From 1aee07178869b79d4e945fb0492dd3f0070cda3b Mon Sep 17 00:00:00 2001 From: Bharadwaj Date: Tue, 11 Aug 2026 22:00:46 +0530 Subject: [PATCH 1/2] test: add signature near-miss fixtures --- CHANGELOG.md | 3 +++ signatures/auth/firebase-auth.json | 4 ++++ signatures/auth/oauth-oidc.json | 4 ++++ signatures/db/activerecord.json | 4 ++++ signatures/infra/github-actions.json | 6 +++++- signatures/testing/jest.json | 4 ++++ 6 files changed, 24 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4d258f6..f6feb83 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,9 @@ always bump at least minor; breaking schema changes bump major. ## [0.11.0] - 2026-08-10 +### Fixed +- Add near-miss negative fixtures for Firebase Auth, OAuth/OIDC, ActiveRecord, GitHub Actions, and Jest signature detection. + ### Added - Add `payments/razorpay` to the closed skill taxonomy (#14). - Detect Razorpay via `razorpay` and `react-native-razorpay` imports, mapped to `payments/razorpay` (#14). diff --git a/signatures/auth/firebase-auth.json b/signatures/auth/firebase-auth.json index 52b53e8..2faf8c2 100644 --- a/signatures/auth/firebase-auth.json +++ b/signatures/auth/firebase-auth.json @@ -37,6 +37,10 @@ { "path": "src/lib/clerk.ts", "diff": "import { getAuth } from \"@clerk/nextjs/server\";\nconst { userId } = getAuth(req);" + }, + { + "path": "src/docs/examples.ts", + "diff": "Firebase authentication uses signInWithRedirect(auth, provider) for browser login." } ] } diff --git a/signatures/auth/oauth-oidc.json b/signatures/auth/oauth-oidc.json index 92bff62..f1d5447 100644 --- a/signatures/auth/oauth-oidc.json +++ b/signatures/auth/oauth-oidc.json @@ -35,6 +35,10 @@ { "path": "README.md", "diff": "We discussed adding generic OAuth/OIDC support with PKCE and discovery documents but shipped Supabase's built-in provider instead." + }, + { + "path": "src/auth/jose-oidc.ts", + "diff": "const packageName = \"openid-client\";\nconst discoveryUrl = `${issuer}/.well-known/openid-config`;\nconst response = await fetch(discoveryUrl);" } ] } diff --git a/signatures/db/activerecord.json b/signatures/db/activerecord.json index 899c038..477847f 100644 --- a/signatures/db/activerecord.json +++ b/signatures/db/activerecord.json @@ -15,6 +15,10 @@ { "path": "README.md", "diff": "We use ActiveRecord for most models but this one talks to an external API instead of a table." + }, + { + "path": "app/services/user_importer.rb", + "diff": "class UserImporter < ApplicationService\n def call\n # import users from the external API\n end\nend" } ] } diff --git a/signatures/infra/github-actions.json b/signatures/infra/github-actions.json index 171a979..46ac0d9 100644 --- a/signatures/infra/github-actions.json +++ b/signatures/infra/github-actions.json @@ -13,7 +13,11 @@ { "path": ".github/workflows/ci.yml", "diff": "name: CI\non: [push]\njobs:\n test:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v4\n - run: npm test" } ], "negative": [ - { "path": "README.md", "diff": "We use github actions for CI, but the workflow file hasn't been checked into the repo yet." } + { "path": "README.md", "diff": "We use github actions for CI, but the workflow file hasn't been checked into the repo yet." }, + { + "path": "README.md", + "diff": "We use github actions for CI, but the workflow file hasn't been checked into the repo yet." + } ] } } diff --git a/signatures/testing/jest.json b/signatures/testing/jest.json index 2ad6e75..3f4c0a1 100644 --- a/signatures/testing/jest.json +++ b/signatures/testing/jest.json @@ -19,6 +19,10 @@ { "path": "src/foo.test.ts", "diff": "import { describe, it, expect } from \"vitest\";\nit(\"matches the snapshot\", () => {\n expect(result).toMatchSnapshot();\n});" + }, + { + "path": "src/foo.test.ts", + "diff": "import { vi } from \"vitest\";\nconst mockFn = vi.fn();\nconst spy = vi.spyOn(console, \"log\");\nvi.mock(\"./foo\");\nconst framework = \"jest\";" } ] } From 31df0cc6cb463ce186a8e35dc84e7a73e121cf79 Mon Sep 17 00:00:00 2001 From: Bharadwaj Date: Wed, 12 Aug 2026 19:50:50 +0530 Subject: [PATCH 2/2] test: strengthen Tier 2 negative fixtures --- CHANGELOG.md | 6 ++++-- signatures/auth/firebase-auth.json | 2 +- signatures/infra/github-actions.json | 4 ++-- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f6feb83..9e28723 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,11 +5,13 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: strict [semver](https://semver.org/) — bundle schema changes always bump at least minor; breaking schema changes bump major. -## [0.11.0] - 2026-08-10 +## [Unreleased] -### Fixed +### Added - Add near-miss negative fixtures for Firebase Auth, OAuth/OIDC, ActiveRecord, GitHub Actions, and Jest signature detection. +## [0.11.0] - 2026-08-10 + ### Added - Add `payments/razorpay` to the closed skill taxonomy (#14). - Detect Razorpay via `razorpay` and `react-native-razorpay` imports, mapped to `payments/razorpay` (#14). diff --git a/signatures/auth/firebase-auth.json b/signatures/auth/firebase-auth.json index 2faf8c2..9650c68 100644 --- a/signatures/auth/firebase-auth.json +++ b/signatures/auth/firebase-auth.json @@ -40,7 +40,7 @@ }, { "path": "src/docs/examples.ts", - "diff": "Firebase authentication uses signInWithRedirect(auth, provider) for browser login." + "diff": "// Firebase authentication uses signInWithRedirect(auth, provider) for browser login." } ] } diff --git a/signatures/infra/github-actions.json b/signatures/infra/github-actions.json index 46ac0d9..019ebb6 100644 --- a/signatures/infra/github-actions.json +++ b/signatures/infra/github-actions.json @@ -15,8 +15,8 @@ "negative": [ { "path": "README.md", "diff": "We use github actions for CI, but the workflow file hasn't been checked into the repo yet." }, { - "path": "README.md", - "diff": "We use github actions for CI, but the workflow file hasn't been checked into the repo yet." + "path": "README.md", + "diff": "# Example workflow: uses: actions/checkout@v4\n" } ] }