UNPKG

@eurekadevsecops/radar

Version:

Radar is an open-source orchestrator of security scanners.

www.eurekadevsecops.com/radar

EurekaDevSecOps/radarctl

188 lines (94 loc) • 12 kB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
# Changelog ## [2.4.1](https://github.com/EurekaDevSecOps/radarctl/compare/v2.4.0...v2.4.1) (2026-07-02) ### Documentation * Add list of all supported scanners ([#106](https://github.com/EurekaDevSecOps/radarctl/issues/106)) ([3162c33](https://github.com/EurekaDevSecOps/radarctl/commit/3162c334410b7cc7ec4dbdbbb1c08c418a162264)) ### Code Refactoring * **PE-1128:** Add support for gitlab self-managed repositories ([#104](https://github.com/EurekaDevSecOps/radarctl/issues/104)) ([7e99f68](https://github.com/EurekaDevSecOps/radarctl/commit/7e99f688cb24bd2b6887e24622675c68535ce25d)) ## [2.4.0](https://github.com/EurekaDevSecOps/radarctl/compare/v2.3.0...v2.4.0) (2026-06-10) ### Improvements * **PE-1085:** Add diff-aware scan filtering with --diff flag ([#97](https://github.com/EurekaDevSecOps/radarctl/issues/97)) ([d8c03c5](https://github.com/EurekaDevSecOps/radarctl/commit/d8c03c562c822aecb2a848cc2a7a444da78b3a24)) * **scanners:** Add support for semgrep ([#36](https://github.com/EurekaDevSecOps/radarctl/issues/36)) ([026ff61](https://github.com/EurekaDevSecOps/radarctl/commit/026ff612295afef26767633337641f32dfe6d6b0)) ### Fixes * **PE-1068:** Fix sbom generation permissions write errors in CI/CD ([#95](https://github.com/EurekaDevSecOps/radarctl/issues/95)) ([3356f09](https://github.com/EurekaDevSecOps/radarctl/commit/3356f097109bce1f7a81c16c4c23ffbee97f99f8)) ### Build System * Add .gitlab.yml ([#48](https://github.com/EurekaDevSecOps/radarctl/issues/48)) ([610806d](https://github.com/EurekaDevSecOps/radarctl/commit/610806d23b43d688549374e18bca2ad0962fe2ba)) * Add Jenkinsfile ([#49](https://github.com/EurekaDevSecOps/radarctl/issues/49)) ([fb83f58](https://github.com/EurekaDevSecOps/radarctl/commit/fb83f58ba3c26204c2f786de135b9e15eddbcf17)) ### CI/CD * **commitlint:** Apply commitlint only to latest commit ([#98](https://github.com/EurekaDevSecOps/radarctl/issues/98)) ([03ce8c6](https://github.com/EurekaDevSecOps/radarctl/commit/03ce8c6958b38732c9444d1131d023f9526156d1)) ### Miscellaneous Chores * **ci:** Update actions/checkout to v6 ([#103](https://github.com/EurekaDevSecOps/radarctl/issues/103)) ([7710830](https://github.com/EurekaDevSecOps/radarctl/commit/7710830ccbe4131cf66f9f02e67e0423ede06a6c)) * PE-937 - integrate posthog analytics ([#62](https://github.com/EurekaDevSecOps/radarctl/issues/62)) ([79c13f4](https://github.com/EurekaDevSecOps/radarctl/commit/79c13f446c856cbf882eca228cbcba6bdfb32745)) ## [2.3.0](https://github.com/EurekaDevSecOps/radarctl/compare/v2.2.0...v2.3.0) (2026-05-11) ### Improvements * **PE-16:** SBOM page and API ([#93](https://github.com/EurekaDevSecOps/radarctl/issues/93)) ([63194a6](https://github.com/EurekaDevSecOps/radarctl/commit/63194a6aed32fffd56588e39f41262791fdde2cc)) ### Miscellaneous Chores * Remove EUREKA_PROFILE usage ([#89](https://github.com/EurekaDevSecOps/radarctl/issues/89)) ([e504244](https://github.com/EurekaDevSecOps/radarctl/commit/e504244405d8867ffc50ca5d90bf26ee8e75677b)) ## [2.2.0](https://github.com/EurekaDevSecOps/radarctl/compare/v2.1.0...v2.2.0) (2026-04-24) ### Improvements * Add autopackager to veracode-sast ([#87](https://github.com/EurekaDevSecOps/radarctl/issues/87)) ([dec6fc3](https://github.com/EurekaDevSecOps/radarctl/commit/dec6fc3c7ff526748f686a7c77e64645f087b4de)) ### Fixes * Autopackager for Veracode SAST ([#90](https://github.com/EurekaDevSecOps/radarctl/issues/90)) ([5ed27fd](https://github.com/EurekaDevSecOps/radarctl/commit/5ed27fd09ab76ba46e00c67e96b43d8d59caa162)) ## [2.1.0](https://github.com/EurekaDevSecOps/radarctl/compare/v2.0.2...v2.1.0) (2026-04-20) ### Improvements * **PE-956:** Tag lines of code where a vulnerability should be ignored ([#77](https://github.com/EurekaDevSecOps/radarctl/issues/77)) ([a06bda1](https://github.com/EurekaDevSecOps/radarctl/commit/a06bda13441f9635bca0539b53fc198373c55aee)) ### Miscellaneous Chores * Echo scanner stdout log when debug flag is on ([#83](https://github.com/EurekaDevSecOps/radarctl/issues/83)) ([da9d014](https://github.com/EurekaDevSecOps/radarctl/commit/da9d0149bdff17fc47788800c73b03ef20345c47)) ## [2.0.2](https://github.com/EurekaDevSecOps/radarctl/compare/v2.0.1...v2.0.2) (2026-04-13) ### Fixes * (PE-786) - Ensure the Radar can run in a BitBucket CI/CD pipeline ([#73](https://github.com/EurekaDevSecOps/radarctl/issues/73)) ([be0ad7a](https://github.com/EurekaDevSecOps/radarctl/commit/be0ad7a42cc3aaa4a4f97cde0aaf6607b2d8a2fc)) ## [2.0.1](https://github.com/EurekaDevSecOps/radarctl/compare/v2.0.0...v2.0.1) (2026-04-07) ### Fixes * **PE-1003:** Add handling for git ssh azure domains ([#76](https://github.com/EurekaDevSecOps/radarctl/issues/76)) ([a990711](https://github.com/EurekaDevSecOps/radarctl/commit/a99071107c0f871f4c05e8f4d91c5a0fe4182f58)) ### Code Refactoring * **PE-977:** Ensure the Azure Devops url is decoded during parsing ([#71](https://github.com/EurekaDevSecOps/radarctl/issues/71)) ([a825ce0](https://github.com/EurekaDevSecOps/radarctl/commit/a825ce0710a51ec171555247d8d0315b2897a73b)) ## [2.0.0](https://github.com/EurekaDevSecOps/radarctl/compare/v1.11.0...v2.0.0) (2026-03-04) ### ⚠ BREAKING CHANGES * **scan:** Exit codes have changed. When vulnerabilities are found, instead of returning exit codes in the range 8-15, Radar CLI now only returns 8. ### Improvements * **scan:** Add THRESHOLD option ([#67](https://github.com/EurekaDevSecOps/radarctl/issues/67)) ([47a0b7b](https://github.com/EurekaDevSecOps/radarctl/commit/47a0b7bdc2b9f59d13cc6d35d6b1367b00b4ebc3)) * **scans:** Display link to scan in Eureka dashboard ([#68](https://github.com/EurekaDevSecOps/radarctl/issues/68)) ([0b33b79](https://github.com/EurekaDevSecOps/radarctl/commit/0b33b79420a6589b33b1dc4370e4733bf872eaae)) ## [1.11.0](https://github.com/EurekaDevSecOps/radarctl/compare/v1.10.0...v1.11.0) (2026-02-27) ### Improvements * Add support for Veracode Pipeline (SAST) scanner ([#2](https://github.com/EurekaDevSecOps/radarctl/issues/2)) ([bf7f04b](https://github.com/EurekaDevSecOps/radarctl/commit/bf7f04b4fd8bfc5fd3e13b25365809209db80cec)) ## [1.10.0](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.8...v1.10.0) (2026-02-25) ### Improvements * **PE-961:** Job path from Managed Scan runner being included in vulnerability results ([#63](https://github.com/EurekaDevSecOps/radarctl/issues/63)) ([f014598](https://github.com/EurekaDevSecOps/radarctl/commit/f0145985152b4d5cb5af7d10de7981777ce40ce4)) ## [1.9.8](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.7...v1.9.8) (2026-02-19) ### Fixes * **scans:** Add handling for ADO git URLs ([#61](https://github.com/EurekaDevSecOps/radarctl/issues/61)) ([cad3c13](https://github.com/EurekaDevSecOps/radarctl/commit/cad3c13ad90d2866b7ad019d145882e0955a8243)) * **scans:** Update scan command to accept optional scan ID from args ([#60](https://github.com/EurekaDevSecOps/radarctl/issues/60)) ([3f7b2f9](https://github.com/EurekaDevSecOps/radarctl/commit/3f7b2f9881a201116f54752ce27bd5e36d652f23)) ### Code Refactoring * **telemetry:** Add a reportScanFailure wrapper for telemetry send/receive ([#57](https://github.com/EurekaDevSecOps/radarctl/issues/57)) ([9b2b8aa](https://github.com/EurekaDevSecOps/radarctl/commit/9b2b8aad4a59e9312bb5713a4aaf5b154f6e390b)) ### CI/CD * **commitlint:** Fix commitlint GHA errors ([#58](https://github.com/EurekaDevSecOps/radarctl/issues/58)) ([b27d64e](https://github.com/EurekaDevSecOps/radarctl/commit/b27d64e5ddab6fad389aa1489173c3a992633ff6)) ## [1.9.7](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.6...v1.9.7) (2026-01-29) ### CI/CD * Upgrade to scan-action@v2 ([#55](https://github.com/EurekaDevSecOps/radarctl/issues/55)) ([48a26a3](https://github.com/EurekaDevSecOps/radarctl/commit/48a26a3f8a5874cb9d2ea976a695ee53a8eb5940)) ## [1.9.6](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.5...v1.9.6) (2026-01-23) ### Code Refactoring * Add changes to send repoFullName in ewa & vdbe api requests ([ebf9ad1](https://github.com/EurekaDevSecOps/radarctl/commit/ebf9ad135a130711fe2342cc98e8d92dd1e1eea8)) * Add profile id to support current agent tokens for backwards compatability ([50f4ef3](https://github.com/EurekaDevSecOps/radarctl/commit/50f4ef371db9bb73c500da8d53ea8333ddb916ec)) * Add profileId param to scan summary endpoint. ([84ec215](https://github.com/EurekaDevSecOps/radarctl/commit/84ec2153f418589644083127b4b201db8824a6d2)) * Add scanStartTimeStamp and pass as parameter to both scans/started endpoints to ensure timestamps are consistent between vdbe & ewa ([4762af1](https://github.com/EurekaDevSecOps/radarctl/commit/4762af1e32682fee6ef33fe2ae39566f79e3ac4c)) * Change vdbe metadata (stage 2) endpoint to scan started ([3409d78](https://github.com/EurekaDevSecOps/radarctl/commit/3409d783dd4577155db369e2c23312254a705c90)) * Remove EUREKA_PROFILE env var ([8239410](https://github.com/EurekaDevSecOps/radarctl/commit/8239410db8bf5dcbca5b71d25719f828f52e03f7)) * Remove repoFullName from metadata stage 2 (vdbe) ([7cba841](https://github.com/EurekaDevSecOps/radarctl/commit/7cba841990b9796d8eacb74b562dfb52366a6661)) * Remove repoFullName from scan started endpoint ([1bfe3fb](https://github.com/EurekaDevSecOps/radarctl/commit/1bfe3fb612be0f0ba4f4e9c82dbba56e254f7dc6)) * Remove repoFullName from summary & complete endpoint ([6fd01d4](https://github.com/EurekaDevSecOps/radarctl/commit/6fd01d4e98545833f6c4b6f5b41909db6d5d0a62)) * **scan:** Changes to support repository based permissions for scans ([c2f0d15](https://github.com/EurekaDevSecOps/radarctl/commit/c2f0d1515d8c7245948e3579d2500fd6ab8836ac)) * Update radar.yaml formatting ([#46](https://github.com/EurekaDevSecOps/radarctl/issues/46)) ([60456fe](https://github.com/EurekaDevSecOps/radarctl/commit/60456fe477adade3272e71e473e4298a196b457f)) * Use Radar CLI scan-action ([#45](https://github.com/EurekaDevSecOps/radarctl/issues/45)) ([f0e6c4c](https://github.com/EurekaDevSecOps/radarctl/commit/f0e6c4c25e8b2e47101b71faba3978cbac1b16d5)) * **vulns:** Remove profile ID from scans. ([869d7be](https://github.com/EurekaDevSecOps/radarctl/commit/869d7be9b08b0b6a01e73f7abb4ffcb4840365a7)) ### CI/CD * Add CHANGELOG.md automation ([#50](https://github.com/EurekaDevSecOps/radarctl/issues/50)) ([6e951c1](https://github.com/EurekaDevSecOps/radarctl/commit/6e951c1fe019db3ab21b0e20aa9658519e81ea2c)) * Use the v1 release of scan-action ([#47](https://github.com/EurekaDevSecOps/radarctl/issues/47)) ([3a9affd](https://github.com/EurekaDevSecOps/radarctl/commit/3a9affd6fe5b4103be4ad3bcb13bd49df7653867)) ### Miscellaneous Chores * Add missing DateTime import ([3fda08d](https://github.com/EurekaDevSecOps/radarctl/commit/3fda08d999986a24ec05bc2a6b574574927981ec)) * Clean up parameter format ([f8c03c6](https://github.com/EurekaDevSecOps/radarctl/commit/f8c03c65b062a5729e5f274393e4a51584ecd9f2)) * Fix profile param format ([10b75d9](https://github.com/EurekaDevSecOps/radarctl/commit/10b75d9a026e09a9eedf3681e5439442de3857df)) * Fix profile param name ([3d5eaf6](https://github.com/EurekaDevSecOps/radarctl/commit/3d5eaf691d672cefc65792963365ff2e87b0a2ce)) * Re-add profile param conditional as vdbe validation was failing due to non-uuid profile value ([e1c007e](https://github.com/EurekaDevSecOps/radarctl/commit/e1c007ef59c5ba2d3368fe162b47ff0cee03493b)) * Remove additional blank line ([940743d](https://github.com/EurekaDevSecOps/radarctl/commit/940743d7510af3ffcc905a29ca565a7d1c5414d1)) * Remove blank line ([c723e7a](https://github.com/EurekaDevSecOps/radarctl/commit/c723e7a20927a29adcf2946dde0cd0a6cdae9d33)) * Remove redundant metadata field and use spread operator for body as it already has the metadata field ([2ffa1f6](https://github.com/EurekaDevSecOps/radarctl/commit/2ffa1f6c6e79710aa97f7f8a192d995b40391dfc)) * Simplify timestamp ([7cab5eb](https://github.com/EurekaDevSecOps/radarctl/commit/7cab5eb47e923a070586d8d8e269bf44d5eaf7a5))