Fix(benchmark): release provenance and improve benchmark/security coverage by alxxjohn · Pull Request #152 · devr-tools/codeguard

alxxjohn · 2026-08-22T20:12:20Z

Summary

fix release provenance by using the tagged SLSA generator workflow ref
reduce security detector false positives for comment-only OWASP/private-key matches
detect additional hardcoded credential patterns, including bearer header setters and dbPass variants
add external scanner benchmark normalization for Semgrep, Gitleaks, Trivy, and TruffleHog
expand benchmark docs with comparison lanes, reporting guidance, and external report usage

go test ./cmd/codeguard-benchmark ./internal/benchmark ./internal/codeguard/checks/security ./tests/corpus ./tests/checks ./tests/version ...

🤖 I have created a release *beep* *boop* --- ## [1.6.0](v1.5.4...v1.6.0) (2026-08-22) ### Features * **benchmark:** normalize external scanner reports ([31cb15a](31cb15a)) ### Bug Fixes * **benchmark:** release provenance and improve benchmark/security coverage ([#152](#152)) ([81b7cd9](81b7cd9)) * **benchmark:** satisfy strict lint ([ff61aed](ff61aed)) * **ci:** satisfy codeguard self-scan ([a3bf7f6](a3bf7f6)) * **ci:** use tagged SLSA generator workflow ([e0b9a95](e0b9a95)) * **security:** reduce secret and OWASP detector gaps ([7e9e3f5](7e9e3f5)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).

alxxjohn added 5 commits August 22, 2026 15:57

fix(ci): use tagged SLSA generator workflow

e0b9a95

fix(security): reduce secret and OWASP detector gaps

7e9e3f5

feat(benchmark): normalize external scanner reports

31cb15a

fix(benchmark): satisfy strict lint

ff61aed

fix(ci): satisfy codeguard self-scan

a3bf7f6

alxxjohn merged commit 81b7cd9 into main Aug 22, 2026
16 checks passed

alxxjohn mentioned this pull request Aug 22, 2026

chore(main): release 1.6.0 #153

Merged

alxxjohn deleted the feature/local-uncommitted-work branch August 22, 2026 23:19