Releases: DataDog/datadog-static-analyzer
Releases · DataDog/datadog-static-analyzer
Version 0.4.3
What's Changed
- [STAL-2707] feat: add Apex support by @amaanq in #492
- Various QOL improvements for unit testing by @jasonforal in #485
- [STAL-2733] feat: add R support by @amaanq in #494
- [STAL-2732] feat: add SQL support by @amaanq in #495
- [STAL-1489] refactor: handle internal rule conversion errors more pragmatically by @amaanq in #498
- Do not follow symlinks while scanning the repo for files to analyze by @jacobotb in #499
- [STAL-2472] feat: avoid processing minified JavaScript files by @amaanq in #503
- [STAL-2635] Add JavaScript
Digraph
by @jasonforal in #486 - [STAL-2195] Initial implementation of intra-method taint analysis in Java by @jasonforal in #493
- [STAL-2831] Add YAML + configuration method by @juli1 in #507
- [STAL-2736] feat!: switch upstream Kotlin parser by @amaanq in #504
- [STAL-2820] feat: add end-to-end testing for R, Rust, and SQL by @amaanq in #505
- chore(integration-tests): require minimum results to be at least 2 by @amaanq in #508
- Prepare version 0.4.3 by @juli1 in #510
Full Changelog: 0.4.2...0.4.3
0.4.2
What's Changed
- make static analysis optional in git hooks by @juli1 in #484
- [STAL-2591] Add ability to look up a node's parent from JavaScript by @jasonforal in #471
- [STAL-2703] feat: add Markdown support by @amaanq in #488
- [STAL-2687] Fetch remote config by @juli1 in #489
- Add tests for JS/TS by @juli1 in #490
- Prepare version 0.4.2 by @juli1 in #491
Full Changelog: 0.4.1...0.4.2
0.4.1
What's Changed
- feat(config): preserve comments in the static analysis configuration file - IDE-2599 by @robertohuertasm in #472
- chore(github): updated the team owning ide by @robertohuertasm in #477
- Add results when running a Git Hook by @juli1 in #478
- Add git-hook and server into GHCR release by @juli1 in #479
- [STAL-2617] Add Windows Support by @juli1 in #480
- Prepare version 0.4.1 by @juli1 in #481
Full Changelog: 0.4.0...0.4.1
0.4.0
0.3.9
What's Changed
- Add proximity keywords by @juli1 in #467
- Prepare github action script for secrets by @juli1 in #468
- Fix tests by @juli1 in #469
- [STAL-2586] Bump memory for GitLab build by @jasonforal in #470
- [STAL-2369] feat: add
javascript.ImportsPackage
stub by @amaanq in #440 - Prepare version 0.3.9 by @juli1 in #473
Full Changelog: 0.3.8...0.3.9
0.3.8
What's Changed
- [STAL-2508] ci: add regression checks for PHP repositories by @amaanq in #450
- Display the number of files with each rule's execution time. by @jacobotb in #452
- [STAL-2508] add php to default rulesets language by @amaanq in #451
- [STAL] Update CODEOWNERS by @dastrong in #454
- [STAL-2445] Update diff-aware messaging by @dastrong in #453
- [STAL-2515] Introduce
release-dev
cargo profile by @jasonforal in #455 - Bundle the per-rule configurations/overrides by @jacobotb in #389
- add git hooks by @juli1 in #457
- Per-subtree rule severity overrides by @jacobotb in #458
- add integration testing for secrets by @juli1 in #459
- Git hooks first implementation by @juli1 in #460
- [STAL-2512] Implement
ddsa
JavaScript API entrypoint by @jasonforal in #456 - [STAL-2469] Add default folder ignores by @jasonforal in #461
- Ignore certain files for secrets by @juli1 in #465
- switch library emoji by @juli1 in #464
Full Changelog: 0.3.7...0.3.8
0.3.7
What's Changed
- [STAL-2456] feat: add PHP support by @amaanq in #444
- Fix line/col search in string by @juli1 in #443
- [secrets] add short description by @juli1 in #445
- [STAL-2474] Fix edge case with v8::String creation with wide characters by @jasonforal in #448
- [STAL-2465] Switch to ddsa runtime by @jasonforal in #446
- Release 0.3.7 by @jasonforal in #449
Full Changelog: 0.3.6...0.3.7
0.3.6
What's Changed
- Wire SDS API by @juli1 in #432
- Fix the unnecessary updating of ddsa FileContext by @jasonforal in #433
- StaticAnalysisConfigFile: do not error if the configuration is empty by @albertvaka in #436
- [STAL-2377] Improve memory efficiency when processing analysis results by @jasonforal in #438
- Initial SDS implementation by @juli1 in #435
- [STAL-2368] refactor: add a retry mechanism anywhere requests are made by @amaanq in #421
- [STAL-2379] docs: document how to use the Docker container by @amaanq in #434
- Add secrets rules in diff-aware by @juli1 in #439
- feat(docker): add github-action.sh CI script by @amaanq in #441
- Release 0.3.6 by @amaanq in #442
New Contributors
- @albertvaka made their first contribution in #436
Full Changelog: v0.0.1...0.3.6
0.3.5
What's Changed
- Test all default rulesets by @juli1 in #361
- [STAL-2082] Ignore generated files by @juli1 in #364
- [STAL-2148] Fix flaky CI test by @jasonforal in #368
- [STAL-1960] Add tree-sitter query wrapper by @jasonforal in #366
- Use a member function of PathConfig to check if the path config allows a file. by @jacobotb in #369
- Move argument provider to its own file. by @jacobotb in #370
- [STAL-2019] ci: add action to test for regressions by @amaanq in #365
- [STAL-1960] Add generic Rust <> v8 data structures by @jasonforal in #374
- [STAL-1960] Introduce ddsa JsRuntime by @jasonforal in #381
- [STAL-2139] Ignore rules for the whole file by @juli1 in #376
- Split configuration data object and parsing code by @jacobotb in #371
- [STAL-1960] Introduce patterns for refactored JavaScript modules by @jasonforal in #382
- [STAL-1960] Introduce bridge design; implement ddsa context by @jasonforal in #384
- [STAL-1960] Chore: update naming convention by @jasonforal in #386
- [STAL-1960] Add ddsa FileContextGo by @jasonforal in #385
- [STAL-1960] Add bridge for (TsSymbol <> Name) mappings by @jasonforal in #387
- Add a specific type for values that depend on the subtree by @jacobotb in #372
- fix(analyzer): fix 'lines to ignore' parsing functionality by @robertohuertasm in #388
- Add the ability to call other endpoints with JWT tokens. by @jacobotb in #373
- [STAL-1960] Implement ddsa TreeSitterNode + bridge by @jasonforal in #390
- [STAL-1960] Implement ddsa NamedCapture by @jasonforal in #391
- [STAL-1960] Implement ddsa Violation bridge by @jasonforal in #392
- [STAL-2179] Add better error message for ruleset fetch failure by @amaanq in #395
- [STAL-1960] Implement ddsa QueryMatch + bridge by @jasonforal in #393
- [STAL-1960] Implement ddsa JsRuntime scoped execution by @jasonforal in #398
- [STAL-1960] Return TreeSitterNode instances from QueryMatch
get
andgetMany
by @jasonforal in #399 - [STAL-1960] Implement compatibility layer with Stella for QueryMatch. by @jasonforal in #400
- [STAL-1960] Implement ddsa JsRuntime rule execution by @jasonforal in #402
- [STAL-1960] Implement compatibility layer for Stella visit function by @jasonforal in #403
- [STAL-1960] Address various bugs by @jasonforal in #408
- Fix overly-restrictive lifetime of
tree_sitter::Node
during ops by @jasonforal in #405 - [STAL-1960] Add functionality to configure a v8 isolate's default context by @jasonforal in #404
- [STAL-1960] Add console.log tests, special TreeSitterNode serialization by @jasonforal in #407
- [STAL-1960] Add ability to fetch tree-sitter node children from JavaScript by @jasonforal in #415
- [STAL-2335] ci: fix error when multiple repos have potential regressions detected by @amaanq in #406
- [STAL-2296] fix: improve
test-rules
script with retries and better error handling by @amaanq in #411 - Filter invalid violations for SARIF report by @juli1 in #401
- [STAL-1960] Fix performance issues introduced by creating new v8 Contexts by @jasonforal in #416
- [STAL-2337] feat: add Starlark support by @amaanq in #413
- [STAL-1906] feat: add Dockerfile + ci workflow to publish to GHCR by @amaanq in #383
- Update op to only return named children by @jasonforal in #417
- Fix ddsa
node_type_id
to match stella semantics by @jasonforal in #419 - [STAL-1960] Optimize memory usage of JS timeout functionality by @jasonforal in #412
- Fix
null
check in JavaScript by @jasonforal in #420 - [STAL-1960] Implement TsLanguageContext by @jasonforal in #423
- [STAL-1960] Implement "field name" for tree-sitter node children by @jasonforal in #424
- [STAL-2338] feat: add Bash support by @amaanq in #414
- [STAL-2336] Include paths configuration for diff-aware hash by @juli1 in #418
- Change ddsa rule script template to properly initialize local variables by @jasonforal in #425
- Add various ddsa compatibility workarounds for the stella syntax by @jasonforal in #426
- [STAL-2289] feat: add terraform file context helper in the JS code by @amaanq in #409
- remove secrets features by @juli1 in #427
- [STAL-1960] Enable ddsa as a feature flag by @jasonforal in #428
- Add stopgap cache clearing for ddsa on the analyzer server by @jasonforal in #429
- Release 0.3.5 by @jasonforal in #430
Full Changelog: 0.3.4...0.3.5
0.3.4
What's Changed
- Test tree-sitter 0.22.6 by @juli1 in #353
- update cc dependency by @juli1 in #356
- show rule that fails to convert by @juli1 in #357
- Test rules in staging and prod by @juli1 in #355
- [STAL-1863] fix: update c-sharp grammar for parsing improvements by @amaanq in #344
- fix: correct workflow step name for staging rules by @amaanq in #358
- [STAL-2057] Hardcode include testing rules in CLI by @modernplumbing in #359
- Release 0.3.4 by @amaanq in #360
Full Changelog: 0.3.3...0.3.4