Skip to content

v3.11.0

Choose a tag to compare

@github-actions github-actions released this 16 May 13:32
· 4 commits to main since this release
feat: implement Software Composition Analysis (SCA) and policy checks

- Added functionality to analyze lockfiles for dependencies in `Cargo.lock`, `package-lock.json`, and `requirements.txt`.
- Introduced a new `--sca` option to trigger SCA analysis during execution.
- Implemented policy checks based on user-defined rules in a `.codestate.yml` file, including maximum lines per file, complexity, TODO counts, and secret detection.
- Enhanced the analyzer to extract Rust functions using the `tree-sitter` parser for improved accuracy.
- Updated the visualizer to include new metrics such as complexity and TODO counts in summary tables and dashboards.
- Added interactive TUI mode for real-time analysis display and navigation.