Changes for version 0.001 - 2026-04-24
- Initial release
- Vendor tree-sitter-bash 0.20.5 grammar sources
- Add Bash command extraction and security findings
- Add Text::Treesitter::Bash::Security::Checker with rules: PathTraversal, DangerousFlags, SensitiveAccess, EnvDangerousVars, UnquotedExpansion, MissingAbsolutePath
Modules
Parse Bash with Text::Treesitter and extract executable commands
Run security rules against parsed Bash commands
Base class for security rules
Detect dangerous flag combinations in commands
Detect dangerous environment variables in commands
Detect commands without absolute paths
Detect path traversal patterns in commands
Detect access to sensitive files and directories
Detect unquoted variable expansions that could split