feat: v2.3-v3.0 roadmap — SBOM, signing, badges, MCP server, monorepo#2
Merged
feat: v2.3-v3.0 roadmap — SBOM, signing, badges, MCP server, monorepo#2
Conversation
…ffline/redact modes Monorepo support (2.2.5): - Recursive CI config discovery up to configurable depth - Package name inference from package.json/Cargo.toml - Per-package analysis aggregation Signed reports & SBOM (2.3.6): - Ed25519 keypair generation, report signing, and verification - CycloneDX 1.5 SBOM generation from CI pipeline components - Extracts actions, Docker images, and runner info Offline mode & redacted reports (2.3.7): - --offline flag for air-gapped environments - --redact flag strips secrets, internal URLs, and sensitive values - --sign flag for JSON output signing Pipeline health badge (3.0.3): - Score 0-100 with A+ through F grading - shields.io badge URL generation - Markdown output for READMEs MCP server (3.0.8): - JSON-RPC stdio transport for Claude Code/Cursor integration - 5 tools: analyze, optimize, lint, security, cost - MCP protocol v2024-11-05 compliant New CLI commands: monorepo, sbom, badge, keys generate, verify, mcp-server New deps: ed25519-dalek, rand, hex, tempfile 153 tests passing (121 unit + 32 integration), clippy clean. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
--offlinefor air-gapped envs,--redactfor safe external sharingNew CLI Commands
pipelinex monorepo [path]— Discover and analyze all CI configspipelinex sbom [path]— Generate CycloneDX SBOMpipelinex badge <file>— Generate shields.io health badgepipelinex keys generate— Ed25519 keypair for signingpipelinex verify <report> --key <key>— Verify signed reportpipelinex mcp-server— Start MCP server for AI tool integrationpipelinex analyze --offline --redact --sign <key>— New flagsTest plan
-D warningscargo fmt— no formatting issues🤖 Generated with Claude Code