Release v0.0.25

[shivasurya]

Code PathFinder 🥉 v0.0.25 (Quarter century 🏏 release)

This release has major improvements in cli capabilities, added extra core entities, able to execute queries as .cql file

1. Introduced BinaryExpr as core entity. You could now search for AddExpr, AndBitwiseExpr, ComparisonExpr, AndLogicalExpr, DivExpr, EqExpr, NEExpr , LeftShiftExpr, MulExpr, OrBitwiseExpr, OrLogicalExpr, RemExpr, RightShiftExpr, SubExpr, UnsignedRightShiftExpr, XorBitwiseExpr expressions in codebase. It has both LeftOperandString() and RightOperandString() as API

   Example:

     FIND add_expression AS ad WHERE ad.getBinaryExpr().GetLeftOperandString() != "int a"

2. Code Pathfinder queries now can be stored as .cql file and execute with pathfinder cli 💻

     $ pathfinder query --project ~/src/code-pathfinder/test-src/android --query-file ../pathfinder-rules/example.cql

3. Code Pathfinder command-line interface has been freshly revamped with spf13/cobra based library.

     Code Pathfinder is designed for identifying vulnerabilities in source code.
     Usage:
         pathfinder [command]
   
     Available Commands:
       ci          Scan a project for vulnerabilities with ruleset in ci mode
       completion  Generate the autocompletion script for the specified shell
       help        Help about any command
       query       Execute queries on the source code
       scan         Scan a project for vulnerabilities with ruleset
       version     Print the version and commit information
   
     Flags:
        --disable-metrics   Disable metrics collection
        -h, --help                 help for pathfinder
   
      Use "pathfinder [command] --help" for more information about a command.

4. Pathfinder queries (*.cql) will be available under pathfinder-rules directory in this repo.

What's New?

• Add posthog usage analytics log for cli tool by @shivasurya in Add posthog usage analytics log for cli tool #101
• feature(query): introduce to execute queries from CQL file 🚀 by @shivasurya in feature(query): introduce to execute queries from CQL file 🚀  #102
• Refactor pathfinder cli to support cobra 🐍 cli format by @shivasurya in Refactor pathfinder cli to support cobra 🐍 cli format #104
• Bump micromatch from 4.0.7 to 4.0.8 in /docs in the npm_and_yarn group across 1 directory by @dependabot in Bump micromatch from 4.0.7 to 4.0.8 in /docs in the npm_and_yarn group across 1 directory #106
• cql(queries): Added Pathfinder CQL queries for WebView APIs 🏅 by @shivasurya in cql(queries): Added Pathfinder CQL queries for WebView APIs 🏅  #112
• Added expr model and parsed basic binary expression by @shivasurya in Added expr model and parsed basic binary expression #99

New Contributors

• @dependabot made their first contribution in Bump micromatch from 4.0.7 to 4.0.8 in /docs in the npm_and_yarn group across 1 directory #106

Full Changelog: v0.0.24...v0.0.25

---

This discussion was created from the release Release v0.0.25.