From c620e69ab0387f83083f963a6a4e503c4e9dc6a8 Mon Sep 17 00:00:00 2001 From: alex <alex@coderabbit.ai> Date: Tue, 22 Oct 2024 16:49:53 -0400 Subject: [PATCH 1/2] add sast notes to changelog --- docs/changelog.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/changelog.md b/docs/changelog.md index 6274055..97e7206 100644 --- a/docs/changelog.md +++ b/docs/changelog.md @@ -5,6 +5,14 @@ description: The latest updates and changes to CodeRabbit. sidebar_position: 9 --- +## Security and SAST Remediation Improvements +#### Oct 22, 2024 +- CodeRabbit now seamlessly integrates with top SAST tools that create github check annotation comments like Codacy, SonarCloud, Code Climate, GitHub Advanced Security, Palo Alto Prisma Cloud, and more, enabling comprehensive security analysis directly within GitHub checks. +- We have added a [YouTube Tutorial](https://www.youtube.com/watch?v=tfy3FdsoUtU) for a step-by-step guide on using CodeRabbit with Codacy and SonarCloud during pull requests. +- Improved the [Semgrep Documentation](https://docs.coderabbit.ai/tools/semgrep). +- CodeRabbit now automatically detects Semgrep rulesets from default `semgrep.yml` or `semgrep.config.yml` files, eliminating the need for manual configuration. + + ## Related PRs and Label suggestions #### Sep 9, 2024 - Possibly related PRs: The walkthrough comment now includes a list of potentially related PRs to help you recall the past context. From 2b5a5f504a15e38ba811b1d1812408f6972e9833 Mon Sep 17 00:00:00 2001 From: alex <alex@coderabbit.ai> Date: Tue, 22 Oct 2024 16:52:30 -0400 Subject: [PATCH 2/2] fix update --- docs/changelog.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/changelog.md b/docs/changelog.md index 97e7206..6b835ef 100644 --- a/docs/changelog.md +++ b/docs/changelog.md @@ -7,7 +7,8 @@ sidebar_position: 9 ## Security and SAST Remediation Improvements #### Oct 22, 2024 -- CodeRabbit now seamlessly integrates with top SAST tools that create github check annotation comments like Codacy, SonarCloud, Code Climate, GitHub Advanced Security, Palo Alto Prisma Cloud, and more, enabling comprehensive security analysis directly within GitHub checks. +- Enabling comprehensive security analysis directly from context within GitHub Checks. +- CodeRabbit now seamlessly integrates with top SAST tools that create github check annotation comments like Codacy, SonarCloud, Code Climate, GitHub Advanced Security, Palo Alto Prisma Cloud, and more! - We have added a [YouTube Tutorial](https://www.youtube.com/watch?v=tfy3FdsoUtU) for a step-by-step guide on using CodeRabbit with Codacy and SonarCloud during pull requests. - Improved the [Semgrep Documentation](https://docs.coderabbit.ai/tools/semgrep). - CodeRabbit now automatically detects Semgrep rulesets from default `semgrep.yml` or `semgrep.config.yml` files, eliminating the need for manual configuration.