CodeAnalysis - Static Code Analysis: a code comprehensive analysis platform

Tencent

Last update: Jan 7, 2023

Related tags

Code Analysis CodeAnalysis

Overview

TCA, Tencent Cloud Code Analysis

English | 简体中文

What is TCA

Tencent Cloud Code Analysis (TCA for short, code-named CodeDog inside the company early) is a code comprehensive analysis platform, which includes three components: server, web and client. It supports the integration of common code analysis tools in the industry. Its main function is to ensure the code quality under agile iterations of multiple engineering projects, and Support the team to inherit the code culture.

Code analysis is to analyze the program code through lexical analysis, grammatical analysis, control flow, data flow analysis and other technologies to verify whether the code meets standardization, safety, reliability, maintainability, partial performance, etc., and conduct a comprehensive analysis of the code A code analysis technique for indicators and metrics.

Using TCA system can help the team monitor project code quality problems, find repetitive and difficult-to-maintain code and give warnings, and at the same time open API, support the docking with upstream and downstream systems, and integrate code analysis capabilities.

Experience

https://tca.tencent.com/

Key Features

Language support: It supports Java/C++/Objective-C/C#/JavaScript/Python/Go/PHP and more, covering common programming languages.
Code inspection: Accurately track and manage the code quality defects, code specifications, code security vulnerabilities, invalid code found through code inspection. At present, it has integrated many self-developed, well-known open source analysis tools, and adopts a layered and separated architecture, which can satisfy the team's rapid self-service management tools.
Code measurement: Support the three dimensions of code circle complexity, code repetition rate and code statistics to monitor the current code situation.
DevOps integration: The client can be started via the command line, which can quickly connect to various DevOps scheduling systems, and connect upstream and downstream systems through standard API interfaces.

Getting Started

Community

Discussion

Changelogs

Check our Changelogs

Contributing

Check out CONTRIBUTING to see how to develop with TCA.
Tencent Open Source Incentive Program encourages the participation and contribution of developers. We look forward to your active participation.

License

TCA is MIT licensed

Comments

分析启动以后出现大量的tiem out报错

附上日志

2022-01-26 10:14:30,086-INFO-util.logutil: Tencent Cloud Code Analysis (OpenSource Beta)
2022-01-26 10:14:30,298-INFO-util.logutil: ------------------------------
2022-01-26 10:14:30,298-INFO-util.logutil:  #######    ####      # 
2022-01-26 10:14:30,298-INFO-util.logutil:     #      #    #     # 
2022-01-26 10:14:30,298-INFO-util.logutil:     #     #          ### 
2022-01-26 10:14:30,298-INFO-util.logutil:     #     #          # # 
2022-01-26 10:14:30,298-INFO-util.logutil:     #     #         #####
2022-01-26 10:14:30,298-INFO-util.logutil:     #      #    #   #   #
2022-01-26 10:14:30,298-INFO-util.logutil:     #       ####   ##   ##
2022-01-26 10:14:30,298-INFO-util.logutil: ------------------------------
2022-01-26 10:14:31,006-INFO-util.logutil: using config file: /root/CodeAnalysis/client/codedog.ini
2022-01-26 10:14:31,011-INFO-util.logutil: connect to server: http://192.168.20.103/
2022-01-26 10:16:35,485-ERROR-util.api.httpclient: error code: 504, reason: Gateway Time-out, headers: Server: nginx/1.20.1
Date: Wed, 26 Jan 2022 02:16:35 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 167
Connection: close


2022-01-26 10:16:35,485-ERROR-util.wrapper: method(is_repo_existed) call fails on error: HTTP Error 504: Gateway Time-out
2022-01-26 10:16:35,485-INFO-util.wrapper: retrying method(is_repo_existed) after 5 seconds
2022-01-26 10:16:40,569-INFO-util.wrapper: method(is_repo_existed) call succeed after 1 retries
2022-01-26 10:18:40,607-ERROR-util.api.httpclient: error code: 504, reason: Gateway Time-out, headers: Server: nginx/1.20.1
Date: Wed, 26 Jan 2022 02:18:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 167
Connection: close


2022-01-26 10:18:40,608-ERROR-util.wrapper: method(get_repo_schemes) call fails on error: HTTP Error 504: Gateway Time-out
2022-01-26 10:18:40,608-INFO-util.wrapper: retrying method(get_repo_schemes) after 5 seconds
2022-01-26 10:19:45,715-INFO-util.wrapper: method(get_repo_schemes) call succeed after 1 retries
2022-01-26 10:19:45,716-INFO-util.logutil: scan plan(默认) already exists: http://192.168.20.103/t/Euxw03OlH3c/p/uama/code-analysis/repos/1/schemes/1/basic
2022-01-26 10:20:45,800-INFO-util.logutil: Use the already existed project(id: 2).
2022-01-26 10:20:46,240-INFO-util.logutil: Project url: http://192.168.20.103/t/Euxw03OlH3c/p/uama/code-analysis/repos/1/projects/2/overview
2022-01-26 10:21:46,372-ERROR-util.api.httpclient: error code: 504, reason: Gateway Time-out, headers: Server: nginx/1.20.1
Date: Wed, 26 Jan 2022 02:21:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 167
Connection: close


2022-01-26 10:21:46,372-ERROR-util.wrapper: method(init_job) call fails on error: HTTP Error 504: Gateway Time-out
2022-01-26 10:21:46,373-INFO-util.wrapper: retrying method(init_job) after 5 seconds
2022-01-26 10:22:51,381-ERROR-util.api.httpclient: error code: 504, reason: Gateway Time-out, headers: Server: nginx/1.20.1
Date: Wed, 26 Jan 2022 02:22:51 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 167
Connection: close


2022-01-26 10:22:51,381-ERROR-util.wrapper: method(init_job) call fails on error: HTTP Error 504: Gateway Time-out
2022-01-26 10:22:51,381-INFO-util.wrapper: retrying method(init_job) after 5 seconds
2022-01-26 10:23:56,389-ERROR-util.api.httpclient: error code: 504, reason: Gateway Time-out, headers: Server: nginx/1.20.1
Date: Wed, 26 Jan 2022 02:23:56 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 167
Connection: close


2022-01-26 10:23:56,389-ERROR-util.wrapper: method(init_job) call fails on error: HTTP Error 504: Gateway Time-out
2022-01-26 10:23:56,389-WARNING-util.wrapper: method(init_job) call still fails after 2 retries
2022-01-26 10:23:56,390-INFO-util.logutil: 
****************************************************************************************************
代码分析结果: 
HTTPError: HTTP Error 504: Gateway Time-out
****************************************************************************************************
2022-01-26 10:23:56,390-INFO-util.logutil: json report: /root/CodeAnalysis/client/scan_status.json
2022-01-26 10:23:56,390-ERROR-util.logutil: HTTPError: HTTP Error 504: Gateway Time-out
Traceback (most recent call last):
  File "/root/CodeAnalysis/client/node/localrunner.py", line 384, in run
    request_generator.generate_request(proj_conf)
  File "/root/CodeAnalysis/client/node/localtask/requestgenerator.py", line 112, in generate_request
    task_name_list, self._create_from)
  File "/root/CodeAnalysis/client/node/localtask/initjob.py", line 31, in init_job
    job_params = dog_server.init_job(repo_id, proj_id, init_data, org_sid, team_name)
  File "util/wrapper.py", line 20, in util.wrapper._MethodWrapper.__call__
  File "util/wrapper.py", line 40, in util.wrapper.SyncWrapper._call_method
  File "util/wrapper.py", line 42, in util.wrapper.SyncWrapper._call_method
  File "util/wrapper.py", line 51, in util.wrapper._RetryMethod.__call__
  File "util/wrapper.py", line 107, in util.wrapper.Retry.__retry_call
  File "util/wrapper.py", line 92, in util.wrapper.Retry.__retry_call
  File "/root/CodeAnalysis/client/util/api/dogapi.py", line 97, in init_job
    rsp = CodeDogHttpClient(self._server_url, rel_url, headers=self._headers, json_data=init_data).post()
  File "/root/CodeAnalysis/client/util/api/httpclient.py", line 78, in post
    result = HttpRequest.request(url=self.url, headers=self.headers, body=self.data, method="POST")
  File "/root/CodeAnalysis/client/util/api/httpclient.py", line 43, in request
    response = urlopen(req).read()
  File "/usr/local/python3/lib/python3.7/urllib/request.py", line 222, in urlopen
    return opener.open(url, data, timeout)
  File "/usr/local/python3/lib/python3.7/urllib/request.py", line 531, in open
    response = meth(req, response)
  File "/usr/local/python3/lib/python3.7/urllib/request.py", line 641, in http_response
    'http', request, response, code, msg, hdrs)
  File "/usr/local/python3/lib/python3.7/urllib/request.py", line 569, in error
    return self._call_chain(*args)
  File "/usr/local/python3/lib/python3.7/urllib/request.py", line 503, in _call_chain
    result = func(*args)
  File "/usr/local/python3/lib/python3.7/urllib/request.py", line 649, in http_error_default
    raise HTTPError(req.full_url, code, msg, hdrs, fp)
urllib.error.HTTPError: HTTP Error 504: Gateway Time-out

opened by break002 23

Docker-Compose启动失败
启动Docker-Compose输出以下错误：

Error response from daemon: Error processing tar file(exit status 1): unexpected EOF

Error response from daemon: Error processing tar file(exit status 1): unexpected EOF

Error response from daemon: Error processing tar file(exit status 1): unexpected EOF
opened by michael1981 22
UnicodeEncodeError: 'latin-1'

2022-01-28 16:40:59,591-INFO-util.logutil: Task_86 (CheckStyle) starts ... 2022-01-28 16:40:59,627-INFO-util.logutil: results written to /Users/test/github.com/Tencent/CodeAnalysis/client/data/taskdirs/task_86/scc_result_048c24da801611ec9807acde48001122.json 2022-01-28 16:41:09,707-INFO-util.logutil: Task_86 is done. 2022-01-28 16:41:09,800-ERROR-util.wrapper: method(upload_file) call fails on error: 'latin-1' codec can't encode characters in position 10-11: ordinal not in range(256) 2022-01-28 16:41:09,800-INFO-util.wrapper: retrying method(upload_file) after 5 seconds 2022-01-28 16:41:14,806-ERROR-util.wrapper: method(upload_file) call fails on error: 'latin-1' codec can't encode characters in position 10-11: ordinal not in range(256) 2022-01-28 16:41:14,806-INFO-util.wrapper: retrying method(upload_file) after 5 seconds 2022-01-28 16:41:19,813-ERROR-util.wrapper: method(upload_file) call fails on error: 'latin-1' codec can't encode characters in position 10-11: ordinal not in range(256) 2022-01-28 16:41:19,813-WARNING-util.wrapper: method(upload_file) call still fails after 2 retries 2022-01-28 16:41:19,814-INFO-util.logutil:

代码分析结果: UnicodeEncodeError: 'latin-1' codec can't encode characters in position 10-11: ordinal not in range(256)

2022-01-28 16:41:19,815-INFO-util.logutil: json report: /Users/test/github.com/Tencent/CodeAnalysis/client/scan_status.json 2022-01-28 16:41:19,815-ERROR-util.logutil: UnicodeEncodeError: 'latin-1' codec can't encode characters in position 10-11: ordinal not in range(256) Traceback (most recent call last): File "/Users/test/github.com/Tencent/CodeAnalysis/client/node/localrunner.py", line 396, in run run_task_mgr.scan_project(cur_execute_request_list, proj_conf) File "/Users/test/github.com/Tencent/CodeAnalysis/client/node/localtask/runlocaltask.py", line 96, in scan_project self._proj_id).run() File "/Users/test/github.com/Tencent/CodeAnalysis/client/node/localtask/runtask.py", line 170, in run ResultCheck.upload_task_result(task, self._proj_id) File "/Users/test/github.com/Tencent/CodeAnalysis/client/node/localtask/runtask.py", line 97, in upload_task_result data_url, log_url = TaskRunner.upload_result_detail(proj_id, task.task_id, task_dir, data, task.task_log) File "node/taskrunner.py", line 59, in node.taskrunner.TaskRunner.upload_result_detail File "util/wrapper.py", line 51, in util.wrapper._RetryMethod.call File "util/wrapper.py", line 107, in util.wrapper.Retry.__retry_call File "util/wrapper.py", line 92, in util.wrapper.Retry.__retry_call File "/Users/test/github.com/Tencent/CodeAnalysis/client/util/api/fileserver.py", line 104, in upload_file return self.__upload_data(fp, rel_url, headers) File "/Users/test/github.com/Tencent/CodeAnalysis/client/util/api/fileserver.py", line 88, in __upload_data HttpClient(self._server_url, rel_url, headers=headers, data=data, proxies=self._proxies).put() File "/Users/test/github.com/Tencent/CodeAnalysis/client/util/api/httpclient.py", line 82, in put result = HttpRequest.request(url=self.url, headers=self.headers, body=self.data, method="PUT") File "/Users/test/github.com/Tencent/CodeAnalysis/client/util/api/httpclient.py", line 43, in request response = urlopen(req).read() File "/Users/test/miniconda3/lib/python3.7/urllib/request.py", line 222, in urlopen return opener.open(url, data, timeout) File "/Users/test/miniconda3/lib/python3.7/urllib/request.py", line 525, in open response = self._open(req, data) File "/Users/test/miniconda3/lib/python3.7/urllib/request.py", line 543, in _open '_open', req) File "/Users/test/miniconda3/lib/python3.7/urllib/request.py", line 503, in _call_chain result = func(*args) File "/Users/test/miniconda3/lib/python3.7/urllib/request.py", line 1345, in http_open return self.do_open(http.client.HTTPConnection, req) File "/Users/test/miniconda3/lib/python3.7/urllib/request.py", line 1317, in do_open encode_chunked=req.has_header('Transfer-encoding')) File "/Users/test/miniconda3/lib/python3.7/http/client.py", line 1229, in request self._send_request(method, url, body, headers, encode_chunked) File "/Users/test/miniconda3/lib/python3.7/http/client.py", line 1270, in _send_request self.putheader(hdr, value) File "/Users/test/miniconda3/lib/python3.7/http/client.py", line 1202, in putheader values[i] = one_value.encode('latin-1') UnicodeEncodeError: 'latin-1' codec can't encode characters in position 10-11: ordinal not in range(256)

opened by D0n9 17
code analysis stuck in init tools

`[Tools init]: 10%|█████ | 1/10 [00:04<00:36, 4.10s/it]2022-01-10 18:35:55,168-WARNING-cmdgit: no .git/config file in work_tree 2022-01-10 18:52:33,028-INFO-util.logutil:

代码分析结果: NodeError: Error[203]: error: external filter 'git-lfs filter-process' failed fatal: bin/model/lexeme/model.tflite: smudge filter lfs failed

2022-01-10 18:52:33,028-INFO-util.logutil: json report: XXX\CodeAnalysis/client/scan_status.json 2022-01-10 18:52:33,028-ERROR-util.logutil: NodeError: Error[203]: error: external filter 'git-lfs filter-process' failed fatal: bin/model/lexeme/model.tflite: smudge filter lfs failed Traceback (most recent call last): File "XXX\CodeAnalysis\client\node\gitload.py", line 153, in __retry_checkout self._scm_client.checkout() File "src_cmdgit.py", line 1585, in src._cmdgit.CmdGit.checkout File "src_cmdgit.py", line 1426, in src._cmdgit.CmdGit._clone File "src_cmdgit.py", line 224, in src._cmdgit.CmdGit._cmd_error_check util._scmbase.ScmCommandError: error: external filter 'git-lfs filter-process' failed fatal: bin/model/lexeme/model.tflite: smudge filter lfs failed`

scan_status.json:

{ "status": "error", "error_code": 203, "url": "http://XXXX/code-analysis/repos/1/projects/1/scan-history", "text": "扫描异常", "description": "NodeError: Error[203]: error: external filter 'git-lfs filter-process' failed\nfatal: bin/model/lexeme/model.tflite: smudge filter lfs failed", "scan_report": {} }

opened by tengzhexiao 13
请求部分api接口出现异常：should either include a `serializer_class` attribute, or override the `get_serializer_class()` method
请求以下接口出现错误信息：

API接口/代码度量数据模块接口.html#查看指定项目的文件行数列表

API接口/代码度量数据模块接口.html#查看指定项目的语言列表

异常信息： 2022-04-12T122339.500.html.txt 2022-04-12T141024.500.html.txt

代码版本：main, eb37b97e
opened by anyuan95 11

扫描失败找不到每一步产生的 task_response.json

Java + gradle项目，扫描时会在scc, pmd, findbus等步骤报错提示

FileNotFoundError: [Errno 2] No such file or directory: '/CodeAnalysis/client/data/taskdirs/task_65_1/task_response.json'
****************************************************************************************************
2022-01-19 20:52:26,837-INFO-util.logutil: json report: /CodeAnalysis/client/scan_status.json
2022-01-19 20:52:26,837-ERROR-util.logutil: FileNotFoundError: [Errno 2] No such file or directory: '/CodeAnalysis/client/data/taskdirs/task_65_1/task_response.json'
Traceback (most recent call last):
  File "/CodeAnalysis/client/node/localrunner.py", line 396, in run
    run_task_mgr.scan_project(cur_execute_request_list, proj_conf)
  File "/CodeAnalysis/client/node/localtask/runlocaltask.py", line 96, in scan_project
    self._proj_id).run()
  File "/CodeAnalysis/client/node/localtask/runtask.py", line 173, in run
    log_url, data_url)
  File "/CodeAnalysis/client/node/localtask/runtask.py", line 46, in get_task_result
    with open(task.response_file, 'r') as fp:
FileNotFoundError: [Errno 2] No such file or directory: '/CodeAnalysis/client/data/taskdirs/task_65_1/task_response.json'

看其他issues提示findbugs组件需要配置编译命令，我在UI上配置编译命令后下载方案，配置文件里面没有添加到相关配置。

在配置文件里手动配置编译命令以后，报错依旧存在

麻烦各位帮忙看一下，谢谢！

opened by Akitata 10

NodeError: Error[204]: 当前环境不支持cobra工具步骤:['analyze']

由于是windows机器，因此使用和server一样的php镜像做了个客户端的镜像，如下，将一些github下载慢的包等手动安装了【不手动安装也一样有问题】：

FROM python:3.7.12-slim

#肯能用不了这么多的软件包，为了快速构建使用server的构建缓存，保留一致
ARG EXTRA_TOOLS="gnupg curl wget jq vim-tiny net-tools procps python3-dev default-libmysqlclient-dev locales inotify-tools gcc subversion git telnet iputils-ping vim openssh-client"
COPY ./sources.list /etc/apt/sources.list

RUN set -ex && cd / \
    && apt-get update \
    && apt-get install -y --no-install-recommends $EXTRA_TOOLS \
    && apt-get update \
    && apt-get install -y mariadb-client \
    && apt-get clean \
    && echo "LC_ALL=zh_CN.UTF-8" >> /etc/environment \
    && echo "zh_CN.UTF-8 UTF-8" > /etc/locale.gen \
    && echo "LANG=zh_CN.UTF-8" > /etc/locale.conf \
    && locale-gen \
    && ln -sf /usr/share/zoneinfo/Asia/Hong_Kong /etc/localtime \
    && rm -rf /var/cache/apt/* /root/.cache

COPY ./client /opt/client

RUN apt-get install -y flex bison #phantomjs
# https://phantomjs.org/download.html 下载 phantomjs
# docker cp .\pkg\phantomjs tca-client:/usr/bin/
COPY ./pkg/phantomjs /usr/bin/phantomjs
RUN apt-get install -y bzip2 fontconfig && \
    chmod +x /usr/bin/phantomjs && \
    echo "export OPENSSL_CONF=/etc/ssl/" >> /etc/profile

RUN pip install -i https://pypi.tuna.tsinghua.edu.cn/simple -r /opt/client/requirements/app_reqs.pip
#cobra
RUN pip install -i https://pypi.tuna.tsinghua.edu.cn/simple -r /opt/client/requirements/tool/cobra_requirements.txt

#从https://github.com/TCATools/下载的个工具打包后执行展开放入
ADD ./pkg/datatool.tar.gz /opt/client/

# https://hub.fastgit.org/Tencent/CodeAnalysis/issues/42
#RUN /opt/client/requirements/install.sh && \
RUN pip install pylint semgrep && \
    mkdir -p /opt/code
RUN ln -s /usr/lib/x86_64-linux-gnu/libffi.so.7 /usr/lib/x86_64-linux-gnu/libffi.so

然后，运行这个客户端 docker run -it --name tca-client --network host tca-client:2022 sh 执行 cd /opt/client/; python3 codepuppy.py localscan 出现如下的错误

[Tools init]: 100%|█████████████████████████████████████████████████| 13/13 [11:13<00:00, 51.81s/it]
2022-01-12 15:08:55,985-INFO-util.logutil: Initialize tools done.(use time: 673.59s)
2022-01-12 15:08:57,514-ERROR-util.logutil: cobra不可用，建议客户使用data/tools/cobra-v2.0.0-alpha.5/install.sh脚本进行
安装！
2022-01-12 15:08:57,515-INFO-util.logutil:
****************************************************************************************************
代码分析结果:
NodeError: Error[204]: 当前环境不支持cobra工具步骤:['analyze'].
****************************************************************************************************
2022-01-12 15:08:57,515-INFO-util.logutil: json report: /opt/client/scan_status.json
2022-01-12 15:08:57,515-ERROR-util.logutil: NodeError: Error[204]: 当前环境不支持cobra工具步骤:['analyze'].
Traceback (most recent call last):
  File "/opt/client/node/localrunner.py", line 380, in run
    request_generator.generate_request(proj_conf)
  File "/opt/client/node/localtask/requestgenerator.py", line 153, in generate_request
    execute_request_list = self._get_execute_request_list(job_context, task_list)
  File "/opt/client/node/localtask/requestgenerator.py", line 183, in _get_execute_request_list
    raise NodeError(code=errcode.E_NODE_TASK_CONFIG, msg=f"当前环境不支持{task_name}工具步骤:{remote_procs}.")
util.exceptions.NodeError: Error[204]: 当前环境不支持cobra工具步骤:['analyze'].

按照 #42 问题的描述，这个是完全正常的
# /opt/client/data/tools/common-cobra-v2.0.0-alpha.5/cobra.py --help
usage: cobra [-h] [-t <target>] [-f <format>] [-o <output>] [-r <rule_id>]
             [-d] [-sid SID] [-H <host>] [-P <port>]

opened by wushifeng 8

docker/docker-compose 部署失败

根据文档中的命令bash ./quick_install.sh docker deploy 和bash ./quick_install.sh docker-compose deploy启动后会弹出窗口，但是过段时间自动闪退，手动通过脚本里的docker run 命令执行报" Init main server database failed"错误

注：本地环境是windows10

opened by laowang6984 0
[error] 本地需安装semgrep工具，安装命令: python3 -m pip install semgrep==0.100.0

问题：本地工具semgrep已经是0.100.0版本，报错提醒[error] 本地需安装semgrep工具，安装命令: python3 -m pip install semgrep==0.100.0 日志详情： 2022-11-01 11:07:19,751-INFO: get diff file: /Users/huolala/Documents/JKS/TCA/tca-client-v20220819.1-x86_64-apple-darwin/data/taskdirs/task_5235/diff_files.json 2022-11-01 11:07:19,751-INFO: [error] 本地需安装semgrep工具，安装命令: python3 -m pip install semgrep==0.100.0 2022-11-01 11:07:19,751-INFO: -- end ... 2022-11-01 11:07:19,760-WARNING: task status code is 226 2022-11-01 11:07:19,761-WARNING: task messsage: TaskError: Error[226]: 第三方工具执行异常,未生成结果文件: /Users/huolala/Documents/JKS/TCA/tools/custom-semgrep/result.json 2022-11-01 11:07:19,761-INFO: task result: /Users/huolala/Documents/JKS/TCA/tca-client-v20220819.1-x86_64-apple-darwin/data/taskdirs/task_5235/task_response.json

opened by pengpengdai 0

Releases(20221130.1)

20221130.1(Nov 30, 2022)
What's Changed

New feature and Enhancements

:sparkles: Add safety_cpp by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/684

:sparkles: 分支项目支持指定扫描路径 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/705

:sparkles: 支持Helm charts部署TCA服务 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/724

:art: tool-regexscanner新增规则检测css高危函数 by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/683

:art: 部分工具规则和日志翻译为英文 by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/691

:art: update tool json by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/694

:art: 增加任务扩展字段，记录任务运行信息 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/704

:art: 更新自定义工具和快速扫描功能 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/707

:art: regexscanner新增敏感信息检测规则 by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/710

:art: 增加‘增强’标签；调整github 镜像构建内容 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/717

Fixes

:bug: 修复工具拉取使用自定义鉴权场景下，成员变量未声明就使用问题 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/698

:bug: 分析方案路由跳转调整 by @freyaLo in https://github.com/Tencent/CodeAnalysis/pull/701

:bug: 补充docker-compose部署nginx日志挂载路径 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/702

:bug: 修复初始化脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/723

Bumps

:arrow_up: Bump loader-utils from 1.4.0 to 1.4.1 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/693

:arrow_up: Bump loader-utils from 1.4.1 to 1.4.2 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/699

:arrow_up: 前端依赖升级 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/725

Docs

:memo: update enhanceDeploy doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/672

:memo: 更新新版本白皮书 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/680

:memo: 顶部栏调整，显示自建工具git库使用指南 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/687

:memo: 修改文档标题 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/688

:memo: 修改文件名 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/689

:memo: 更新快扫模式帮助文档，主要补充内置方案使用说明 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/690

:memo: update enhance depoly doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/708

:memo: 修正源码部署文档内容 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/703

:memo: 修正描述 by @fennghuang in https://github.com/Tencent/CodeAnalysis/pull/716

New Contributors

@freyaLo made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/701

@fennghuang made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/716

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20221028.1...20221130.1
Source code(tar.gz)
Source code(zip)
jenkins_plugin.hpi(79.09 KB)
tca-client-v20221130.1-arm64-linux.zip(41.36 MB)
tca-client-v20221130.1-x86_64-apple-darwin.zip(20.92 MB)
tca-client-v20221130.1-x86_64-linux.zip(88.79 MB)
tca-client-v20221130.1-x86_64-windows.zip(76.41 MB)
20221028.1(Oct 28, 2022)
What's Changed

New feature and Enhancements

:sparkles: 仓库登记页面结构优化调整 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/662

:sparkles: 添加一些规则 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/673

:art: Update open_base.py by @chen1908 in https://github.com/Tencent/CodeAnalysis/pull/629

:art: update CLS by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/644

:art: lizard,cpd适配quickscan模式; 增加QuickScan使用说明文档 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/646

:art: 添加工具库有关文档 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/653

:art: zip解压模块捕获异常 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/660

:art: 优化api请求和进度上报 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/666

:art: 补充平台开放接口与文档 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/669

:art: 完善issuedetail数据保存 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/668

:art: 默认使用腾讯工蜂仓库拉取工具 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/676

:art: update tool-infer and tool-flow by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/678

:art: update custom-tool url by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/679

:wrench: 移除web管道命令 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/665

:mute: remove useless log by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/658

Fixes

:bug: fix KeyError by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/645

:bug: 解决cppcheck可能出现中文编码错误问题 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/663

:bug: 调整scmallaccounts接口代码 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/677

Bumps

:pushpin: 锁定importlib-metadata版本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/652

Doc

:memo: Update 自定义工具.md by @auula in https://github.com/Tencent/CodeAnalysis/pull/667

:memo: 单元测试有效性验证 - 使用手册 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/656

:memo: 完善帮助文档 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/657

:memo: 更新首页功能优势介绍,增加持续跟踪管理问题 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/659

:memo: Add front_end_framework_check doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/661

:memo: 更新规则文档 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/674

:memo: 增加Jenkins插件使用说明 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/675

New Contributors

@chen1908 made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/629

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220928.1...20221028.1
Source code(tar.gz)
Source code(zip)
jenkins_plugin.hpi(79.09 KB)
tca-client-v20221028.1-arm64-linux.zip(41.34 MB)
tca-client-v20221028.1-x86_64-apple-darwin.zip(20.91 MB)
tca-client-v20221028.1-x86_64-linux.zip(88.79 MB)
tca-client-v20221028.1-x86_64-windows.zip(76.36 MB)
20220928.1(Sep 28, 2022)
What's Changed

New feature and Enhancements

:art: 完善镜像工具复制方式 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/633

:art: 转移规则文档 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/627

:art: 优化自定义工具拉取依赖逻辑 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/631

:art: clang工具 - 去掉UseNewBuildSystem参数；命令失败抛异常 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/639

:art: cpplint、codecoutn适配QuickScan场景 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/642

Doc

:memo: Update docs by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/634

:memo: 规范文档格式 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/640

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220923.1...20220928.1
Source code(tar.gz)
Source code(zip)
jenkins_plugin.hpi(79.09 KB)
tca-client-v20220928.1-arm64-linux.zip(41.32 MB)
tca-client-v20220928.1-x86_64-apple-darwin.zip(20.96 MB)
tca-client-v20220928.1-x86_64-linux.zip(88.76 MB)
tca-client-v20220928.1-x86_64-windows.zip(76.36 MB)
20220923.1(Sep 23, 2022)
What's Changed

New feature and Enhancements

:art: 部分规则包加推荐标签 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/602

:art: Add enhanced_safety_java by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/604

:art: issue列表展示msg信息 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/612

:art: delete redundant comment by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/611

:art: update sqlcheck tool lib by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/608

:art: jenkins插件支持质量门禁 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/619

:art: add enhance_safety_js by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/615

:art: 更新start命令参数和quickscan拉工具 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/622

:art: update check_tool_usable by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/618

:art: 调整前端部署脚本 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/620

:art: 规范镜像名称，增加健康探测脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/623

:art: update enhanceDeploy by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/624

:art: 优化main服务的https拉取代码开关配置 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/628

Fixes

:bug: 修复前端init脚本，避免异常中断 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/625

Bumps

:arrow_up: 升级lerna版本 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/626

Doc

:memo: Update TCA-Armory-R Doc by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/607

:memo: Add TCA-Armory-C1 Doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/605

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220907.1...20220923.1
Source code(tar.gz)
Source code(zip)
jenkins_plugin.hpi(79.09 KB)
tca-client-v20220923.1-arm64-linux.zip(41.33 MB)
tca-client-v20220923.1-x86_64-apple-darwin.zip(20.98 MB)
tca-client-v20220923.1-x86_64-linux.zip(88.76 MB)
tca-client-v20220923.1-x86_64-windows.zip(76.37 MB)
20220907.1(Sep 7, 2022)
What's Changed

New feature and Enhancements

:sparkles: 上线体验增强分析模块公告 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/564

:sparkles: add tool-TCA-Armory-R by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/574

:sparkles: Add TCA-Armory-A by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/582

:sparkles: UI样式升级，支持规则工具信息展示 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/600

:art: 优化工具依赖配置读取逻辑;优化LD_LIBRARY_PATH环境变量处理;废弃DEFAULT_TOOL_BASE_DIR by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/561

:art: 增加language，branch字段判空 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/566

:art: Update rules by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/570

:art: 工具拉取支持htttp zip包地址 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/577

:art: 新增前端框架识别规则包 by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/580

:art: 修改0daychecker使用zip by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/583

:art: 更新TCAQL版本 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/589

:art: Update enhance_cpp.json by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/590

:art: Update enhance_cpp.json by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/596

:art: update TCA-Armory-R by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/599

:art: 完善工具与规则展示相关逻辑与接口 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/601

:art: 优化zip包解压 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/606

Fixes

:bug: client镜像补充openssh-client依赖 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/585

Bumps

:arrow_up: update cls v20220617.1_opensource by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/565

:arrow_up: Bump vite from 2.9.9 to 2.9.15 in /doc by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/587

:arrow_up: 升级部分依赖 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/603

:arrow_up: update cls by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/609

Doc

:memo: update cls doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/556

:memo: update tools readme by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/558

:memo: Add CLS help doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/559

:memo: update enhance deploy doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/563

:memo: 提交文档修改,主要修改部署相关和首次分析相关 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/569

:memo: 更新帮助文档,readme链接 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/575

:memo: 修复文档图片 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/584

:memo: Translation for dockerDeploy.md by @baozidai in https://github.com/Tencent/CodeAnalysis/pull/595

:memo: add tool doc by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/588

New Contributors

@baozidai made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/595

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220819.1...20220907.1
Source code(tar.gz)
Source code(zip)
jenkins_plugin.hpi(79.09 KB)
tca-client-v20220907.1-arm64-linux.zip(41.33 MB)
tca-client-v20220907.1-x86_64-apple-darwin.zip(79.87 MB)
tca-client-v20220907.1-x86_64-linux.zip(88.75 MB)
tca-client-v20220907.1-x86_64-windows.zip(76.08 MB)
20220819.1(Aug 19, 2022)
What's Changed

:sparkles: Add standalone tool package by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/512

:sparkles: support sqlcheck by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/514

:sparkles: 支持团队节点与标签；调整文档说明 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/534

:sparkles: 上线团队节点标签配置，同步更新帮助文档 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/537

:art: 整理强化安全规则包，需要license by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/522

:art: 完善登录接口异常处理和错误提示 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/535

:art: 基础安全规则包新增规则 by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/533

:art: 调整oauth授权删除逻辑 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/542

:art: 调整工具管理凭证校验逻辑 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/548

:art: 优化源码部署脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/545

:art: docker与docker-compose支持挂载client配置文件 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/551

:art: 调整工具管理凭证校验逻辑 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/549

:bug: 修复工具规则显示详情描述 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/525

:bug: 修复分析方案模板添加规则筛选项异常 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/531

:bug: 修复代码库凭证切换导致页面白屏 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/540

:memo: Update tools readme by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/507

:memo: update client README.md docker模式 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/529

:memo: Add tool docs by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/546

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220811.1...20220819.1
Source code(tar.gz)
Source code(zip)
tca-client-v20220819.1-arm64-linux.zip(41.30 MB)
tca-client-v20220819.1-x86_64-apple-darwin.zip(79.85 MB)
tca-client-v20220819.1-x86_64-linux.zip(88.73 MB)
tca-client-v20220819.1-x86_64-windows.zip(76.34 MB)
20220811.1(Aug 11, 2022)
What's Changed

:art: 调整Model字段格式与规范系统默认名称 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/487

:art: 补充服务的env配置文件 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/504

:art: 调整指引文档文件路径 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/506

:art: 完善docker部署的变量配置 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/508

:art: 支持私有团队节点；支持指定.appdata目录 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/510

:art: 修改图片位置 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/517

:art: update semgrep rules by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/521

:art: collie support rule filter by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/513

:memo: 优化快速入门文档 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/483

:memo: 独立工具文档增加提示 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/485

:memo: 更新changelog by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/499

:memo: Update CLS doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/497

:bug: 修复方法调用不存在问题 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/489

:bug: fix get_block_change_type call by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/491

:bug: fix collie issue path by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/509

:bug: fix doc home actions by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/516

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220728.1...20220811.1
Source code(tar.gz)
Source code(zip)
tca-client-v20220811.1-arm64-linux.zip(41.30 MB)
tca-client-v20220811.1-x86_64-apple-darwin.zip(79.85 MB)
tca-client-v20220811.1-x86_64-linux.zip(88.73 MB)
tca-client-v20220811.1-x86_64-windows.zip(76.33 MB)
20220728.1(Jul 28, 2022)
What's Changed

:sparkles: 统一部署脚本，封装local、docker、docker-compose部署方式启动server&web&client by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/471

:sparkles: 支持源码安装Redis与Nginx by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/470

:sparkles: add 白皮书 by @cocorunning in https://github.com/Tencent/CodeAnalysis/pull/468

:art: 优化部署脚本 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/462

:art: 优化部署脚本 @RussGan in https://github.com/Tencent/CodeAnalysis/pull/463

:art: 软链替代文件说明 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/464

:art: 一键部署脚本优化 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/467

:art: 优化Dockerfile，支持复用pip安装层 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/472

:art: 完善github action脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/474

:art: 完善启动脚本注释 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/475

:art: macOS启动docker desktop by @cloudusers in https://github.com/Tencent/CodeAnalysis/pull/418

:art: update tca.yml by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/477

:art: 调整Docker启动脚本位置 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/476

:art: 优化Docker部署脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/478

:art: update tools list by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/479

:art: 完善Docker构建 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/481

⬆️ Bump terser from 5.12.1 to 5.14.2 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/461

:memo: 调整快速入门指引文档 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/473

New Contributors

@cloudusers made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/418

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220718.1...20220728.1
Source code(tar.gz)
Source code(zip)
tca-client-v20220728.1-arm64-linux.zip(41.30 MB)
tca-client-v20220728.1-x86_64-apple-darwin.zip(79.85 MB)
tca-client-v20220728.1-x86_64-linux.zip(88.73 MB)
tca-client-v20220728.1-x86_64-windows.zip(76.34 MB)
20220718.1(Jul 18, 2022)
What's Changed

:sparkles: 增加分析方案模版ID和分析方案名称参数 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/449

:sparkles:增加扫描方案模板API&优化文件服务器鉴权交互 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/458

:art: (client v20220718.1)QuickScan支持指定分析方案模板进行扫描;支持从环境变量读取文件服务器url和token by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/459

:memo: 更新插件使用说明书和启动参数说明 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/451

:fire: remove useless file by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/450

⬆️ 升级moment依赖 by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/446

⬆️ Bump parse-url from 6.0.0 to 6.0.2 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/444

⬆️ Bump django-celery-results from 2.2.0 to 2.4.0 in /server/projects/main by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/457

⬆️ Bump django-celery-results from 2.2.0 to 2.4.0 in /server/configs by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/456

Source code(tar.gz)
Source code(zip)
tca-client-v20220718.1-arm64-linux.zip(41.30 MB)
tca-client-v20220718.1-x86_64-apple-darwin.zip(79.85 MB)
tca-client-v20220718.1-x86_64-linux.zip(88.73 MB)
tca-client-v20220718.1-x86_64-windows.zip(76.34 MB)
20220629.1(Jun 29, 2022)
What's Changed

:sparkles: 支持团队、项目组禁用，支持代码库、分支项目删除 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/412

:sparkles: 前端支持禁用团队、项目，代码库登记支持ssh_url by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/416

:sparkles: 扫描方案支持分支过滤配置 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/427

:sparkles: 支持分支过滤，修复代码统计文件选中效果，支持工具、依赖凭证移除 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/431

:sparkles: add tool-tca_ql by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/432

:art: update TCA Action doc by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/409

:art: 修正笔误 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/410

:art: add github action tca.yml by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/413

:art: FilesNotFound不区分大小写 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/414

:art: update tca.yml,修改获取git diff文件命令 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/415

:art: client v20220620.1 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/423

:art: 更新tca.yml，customtool by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/434

:art: client更新.code.yaml和工具依赖库加载 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/436

:art: 更新自定义工具文档，使用工具依赖 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/439

:bug: 判断error_output是否为空 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/425

:memo: update CLS README by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/411

:memo: 修改README文档 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/424

:memo: 增加jenkins plugin Installation package链接 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/429

:memo: 增加环境依赖说明 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/430

:memo: update tools by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/433

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220616.1...20220629.1
Source code(tar.gz)
Source code(zip)
tca-client-v20220629.1-arm64-linux.zip(41.30 MB)
tca-client-v20220629.1-x86_64-apple-darwin.zip(79.85 MB)
tca-client-v20220629.1-x86_64-linux.zip(88.71 MB)
tca-client-v20220629.1-x86_64-windows.zip(76.33 MB)
20220616.1(Jun 16, 2022)
What's Changed

:art: client v20220616.1 - QuickScan根据语言执行不同的任务 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/406

:memo: docker-compose db services annotation. by @auula in https://github.com/Tencent/CodeAnalysis/pull/404

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220614.1...20220616.1
Source code(tar.gz)
Source code(zip)
jenkins_plugin.hpi(13.76 KB)
tca-client-v20220616.1-arm64-linux.zip(41.27 MB)
tca-client-v20220616.1-x86_64-apple-darwin.zip(79.83 MB)
tca-client-v20220616.1-x86_64-linux.zip(88.68 MB)
tca-client-v20220616.1-x86_64-windows.zip(76.30 MB)
tca-client-v20220616.2-x86_64-linux.zip(88.68 MB)
20220614.1(Jun 14, 2022)
What's Changed

:sparkles: 新增mr分支增量扫描；新增quickscan模式；localscan支持工具并发 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/399

:sparkles: feature check tools owl. by @auula in https://github.com/Tencent/CodeAnalysis/pull/394

:sparkles: Create install_runtime_environment_for_centos7.9.2009.sh by @G3G4X5X6 in https://github.com/Tencent/CodeAnalysis/pull/397

:art: 创建团队后重载团队列表 by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/392

:art: server调整服务监控探测脚本：celery状态判断 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/393

:art: 调整OAuth显示 by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/395

:art: 增加子任务接口，完善部署脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/396

:arrow_up: update cls v20220613.1 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/398

New Contributors

@auula made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/394

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220607.1...20220614.1
Source code(tar.gz)
Source code(zip)
tca-client-v20220614.1-arm64-linux.zip(41.27 MB)
tca-client-v20220614.1-x86_64-apple-darwin.zip(79.83 MB)
tca-client-v20220614.1-x86_64-linux.zip(88.68 MB)
tca-client-v20220614.1-x86_64-windows.zip(76.31 MB)
20220607.1(Jun 7, 2022)
What's Changed

:sparkles: add loong by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/357

:sparkles: 新增oauth授权及工具依赖管理 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/365

:sparkles: 客户端支持工具依赖功能 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/367

:sparkles: 工具依赖管理、Git OAuth by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/373

:sparkles: 新增java、js基础安全规则包 by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/375

:sparkles: Add tool FeatureCheck by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/376

:sparkles: Add loong beta by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/379

:art: 增加scmproxy超时配置 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/353

:art: 添加基础安全py go by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/374

:art: 调整工具依赖配置 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/381

:art: docker-compose部署支持挂载本地日志目录 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/383

:art: 调整工具目录结构 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/389

:art: 团队列表滚动加载 by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/390

:arrow_up: Bump pyjwt from 1.7.1 to 2.4.0 in /server/projects/main by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/349

:arrow_up: Bump pyjwt from 1.7.1 to 2.4.0 in /server/projects/login by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/348

:arrow_up: Bump pyjwt from 1.7.1 to 2.4.0 in /server/configs by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/347

:arrow_up: update CLS by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/380

:pushpin: 锁定drf-simplejwt版本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/354

:wrench: change open_user by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/355

:wrench: 调整仓库同步yml by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/377

:bug:修复issue入库忽略处理操作 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/356

:bug:补充缺失依赖 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/382

:bug: add healthcheck in route of main server by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/386

:fire: mv tools to TCATools by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/363

:fire: delete main.bin by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/368

:memo: update loong doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/358

:memo: keep consistent by @momoyu8 in https://github.com/Tencent/CodeAnalysis/pull/360

:memo: update tools readme by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/364

:memo: add oauth doc by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/366

:memo: 更新 工具管理说明.md：自定义工具 -> 工具白名单 by @G3G4X5X6 in https://github.com/Tencent/CodeAnalysis/pull/369

:memo: 更新工具目录readme by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/370

:memo: update tools README by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/378

:memo: Add docs badge by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/384

:memo:Update install_python37_on_centos.md by @G3G4X5X6 in https://github.com/Tencent/CodeAnalysis/pull/385

:memo:更新client README.md by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/391

New Contributors

@momoyu8 made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/360

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220524.1...20220607.1
Source code(tar.gz)
Source code(zip)
tca-client-v20220530.1-arm64-linux.zip(40.82 MB)
tca-client-v20220530.1-x86_64-apple-darwin.zip(79.54 MB)
tca-client-v20220530.1-x86_64-linux.zip(88.21 MB)
tca-client-v20220530.1-x86_64-windows.zip(76.19 MB)
20220524.1(May 24, 2022)
What's Changed

:sparkles: Collie/Compass（测试版）上线 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/294

:sparkles: add collie and compass test version by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/295

:sparkles:添加tscancode系列工具 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/343

:art: 支持打包成可执行程序执行 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/283

:art: 工具区分编译型和非编译型 by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/285

:art: hide password by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/310

:art: add copy codedog.ini by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/314

:art: 前端页面优化 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/315

:art: 更新cmdscm二进制文件，调整获取ssh端口号方式 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/325

:art: 调整工程配置和文档，支持https克隆 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/326

:art: Update index.tsx by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/339

:art: format code by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/340

:bug: 修复codepuppy.py无参数执行异常错误 by @G3G4X5X6 in https://github.com/Tencent/CodeAnalysis/pull/321

:memo: update tool list doc by @GabrielLegend in https://github.com/Tencent/CodeAnalysis/pull/269

:memo: 添加集成工具文档 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/287

:memo: 增加工蜂仓库镜像链接 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/292

:memo: 增加腾讯工蜂作为工具拉取源，可选用 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/293

:memo: readme增加微信公众号和腾讯开源摘星计划的说明及链接 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/299

:memo: 修改帮助文档的脚本名称；修改工蜂镜像仓库链接位置 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/303

:memo: 调整自定义规则文档 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/304

:memo: Feature/update document by @Faberiii in https://github.com/Tencent/CodeAnalysis/pull/319

:memo: 优化文档 by @cocorunning in https://github.com/Tencent/CodeAnalysis/pull/320

:memo: 调整doc，优化部署、使用文档 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/332

:memo: 调整文档 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/334

:memo: 添加文档 by @Akitata in https://github.com/Tencent/CodeAnalysis/pull/337

New Contributors

@GabrielLegend made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/269

@Faberiii made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/310

@G3G4X5X6 made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/321

@Akitata made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/337

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220427.01...20220524.1
Source code(tar.gz)
Source code(zip)
tca-client-v20220524.1-arm64-linux.zip(43.54 MB)
tca-client-v20220524.1-x86_64-apple-darwin.zip(79.25 MB)
tca-client-v20220524.1-x86_64-linux.zip(87.64 MB)
tca-client-v20220524.1-x86_64-windows.zip(76.04 MB)
20220427.01(Apr 27, 2022)
What's Changed

Feature/server deploy test by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/246

:art:删除main部分异步任务；调整server nginx启动位置 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/247

:art:server健康监测：移除镜像状态监测 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/249

:fire:删除Dockerfile中文注释 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/251

:sparkles:增加TCA server&web 一键部署脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/252

:art:完善部署和Q&A文档 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/253

:sparkles: 工具管理前端 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/254

:sparkles: 工具管理后端 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/255

⬆️ Bump async from 2.6.3 to 2.6.4 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/260

⬆️ Bump node-forge from 1.2.1 to 1.3.1 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/259

⬆️ Bump moment from 2.29.1 to 2.29.2 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/258

⬆️ Bump minimist from 1.2.5 to 1.2.6 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/257

⬆️ Bump urijs from 1.19.10 to 1.19.11 in /web by @dependabot in https://github.com/Tencent/CodeAnalysis/pull/256

add rule && update tool-stylecop by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/261

使用vuepress构建帮助文档，修复依赖告警 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/264

更新Zeus工具和上传简介readme by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/265

:memo: add tool list by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/266

:memo: add license tag by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/267

更新chagelog by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/271

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220418.1...20220427.01
Source code(tar.gz)
Source code(zip)
tca-client-v20220427.1-arm64-linux.zip(43.49 MB)
tca-client-v20220427.1-x86_64-apple-darwin.zip(76.48 MB)
tca-client-v20220427.1-x86_64-linux.zip(87.61 MB)
tca-client-v20220427.1-x86_64-windows.zip(76.01 MB)
20220418.1(Apr 18, 2022)
What's Changed

✨ add client executable files

:memo:更新文档内的工具默认路径 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/217

:sparkles: add jvm proxy by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/220

doc:调整README描述 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/221

:memo: 【腾讯云代码分析】任务分布式执行能力 by @cocorunning in https://github.com/Tencent/CodeAnalysis/pull/223

doc:调整README描述 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/224

bug:补充接口的slz by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/226

Feature/server deploy test by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/227

update url by @yuanshanji in https://github.com/Tencent/CodeAnalysis/pull/230

modify some rules by @yql70 in https://github.com/Tencent/CodeAnalysis/pull/231

:memo:PR操作流程 by @cocorunning in https://github.com/Tencent/CodeAnalysis/pull/232

:memo: format PR doc by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/235

:art: rm empty dir by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/236

Feature/server deploy test by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/237

:art:整理开源检查包 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/238

:art: 修改开源检查规则包描述 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/239

feat: client支持对自研工具的cls校验 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/241

:sparkles: support CLS by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/242

:sparkles:上传tca_ql beta版进行php安全分析 by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/243

New Contributors

@yuanshanji made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/230

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220402.1...20220418.1
Source code(tar.gz)
Source code(zip)
tca-client-20220418_1-arm64-linux.zip(43.50 MB)
tca-client-20220418_1-x86_64-apple-darwin.zip(119.11 MB)
tca-client-20220418_1-x86_64-linux.zip(87.62 MB)
tca-client-20220418_1-x86_64-windows.zip(76.02 MB)
20220402.1(Apr 2, 2022)
What's Changed

更新changelog，增加V1.0.1和V1.1.1更新记录 by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/205

简化前端部署脚本&文档 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/210

:art:优化指引文档 by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/211

Feature/optimize guideline by @RussGan in https://github.com/Tencent/CodeAnalysis/pull/212

opti:优化部署构建脚本 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/213

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220331.1...20220402.1
Source code(tar.gz)
Source code(zip)
20220331.1(Mar 31, 2022)
What's Changed

Update deploy_dc.md by @more-github in https://github.com/Tencent/CodeAnalysis/pull/202

:beer: add tool-0daychecker by @owlmk in https://github.com/Tencent/CodeAnalysis/pull/203

New Contributors

@owlmk made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/203

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220329.1...20220331.1
Source code(tar.gz)
Source code(zip)
20220329.1(Mar 29, 2022)
New Feature

:sparkles: 新增任务分布式下发能力

:sparkles: 客户端支持arm64架构执行环境

:sparkles: 新增管理后台，支持接入在线节点

What's Changed

client支持arm64架构执行环境 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/169

完善文档 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/175

调整前端部署脚本，支持传递nginx配置地址、前端资源部署地址 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/176

更新changelog by @aaaa-j in https://github.com/Tencent/CodeAnalysis/pull/177

Jenkins插件命令拼装逻辑修正 by @anyuan95 in https://github.com/Tencent/CodeAnalysis/pull/180

修改参数isTotal判断方式 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/181

调整pypi下载失败提示 by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/182

修改参数isTotal(是否开启全量扫描)判断方式及参数startCommand（启动客户端命令）拼接方式 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/183

修改参数isTotal(是否开启全量扫描)判断方式 by @zthzhang111 in https://github.com/Tencent/CodeAnalysis/pull/184

调整文件资源引用地址 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/187

web模块部署脚本问题修复及优化 by @anyuan95 in https://github.com/Tencent/CodeAnalysis/pull/190

update License by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/192

调整注释 by @cyw3 in https://github.com/Tencent/CodeAnalysis/pull/194

client新增分布式节点模式 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/196

Dev/support job dispatch by @Lingghh in https://github.com/Tencent/CodeAnalysis/pull/197

linux arm64使用单独的配置文件 by @bensonhome in https://github.com/Tencent/CodeAnalysis/pull/199

增加管理后台、增加在线分析、文档调整 by @nickcdon in https://github.com/Tencent/CodeAnalysis/pull/200

New Contributors

@anyuan95 made their first contribution in https://github.com/Tencent/CodeAnalysis/pull/180

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20220301.1...20220329.1
Source code(tar.gz)
Source code(zip)
20220301.1(Mar 1, 2022)
What's Changed

Fix some bugs

Add some checkrules

Full Changelog: https://github.com/Tencent/CodeAnalysis/compare/20211231.1...20220301.1
Source code(tar.gz)
Source code(zip)
20211231.1(Feb 28, 2022)

TCA Release
Source code(tar.gz)
Source code(zip)