Static reachability - Support Javascript/Typescript
Background:
The Static Reachability feature currently supports Python dependencies. However, JavaScript is a common language among our customers, and supporting JavaScript dependencies is essential to meet their needs. Adding this support will allow customers to assess reachability across a broader range of dependencies, enhancing the feature’s relevance and value.
Implementation Plan
- Investigate if we need metadata for JS/TS
- Create rules and tests for JS/TS
- Update the DS analyzer to support JS/TS.
- Refactor code to support multiple language support
- Add JS enricher
- Add E2E tests
- TODO item
- Update public docs
- Create security test repos
- Ideally create 2 test repos
- Verify expectation files
- Document the testing repos in the DS analyzer reachability readme file
- Investigate semgrep-core failure
Edited by Yasha Rise