Skip to content

Commit bb93f61

Browse files
Add roadmap for future features
1 parent bdc340c commit bb93f61

1 file changed

Lines changed: 48 additions & 0 deletions

File tree

docs/README.md

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -319,6 +319,54 @@ plugins {
319319

320320
Check the `reportPath` configuration and ensure the directory is writable.
321321

322+
## Roadmap - Future Features
323+
324+
### Planned Features for Future Releases
325+
326+
#### 1. Extended API Key Detection
327+
- **Twilio/SendGrid/Mailgun keys**: Detect more third-party service keys
328+
- **OAuth tokens**: Detect OAuth access and refresh tokens
329+
- **Database connection strings**: Find exposed database credentials
330+
- **Suppression annotations**: Allow developers to suppress false positives
331+
332+
#### 2. DEX Analysis
333+
- **Method count per DEX**: Analyze method count limits (64K)
334+
- **DEX compression analysis**: Check compression effectiveness
335+
- **Native library ABI breakdown**: Analyze native libraries by architecture
336+
337+
#### 3. Dependency Analysis
338+
- **Outdated dependencies**: Check for available updates
339+
- **Security vulnerabilities**: Integrate with CVE databases
340+
- **Duplicate dependencies**: Find duplicate JAR files
341+
342+
#### 4. ProGuard/R8 Analysis
343+
- **Rules quality check**: Validate ProGuard rules
344+
- **Missing rules warning**: Suggest rules for common libraries
345+
- **Optimization suggestions**: Recommend R8 optimizations
346+
347+
#### 5. Network Security
348+
- **Network Security Config**: Analyze security configuration
349+
- **HTTP URL detection**: Find cleartext HTTP URLs in code
350+
- **Certificate pinning**: Check for certificate pinning implementation
351+
352+
#### 6. Enhanced Manifest Analysis
353+
- **Permission analysis**: Review permission usage
354+
- **Component security**: Detailed exported component analysis
355+
- **Intent filter security**: Check for intent filter vulnerabilities
356+
357+
#### 7. CI/CD Integration
358+
- **JSON/XML export**: Machine-readable report formats
359+
- **GitHub Security Alerts**: Integration with GitHub security tab
360+
- **Trend analysis**: Track issues across builds
361+
- **Slack/Teams notifications**: Alert on critical issues
362+
363+
#### 8. Custom Rules Engine
364+
- **User-defined patterns**: Allow custom regex rules
365+
- **Rule categories**: Organize custom rules by type
366+
- **Rule sharing**: Share rule sets between projects
367+
368+
---
369+
322370
## Contributing
323371

324372
Contributions are welcome! To add new features:

0 commit comments

Comments
 (0)