smashimo/oh-my-pi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): stabilize imported finding identities

Browse Source
This commit is contained in:
Kyle McCleary
2026-07-29 18:47:51 -07:00
parent b708b39915
commit 80bdfdcbd4
10 changed files with 266 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/coding-agent/scripts/security-compare.ts
+9 -2
View File
@@ -1,10 +1,17 @@
#!/usr/bin/env bun
import * as path from "node:path";
import { compareSecurityProducers, parseSecurityScanBundle } from "../src/security";
import { isEnoent } from "@oh-my-pi/pi-utils";
import { compareSecurityProducers, importCodexSecurityBundle, parseSecurityScanBundle } from "../src/security";
async function readBundle(directory: string) {
const root = path.resolve(directory);
const scan = JSON.parse(await Bun.file(path.join(root, "scan.json")).text()) as unknown;
let scan: unknown;
try {
scan = JSON.parse(await Bun.file(path.join(root, "scan.json")).text()) as unknown;
} catch (error) {
if (!isEnoent(error)) throw error;
return importCodexSecurityBundle(root, { repositoryRoot: root });
}
const findings = JSON.parse(await Bun.file(path.join(root, "findings.json")).text()) as unknown;
const report = await Bun.file(path.join(root, "report.md"))
.text()