Static reachability - Support Javascript/Typescript
Background:
The Static Reachability feature currently supports Python dependencies. However, JavaScript is a common language among our customers, and supporting JavaScript dependencies is essential to meet their needs. Adding this support will allow customers to assess reachability across a broader range of dependencies, enhancing the feature’s relevance and value.
Implementation Plan
-
Investigate if we need metadata for JS/TS -
Create rules and tests for JS/TS -
Update the DS analyzer to support JS/TS. -
Refactor code to support multiple language support -
Add JS enricher -
Add E2E tests -
TODO item
-
-
Update public docs -
Create security test repos -
Ideally create 2 test repos -
Verify expectation files -
Document the testing repos in the DS analyzer reachability readme file
-
-
Investigate semgrep-core failure
Edited by Yasha Rise