diff --git a/CHANGELOG.md b/CHANGELOG.md deleted file mode 100644 index 6442deec..00000000 --- a/CHANGELOG.md +++ /dev/null @@ -1,9 +0,0 @@ -# Changelog -All notable changes to this project will be documented in this file. - -The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), -and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). - -## [Unreleased] - -[Unreleased]: https://github.com/viktigpetterr/composer-template/compare/v1.0.0...HEAD diff --git a/UPGRADE-2.0.md b/UPGRADE-2.0.md index 4ec60516..77cc71f6 100644 --- a/UPGRADE-2.0.md +++ b/UPGRADE-2.0.md @@ -2,7 +2,7 @@ ## Changed behaviours - Changes default strictness of resolve command to 1 (Exit with code 1 if all files failed to resolve, otherwise exit with code 0 instead of always exiting with code 0) -- File Fingerprint analysis is on by default for all repositories which starts with the letters "A-C" (starting from v2.0.9 it is default for all repos). This range will be increased in future minor/patch releases. +- File Fingerprint analysis is on by default for all repositories which starts with the letters "A-C" (starting from v2.1.4 it is default for all repos). This range will be increased in future minor/patch releases. - Added inclusion option to commands to force include patterns which are by default ignored by the CLI - Refactored how exclusion works for fingerprinting to align it with the rest of the CLI, this includes a breaking change for windows where Unix path separators must be used in patterns. diff --git a/internal/cmd/scan/scan.go b/internal/cmd/scan/scan.go index 01e14861..18895dda 100644 --- a/internal/cmd/scan/scan.go +++ b/internal/cmd/scan/scan.go @@ -139,7 +139,7 @@ $ debricked scan . --include '**/node_modules/**'`) cmd.Flags().BoolVarP(&passOnDowntime, PassOnTimeOut, "p", false, "pass scan if there is a service access timeout") cmd.Flags().BoolVar(&noResolve, NoResolveFlag, false, `disables resolution of manifest files that lack lock files. Resolving manifest files enables more accurate dependency scanning since the whole dependency tree will be analysed. For example, if there is a "go.mod" in the target path, its dependencies are going to get resolved onto a lock file, and latter scanned.`) - cmd.Flags().BoolVar(&noFingerprint, NoFingerprintFlag, true, "toggles fingerprinting for undeclared component identification. Can be run as a standalone command [fingerprint] with more granular options.") + cmd.Flags().BoolVar(&noFingerprint, NoFingerprintFlag, false, "toggles fingerprinting for undeclared component identification. Can be run as a standalone command [fingerprint] with more granular options.") cmd.Flags().BoolVar(&callgraph, CallGraphFlag, false, `Enables call graph generation during scan.`) cmd.Flags().IntVar(&callgraphUploadTimeout, CallGraphUploadTimeoutFlag, 10*60, "Set a timeout (in seconds) on call graph upload.") cmd.Flags().IntVar(&callgraphGenerateTimeout, CallGraphGenerateTimeoutFlag, 60*60, "Set a timeout (in seconds) on call graph generation.")