ts-sast Changelog¶

* Initial release as a standalone tool; the DevSkim rule pack and the demo application were first drafted for ts-scan and moved here to keep ts-scan an SBOM scanner
* `ts-sast scan` runs DevSkim with a VB6 language definition and a rule pack of 22 security rules for classic Visual Basic 6, and reports SARIF 2.1 with a ts-scan compatible header per run
* `-f text` renders a terminal summary; `--fail-on-findings` turns the scan into a CI gate
* `--devskim:executable`, `--devskim:forward` and `--devskim:ignore` follow ts-scan's backend option conventions; `--rules` adds rule directories
* Profile-based config file (`~/.ts-sast/config`), `tsproject.toml` project defaults and `TS_SAST_` environment variables
* `examples/vb6-legacy-insecure`, a deliberately insecure VB6 application that triggers every rule
* Docker image `trustsource/ts-sast` as the recommended way to run the scanner (multi-stage build: DevSkim installed on the .NET SDK, shipped on the .NET runtime image with Python) and PyPI package `ts-sast`, both released from version tags