Skip to content

v0.4.0 Phase 3 Connect (warnings)

Choose a tag to compare

View all tags
@chriswayneh chriswayneh released this 24 Sep 11:59
· 12 commits to main since this release
v0.4.0
2726206

Phase 3 Connect (partial) - v0.4.0

First Phase 3 piece: warn when the after sample is empty or clearly incomplete.

What shipped

  • Empty after NDJSON (0 events) produces a WARNING: an empty file is not the same as "nothing removed"
  • After schemas with under 20% of before fields (when before has 5+ fields) also warn as incomplete
  • Warnings appear in the human report, optional JSON warnings key, before_event_count / after_event_count, and stderr
  • 43 tests

Still to come in Phase 3

  • SARIF output for PR annotations
  • At least one simple importer (or documented stub)

Not in scope

  • Not a SIEM or matcher
  • Offline default
  • No auto-commit
Assets 2
Loading