@architect/inventory 2.1.2 → 2.1.3

package/changelog.md

@@ -2,6 +2,14 @@
 
 ---
 
+## [2.1.3] 2021-11-04
+
+### Fixed
+
+- Hardened runtime validation by ensuring non-string values will fail gracefully
+
+---
+
 ## [2.1.2] 2021-10-28
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@architect/inventory",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "description": "Architect project resource enumeration utility",
   "main": "src/index.js",
   "scripts": {
@@ -39,5 +39,12 @@
   },
   "eslintConfig": {
     "extends": "@architect/eslint-config"
+  },
+  "nyc": {
+    "check-coverage": true,
+    "branches": 100,
+    "lines": 100,
+    "functions": 100,
+    "statements": 100
   }
 }

package/readme.md

@@ -1,4 +1,4 @@
-[<img src="https://s3-us-west-2.amazonaws.com/arc.codes/architect-logo-500b@2x.png" width=500>](https://www.npmjs.com/package/@architect/inventory)
+[<img src="https://assets.arc.codes/architect-logo-500b@2x.png" width=500>](https://www.npmjs.com/package/@architect/inventory)
 
 ## [`@architect/inventory`](https://www.npmjs.com/package/@architect/inventory)
 

package/src/config/pragmas/populate-lambda/get-runtime.js

@@ -1,3 +1,4 @@
+let is = require('../../../lib/is')
 let { aliases, runtimes, runtimeList } = require('lambda-runtimes')
 
 // Runtime interpolater
@@ -18,5 +19,9 @@ module.exports = function getRuntime (config) {
       config.runtimeAlias = runtime
     }
   }
+  else if (is.defined(runtime)) {
+    // Someone did something funky like specify a number or bool, so coerce and let it fail validation
+    config.runtime = `${config.runtime}`
+  }
   return config
 }

package/src/validate/config.js

@@ -17,9 +17,9 @@ module.exports = function configValidator (params, inventory, errors) {
     errors.push(invalidMemoryMsg(`${globalMemory} MB (@aws)`))
   }
   // Runtime
-  if (globalRuntime &&
-      !allRuntimes.includes(globalRuntime) &&
-      !aliases[globalRuntime]) {
+  if ((globalRuntime && !is.string(globalRuntime)) ||
+      (globalRuntime && !allRuntimes.includes(globalRuntime) &&
+       !aliases[globalRuntime] && !aliases[globalRuntime.toLowerCase()])) {
     errors.push(`Invalid project-level runtime: ${globalRuntime}`)
   }
   // Timeout