v1.6.1

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• b344466 fix(coverage): make the patch gate visible and correct under a --dir subdirectory (#24)

v1.6.0

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• ceaf6cc feat(coverage): add noise tolerance to the coverage gates (#23)

v1.5.4

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• dd9b18e fix(gitstate): PriorBaselines from a repo subdirectory (--dir source) (#22)

v1.5.3

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• c2e4999 fix(coverage): record a fully-carried baseline when a main run measures nothing (#21)

v1.5.2

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• c20b279 fix(coverage): never let a partial run shrink the baseline; report detected-but-unmeasured languages as UNMEASURED (#20)

v1.5.1

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• d773591 fix(gitstate): fetch fresh and retry so a rejected push can't silently lose a baseline (#19)

v1.5.0

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• d9e8db9 feat(coverage): record the baseline when running on main (#18)

v1.4.1

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• 4aff366 fix(coverage): never cache an empty baseline, and say what went unmeasured (#17)

v1.4.0

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• 965bd32 fix(coverage): don't count comment lines as uncovered patch lines (#16)
• f7392d0 fix(semgrep): scope the token-less fallback to the PR's diff (#15)

v1.3.1

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go —
one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• 15c250a fix(action): cap PR comment size; push full logs to a run artifact (#14)