cb5345bd6 feat: Add support for config templates 2026-01-09 18:46:08 +05:30
Abhisek Datta e72c1d6324 test: Add policy test 2026-01-09 15:00:24 +05:30
Abhisek Datta 66b9279924 fix: Sandbox profile loader from file should use path for caching 2026-01-09 12:52:16 +05:30
Abhisek Datta 188f6f3d90 test: Add test for seatbelt sandbox driver 2026-01-09 12:35:15 +05:30
Abhisek Datta 3cc09db342 test: Remove unused var 2026-01-09 12:28:21 +05:30
1229246926 Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com>
2026-01-09 12:26:52 +05:30
Abhisek Datta b38d177707 fix: Sandbox executor 2026-01-08 20:51:15 +05:30
Abhisek Datta ced873d98d fix: Handle the case when package manager policy is explicitly disabled 2026-01-08 20:43:09 +05:30
Abhisek Datta a550d26a3b chore: Go mod cleanup 2026-01-08 20:37:13 +05:30
Abhisek Datta cc1dc065f6 fix: Update config template 2026-01-08 20:32:22 +05:30
Abhisek Datta 774d21fc32 fix: Remove violation mode 2026-01-08 20:27:05 +05:30
Abhisek Datta cb081348fa fix: Misc cleanup fixes 2026-01-08 16:35:22 +05:30
Abhisek Datta eaeaff9cb8 chore: Cleanup sandbox 2026-01-08 16:32:49 +05:30
Abhisek Datta 45049b001d chore: Cleanup sandbox policy 2026-01-08 16:26:18 +05:30
Abhisek Datta 8ba18338d9 chore: Cleanup sandbox registry 2026-01-08 16:22:31 +05:30
Abhisek Datta eeeed76f07 fix: Misc cleanup fixes 2026-01-08 16:17:59 +05:30
Abhisek Datta bb3e001e87 test: Add variable interpolation test 2026-01-08 16:06:18 +05:30
Abhisek Datta f07d8e6a38 fix: Add support for sandbox cleanup 2026-01-08 14:30:33 +05:30
Abhisek Datta 9f77cca5e5 fix: Apply API 2026-01-08 14:20:47 +05:30
Abhisek Datta b92ba00cfa refactor: Sandbox for separation of boundaries 2026-01-08 14:11:10 +05:30
Abhisek Datta aa2a6cc214 fix: Misc fixes 2026-01-08 13:50:21 +05:30
Abhisek Datta 8492fcf93d refactor: Remove concept of PM_CACHE 2026-01-08 13:42:05 +05:30
Abhisek Datta ed59693f88 feat: Sandbox implementation with seatbelt 2026-01-08 13:40:22 +05:30
Abhisek DattaandGitHub 1684e25cc9 fix: Use separate event for trusted package allowed (#98) 2026-01-08 01:03:31 +05:30
Abhisek DattaandGitHub 0603df8c25 docs: Update README (#97)
* docs: Update README

* docs: Update README
2026-01-07 18:54:18 +00:00
Abhisek DattaandGitHub 1c319eba0e fix: Proxy flow should respect trusted packages (#96)
* fix: Handle trusted packages in proxy flow

* perf: Pre-parse trusted PURLs

* fix: Code review fixes

* fix: Remove unused config
2026-01-08 00:15:02 +05:30
779deeb23d feat: Add Support for Proxy Based Npm Interceptor (#87)
* feat: Add experimental proxy based npm interceptor

* refactor: Analysis cache

* ci: Add E2E for npm proxy

* fix: Handle dry-run in proxy flow

* fix: Handle special case for scope package name

* fix: Misc fixes

* fix: Code review fixes

* fix: Code review fixes

* refactor: Reusable code into base registry interceptor

* Pause npm process during user confirmation (#90)

* pause npm process when prompting user for confirmation

* disable progress bar

* fix logging and close chan on return

* update use of deprecated field

* refactor: Separation of concerns for handling process state

* fix: Safe permission for cert file

* fix: Handle nil check for interaction hook

* fix: Add test for base registry

* Fix goreleaser for windows build (#93)

* introduce platform specific process control

* rename common.go to common_flow.go

* feat: Add support for pause resume on windows

* fix: Code review fixes

* test: Add confirmation handler tests

---------

Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com>
2026-01-07 13:22:08 +05:30
20c854e473 feat: Config Persistence & API (#83)
* introduce a persistent config

* add tests and refactor config creation

* update config handling and add support for removing config

* add support to skip suspicious pkgs marked as trusted

* add support for config dir Env & unexport functions

* small fixes

* add assert for dir

* fix tests

* fix shell source line & trusted pkgs parsing

* fix flag inconsistency

* update config to read on each invocation and create if does not exist

* fix flags value being overridden

* remove redundant func call

* modify trusted pkg check to be config bound

* modify RemoveConfig to rm files & not dir. add tests for paths.go

* add versions for package for e2e

* modify tests to reset config

* fix: Simplify config persistence

* fix: Misc comments

* fix: Misc fix

* fix: Do not overwrite config file if exists

* fix: Do not overwrite config file if exists

* fix: Config cobra command should override and not replace

* fix: Create dir before writing config template

* fix: Create dir before writing config template

* fix: Misc refactoring

* test: Add test for is trusted package version

* Update cmd/setup/setup.go

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com>

* Update config/config.go

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com>

* fix: Remove unused constant in config

* fix: Resolve conflict with event logger

* docs: Add doc for eventlogger.Logger interface

* test: Add E2E for config file creation

* fix: Code review fixes

---------

Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com>
Co-authored-by: Sahilb315 <bansalsahil315@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-01 12:33:52 +05:30
Abhisek DattaandGitHub 21eb05373f feat: Add Support for Proxy with Interceptor (#77) 2025-12-10 08:34:28 +05:30
Abhisek DattaandGitHub 47fc5252ba fix: Add pip3 shell alias (#76) 2025-12-04 09:49:43 +05:30
Abhisek DattaandGitHub 2493fb4dc6 chore: Better user friendly error messages (#64) 2025-08-21 18:26:05 +05:30
4031219375 fix: Show error messages on fatal failures #32 (#34)
* fix: Show error messages on fatal failures #32

* test: Add E2E test

* test: fix E2E scripts

* test: fix E2E scripts

* fix: Race condition in concurrent analyzer

* fix: update formatting to ensure docs URL is clickable

Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com>

* fix: E2E test

---------

Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com>
Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com>
2025-05-17 21:54:47 +05:30
Abhisek DattaandGitHub b85f77cfbc feat: Add support for active scanning in paranoid mode (#31)
* feat: Add support for active scanning in paranoid mode

* docs: Fix README
2025-05-16 19:38:06 +05:30
Abhisek DattaandGitHub 7c9681ef00 Multiple Misc Updates (#23)
* docs: Update README

* docs: Add badges
2025-05-15 21:34:41 +05:30
Abhisek DattaandGitHub 5022d64ce4 chore: Improve UX (#22) 2025-05-15 18:03:46 +05:30
Abhisek DattaandGitHub cfde1d7632 ci: Add CodeQL and OpenSSF Scorecard action (#21) 2025-05-15 16:59:13 +05:30
Abhisek DattaandGitHub e86b6ef056 feat: Refactor PMG to Maintain Separation of Concerns and Clean Architecture (#19)
* feat: Add separate package manager and resolver

* fix: Npm dependency resolver

* feat: Add analyzer for malysis query

* feat: Add package manager guard as the orchestrator

* feat: Add PMG to orchestrate installation

* Add concurrent scan execution

* Introduce package manager interaction abstraction

* feat: Add UI port for guard

* Remove refactored source files

* Update README

* fix: CI script for multi-arch build

* ci: goreleaser CI fix

* fix: npm command parser to extract package names

* feat: Introduce global config primitive

* fix: Close results channel for clean goroutine exit

* ci: Add container image releaser

* test: Improve test for npm resolver

* refactor: Analyzer to generalise

* Improve UI with additional info

* fix: Goreleaser config

* fix: npm resolver bug

* fix: Fail when command exec workflow fails

* fix: Bug with transitive dependency resolution

* fix: Synchronize common data update in dependency resolver

* chore: Improve log handling

* docs: Update README

* fix: UI text wrapping

* fix: UI handling bugs

* feat: Use concurrent dependency resolver
2025-05-15 16:50:59 +05:30
Abhisek DattaandGitHub ec010c7d6b Merge pull request #1 from safedep/feat/npm-support
project initialisation & added npm cmd support
2025-04-29 09:06:05 +05:30
Abhisek DattaandGitHub 1d45698137 Update README.md
Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com>
2025-03-20 08:00:09 +05:30
Abhisek DattaandGitHub c22c97b257 Initial commit 2025-03-20 07:59:48 +05:30