Merged
Conversation
- Add modular SARIF module (sarif_document, sarif_builder, sarif_reporter) - Map dart_shield severity levels to SARIF levels (high->error, medium->warning, low/info->note) - Support --reporter=sarif CLI option - Add comprehensive tests (29 tests for SARIF module) - Add GitHub Actions integration documentation This enables: - GitHub Security tab integration - PR annotations showing security issues inline - Tracking security issues over time
- Add BaselineManager for creating and loading baseline files - Add `dart_shield baseline` command to create baseline from current issues - Add `--baseline` option to analyze command to filter baselined issues - Fingerprints are MD5 hashes of (ruleId:filePath:line) - Baseline files are human-readable YAML format - Add comprehensive tests (12 tests for baseline manager) This enables teams to adopt dart_shield in existing projects without being overwhelmed by legacy issues.
- Default baseline now writes to .dart_tool/dart_shield_baseline.yaml - Follows Dart conventions for tool-generated files - --output/-o option still allows custom paths - Ensures parent directory is created if it doesn't exist
Default path is now .dart_tool/dart_shield/baseline.yaml
Split baseline_manager.dart to follow one-class-per-file convention. Sealed classes and their implementations remain grouped by design.
|
To view this pull requests documentation preview, visit the following URL: docs.page/yardexx/dart_shield~24 Documentation is deployed and generated using docs.page. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Status
IN DEVELOPMENT
Description
Type of Change