Download Latest Version dist-1.8.2-d9f0e2a.tar.gz (301.6 kB)
Email in envelope

Get an email when there's a new version of DeepSource MCP Server

Home / v1.8.1
Name Modified Size InfoDownloads / Week
Parent folder
dist-1.8.1-d48ac6a.tar.gz 2025-10-12 301.6 kB
0
dist-1.8.1-d48ac6a.zip 2025-10-12 478.0 kB
0
sbom.cdx.json 2025-10-12 663.4 kB
0
README.md 2025-10-12 2.3 kB
0
v1.8.1 source code.tar.gz 2025-10-12 535.1 kB
0
v1.8.1 source code.zip 2025-10-12 738.2 kB
0
Totals: 6 Items   2.7 MB 0

Patch Changes

  • #195 5c32dad - Refactor CI/CD workflows and improve Docker security

### CI/CD Improvements - Unified Build Process: Consolidated build into single job that creates reusable artifacts - Build Artifacts: Generated once and reused throughout workflow for consistency - Build Manifest: Added metadata tracking (SHA, timestamp, dependencies) - Tag Creation: Tags now created before building artifacts for better traceability - Artifact Naming: Include commit SHA for consistent naming across workflows

### Docker Support - Multi-Platform Builds: Added support for linux/amd64 and linux/arm64 - Docker Workflow: New reusable workflow for container image builds - Configuration: Docker releases controlled via ENABLE_DOCKER_RELEASE variable

### Security Enhancements - CodeQL Integration: Added dedicated security scanning workflow - Consolidated Scanning: Unified security checks in reusable workflow - Docker Security: Container images run as non-root user (nodejs:1001) - Trivy Scanning: Automated vulnerability detection in container images - Dependency Scanning: Enhanced vulnerability reporting

### Developer Experience - Issue Templates: Added bug report and feature request templates - PR Template: Comprehensive pull request template with checklist - Workflow Documentation: Enhanced comments for better maintainability - Better Validation: Improved changeset validation in PR workflow

### Infrastructure - NPM Packaging: Dedicated job for package preparation with attestations - SLSA Provenance: Generate attestations for supply chain security - Improved Permissions: Updated for container registry access - DeepSource Integration: Maintained test coverage reporting

### Technical Details - Removed redundant reusable-setup.yml (merged into other workflows) - Better job dependency graph for parallel execution - Consistent secret passing (DEEPSOURCE_DSN) - Enhanced artifact retention strategies

Source: README.md, updated 2025-10-12