Skip to content

Releases: victoralfred/devsec

DevSec 0.1.3

19 Jan 08:30
@victoralfred victoralfred
v0.1.3
e0f3a80
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
DevSec 0.1.3 Latest
Latest

DevSec v0.1.3 - Windows Compatibility Release

This release fixes all Windows compatibility issues and ensures full cross-platform support across Linux, macOS, and Windows.

🐛 Bug Fixes

Windows Compatibility

  • Fixed Windows path handling: Updated gowritter dependency to v1.0.1 which resolves drive letter corruption issues
  • Fixed hardcoded Unix paths: Replaced 18+ instances of hardcoded /tmp paths with t.TempDir() across test files
  • Fixed platform-specific commands: Replaced Unix-specific /bin/echo with cross-platform command resolution
  • Fixed timing tests: Updated timeout values from nanoseconds to milliseconds for reliable cross-platform execution

Linter & Static Analysis

  • Fixed staticcheck SA1012 warnings: Properly handle nil context in tests using variable assignment pattern
  • Fixed prealloc warnings: Preallocate slices with appropriate capacity for better performance
  • Fixed gocritic warnings: Added appropriate nolint directives for intentional test cases

📦 Dependencies

  • Updated github.com/victoralfred/gowritter from v1.0.0 to v1.0.1

✅ Test Coverage

All tests now pass on:

  • Linux (ubuntu-latest) - Go 1.22, 1.23, stable
  • macOS (macos-latest) - Go 1.22, 1.23, stable
  • Windows (windows-latest) - Go 1.22, 1.23, stable

📝 Files Changed

  • internal/cli/scan_edge_test.go
  • internal/cli/scan_security_test.go
  • internal/cli/policy_test.go
  • internal/helm/chart_test.go
  • internal/pipeline/runner_test.go
  • internal/policy/decision_test.go
  • internal/policy/engine_test.go
  • internal/scanner/osv/osv_security_test.go
  • internal/scanner/osv/osv_test.go
  • internal/scanner/semgrep/semgrep_test.go
  • internal/scanner/trivy/trivy_test.go
  • internal/alerting/manager.go
  • internal/ml/detector_test.go
  • internal/ml/integration_test.go
  • internal/sbom/sbom.go
  • go.mod & go.sum

🔗 Full Changelog

See PR #12: #12

Full Changelog: v0.1.2...v0.1.3

Assets 8
Loading

DevSec 0.1.2

18 Jan 07:37
@victoralfred victoralfred
v0.1.2
c9ddf49
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
DevSec 0.1.2

What's Changed

Bug Fixes

CLI Usage Message Display Fix

Fixed an issue where the CLI would display confusing usage instructions when scans found security issues. The usage message is now only shown for actual command parsing errors (invalid flags, missing arguments, etc.), not when scans successfully complete but find vulnerabilities or policy violations.

Before:

error: secrets found
Usage:
  devsec scan secrets [path] [flags]

Flags:
  -f, --format string      output format (text, json) (default "text")
  ...

After:

error: secrets found

Impact:

  • Cleaner, less confusing error output
  • Users can focus on the actual security findings without distraction
  • Better user experience in CI/CD pipelines

Affected Commands:

  • scan secrets
  • scan sast
  • scan vulnerabilities
  • scan dependencies
  • policy check
  • pipeline run

Technical Details

  • Added SilenceUsage: true to commands that return errors for execution results
  • All tests pass with race detection
  • No breaking changes

Full Changelog: v0.1.1...v0.1.2

Loading

DevSec 0.1.1

24 Dec 10:05
@github-actions github-actions
v0.1.1
0967296
This commit was signed with the committer’s verified signature.
victoralfred Victor Oseghale
GPG key ID: EF7F3FD5C4779F52
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
DevSec 0.1.1

DevSec 0.1.1

Installation

Linux/macOS:

curl -sSL https://raw.githubusercontent.com/victoralfred/devsec/main/install.sh | bash

Windows (PowerShell):

iwr -useb https://raw.githubusercontent.com/victoralfred/devsec/main/scripts/install.ps1 | iex

Install specific version:

curl -sSL https://raw.githubusercontent.com/victoralfred/devsec/main/install.sh | bash -s -- -v 0.1.1

Changelog

Other

Contributors

victoralfred
Loading

DevSec 0.1.0

24 Dec 08:51
@github-actions github-actions
v0.1.0
0e1da0f
This commit was signed with the committer’s verified signature.
victoralfred Victor Oseghale
GPG key ID: EF7F3FD5C4779F52
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
DevSec 0.1.0

DevSec 0.1.0

Installation

Linux/macOS:

curl -sSL https://raw.githubusercontent.com/victoralfred/devsec/main/install.sh | bash

Windows (PowerShell):

iwr -useb https://raw.githubusercontent.com/victoralfred/devsec/main/scripts/install.ps1 | iex

Install specific version:

curl -sSL https://raw.githubusercontent.com/victoralfred/devsec/main/install.sh | bash -s -- -v 0.1.0

Changelog

Other

Read more
Loading