CM-40753 - Add sync flow for Secrets and IaC

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+## [v1.10.0]
+
+- Add sync flow for Secrets and IaC
+
 ## [v1.9.4]
 
 - Fix empty IaC scan results on Windows
@@ -90,6 +94,8 @@
 
 The first stable release with the support of Secrets, SCA, TreeView, Violation Card, and more.
 
+[v1.10.0]: https://github.com/cycodehq/vscode-extension/releases/tag/v1.10.0
+
 [v1.9.4]: https://github.com/cycodehq/vscode-extension/releases/tag/v1.9.4
 
 [v1.9.3]: https://github.com/cycodehq/vscode-extension/releases/tag/v1.9.3
@@ -124,4 +130,4 @@ The first stable release with the support of Secrets, SCA, TreeView, Violation C
 
 [v1.0.0]: https://github.com/cycodehq/vscode-extension/releases/tag/v1.0.0
 
-[Unreleased]: https://github.com/cycodehq/vscode-extension/compare/v1.9.4...HEAD
+[Unreleased]: https://github.com/cycodehq/vscode-extension/compare/v1.10.0...HEAD

package.json

@@ -1,7 +1,7 @@
 {
   "name": "cycode",
   "displayName": "Cycode",
-  "version": "1.9.4",
+  "version": "1.10.0",
   "publisher": "cycode",
   "description": "Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.",
   "repository": {
@@ -139,11 +139,6 @@
           "type": "string",
           "default": "",
           "markdownDescription": "Changes the app URL when running scans. Equivalent to setting CYCODE_APP_URL env var in the CLI."
-        },
-        "cycode.experimentalScaSyncFlow": {
-          "type": "boolean",
-          "default": true,
-          "description": "Enable experimental SCA sync flow"
         }
       }
     },

src/cli-wrapper/cli-wrapper.ts

@@ -52,7 +52,12 @@ export const cliWrapper = {
 
     commandParams.push(generateUserAgentCommandParam(config));
     commandParams.push(CommandParameters.OutputFormatJson);
+
     commandParams.push(CliCommands.Scan);
+    commandParams.push(CommandParameters.scanType);
+    commandParams.push(CommandParameters.secretScanType);
+    commandParams.push(CommandParameters.Sync);
+
     commandParams.push(CliCommands.Path);
     commandParams.push(`"${params.path}"`);
 
@@ -79,15 +84,12 @@ export const cliWrapper = {
 
     commandParams.push(generateUserAgentCommandParam(config));
     commandParams.push(CommandParameters.OutputFormatJson);
+
     commandParams.push(CliCommands.Scan);
     commandParams.push(CommandParameters.scanType);
     commandParams.push(CommandParameters.scaScanType);
-
-    if (config.experimentalScaSyncFlow) {
-      // TODO(MarshalX): remove experimental setting if stable
-      commandParams.push(CommandParameters.Sync);
-      commandParams.push(CommandParameters.NoRestore);
-    }
+    commandParams.push(CommandParameters.Sync);
+    commandParams.push(CommandParameters.NoRestore);
 
     commandParams.push(CliCommands.Path);
     commandParams.push(`"${params.path}"`);
@@ -119,6 +121,7 @@ export const cliWrapper = {
     commandParams.push(CliCommands.Scan);
     commandParams.push(CommandParameters.scanType);
     commandParams.push(CommandParameters.iacScanType);
+    commandParams.push(CommandParameters.Sync);
 
     commandParams.push(CliCommands.Path);
     commandParams.push(`"${params.path}"`);

src/cli-wrapper/constants.ts

@@ -16,6 +16,7 @@ export enum CommandParameters {
   ByPath = '--by-path',
   UserAgent = '--user-agent',
   scanType = '--scan-type',
+  secretScanType = 'secret',
   scaScanType = 'sca',
   iacScanType = 'iac',
   sastScanType = 'sast',

src/cli-wrapper/types.ts

@@ -16,7 +16,6 @@ export interface IConfig {
   envName: string;
   envVersion: string;
   scanOnSaveEnabled: boolean;
-  experimentalScaSyncFlow: boolean;
 }
 
 export type CliConfig = {

src/constants.ts

@@ -132,7 +132,7 @@ export const getScanTypeDisplayName = (scanType: string): string => {
 
 export const DIAGNOSTIC_CODE_SEPARATOR = '::';
 
-export const REQUIRED_CLI_VERSION = '1.10.7';
+export const REQUIRED_CLI_VERSION = '1.11.0';
 
 export const CLI_GITHUB = {
   OWNER: 'cycodehq',

src/utils/config.ts

@@ -1,6 +1,5 @@
 import * as vscode from 'vscode';
 import {
-  experimentalScaSyncFlowProperty,
   extensionId,
   publisherId,
   scanOnSaveProperty,
@@ -69,12 +68,6 @@ export const config = {
         .get<boolean>(scanOnSaveProperty);
     return value === undefined ? false : value;
   },
-  get experimentalScaSyncFlow(): boolean {
-    const value = vscode.workspace
-        .getConfiguration(extensionId)
-        .get<boolean>(experimentalScaSyncFlowProperty);
-    return value === undefined ? false : value;
-  },
   get isOnPremiseInstallation(): boolean {
     return !config.cliEnv.CYCODE_API_URL.endsWith(CYCODE_DOMAIN);
   },

src/utils/texts.ts

@@ -3,8 +3,6 @@ export const publisherId = 'cycode';
 export const extensionName = 'Cycode';
 export const scanOnSaveProperty = 'scanOnSave';
 
-export const experimentalScaSyncFlowProperty = 'experimentalScaSyncFlow';
-
 export enum StatusBarTexts {
   ScanButton = '$(cycode-logo) Scan with Cycode',
   ScanWait = '$(loading~spin) Waiting for scan to complete….',