Closed
Conversation
|
To view this pull requests documentation preview, visit the following URL: docs.page/yardexx/dart_shield~26 Documentation is deployed and generated using docs.page. |
- Add modular SARIF module (sarif_document, sarif_builder, sarif_reporter) - Map dart_shield severity levels to SARIF levels (high->error, medium->warning, low/info->note) - Support --reporter=sarif CLI option - Add comprehensive tests (29 tests for SARIF module) - Add GitHub Actions integration documentation This enables: - GitHub Security tab integration - PR annotations showing security issues inline - Tracking security issues over time
- Add BaselineManager for creating and loading baseline files - Add `dart_shield baseline` command to create baseline from current issues - Add `--baseline` option to analyze command to filter baselined issues - Fingerprints are MD5 hashes of (ruleId:filePath:line) - Baseline files are human-readable YAML format - Add comprehensive tests (12 tests for baseline manager) This enables teams to adopt dart_shield in existing projects without being overwhelmed by legacy issues.
New rules: - avoid_empty_catch: Detects empty catch blocks (CWE-390) - avoid_logging_sensitive_data: Detects logging of sensitive variables (CWE-532) - avoid_certificate_pinning_bypass: Detects SSL bypass patterns (CWE-295) - avoid_dynamic_sql_queries: Detects SQL injection risks (CWE-89) - avoid_shared_preferences_for_secrets: Detects unencrypted secret storage (CWE-312) - avoid_insecure_file_storage: Detects sensitive file writes (CWE-922) Total rules: 11 (5 existing + 6 new)
yardexx
force-pushed
the
feature/new-security-rules
branch
from
6e0708e to
37f57c9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Status
IN DEVELOPMENT
Description
Type of Change