Feat/exclude tests by default #9
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
CodeQL found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.
- Test files are now excluded from scans by default - Add --include-tests flag to opt-in to scanning test files - Deprecate --skip-tests (tests excluded by default now) - Unify test patterns: security command now uses same 70+ patterns as scan - Patterns cover: JS/TS, Python, Go, Rust, Java, Kotlin test conventions BREAKING CHANGE: Tests are now excluded by default. Use --include-tests to scan them. Co-Authored-By: Claude Opus 4.5 <[email protected]>
## Enhanced Interactive TUI (`rma scan --interactive`) - Call Graph Statistics Panel with real-time overview - Security Classification Badges for sources, sinks, sanitizers - Source→Sink Flow Highlighting with ⚠ icon - Source→Sink Filter (press x) to show dangerous edges only - Edge Detail Panel (Enter) with security warnings and remediation - Enhanced Finding Detail View with full metadata ## Analysis Caching - Incremental scan cache with content-hash based caching - --no-cache flag to force fresh analysis - Cache stored in .rma/cache/analysis/ ## Test Exclusion - Tests excluded by default across all languages - --include-tests to opt-in to scanning test files - 70+ test patterns for JS/TS, Python, Go, Rust, Java, Kotlin - Call graph edges now exclude test files by default ## Flows Command - rma flows --interactive for TUI data flow browsing - Test file filtering in cross-file flows ## Fixes - Updated yanked zip crate dependency (2.6 → 2.4) - Fixed Clippy warnings for trait object syntax - Fixed missing SystemTime import in OSV provider
- Add rma-rules to publish workflow (was missing, blocks rma-analyzer) - Add rma-lsp to publish workflow (was completely missing) - Fix dependency order for proper layered publishing - Add repository URL and include directive to rma-rules - Add proper metadata (repository, keywords, categories) to rma-lsp - Fix wrong repository URLs in rma-cli (was pointing to anthropics/rma) Crates now publish in correct order: 1. rma-common 2. rma-parser, rma-rules, rma-ai, rma-plugins 3. rma-analyzer 4. rma-indexer, rma-lsp 5. rma-daemon 6. rma-cli Co-Authored-By: Claude Opus 4.5 <[email protected]>
Documents full version history from v0.1.0 to v0.16.0 and future plans: - Phase-by-phase evolution of RMA - Current stats (647+ rules, 6 languages, 10 crates) - Short-term roadmap (v0.17.0 - v0.19.0) - Long-term vision (Cloud SaaS, advanced analysis) - Completed milestones checklist Co-Authored-By: Claude Opus 4.5 <[email protected]>
bumahkib7
force-pushed
the
feat/exclude-tests-by-default
branch
from
806a4dd to
3f8d855
Compare
bumahkib7
added a commit
that referenced
this pull request
Feb 8, 2026
* feat: exclude test files by default across all languages - Test files are now excluded from scans by default - Add --include-tests flag to opt-in to scanning test files - Deprecate --skip-tests (tests excluded by default now) - Unify test patterns: security command now uses same 70+ patterns as scan - Patterns cover: JS/TS, Python, Go, Rust, Java, Kotlin test conventions BREAKING CHANGE: Tests are now excluded by default. Use --include-tests to scan them. * chore: release v0.16.0 ## Enhanced Interactive TUI (`rma scan --interactive`) - Call Graph Statistics Panel with real-time overview - Security Classification Badges for sources, sinks, sanitizers - Source→Sink Flow Highlighting with ⚠ icon - Source→Sink Filter (press x) to show dangerous edges only - Edge Detail Panel (Enter) with security warnings and remediation - Enhanced Finding Detail View with full metadata ## Analysis Caching - Incremental scan cache with content-hash based caching - --no-cache flag to force fresh analysis - Cache stored in .rma/cache/analysis/ ## Test Exclusion - Tests excluded by default across all languages - --include-tests to opt-in to scanning test files - 70+ test patterns for JS/TS, Python, Go, Rust, Java, Kotlin - Call graph edges now exclude test files by default ## Flows Command - rma flows --interactive for TUI data flow browsing - Test file filtering in cross-file flows ## Fixes - Updated yanked zip crate dependency (2.6 → 2.4) - Fixed Clippy warnings for trait object syntax - Fixed missing SystemTime import in OSV provider * fix: publish all 10 crates to crates.io - Add rma-rules to publish workflow (was missing, blocks rma-analyzer) - Add rma-lsp to publish workflow (was completely missing) - Fix dependency order for proper layered publishing - Add repository URL and include directive to rma-rules - Add proper metadata (repository, keywords, categories) to rma-lsp - Fix wrong repository URLs in rma-cli (was pointing to anthropics/rma) Crates now publish in correct order: 1. rma-common 2. rma-parser, rma-rules, rma-ai, rma-plugins 3. rma-analyzer 4. rma-indexer, rma-lsp 5. rma-daemon 6. rma-cli ---------
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Type of Change
Related Issues
Changes Made
Testing
cargo run -p rma-cli -- scan .Checklist
cargo fmt)cargo clippycargo test --workspace)Screenshots/Output
Additional Notes