Skip to content

Conversation

@shivasurya
Copy link
Owner

@shivasurya shivasurya commented Sep 28, 2025

This pull request enhances the directory listing and file request workflow in the SecureFlow CLI, making directory exploration more systematic and informative for security analysis. The changes improve both the user instructions and the internal handling and reporting of directory contents, with a focus on distinguishing files and directories, providing clearer context, and supporting best practices for security reviews.

Improvements to directory listing logic and reporting:

  • The FileRequestHandler now returns a structured result separating files and directories, including counts for each and total items, and provides both relative and full paths for each item. The listing logic also skips hidden directories except for important config files. (extension/secureflow/packages/secureflow-cli/scanner/file-request-handler.js) [1] [2]
  • The AISecurityAnalyzer now displays directory listing results with clear separation between files and directories, includes item counts, and improves summary formatting for easier review. (extension/secureflow/packages/secureflow-cli/scanner/ai-security-analyzer.js) [1] [2]

Enhancements to user instructions and prompts:

  • The instructions for the directory listing tool have been expanded to emphasize starting with the root directory, systematic navigation, prioritizing security-relevant directories, and limiting requests per iteration. Example usage sequences and best practices have been added for clarity. (extension/secureflow/packages/secureflow-cli/lib/prompts/tools/list-file-request-instructions.txt)
  • Security review prompt guidance now explicitly instructs users to always start with the list files tool to understand project context before deeper analysis. (extension/secureflow/packages/secureflow-cli/lib/prompts/common/security-review-cli.txt)

Docker and deployment configuration cleanup:

  • Volume mounts for results and targets files have been removed from both the Dockerfile and docker-compose configuration, simplifying deployment and reducing potential configuration errors. (extension/secureflow/packages/secureflow-cli/Dockerfile, extension/secureflow/packages/secureflow-cli/docker-compose.yml) [1] [2]

@shivasurya shivasurya self-assigned this Sep 28, 2025
@shivasurya shivasurya merged commit b12961f into main Sep 28, 2025
@shivasurya shivasurya deleted the shiva/improve-directory-request-tool branch September 28, 2025 01:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants