3 Commits

Author	SHA1	Message	Date
imfozilbek	0b1cc5a79a	feat: add secret detection with Secretlint (v0.8.0) ... Add critical security feature to detect 350+ types of hardcoded secrets using industry-standard Secretlint library. Features: - Detect AWS keys, GitHub tokens, NPM tokens, SSH keys, API keys, etc. - All secrets marked as CRITICAL severity - Context-aware remediation suggestions per secret type - New SecretDetector using @secretlint/node - New SecretViolation value object (100% test coverage) - CLI output with "🔐 Secrets" section - Async pipeline support for secret detection Tests: - Added 47 new tests (566 total, 100% pass rate) - Coverage: 93.3% statements, 83.74% branches - SecretViolation: 23 tests, 100% coverage - SecretDetector: 24 tests Dependencies: - @secretlint/node: 11.2.5 - @secretlint/core: 11.2.5 - @secretlint/types: 11.2.5 - @secretlint/secretlint-rule-preset-recommend: 11.2.5	2025-11-25 18:27:27 +05:00
imfozilbek	7b4cb60f13	feat: reduce false positives in hardcode detector by 35% ... Add TypeScript-aware filtering to HardcodeDetector to ignore legitimate language constructs that are not actually hardcoded values. Changes: - Add detection and filtering of TypeScript type contexts: * Union types (type Status = 'active' | 'inactive') * Interface property types (interface { mode: 'development' }) * Type assertions (as 'read' | 'write') * typeof checks (typeof x === 'string') - Add Symbol() call detection for DI container tokens - Add import() dynamic import detection - Extend constants file patterns to include tokens.ts/tokens.js - Add 13 new tests covering TypeScript type context filtering Impact: - Tested on real project (puaro/core): 985 → 633 issues (35.7% reduction) - All 345 tests pass - Zero new linting errors	2025-11-25 12:12:36 +05:00
imfozilbek	03705b5264	feat(guardian): add guardian package - code quality analyzer ... Add @puaros/guardian package v0.1.0 - code quality guardian for vibe coders and enterprise teams. Features: - Hardcode detection (magic numbers, magic strings) - Circular dependency detection - Naming convention enforcement (Clean Architecture) - Architecture violation detection - CLI tool with comprehensive reporting - 159 tests with 80%+ coverage - Smart suggestions for fixes - Built for AI-assisted development Built with Clean Architecture and DDD principles. Works with Claude, GPT, Copilot, Cursor, and any AI coding assistant.	2025-11-24 02:54:39 +05:00