open/ktg-plugin-marketplace
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity Actions

feat(config-audit): HKV flags verbose hook output (v5 M5) [skip-docs]

Browse source 
Static heuristic — counts console.log / process.stdout.write lines per
referenced hook script. > 50 → low CA-HKV-NNN finding.

New fixtures:
- hooks-verbose/ (61 verbose lines → triggers)
- hooks-quiet/ (5 lines → no finding)

580 → 582 tests, all green.
This commit is contained in:
Kjell Tore Guttormsen 2026-05-01 07:05:45 +02:00
commit 910567d661
6 changed files with 153 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
plugins/config-audit/tests/fixtures/hooks-quiet/hooks/scripts/quiet.mjs vendored Normal file
View file

@ -0,0 +1,7 @@
#!/usr/bin/env node
// Quiet hook
console.log("step 0");
console.log("step 1");
console.log("step 2");
console.log("step 3");
console.log("step 4");