Pipeline for Nix - #2209

Open

chinyeungli wants to merge 96 commits into

mainfrom

1938_pipeline_for_nix

Commits on Mar 13, 2026

Created "Scan Rust Package" pipeline #1767
chinyeungli
committed
1edc44d
Add step to compare the license declared in Cargo.toml with the licenses detected in the codebase #1767
chinyeungli
committed
d6f63d0

Commits on May 15, 2026

Implemented the "evaluate_license_mismatch" function #1767
chinyeungli
committed
9ca39ea

Commits on Jul 30, 2026

feat!: replace plain-text DRF token with PBKDF2-hashed API token (#2087)

tdruez
authored and
chinyeungli
committed
cb9a90c
chore: set explicit workflow permissions and pin down actions (#2090)

tdruez
authored and
chinyeungli
committed
a092939
chore: bump version to v37.0.0 for release (#2091)

tdruez
authored and
chinyeungli
committed
731599b
fix: add the checkout step to pypi release workflow

tdruez
authored and
chinyeungli
committed
a5911c7
Reorder the command #1767
chinyeungli
committed
1574a50
Set a default User-Agent #1767
chinyeungli
committed
d7c58e7
Evolve Rust pipeline (#1767)
chinyeungli
committed
ba9326f

Commits on Aug 5, 2026

Implement the rust pipeline #1767
chinyeungli
committed
e10bd2a
chore: set explicit workflow permissions and pin down actions (#2090)

tdruez
authored and
chinyeungli
committed
0d6780f
fix: add the checkout step to pypi release workflow

tdruez
authored and
chinyeungli
committed
21ab23d
chore: refine gh workflows for security and consistency

tdruez
authored and
chinyeungli
committed
a70388e
feat: display scio and toolkit versions in place of django version (#2101)

tdruez
authored and
chinyeungli
committed
4f2e785
fix missing space in scan_max_file_size help text (#2097)

rishabh23rohil
authored and
chinyeungli
committed
15e399c
feat: add tests for chunked and get_purls utilities (#2100)

rishabh23rohil
authored and
chinyeungli
committed
2535102
feat: display layers information (created_by, comment) in tree view (#2102)

tdruez
authored and
chinyeungli
committed
239df34
feat: enhance the global HTML structure (#2103)

tdruez
authored and
chinyeungli
committed
0e1b8b8
feat: remove the need for context processor and improve base template (#2106)

tdruez
authored and
chinyeungli
committed
b99006d
chore: remove the PR quality workflow

tdruez
authored and
chinyeungli
committed
511d21e
chore: upgrade the scancode-action to latest version (pinned deps) (#2124)

tdruez
authored and
chinyeungli
committed
b33efc1
fix: XSS and duplicate file detection in file upload UI (#2129)

tdruez
authored and
chinyeungli
committed
e7820d6
fix: incomplete URL sanitization for Slack webhook detection (#2130)

tdruez
authored and
chinyeungli
committed
19c6638
chore: correct typo in `pipes/clamav` (#2121)

OmAnand857
authored and
chinyeungli
committed
1388966
feat: is_safe_url to mitigate SSRF in URL requests (#2131)

tdruez
authored and
chinyeungli
committed
703ce14
feat: add search to resource tree (#2114)

aayushkdev
authored and
chinyeungli
committed
9bc2de6
feat: enhance tree search rendering and implementation (#2133)

tdruez
authored and
chinyeungli
committed
893380f
feat: use uv and uv.lock for reproducible builds in Docker image (#2134)

tdruez
authored and
chinyeungli
committed
8850f9e
fix: add support for sqlite in the apitoken data migration (#2138)

tdruez
authored and
chinyeungli
committed
a50d1bb
feat!: convert Dockerfile to multi-stage build (#2139)

tdruez
authored and
chinyeungli
committed
182a056
chore: bump version to v37.1.0 for release (#2140)

tdruez
authored and
chinyeungli
committed
bc92bce
chore: upgrade scancode-action to docker base v0.1 release (#2141)

tdruez
authored and
chinyeungli
committed
a6750df
feat: add "base" Docker build stage (#2142)

tdruez
authored and
chinyeungli
committed
804b29f
fix: fallback to license_declared when loading SPDX SBOM (#2144)

tdruez
authored and
chinyeungli
committed
1a31682
feat!: Switch development workflow from local venv to Docker Compose (#2145)

tdruez
authored and
chinyeungli
committed
a6de1f2
fix: relax validation for non-HTTP URLs (#2147)

tdruez
authored and
chinyeungli
committed
f62c408
fix: load the .env in the Docker dev compose (#2149)

tdruez
authored and
chinyeungli
committed
62ab095
chore: upgrade Django and cryptography to latest version (#2150)

tdruez
authored and
chinyeungli
committed
fd3f657
fix: replace the hardcoded /var/www/html by named volume (#2160)

tdruez
authored and
chinyeungli
committed
5be463c
chore: bump minecode-pipelines version to 1.0.0 (#2170)

JonoYang
authored and
chinyeungli
committed
df71e0b
chore: update minecode-pipelines version to 1.0.1 (#2171)

JonoYang
authored and
chinyeungli
committed
f37a7eb
Install Java and jadx in Dockerfile #1812 (#2174)

authored and
chinyeungli
committed
5ae5c71
chore: upgrade dependencies (#2173)

tdruez
authored and
chinyeungli
committed
12dc858
chore: bump version to v37.2.0 for release (#2175)

tdruez
authored and
chinyeungli
committed
da46584
fix: add setup-buildx step to enable GHA cache support (#2176)

tdruez
authored and
chinyeungli
committed
ad5a000
fix: add latest-full tag and OCI annotations to Docker publish workflow

tdruez
authored and
chinyeungli
committed
73a0e3b
Migrate VulnerableCode integration to API v3 (#2148)

tdruez
authored and
chinyeungli
committed
8b22624
feat: denormalize project counts to improve performances (#2178)

tdruez
authored and
chinyeungli
committed
b46fee0
chore: remove the db-check postgres migration service

tdruez
authored and
chinyeungli
committed
b370bf9
feat: UI refinements for project list and detail pages (#2180)

tdruez
authored and
chinyeungli
committed
0c61aa7
chore: upgrade service images to latest version (#2183)

tdruez
authored and
chinyeungli
committed
830c8fa
feat: auto-fill project PURL from single input URL (#2185)

tdruez
authored and
chinyeungli
committed
fc1c81d
chore: refine dev compose file

tdruez
authored and
chinyeungli
committed
358ba5b
feat: render the compliance alert value as a colored label (#2186)

tdruez
authored and
chinyeungli
committed
55ed020
feat: add pipeline availability check with disabled state in UI (#2188)

tdruez
authored and
chinyeungli
committed
c03bcfb
feat: replace django-taggit with a plain Project.labels JSONField (#2189)

tdruez
authored and
chinyeungli
committed
fe8d54d
feat: move scanpipe settings to local settings.py with lazy resolution (#2187)

tdruez
authored and
chinyeungli
committed
98ea188
fix: ClamAV scan crash on codebase root directory (#2190)

tdruez
authored and
chinyeungli
committed
6f37958
chore: upgrade vulnerable dependencies (#2191)

tdruez
authored and
chinyeungli
committed
60ce19c
fix: harden SSRF mitigation against redirect and URL-parser bypasses (#2192)

tdruez
authored and
chinyeungli
committed
bf4106b
Fix spelling typos in docs, models, and pipes (#2046)

mr-raj12
authored and
chinyeungli
committed
a7d294e
Fix get_data_from_manifests returning wrong type on early exit (#2182)

prajakta128
authored and
chinyeungli
committed
3ecf5d9
docs: update Errors section to Messages in Web UI tutorial (#2066)

dikshaa2909
authored and
chinyeungli
committed
86a4690
Fix flag_and_ignore_files_over_max_size inconsistent return value and docstring (#2184)

prajakta128
authored and
chinyeungli
committed
24da439
fix: silent overwrite when two input sources share the same filename (#2193)

tdruez
authored and
chinyeungli
committed
58986ff
fix: xlsx_errors column overwriting last data field in XLSX export (#2194)

tdruez
authored and
chinyeungli
committed
4463f57
chore: bump version to v38.0.0 for release (#2195)

tdruez
authored and
chinyeungli
committed
db8bd37
chore: upgrade dependencies (#2198)

tdruez
authored and
chinyeungli
committed
46ea1b8
feat: add pipeline specialized in Maven package scan (#1953)
chinyeungli
committed
dc52963

Commits on Aug 12, 2026

Implement Nix Pipeline #1938
chinyeungli
committed
3f9e57a

Commits on Aug 18, 2026

Commits on Sep 2, 2026

Commits on Sep 3, 2026

Add back the missing f prefix #1938
chinyeungli
committed
bd3e5d3
Refactor pipeline to use native scan_for_files instead of `run_scan` #1938
chinyeungli
committed
c5f0850
chore: upgrade dependencies

tdruez
authored and
chinyeungli
committed
4069e08
chore: upgrade Docker images and dependencies to latest version (#2221)

tdruez
authored and
chinyeungli
committed
cb07ae8
Create pipeline for symbol reachability (#2151)

ziadhany
authored and
chinyeungli
committed
768fce0
feat: enhance d2d pipeline to identify generated code #1900

chinyeungli
and
ziadhany
committed
7383622
cravex2-reachability: Expose reachability in REST API (#2213)

ziadhany
authored and
chinyeungli
committed
473a1c2
docs: add documentation for reachability analysis (#2211)

ziadhany
authored and
chinyeungli
committed
0191627
feat: add ability to configure content of the JSON output (#2222)

tdruez
authored and
chinyeungli
committed
3d2f059
fix: serve files as_attachment only when too large (#2223)

tdruez
authored and
chinyeungli
committed
716506c

Commits on Sep 4, 2026

Merge branch 'main' into 1938_pipeline_for_nix
chinyeungli
authored
1e68a53
Fix code formatting #1938
chinyeungli
committed
d3ea0f7

Commits on Sep 7, 2026

Add the Docker-in-Docker daemon #1938
chinyeungli
committed
ee797a7

Commits on Sep 8, 2026

Commits on Sep 9, 2026

Expose the `recurse` parameter in `extract_archives`
chinyeungli
committed
9d5f887

Commits on Sep 10, 2026

Improve D2D process #1938
chinyeungli
committed
276b1ae

Commits on Sep 11, 2026

Enhance error handling and logging #1938
chinyeungli
committed
b7e9fb5
Skip ARCHIVE_PROCESSED flag for archives that were not extracted
chinyeungli
committed
292e28a