Skip to content

v6: Trusted publishing, fast-xml-parser, and Beta mode

Choose a tag to compare

@RubenHalman RubenHalman released this 02 Nov 06:23
· 33 commits to main since this release

Key Changes

  • Scoped Trusted Publishing: Migrated to @Flow-Scanner npm org with Trusted Publishing (OIDC via GitHub Actions) for Zero Trust security—no long-lived tokens, automated scans/tests, and provenance attestations to mitigate supply chain risks.
  • Dependency Upgrade: Replaced xmlbuilder2 with fast-xml-parser for a more active ecosystem, reduced package size (~20% smaller footprint), and potential parsing performance gains in Flow metadata handling.
  • New Config Option: Added betaMode parameter to enable experimental beta rules during scans, allowing users to opt-in for rules in development.
  • Sets default severity as warning

Upgrade Guide

To update your dependencies run npm i @flow-scanner/[email protected]

Thanks for using Lightning Flow Scanner Core!