Skip to content

Improve detector progress and debug logging - #58

Merged
bomly-guy merged 1 commit into
mainfrom
feat/scan-progress-logging
May 13, 2026
Merged

bomly-guy merged 1 commit into
mainfrom
feat/scan-progress-logging

Conversation

@bomly-guy

Copy link
Copy Markdown
Collaborator

Summary

  • Add optional detail progress updates without changing the coarse progress contract
  • Show current subproject/detector hints during dependency detection
  • Add structured debug logs for evidence patterns, install-first support, fallback decisions, and graph stats
  • Add focused tests for detail progress and detector reporting

Tests

  • go test ./internal/progress ./internal/engine
  • make test

@bomly-guy
bomly-guy merged commit d84f580 into main May 13, 2026
1 check passed
@bomly-guy
bomly-guy deleted the feat/scan-progress-logging branch May 13, 2026 15:41
bomly-guy added a commit that referenced this pull request May 14, 2026
Brings in PRs #56 (PackageLocation.Position), #57 (component docs),
#58 (detector progress logging), #59 (interactive scan UI), and #60
(SARIF physicalLocation.region) so the final feat/reachability ->
main PR is conflict-free.

Resolutions:
- sdk/package.go: kept main's doc comment for PackageLocation.Position
  (clearer wording, same field shape).
- sdk/vulnerability.go vs sdk/package.go: deduplicated SourcePosition;
  feat/reachability and main both added it. Kept the richer
  documented version in vulnerability.go and removed the duplicate
  in package.go.
- internal/output/sarif.go: combined main's sarifLocationsForFinding
  helper (per-PackageLocation SARIF location emission) with
  feat/reachability's Reachability properties + codeFlows. Both
  improvements coexist cleanly.

Co-Authored-By: Claude Opus 4.7 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant