Skip to content

SIGSHIP 0.2.0

Choose a tag to compare

@beyondtheworld beyondtheworld released this 06 Nov 20:41
· 57 commits to main since this release

Added

  • Licence key support with SIGSHIP_KEY, which adds the Pro pack of extra checks. Without a key, SIGSHIP still makes no network calls.
  • --report, which writes sigship-report.html, a self-contained report to send to a client. Needs a licence key.
  • --markdown, for pull request comments.
  • npx sigship init --pro, which adds a pull request check that comments its result and a nightly check with an optional Slack alert.
  • The MCP server loads the Pro pack when a key is set.
  • The scanner now reads Firebase .rules and Terraform .tf files.

Changed

  • The Pro pack is data only: patterns and messages. SIGSHIP never runs code from it and rejects a pack it can't validate.
  • A network problem never fails a scan: SIGSHIP falls back to its cached Pro pack, then to the free checks.

Run it: npx sigship@0.2.0