Skip to content

Commit 06c5fdc

Browse files
bmeckbmeck
committed
1.0.0
0 parents  commit 06c5fdc

File tree

2,972 files changed

+234732
-0
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

2,972 files changed

+234732
-0
lines changed

‎.github/workflows/publish.yml

+47
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
on:
2+
push:
3+
tags:
4+
- "release/[0-9]+.[0-9]+.[0-9]+"
5+
- "prerelease/[0-9]+.[0-9]+.[0-9]+"
6+
7+
name: Deploy Extension
8+
jobs:
9+
deploy:
10+
runs-on: ubuntu-latest
11+
steps:
12+
- name: Check for DryRun and Prerelease
13+
id: releaseMode
14+
# perform secret check & put boolean result as an output
15+
shell: bash
16+
run: |
17+
if [[ "${{ github.ref }}" = "refs/tags/prerelease"* ]]; then
18+
echo "preRelease=true" >> $GITHUB_OUTPUT;
19+
else
20+
echo "preRelease=false" >> $GITHUB_OUTPUT;
21+
fi
22+
- uses: actions/checkout@v3
23+
- uses: actions/setup-node@v3
24+
- run: npm ci
25+
- name: Publish to Open VSX Registry
26+
uses: HaaLeo/publish-vscode-extension@v1
27+
id: publishToOpenVSX
28+
with:
29+
dryRun: ${{ steps.releaseMode.outputs.dryRun }}
30+
pat: ${{ secrets.OPEN_VSX_TOKEN }}
31+
preRelease: ${{ steps.releaseMode.outputs.preRelease }}
32+
- name: Publish to Visual Studio Marketplace
33+
uses: HaaLeo/publish-vscode-extension@v1
34+
with:
35+
dryRun: ${{ steps.releaseMode.outputs.dryRun }}
36+
extensionFile: ${{ steps.publishToOpenVSX.outputs.vsixPath }}
37+
pat: ${{ secrets.VS_MARKETPLACE_TOKEN }}
38+
preRelease: ${{ steps.releaseMode.outputs.preRelease }}
39+
registryUrl: https://marketplace.visualstudio.com
40+
- name: Github Release
41+
uses: softprops/action-gh-release@v1
42+
# if: ${{ ! steps.releaseMode.outputs.dryRun }}
43+
with:
44+
body: |
45+
This release is also available on the [VSCode Marketplace](https://marketplace.visualstudio.com/items?itemName=SocketSecurity.vscode-socket-security) and [OpenVSX Registry](https://open-vsx.org/extension/SocketSecurity/vscode-socket-security).
46+
files: ${{ steps.publishToOpenVSX.outputs.vsixPath }}
47+
prerelease: ${{ steps.releaseMode.outputs.preRelease }}

‎.gitignore

+5
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
out/
2+
.DS_Store
3+
*.log
4+
node_modules/
5+
*.vsix

‎.vscode/launch.json

+37
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
// A launch configuration that compiles the extension and then opens it inside a new window
2+
// Use IntelliSense to learn about possible attributes.
3+
// Hover to view descriptions of existing attributes.
4+
// For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
5+
{
6+
"version": "0.2.0",
7+
"configurations": [{
8+
"name": "Run Extension",
9+
"type": "extensionHost",
10+
"request": "launch",
11+
"runtimeExecutable": "${execPath}",
12+
"args": [
13+
"--disable-extensions",
14+
"--extensionDevelopmentPath=${workspaceFolder}"
15+
],
16+
"outFiles": [
17+
"${workspaceFolder}/out/**/*.js"
18+
],
19+
"preLaunchTask": "npm: esbuild"
20+
},
21+
{
22+
"name": "Run Extension Tests",
23+
"type": "extensionHost",
24+
"request": "launch",
25+
"runtimeExecutable": "${execPath}",
26+
"args": [
27+
"--disable-extensions",
28+
"--extensionDevelopmentPath=${workspaceFolder}",
29+
"--extensionTestsPath=${workspaceFolder}/out/test"
30+
],
31+
"outFiles": [
32+
"${workspaceFolder}/out/test/**/*.js"
33+
],
34+
"preLaunchTask": "npm: esbuild"
35+
}
36+
]
37+
}

‎.vscode/settings.json

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
{
2+
"todo-tree.tree.showBadges": true,
3+
"todo-tree.tree.disableCompactFolders": true,
4+
"cSpell.words": [
5+
"esbuild",
6+
"socketsecurity"
7+
]
8+
}

‎.vscode/tasks.json

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
// See https://go.microsoft.com/fwlink/?LinkId=733558
2+
// for the documentation about the tasks.json format
3+
{
4+
"version": "2.0.0",
5+
"tasks": [
6+
{
7+
"type": "npm",
8+
"script": "watch",
9+
"problemMatcher": "$tsc-watch",
10+
"isBackground": true,
11+
"presentation": {
12+
"reveal": "never"
13+
},
14+
"group": {
15+
"kind": "build",
16+
"isDefault": true
17+
}
18+
}
19+
]
20+
}

‎.vscodeignore

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
.vscode
2+
.DS_Store
3+
*.vsix
4+
node_modules
5+
*.js.map
6+
src/
7+
tsconfig.json

‎LICENSE

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
The MIT License (MIT)
2+
3+
Copyright (c) 2023 Socket Inc
4+
5+
Permission is hereby granted, free of charge, to any person obtaining a copy
6+
of this software and associated documentation files (the "Software"), to deal
7+
in the Software without restriction, including without limitation the rights
8+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9+
copies of the Software, and to permit persons to whom the Software is
10+
furnished to do so, subject to the following conditions:
11+
12+
The above copyright notice and this permission notice shall be included in all
13+
copies or substantial portions of the Software.
14+
15+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21+
SOFTWARE.

‎README.md

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# Socket Security Visual Studio Code Extension
2+
3+
This extension provides automatic reporting of security concerns from [Socket Security](https://socket.dev). The features of this extension aim to provide guidance through all stages of development.
4+
5+
## Ahead of Package Installation
6+
7+
* `import` and `require` in Javascript are detected and given summary scores to show concerns with configurable overlays. These overlays will persist even after package installation.
8+
9+
## After Package Installation
10+
11+
Workspaces are against Socket's reporting utilities upon detection of `package.json` files. Note these also run prior to actual installation as the presence in `package.json` is enough.
12+
13+
* `package.json` files and packages listed within are detected and run against more thorough issue reporting to see exact issues. These are listed in the "Problems" tab for easy access.
14+
15+
* `import` and `require` of packages with issues found in reporting are provided hovers which also summarize their issues.
16+
17+
## Pull Requests
18+
19+
* Simplified github application installation is provided as a code lense inside of `package.json` files by detecting the user/organization and setting up the installation workflow automatically with a simple click. These reports are more fully featured and include things such as transitive issue aggregation and diffing from one commit to another. If you want these features please install [the github app](https://github.com/marketplace/socket-security).
20+
21+
# Team Guide
22+
23+
If you are in charge of a team you may wish to setup this up as a recommended extension or other organization level settings. Please refer to our docs.

‎logo-red.svg

+14
Loading

‎logo-yellow.svg

+14
Loading

0 commit comments

Comments
 (0)