Граф коммитов

14 Коммитов

Автор SHA1 Сообщение Дата
Jeff King 16492952aa
Github Code Scanning Integration (#458)
* GIthub code-scanning integration PoC.

* Refresh results on branch change.

* Update/fix tasks.json for webpack.

* Add StatusBarItem.

* Add panel banner. Add GitHub zeroData.

* Bump to 3.1.2 for prerel.

* Fix: Updater: GitHub API drift.

* Relax remote.origin.url regex.

* Enable push monitoring and results polling.

* Increase poller timeout.

* Update comments.

* Add banner error messages.

* Fix: update package chokidar.

* Show banner even for zero data.

* Fix origin.url '.git' suffix handling.

* Refactor getInitializedGitApi.

* Support setBanner when panel not loaded yet.

* Fix getInitializedGitApi.

* Anti-drift. Temp remove Poller.

* Cleanup comments.

* GitIgnore: Add 'ignore' folder.

* Cleanup store.branch.

* Don't refetch analysis unless the id changes.

* Refactor sarifStatusBarItem.

* Add `resultsFixed` to both stores.

* Normalize `scannedFile` ret value.

* Fix.

* Comment.

* Fix: originalRange needs to be based on originalDoc (not currentDoc).

* Refactor `driftedRegionToSelection`. Replace `regionToSelection`.

* Bump follow-redirects from 1.11.0 to 1.14.8 (#421)

* Bump nanoid from 3.1.25 to 3.3.1 (#424)

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.25 to 3.3.1.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.1.25...3.3.1)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump node-fetch from 2.6.1 to 2.6.7 (#425)

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jeff King <jeffking@gmail.com>

* Migrate deprecated`node-sass` to supported `sass`. (#426)

* Create eslint-analysis.yml (#423)

* Create eslint-analysis.yml

Update eslint-analysis.yml

Fixing errors

* ESLint: indent SwitchCase=1.

* addressing PR feedback

* Renaming action

* renaming name

Co-authored-by: Jeff King <jeffking@gmail.com>

* Fix "Insiders" auto-update mechanism, update CODEOWNERS, Git Ignore. (#428)

* Bump minimist from 1.2.5 to 1.2.6 (#430)

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases)
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump async from 2.6.3 to 2.6.4 (#433)

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4.
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](https://github.com/caolan/async/compare/v2.6.3...v2.6.4)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Relax $schema contraints, refactor. (#436)

* Analysis Steps improvements and other improvements. (#445)

* Add development guide (#450)

* Add development guide.

* Rewording per PR feedback.

* Merge README.develop with the CONTRIBUTING.md.

* Whitespace consistency.

* Cleanup names and titles.

* Microsoft mandatory file (#451)

Co-authored-by: microsoft-github-policy-service[bot] <77245923+microsoft-github-policy-service[bot]@users.noreply.github.com>

* Disable HTML in Markdown. (#453)

* Block inline scripts. (#454)

* Tighten typing. (#455)

* Bump terser from 5.9.0 to 5.14.2 (#449)

Bumps [terser](https://github.com/terser/terser) from 5.9.0 to 5.14.2.
- [Release notes](https://github.com/terser/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/commits)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jeff King <jeffking@gmail.com>

* Fix table rendering in VS Code marketplace README (#456)

* Bump to 3.3.

* Workaround meta attribute quoting escape.

* Refine banner messages.

* Add refresh results button.

* Add quick fix for mark as fixed.

* Implement SARIF fixes.

* Revert translateLocalToArtifact workspaceUri stripping.

* Prepend workspaceUri even if no uriBase.

* Banner message distinguish between updated and unchanged.

* Table: remember expand/collapse state on refresh.

* Retire ghas zero data message.

* Fix decorations filtering.

* Custom format for github/alertUrl.

* Handle when analysesResponse is a message.

* Add output channel for debug info.

* Revert debug code.

* Update diagnostics on text change.

* Hoist output channel.

* Output channel: add diagnostic updates.

* Diagnostics: bypass "output:" schemes.

* Retire implicitBase calculation.

* Don't filter out fixed results in panel.

* Line through fixed results in panel.

* Ability to clear/reset fixed results.

* Comments.

* Catch and display top-level errors.

* Cleanup return paths.

* Try catch error logging for fetchAnalysis.

* Comment typo.

* Add connectToGithubCodeScanning setting.

* Add activationEvents: workspaceContains.

* Remove antiDriftToggle.

* Rename antiDrift.

* Spelling.

* Readability.

* Remove temporarily not in use Poller and Timer.

* Spelling.

* Semicolon.

* Fix merge errors.

* Fix merge errors (remaining).

* Network error banner message.

* Content-Security-Policy add img-src data:.

* More output for updateDiags.

* Debug output for bumpPrerelase.

* Prerelease: increase fetch-depth.

* Revert "Prerelease: increase fetch-depth."

This reverts commit 71fbe2a9f4.

* Temp: Hardcode pre-release version.

* Debug pre-release action 1.

* Try ubuntu for prerelease action.

* Revert "Temp: Hardcode pre-release version."

This reverts commit 3d9aa2e107.

* Temp: Hardcode pre-release version in custom action.

* Revert "Temp: Hardcode pre-release version in custom action."

This reverts commit a84ff5a9d5.

* Revert "Debug pre-release action 1."

This reverts commit 062ce7099a.

* Fix: Inconsistent uri.toString(encoding) causing string comparison failures.

* Debut output for workspaceUri.

* Add telemetry for GitHub code scanning.

* Revert "More output for updateDiags."

This reverts commit 5977f20935.

* Revert "Debut output for workspaceUri."

This reverts commit e71b4e70b3.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Eddy Nakamura <eddynaka@gmail.com>
Co-authored-by: microsoft-github-policy-service[bot] <77245923+microsoft-github-policy-service[bot]@users.noreply.github.com>
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
2022-09-22 15:54:51 -07:00
Jeff King 741531aee6
Address all 8 current Dependabot alerts. (#398)
* Update vsce to 1.100.0.

* Update react-markdown to 5.

* Update node-sass to 6.

* Fix: sass-loader align with node-sass.

* Update webpack 4 to 5 + cascading updates.

* Npm audit fix.
2021-09-24 17:31:22 -07:00
Jeff King 73320ea3ce
Misc bug fixes. (#332)
* Perf: Skip json pointer gen on api calls.

* Fix react export.

* Fix prerelease action.

* Allow F5 to still work if npm install is skipped.

* Revert "Perf: Skip json pointer gen on api calls."

This reverts commit ead58e8d98.
2020-08-18 13:56:24 -07:00
Jeff King 22a23c1620
Integrate new UI (Continued) (#282)
* Reset repo.

* Add new UI.

* Update package-lock.

* Fix: Missing interface param names.

* Add link rel noopener noreferrer.

* Remove unused import.

* Fix: Use execFileSync for security.

* Refix:  rel noopener noreferrer.

* Update multitool version.

* PR Feedback 1.

* Remove test commands.

* Remove sariftypesgenerator.

* Un-ignore icon.png.

* Disable 'Suggest In-Project Sarif Files'.

* Comments.

* Typescript strict conformance. Also spelling fixes.

* Re-enable some TS "no____" flags.

* Updated @microsoft/sarif-multitool version.

* Fix: New TS config conformance.

* Open panel on openLogs(), if there are results.

* Enable cancellation for openLogs().

* Add ResultDiagnostic.

* Access modifier cleanup.

* Move Store to own file.

* Rename.

* Refactor.

* Move regionToSelection to own file.

* Removing '.sarif' folder support (for now).

* Fix: Remove decorations when logs close.

* API compat for openLogs.

* Always npm install before npm start (F5).

* Migrate tslint (deprecated) to eslint.

* Linting and strictness.

* NPM audit fix.

* Lint camelCase for src files.

* Rename "context" folder to "extension".

* Cleanup.

* File file casing and folder name.

* Arrow to function.

* onDidReceiveMessage convert to switch and throw.

* Add api comment.

* Refactor index.html. Add demoSarif.json.

* Comment cleanup.

* More explicit region types.

* Migrate mock-require to proxyquire.

* Remove suggest in-project sarif files.

* Fix LGTM unused var.

* Add NPM vscode-codicons.

* Insiders updating.

* Convert type annotation.

* Add more cSpell words.

* Fix.

* Semicolons ;-)

* Add Visibility type.

* Fix css import casing.

* Comment update.

* Fix Checkrow and Visibility.

* Eslint upgrade to recommended.

* Linting report as errors.

* Lint indent 4 spaces.

* ArtifactContent support rendered markdown or text.

* Handle GitHub rate limiter and other errors.

* Constrain activationEvents.

* Remove unused command.

* Updater add proxy support.

* Add detailsFeedback.

* Rename fix casing for git.

* Fix git mv casing.

* Add `Tab` component.

* Comments.

* Cleanup.

* Add tab counts.

* Refactor activate().

* Git fix file casing.

* Table row group style cleanup.

* Misc PR feedback.

* Cleanup disposables.

* Comment.

* Rename.

* Better handle absent tool.driver.rules.

* Implement uriBaseId resolution.

* Enforce strict/absolute URIs.

* Rename.

* Rename file.

* Migrate mock Uri to vscode-uri.

* Refactor uriExists.

* Fix.

* Migrate uriExists from openTextDocument to fs.stat.

* Adjust typing notation.

* Use parsed scheme.

* Constrain typing.

* More migration to vscode-uri.

* Lint member-delimiter-style = semi.
2020-06-26 12:43:47 -07:00
Gabriel DeBacker b06d178b84
Implement update mechanism for Inisiders Channel (#267)
* Initial implemnentation of updating insiders using GitHub APIs
2020-04-27 17:42:59 -07:00
Gabriel DeBacker 2d3f0f7a62
Expose API for other plugins to drive the SARIF viewer (#248)
* Fix lint error since $schema was already verified in the preceeding code

* Introduce a command that allows opening and closing of log files from a 3rd party extension

* Pick up new NPM version for multi-tool

* Remove commands in lieu of an API returned from the extension

* Sarif File URIs are not part of the options

* Add missing file

* Code review feedback and spelling mistakes

* Fix up promise.resolve goo

* Remove openInEditor options

* Better naming

* Make remove all runs actually work
2020-04-15 16:12:51 -07:00
Gabriel DeBacker f020921fa1
Prepare the extension for localization (#235)
* Start using localization functionality for VSCode extensions

* Start using localization functionality for VSCode extensions

* Set up tslint to catch localization issues, but disable, well, pretty much everything else

* Explorer controller done

* File Converter done

* Getting closer

* rename files to be camel cased so they work with TSLint

* Try rename

* More rename fun

* Hopefully last round of renames

* Trying to figure out why TSLint stopped working

* More rename fun and more localization fixes

* Done enough for today

* We don't need vscode-nls-dev, that's actually for performing the localization, and the time string localization (unit-test was faiing)

* Remove lint-explorer, not needed

* Remove un-needed changes

* Fix bug in creation of JSON pointers

* Add back vscode-nls (removed by accident)

* Fix up somethings found in code review
2020-04-13 13:43:55 -07:00
Gabriel DeBacker 7a493a026c
Turn on lint rules and up type-script compiler warnings (#211)
* Turn linting options on to 11
2020-03-30 09:19:55 -07:00
Gabriel DeBacker b769b23fa5
Use import for 'fs' and 'path' rather than require, and fix casing of paths from SARIF results. (#208)
* Fix up the casing when parsing the SARIF so VSCode doesn't open multiple files

* Update TypeScript version to 3 so we can tsc --build the exploer code

* Remove comment that isn't needed

* Put the version back to 4 until we ingest the new SDK

* Add tests for fixing path casing

* Use correct locale comparisons, and made it much much faster

* Add a funky file to verify tests

* Comment why we assume the drive letter is lower-case
2020-03-06 14:17:19 -08:00
Rusty Scrivens 68de8521da
Dev Release 2.15.0 (#194)
* Added Markdown text support #184
* Added support for line breaks in plain text messages #186
* Fixed web links not rendering correctly in plain text messages #185
* Added Results List performance improvements
* Updated the supported sarif schema version to '2.1.0-rtm.4'
* Security fix for lodash dependency
* Reduced the overall size of the vsix (7.6Mb -> 3Mb) and installed size(26.8Mb -> 6.9Mb)
2019-08-02 01:51:02 -07:00
Rusty Scrivens b4073469df
Dev Release 2.6 (#106)
* Added the Results List to the Sarif Explorer (#28)
* Fixed bug with results not showing if the file has a uriBaseId not embedded in the file key (#102)
* Fixed Sarif Explorer not updating the result that's displayed after a remapping (#96)
2018-11-08 12:34:31 -08:00
rscrivens 64ef4e8b24
Changes for update 2.2.0 (#65)
* Adds rootpath setting, and reworks the UX for choosing the file mapping using the file input for a better experience and details on what needs to be remapped, also allows for file remapping or adding a directory to add to the rootpath setting (#57)
* Convert explorer to web view (#63)
* Update to the latest engine for webview support
* Created a Resources folder for assets that don't compile(icons, css files, etc.)
* Converted Sarif Explorer from previewHTML to webview
* Updated the version, readme, and changelogs (#64)
* Fixed minor bugs while end to end testing for release.
2018-07-10 14:49:36 -07:00
rscrivens eb5a3e6111
Dev Release 2.1.0 (#49)
* Adds selection highlight to region of Embedded links after clicking
* Adds codelens inline messages for the active result's codeflow steps
* Adds error, warning and info icons to the gutter at the results location
* Adds Call/CallReturn icons
* Adds logic for code flows where the first step is nested
* Adds logic to determine if a Call step has a return, or return step has a call
* Adds Keybindings for next and previous CodeFlow locations
* Updates the sarif interfaces to the latest from sarif sdk v2 schema

Fixes for bugs:
handle undefined step property,
handle undefined nestedlevel on call return
selection highlight was showing on next line if region went to eol
added selection highlight to when a result is clicked
plus other various fixes
2018-06-13 19:04:44 -07:00
rscrivens 55fbbe089e
Dev release 1.0.0 (#17)
Changes for 1.0.0 release
* Adds support for sarif results that don't have a resultsFile location (#2)
* Adds support for when Results file is not present in the locations
* refactored the remapping of SVDiagnostics in the DiagnosticsCollection
* Switched from string creation to document construction of the Sarif Explorer(#4)
* moved  the viewer up a folder to the root extension folder (#5)
* Use RuleKey as the primary key and RuleId is the backup key
* Fix the displayed source file name in Viewer when result is not mapped
* Changed notMapped to mapped for better readability
* Rename ResultLocation's location to range to better describe the field
* Some tweaks and fixes to the Sarif Interfaces.
* Updating Readme and contributing docs
* changed language contribute so sarif files now get json schema support (#7)
* Added Version Check to show user  if version is not currently supported (#8)
* Publish prep - updated the readme, changelog and contribution
* Added a Sarif Icon and marketplace settings
2018-04-25 10:56:54 -07:00