Skip to content

Commit 78e579b

Browse files
committed
feat: add security scanning tools to dev prerequisites
Add pre-commit, detect-secrets, and osv-scanner to the prerequisite checks. These tools were added in PR #145 but the prerequisite check wasn't updated, so developers aren't warned when they're missing. All three are marked as optional (required: false) since they're only needed for security scanning workflows, not core development.
1 parent ed5b3c1 commit 78e579b

2 files changed

Lines changed: 42 additions & 0 deletions

File tree

core/dev-requirements.json

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,27 @@
6868
"versionArgs": ["--version"],
6969
"required": false,
7070
"description": "GitHub CLI"
71+
},
72+
{
73+
"name": "pre-commit",
74+
"command": "pre-commit",
75+
"versionArgs": ["--version"],
76+
"required": false,
77+
"description": "Git hooks framework for code quality checks"
78+
},
79+
{
80+
"name": "detect-secrets",
81+
"command": "detect-secrets",
82+
"versionArgs": ["--version"],
83+
"required": false,
84+
"description": "Secrets detection tool for baseline management"
85+
},
86+
{
87+
"name": "osv-scanner",
88+
"command": "osv-scanner",
89+
"versionArgs": ["--version"],
90+
"required": false,
91+
"description": "Vulnerability scanner for dependencies"
7192
}
7293
],
7394
"network": {

packages/smartem-workspace/smartem_workspace/config/dev-requirements.json

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,27 @@
6868
"versionArgs": ["--version"],
6969
"required": false,
7070
"description": "GitHub CLI"
71+
},
72+
{
73+
"name": "pre-commit",
74+
"command": "pre-commit",
75+
"versionArgs": ["--version"],
76+
"required": false,
77+
"description": "Git hooks framework for code quality checks"
78+
},
79+
{
80+
"name": "detect-secrets",
81+
"command": "detect-secrets",
82+
"versionArgs": ["--version"],
83+
"required": false,
84+
"description": "Secrets detection tool for baseline management"
85+
},
86+
{
87+
"name": "osv-scanner",
88+
"command": "osv-scanner",
89+
"versionArgs": ["--version"],
90+
"required": false,
91+
"description": "Vulnerability scanner for dependencies"
7192
}
7293
],
7394
"network": {

0 commit comments

Comments
 (0)