Skip to content

ChangeGuard v0.1.2 — Experimental

Pre-release
Pre-release

Choose a tag to compare

View all tags
@efegokdemir efegokdemir released this 17 Sep 22:58
· 63 commits to main since this release
v0.1.2
fd9b267
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ChangeGuard v0.1.2 — Experimental preview

This experimental update expands Shopify app configuration review,
improves redaction and clarifies GitHub Actions review outcomes.

Changes since v0.1.1

  • Added semantic detection of client ID additions, removals and changes
    without including client ID values in findings.
  • Expanded CLI regression coverage for client ID redaction and malformed
    configuration handling.
  • Added regression tests for webhook delivery destinations, filters and
    related configuration changes.
  • Improved GitHub Actions job summaries with explicit review outcomes:
    no supported-field changes, manual review recommended and review incomplete.
  • Updated the external installation guide to the independently tested
    full Action commit SHA.

Validation

  • 70 automated tests passed locally.
  • GitHub CI and ChangeGuard PR Review passed for the documentation update.
  • An external private test repository successfully detected five synthetic
    configuration changes and displayed Manual review recommended.
  • A separate external test using malformed TOML failed with exit code 2
    and displayed Review incomplete with one unreviewable configuration.

Limitations

  • Findings are informational and do not block pull requests.
  • Added, deleted or unreviewable Shopify TOML configurations fail the check.
  • ChangeGuard is an unofficial, experimental, read-only reviewer.
  • It does not access Shopify, perform a security audit or approve deployment.
  • It is not affiliated with, endorsed by or certified by Shopify.
  • The package remains private. No npm package is being published.
Assets 2
Loading