fix(clawsec-scanner): release 0.0.2 with real OpenClaw DAST harness#128
Merged
fix(clawsec-scanner): release 0.0.2 with real OpenClaw DAST harness#128
Conversation
![baz-reviewer[bot]](https://avatars.githubusercontent.com/in/933528?s=60&v=4){kind=small}
Comment on lines
+70
to
+76
| async function fileExists(filePath) { | ||
| try { | ||
| await fs.access(filePath); | ||
| return true; | ||
| } catch { | ||
| return false; | ||
| } |
Contributor
There was a problem hiding this comment.
Defines a fileExists helper that is already duplicated in scripts/dast_runner.mjs (and the other CLI scripts); each fix for path checking or error handling will need to be copied everywhere, so can we reuse a shared helper (e.g. move to lib/utils.mjs or re‑export the runner helper) instead of re‑defining this identical logic?
Finding type: Code Dedup and Conventions | Severity: 🟢 Low
Want Baz to fix this for you? Activate Fixer
Heads up!
Your free trial ends in 2 days.
To keep getting your PRs reviewed by Baz, update your team's subscription
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
User description
Summary
This PR ships
clawsec-scannerversion0.0.2with a real OpenClaw-focused DAST harness and updates the wiki to document the scanner module.What Changed
skills/clawsec-scanner/scripts/dast_runner.mjs.skills/clawsec-scanner/scripts/dast_hook_executor.mjsfor per-hook runtime execution..tshooks) are emitted asinfocoverage findings.CLAWSEC_DAST_HARNESS/dastMode) to prevent self-trigger loops.skills/clawsec-scanner/test/dast_harness.test.mjs.0.0.2:skills/clawsec-scanner/skill.jsonskills/clawsec-scanner/SKILL.mdskills/clawsec-scanner/CHANGELOG.mdskills/clawsec-scanner/hooks/clawsec-scanner-hook/HOOK.mdwiki/modules/clawsec-scanner.mdwiki/INDEX.mdandwiki/GENERATION.mdValidation
Executed and passed:
node skills/clawsec-scanner/test/dast_harness.test.mjsnode skills/clawsec-scanner/test/reviewer_regressions.test.mjsnode skills/clawsec-scanner/test/dependency_scanner.test.mjsnode skills/clawsec-scanner/test/sast_engine.test.mjsnode skills/clawsec-scanner/test/cve_integration.test.mjsnpx eslint skills/clawsec-scanner/scripts/dast_runner.mjs skills/clawsec-scanner/scripts/dast_hook_executor.mjs skills/clawsec-scanner/test/dast_harness.test.mjs --max-warnings 0npx tsc --noEmitnpm run gen:wiki-llmsSecurity/Behavioral Notes
Generated description
Below is a concise technical summary of the changes proposed in this PR:
Enable the OpenClaw-focused DAST flow by having
dast_runner.mjsdiscover hooks, spawndast_hook_executor.mjsfor isolated handler invocations, guard the periodic scanner hook from recursive scans, and surface runtime behavior through the new harness tests and setup wiring. Describe the 0.0.2 release via metadata, release automation, and wiki updates so the new runtime-backed DAST behavior, installer guidance, and module documentation are discoverable..github/workflows/skill-release.yml, README, and skill metadata, and by expanding wiki/skill docs (skill.json,SKILL.md, module page, index, generation) so the operator-facing story about the runtime-backed DAST harness and catalog installs is complete.Modified files (7)
Latest Contributors(2)
Modified files (1)
Latest Contributors(1)
dast_runner.mjsinto a hook-discovery/orchestration engine, addingdast_hook_executor.mjsfor isolated handler execution (including TypeScript support), guarding the scanner hook against recursiveCLAWSEC_DAST_HARNESSinvocations, wiring the new executor into the setup script, and exercising runtime failure/coverage behavior throughdast_harness.test.mjswhile reporting the harness semantics in the changelog.Modified files (6)
Latest Contributors(1)