[go: up one dir, main page]

Skip to content

Static reachability - Support Javascript/Typescript

Background:

The Static Reachability feature currently supports Python dependencies. However, JavaScript is a common language among our customers, and supporting JavaScript dependencies is essential to meet their needs. Adding this support will allow customers to assess reachability across a broader range of dependencies, enhancing the feature’s relevance and value.

Implementation Plan

  • Investigate if we need metadata for JS/TS
  • Create rules and tests for JS/TS
  • Update the DS analyzer to support JS/TS.
    • Refactor code to support multiple language support
    • Add JS enricher
    • Add E2E tests
    • TODO item
  • Update public docs
  • Create security test repos
    • Ideally create 2 test repos
    • Verify expectation files
    • Document the testing repos in the DS analyzer reachability readme file
  • Investigate semgrep-core failure
Edited by Yasha Rise