Sahil Bansal and GitHub
ca752edf79
feat: add suppport for bypassing the blocking behavior of malicious packages ( #53 )
...
* feat: add suppport for bypassing the blocking behavior of malicious packages
* feat: add InsecureInstallation config to bypass malware scanning with tests
* ui: introduce ShowWarning interaction method
* guard test fix
2025-07-02 19:09:27 +05:30
Sahil Bansal and GitHub
3f85282935
fix: pip args & manifest files handling ( #41 )
...
* fix: pip args & manifest files handling
* chore: add pflag dependency
* chore: word fixes
* fix: multiple refs for suspicious packages
* refactor: introduce block config
* fix: makefile for windows build
* test: add test cases for manifest based installation
* refactor: Makefile
* refactor: remove .exe for windows build
2025-06-24 12:44:12 +05:30
Sahil Bansal and GitHub
b64f158654
fix: resolve dependencies for manifest file scans ( #40 )
...
* fix: resolve dependencies for manifest file scans
* fix: resolve dependencies for manifest file scans
* fix: resolve dependencies for manifest file scans - 2
* revert back to traditional for loop
* fix(manifest-scan): resolve deps only for requirements.txt
2025-06-16 15:18:45 +05:30
5e9f2af972
Support for scanning manifest files ( #36 )
...
* feat: add extractor logic for manifest files
* feat: add manifest-based package installation detection
* feat: add osv-scanner for extracting lockfiles
* refactor: add comment for cmd parse
* refactor: add Ecosystem() method to PackageManager interface
* refactor: implement package-manager-specific extractors & replace osv-scanner with scalibr
* Update extractor/extractor.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
---------
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-06-12 18:58:58 +05:30
53783c6604
feat: Add support for pip Package Manager ( #33 )
...
* feat/init-pip-cmd
* feat: Add PyPi resolver
* test: Add tests for pypi and pypi_resolver
* refactor: unify package dependency resolution and improve PyPI version handling using registry adapter
* chore: remove unused file
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* feat: add Python dependency parsing with extras support
* refactor(deps): Improve PyPI dependency resolution and add custom resolver support
* chore: remove extra file
* fix: improve dependency resolution and package deduplication
* chore: remove extra print statement
* chore: typo fix
* feat: support PyPi package extras
* test: add test for pypi dependency parse function
* fix: remove overwritten of parsedCmd
* chore: remove extra print statement
* chore: typo fix
* feat: support PyPi package extras
* test: add test for pypi dependency parse function
* fix: remove overwritten of parsedCmd
* refactor: enhance code readability & remove extra code
* chore: remove extra code
* Update cmd/npm/npm.go
Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* Update cmd/npm/pnpm.go
Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* Update cmd/pypi/pip.go
Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
---------
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
Co-authored-by: Omkar Phansopkar <omkarphansopkar@gmail.com >
2025-06-09 17:37:08 +05:30
4031219375
fix: Show error messages on fatal failures #32 ( #34 )
...
* fix: Show error messages on fatal failures #32
* test: Add E2E test
* test: fix E2E scripts
* test: fix E2E scripts
* fix: Race condition in concurrent analyzer
* fix: update formatting to ensure docs URL is clickable
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* fix: E2E test
---------
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com >
2025-05-17 21:54:47 +05:30
Abhisek Datta and GitHub
b85f77cfbc
feat: Add support for active scanning in paranoid mode ( #31 )
...
* feat: Add support for active scanning in paranoid mode
* docs: Fix README
2025-05-16 19:38:06 +05:30
Abhisek Datta and GitHub
e86b6ef056
feat: Refactor PMG to Maintain Separation of Concerns and Clean Architecture ( #19 )
...
* feat: Add separate package manager and resolver
* fix: Npm dependency resolver
* feat: Add analyzer for malysis query
* feat: Add package manager guard as the orchestrator
* feat: Add PMG to orchestrate installation
* Add concurrent scan execution
* Introduce package manager interaction abstraction
* feat: Add UI port for guard
* Remove refactored source files
* Update README
* fix: CI script for multi-arch build
* ci: goreleaser CI fix
* fix: npm command parser to extract package names
* feat: Introduce global config primitive
* fix: Close results channel for clean goroutine exit
* ci: Add container image releaser
* test: Improve test for npm resolver
* refactor: Analyzer to generalise
* Improve UI with additional info
* fix: Goreleaser config
* fix: npm resolver bug
* fix: Fail when command exec workflow fails
* fix: Bug with transitive dependency resolution
* fix: Synchronize common data update in dependency resolver
* chore: Improve log handling
* docs: Update README
* fix: UI text wrapping
* fix: UI handling bugs
* feat: Use concurrent dependency resolver
2025-05-15 16:50:59 +05:30
