feat: v1 asset scanning support in bulk publish and import by naman-contentstack · Pull Request #217 · contentstack/cli-plugins

naman-contentstack · 2026-06-10T09:13:29Z

No description provided.

feat: add asset scanning support in import

github-actions · 2026-06-10T09:14:20Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	1	25	✅ Passed
🟡 Medium Severity	3	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	2	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 1
Medium without fixes: 3
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

…flow

github-actions · 2026-06-12T06:53:20Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	2	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

github-actions · 2026-06-16T10:02:13Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	0	25	✅ Passed
🟡 Medium Severity	120	3	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	2	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 3
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

github-actions · 2026-06-28T12:55:39Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	0	25	✅ Passed
🟡 Medium Severity	1	5	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 5
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

github-actions · 2026-07-02T09:01:49Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	54	70	25	❌ Failed
🟡 Medium Severity	0	5	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 70
Medium without fixes: 5
Low without fixes: 0

❌ BUILD FAILED - Security checks failed

Please review and fix the security vulnerabilities before merging.

…portCommand for asset publishing

…nd update related logic

github-actions · 2026-07-14T10:28:46Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

fix: Update flags in AssetsPublishCommand and add user reminder in ImportCommand for asset publishing

github-actions · 2026-07-16T06:17:21Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

github-actions · 2026-07-23T10:44:48Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

github-actions · 2026-07-28T09:09:47Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	74	126	25	❌ Failed
🟡 Medium Severity	0	1	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 126
Medium without fixes: 1
Low without fixes: 0

❌ BUILD FAILED - Security checks failed

Please review and fix the security vulnerabilities before merging.

snyk-io · 2026-08-03T09:30:27Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

added audit check and fix for assets in pending or quarantined state

handled assets in pending or quarantine states export failure

github-actions · 2026-08-04T14:53:26Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

github-actions · 2026-08-05T07:44:45Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

not required

Brings in the 27 commits development gained after the previous merge (PR #217 Asset-Scanning-v1, #322, #323 and others), clearing the conflict that was blocking PR #243 and preventing GitHub Actions from producing a merge ref. Only .talismanrc conflicted. Resolved to the checksum for the merged pnpm-lock.yaml (95ad8483..., confirmed via `talisman --checksum`) and moved `version` back to the top level, where talisman expects it — development's side had it indented under the fileignoreconfig entry. Verified before push: - `pnpm install --frozen-lockfile` passes (the auto-merged lockfile is self-consistent; this is the check that caught the broken lockfile in PR #324 and the dropped `open` dependency in the previous merge) - dependency sweep against both merge parents: nothing lost - undeclared-import sweep unchanged from baseline: no new hybrids - test suites for all six packages this merge touched: contentstack-audit 160 passing contentstack-export 485 passing contentstack-external-migrate 42 passing contentstack-import 1736 passing contentstack-query-export 139 passing contentstack-bulk-publish (no test script) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

naman-contentstackand others added 4 commits June 5, 2026 14:39

feat: add asset scanning support in import
a4d908a

chore: removed whitespace
25acf49

Merge pull request#210from contentstack/feat/DX-8661
cbffcfa
feat: add asset scanning support in import

feat: add asset scanning support in bulk publish v1
1b6fb69

naman-contentstack self-assigned this Jun 10, 2026

naman-contentstack requested a review from a team as a code owner June 10, 2026 09:13

naman-contentstack added 2 commits June 12, 2026 01:29

feat: enhance asset publishing with data-dir support for post-import …
420c32e
…flow

Merge branch 'development' into feat/Asset-Scanning-v1
f893ffe

shafeeqd959 reviewed Jun 12, 2026
View reviewed changes

Comment threadpackages/contentstack-bulk-publish/src/util/asset-scan.js

Set maximum scan retries to zero
8aaeebe

shafeeqd959 previously approved these changes Jun 25, 2026
View reviewed changes

fix: minor fixes in bulk publish
b51e127

naman-contentstack dismissed shafeeqd959’s stale review via b51e127June 28, 2026 12:55

naman-contentstack changed the title ~~feat: asset scanning support in bulk publish and import~~feat: v1 asset scanning support in bulk publish and importJun 29, 2026

Merge branch 'development' into feat/Asset-Scanning-v1
0ca69b8

naman-contentstack added 3 commits July 10, 2026 13:59

fix: Update flags in AssetsPublishCommand and add user reminder in Im…
e5260b7
…portCommand for asset publishing

fix: Rename 'data-dir' to 'backup-dir' in asset publishing commands a…
32ba9c4
…nd update related logic

merge development in feat/Asseet-scanning-v1
2d575c1

naman-contentstackand others added 2 commits July 14, 2026 15:59

Merge branch 'feat/Asset-Scanning-v1' into fix/DX-9308
1a2732c

Merge pull request#282from contentstack/fix/DX-9308
fc472c8
fix: Update flags in AssetsPublishCommand and add user reminder in ImportCommand for asset publishing

shafeeqd959 previously approved these changes Jul 20, 2026
View reviewed changes

Your Name added 2 commits July 22, 2026 18:11

merged latest changes from dev
402a4b2

added support for orgplan check in export and import
53b9674

shafeeqd959 dismissed their stale review via 53b9674July 23, 2026 10:44

bumped dependencies version
78da02e

Your Nameand others added 4 commits July 30, 2026 12:25

handled assets in pending or quarantine states export failure
19c2a36

merged latest changes
2188fc2

added audit check and fix for assets in pending or quarantined state
601947f

Merge branch 'development' into feat/Asset-Scanning-v1
a35b929

sha-ptldev previously approved these changes Aug 3, 2026
View reviewed changes

shafeeqd959and others added 4 commits August 4, 2026 12:25

Merge pull request#323from contentstack/DX-10043
5789088
added audit check and fix for assets in pending or quarantined state

handled assets in not scanned status
c92fd23

Merge pull request#322from contentstack/DX-9302
56dd70b
handled assets in pending or quarantine states export failure

Merge branch 'development' into feat/Asset-Scanning-v1
498c6aa

merged latest dev changes
b246328

cs-raj approved these changes Aug 5, 2026
View reviewed changes

netrajpatel approved these changes Aug 5, 2026
View reviewed changes

shafeeqd959 merged commit 3c55955 into developmentAug 5, 2026
11 checks passed

shafeeqd959 deleted the feat/Asset-Scanning-v1 branch August 5, 2026 08:52

Navigation Menu

Uh oh!

feat: v1 asset scanning support in bulk publish and import - #217

feat: v1 asset scanning support in bulk publish and import#217
shafeeqd959 merged 26 commits into
developmentfrom
feat/Asset-Scanning-v1

naman-contentstack commented Jun 10, 2026

Uh oh!

github-actionsBot commented Jun 10, 2026

Uh oh!

github-actionsBot commented Jun 12, 2026

Uh oh!

Uh oh!

github-actionsBot commented Jun 16, 2026

Uh oh!

github-actionsBot commented Jun 28, 2026

Uh oh!

github-actionsBot commented Jul 2, 2026

Uh oh!

github-actionsBot commented Jul 14, 2026

Uh oh!

github-actionsBot commented Jul 16, 2026

Uh oh!

github-actionsBot commented Jul 23, 2026

Uh oh!

github-actionsBot commented Jul 28, 2026

Uh oh!

snyk-ioBot commented Aug 3, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Aug 4, 2026

Uh oh!

github-actionsBot commented Aug 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

naman-contentstack commented Jun 10, 2026

Uh oh!

github-actionsBot commented Jun 10, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Jun 12, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

Uh oh!

github-actionsBot commented Jun 16, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Jun 28, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Jul 2, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Jul 14, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Jul 16, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Jul 23, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Jul 28, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

snyk-ioBot commented Aug 3, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actionsBot commented Aug 4, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

snyk-ioBot commented Aug 3, 2026•
edited
Loading