@catladder/cli 0.0.0-main-6a946974 → 0.0.0-main-7c9385f9

package/dist/bundles/catci/index.js

@@ -6,104 +6,32 @@
 
 "use strict";
 
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __read = (this && this.__read) || function (o, n) {
-    var m = typeof Symbol === "function" && o[Symbol.iterator];
-    if (!m) return o;
-    var i = m.call(o), r, ar = [], e;
-    try {
-        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-    }
-    catch (error) { e = { error: error }; }
-    finally {
-        try {
-            if (r && !r.done && (m = i["return"])) m.call(i);
-        }
-        finally { if (e) throw e.error; }
-    }
-    return ar;
-};
-var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
-    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-        if (ar || !(i in from)) {
-            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-            ar[i] = from[i];
-        }
-    }
-    return to.concat(ar || Array.prototype.slice.call(from));
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.runCatCi = void 0;
-var vorpal_1 = __importDefault(__nccwpck_require__(1491));
-var packageInfos_1 = __importDefault(__nccwpck_require__(2260));
-var commands_1 = __importDefault(__nccwpck_require__(4288));
+const vorpal_1 = __importDefault(__nccwpck_require__(1491));
+const packageInfos_1 = __importDefault(__nccwpck_require__(2260));
+const commands_1 = __importDefault(__nccwpck_require__(4288));
 function reconstructArgs(args) {
-    return __spreadArray([args[0]], __read(args.slice(1).map(function (arg) { return "\"".concat(arg, "\""); })), false).join(" ");
+    return [args[0], ...args.slice(1).map((arg) => `"${arg}"`)].join(" ");
 }
-function runCatCi() {
-    return __awaiter(this, void 0, void 0, function () {
-        var vorpal, isInteractive, args;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0:
-                    vorpal = new vorpal_1.default();
-                    process.exitCode = 0;
-                    vorpal.delimiter("catci $").history("catci").version(packageInfos_1.default.version);
-                    (0, commands_1.default)(vorpal);
-                    isInteractive = process.argv.length <= 2;
-                    if (!isInteractive) return [3 /*break*/, 1];
-                    vorpal.log("Catladder CI Tools \uD83D\uDE3B\uD83D\uDD28 version ".concat(packageInfos_1.default.version)).show();
-                    return [3 /*break*/, 3];
-                case 1:
-                    process.exitCode = 1;
-                    args = reconstructArgs(process.argv.slice(2));
-                    return [4 /*yield*/, vorpal.exec(args)];
-                case 2:
-                    _a.sent();
-                    process.exit();
-                    _a.label = 3;
-                case 3: return [2 /*return*/];
-            }
-        });
-    });
+async function runCatCi() {
+    const vorpal = new vorpal_1.default();
+    process.exitCode = 0;
+    vorpal.delimiter("catci $").history("catci").version(packageInfos_1.default.version);
+    (0, commands_1.default)(vorpal);
+    const isInteractive = process.argv.length <= 2;
+    if (isInteractive) {
+        vorpal.log(`Catladder CI Tools 😻🔨 version ${packageInfos_1.default.version}`).show();
+    }
+    else {
+        process.exitCode = 1;
+        const args = reconstructArgs(process.argv.slice(2));
+        await vorpal.exec(args);
+        process.exit();
+    }
 }
 exports.runCatCi = runCatCi;
 //# sourceMappingURL=catci.js.map
@@ -115,115 +43,109 @@ exports.runCatCi = runCatCi;
 
 "use strict";
 
-var __read = (this && this.__read) || function (o, n) {
-    var m = typeof Symbol === "function" && o[Symbol.iterator];
-    if (!m) return o;
-    var i = m.call(o), r, ar = [], e;
-    try {
-        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-    }
-    catch (error) { e = { error: error }; }
-    finally {
-        try {
-            if (r && !r.done && (m = i["return"])) m.call(i);
-        }
-        finally { if (e) throw e.error; }
-    }
-    return ar;
-};
-var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
-    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-        if (ar || !(i in from)) {
-            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-            ar[i] = from[i];
-        }
-    }
-    return to.concat(ar || Array.prototype.slice.call(from));
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.evaluateDocument = exports.makeTemplate = void 0;
-var topics_json_1 = __importDefault(__nccwpck_require__(1888));
-var allTopics = topics_json_1.default;
-var checkYes = "✅";
-var checkNo = "❌";
-var checkPlaceholder = "".concat(checkYes, "/").concat(checkNo);
-var responsiblePlaceholder = "@...";
-var rows = [
+const topics_json_1 = __importDefault(__nccwpck_require__(1888));
+const allTopics = topics_json_1.default;
+const checkYes = "✅";
+const checkNo = "❌";
+const checkPlaceholder = `${checkYes}/${checkNo}`;
+const responsiblePlaceholder = "@...";
+const rows = [
     ["Responsible", checkPlaceholder, "Description", "Note", "More Information"],
-].concat(allTopics.map(function (t) { return [
+].concat(allTopics.map((t) => [
     Array(t.responsibles).fill(responsiblePlaceholder).join(", "),
     checkPlaceholder,
     t.description,
     "",
     t.more,
-]; }));
+]));
 function makeTable(rows) {
-    var colWidths = calculateColumnWidths(rows);
-    return "\n".concat(makeRow(rows[0], colWidths, " "), "\n").concat(makeRow(rows[0].map(function () { return ""; }), colWidths, "-"), "\n").concat(rows
+    const colWidths = calculateColumnWidths(rows);
+    return `
+${makeRow(rows[0], colWidths, " ")}
+${makeRow(rows[0].map(() => ""), colWidths, "-")}
+${rows
         .slice(1)
-        .map(function (row) { return makeRow(row, colWidths, " "); })
-        .join("\n"), "\n");
+        .map((row) => makeRow(row, colWidths, " "))
+        .join("\n")}
+`;
 }
 function calculateColumnWidths(rows) {
-    var columnCount = rows[0].length;
-    return Array.from({ length: columnCount }, function (_, i) { return i; }).map(function (columnIndex) {
-        return Math.max.apply(Math, __spreadArray([], __read(rows.map(function (row) { return row[columnIndex].length; })), false));
-    });
+    const columnCount = rows[0].length;
+    return Array.from({ length: columnCount }, (_, i) => i).map((columnIndex) => Math.max(...rows.map((row) => row[columnIndex].length)));
 }
 function makeRow(row, colWidths, fillString) {
-    return "| ".concat(row
-        .map(function (cell, i) { return cell.padEnd(colWidths[i], fillString); })
-        .join(" | "), " |");
+    return `| ${row
+        .map((cell, i) => cell.padEnd(colWidths[i], fillString))
+        .join(" | ")} |`;
 }
 function makeTemplate() {
-    return "\n# Security Audit Report\n\nA security audit report document is a comprehensive assessment of an application's security posture, containing security topics that auditors can mark to indicate the state of various security aspects.\n\nIt serves as a structured guide for security team to evaluate different security factors such as authentication, authorization, data encryption, input validation, and more.\n\n## General Information\n\n- Project Owner is @...\n- Dev team:\n  - @...\n  - @...\n  - @...\n\n## Project Security\n\n".concat(makeTable(rows), "\n\n");
+    return `
+# Security Audit Report
+
+A security audit report document is a comprehensive assessment of an application's security posture, containing security topics that auditors can mark to indicate the state of various security aspects.
+
+It serves as a structured guide for security team to evaluate different security factors such as authentication, authorization, data encryption, input validation, and more.
+
+## General Information
+
+- Project Owner is @...
+- Dev team:
+  - @...
+  - @...
+  - @...
+
+## Project Security
+
+${makeTable(rows)}
+
+`;
 }
 exports.makeTemplate = makeTemplate;
 function evaluateDocument(document) {
     var _a, _b;
-    var rawRows = (_b = (_a = document.match(/^\s*\|.*?\|\s*$/gm)) === null || _a === void 0 ? void 0 : _a.map(function (row) { return row.trim(); })) !== null && _b !== void 0 ? _b : [];
-    var matchedRows = rawRows
-        .map(function (row) { return row.split("|").map(function (col) { return col.trim(); }); })
+    const rawRows = (_b = (_a = document.match(/^\s*\|.*?\|\s*$/gm)) === null || _a === void 0 ? void 0 : _a.map((row) => row.trim())) !== null && _b !== void 0 ? _b : [];
+    const matchedRows = rawRows
+        .map((row) => row.split("|").map((col) => col.trim()))
         .slice(2);
-    var knownTopics = new Set(allTopics.map(function (t) { return t.description; }));
-    var topics = matchedRows.map(function (col) {
-        var responsibles = col[1].split(", ");
-        var answer = col[2];
-        var description = col[3];
-        var note = col[4];
-        var isUnknown = !knownTopics.has(description);
-        var isAnswered = !isUnknown &&
+    const knownTopics = new Set(allTopics.map((t) => t.description));
+    const topics = matchedRows.map((col) => {
+        const responsibles = col[1].split(", ");
+        const answer = col[2];
+        const description = col[3];
+        const note = col[4];
+        const isUnknown = !knownTopics.has(description);
+        const isAnswered = !isUnknown &&
             !answer.includes(checkPlaceholder) &&
-            !responsibles.some(function (responsible) {
-                return responsible.includes(responsiblePlaceholder);
-            });
-        var isSecured = !isUnknown && isAnswered && answer.includes(checkYes);
+            !responsibles.some((responsible) => responsible.includes(responsiblePlaceholder));
+        const isSecured = !isUnknown && isAnswered && answer.includes(checkYes);
         return {
-            responsibles: responsibles,
-            answer: answer,
-            description: description,
-            note: note,
-            isUnknown: isUnknown,
-            isAnswered: isAnswered,
-            isSecured: isSecured,
+            responsibles,
+            answer,
+            description,
+            note,
+            isUnknown,
+            isAnswered,
+            isSecured,
         };
     });
-    var totalTopics = allTopics.length;
-    var answeredTopics = topics.filter(function (t) { return t.isAnswered; }).length;
-    var securedTopics = topics.filter(function (t) { return t.isSecured; }).length;
-    var unknownTopics = topics.filter(function (t) { return t.isUnknown; }).length;
-    var rating = Math.round((securedTopics / totalTopics) * 100);
+    const totalTopics = allTopics.length;
+    const answeredTopics = topics.filter((t) => t.isAnswered).length;
+    const securedTopics = topics.filter((t) => t.isSecured).length;
+    const unknownTopics = topics.filter((t) => t.isUnknown).length;
+    const rating = Math.round((securedTopics / totalTopics) * 100);
     return {
-        topics: topics,
+        topics,
         score: {
-            rating: rating,
-            totalTopics: totalTopics,
-            answeredTopics: answeredTopics,
-            securedTopics: securedTopics,
-            unknownTopics: unknownTopics,
+            rating,
+            totalTopics,
+            answeredTopics,
+            securedTopics,
+            unknownTopics,
         },
     };
 }
@@ -233,52 +155,16 @@ exports.evaluateDocument = evaluateDocument;
 /***/ }),
 
 /***/ 4288:
-/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
 "use strict";
 
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-var evaluateSecurityAudit_1 = __nccwpck_require__(6725);
-var rest_1 = __nccwpck_require__(1084);
-var createSecurityAuditMergeRequest_1 = __nccwpck_require__(8933);
-var ts_results_es_1 = __nccwpck_require__(2807);
-var GITLAB_HOST = "https://git.panter.ch";
+const evaluateSecurityAudit_1 = __nccwpck_require__(6725);
+const rest_1 = __nccwpck_require__(1084);
+const createSecurityAuditMergeRequest_1 = __nccwpck_require__(8933);
+const ts_results_es_1 = __nccwpck_require__(2807);
+const GITLAB_HOST = "https://git.panter.ch";
 function default_1(vorpal) {
     commandCiJob(vorpal);
     commandEvaluate(vorpal);
@@ -286,257 +172,158 @@ function default_1(vorpal) {
 }
 exports["default"] = default_1;
 function resultAsExitCode(func) {
-    var _this = this;
-    return function (args) { return __awaiter(_this, void 0, void 0, function () {
-        var result;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, func(args)];
-                case 1:
-                    result = _a.sent();
-                    process.exitCode = result.isErr() ? 1 : 0;
-                    return [2 /*return*/];
+    return async (args) => {
+        const result = await func(args);
+        process.exitCode = result.isErr() ? 1 : 0;
+    };
+}
+async function commandCiJob(vorpal) {
+    vorpal
+        .command("security-audit-ci-job <path> <token> <mainBranch> <projectId> <userId>", `Evaluates security audit document. If the document can't be evaluated or does not exist, creates a new MR with security audit document template.
+
+<path> root path of a project with security audit document (${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME})
+<token> gitlab token with 'api' scopes and permissions to create a new branch
+<main-branch> main branch name
+<project-id> project id to create security audit for
+<user-id> gitlab user id that will be assignee of the audit
+`)
+        .action(resultAsExitCode(async (args) => {
+        const evaluation = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: args.path });
+        if (evaluation.isErr()) {
+            console.log("could not evaluate security audit document");
+            console.log("creating new merge request with security audit template...");
+            const { token, mainBranch, projectId, userId } = args;
+            const api = new rest_1.Gitlab({
+                host: GITLAB_HOST,
+                token,
+            });
+            const mr = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+                api,
+                mainBranch,
+                projectId,
+                userId: parseInt(userId),
+            });
+            if (mr.isErr()) {
+                console.error(`could not create merge request with security audit template: ${mr.error}`);
+                return mr;
             }
-        });
-    }); };
+            console.log("security audit merge request created successfully");
+            console.log(`please finish the MR by updating SECURITY.md document: ${mr.value.web_url}`);
+            return (0, ts_results_es_1.Err)("merge request created");
+        }
+        if (evaluation.value.score.answeredTopics === 0) {
+            console.error("audit document has no answered topics");
+            console.error(`please answer security topics in ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} by adding responsible people and check/cross in the table`);
+            return (0, ts_results_es_1.Err)("audit document has no answered topics");
+        }
+        console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
+        return (0, ts_results_es_1.Ok)({});
+    }));
 }
-function commandCiJob(vorpal) {
-    return __awaiter(this, void 0, void 0, function () {
-        var _this = this;
-        return __generator(this, function (_a) {
-            vorpal
-                .command("security-audit-ci-job <path> <token> <mainBranch> <projectId> <userId>", "Evaluates security audit document. If the document can't be evaluated or does not exist, creates a new MR with security audit document template.\n\n<path> root path of a project with security audit document (".concat(createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME, ")\n<token> gitlab token with 'api' scopes and permissions to create a new branch\n<main-branch> main branch name\n<project-id> project id to create security audit for\n<user-id> gitlab user id that will be assignee of the audit\n"))
-                .action(resultAsExitCode(function (args) { return __awaiter(_this, void 0, void 0, function () {
-                var evaluation, token, mainBranch, projectId, userId, api, mr;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: args.path })];
-                        case 1:
-                            evaluation = _a.sent();
-                            if (!evaluation.isErr()) return [3 /*break*/, 3];
-                            console.log("could not evaluate security audit document");
-                            console.log("creating new merge request with security audit template...");
-                            token = args.token, mainBranch = args.mainBranch, projectId = args.projectId, userId = args.userId;
-                            api = new rest_1.Gitlab({
-                                host: GITLAB_HOST,
-                                token: token,
-                            });
-                            return [4 /*yield*/, (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
-                                    api: api,
-                                    mainBranch: mainBranch,
-                                    projectId: projectId,
-                                    userId: parseInt(userId),
-                                })];
-                        case 2:
-                            mr = _a.sent();
-                            if (mr.isErr()) {
-                                console.error("could not create merge request with security audit template: ".concat(mr.error));
-                                return [2 /*return*/, mr];
-                            }
-                            console.log("security audit merge request created successfully");
-                            console.log("please finish the MR by updating SECURITY.md document: ".concat(mr.value.web_url));
-                            return [2 /*return*/, (0, ts_results_es_1.Err)("merge request created")];
-                        case 3:
-                            if (evaluation.value.score.answeredTopics === 0) {
-                                console.error("audit document has no answered topics");
-                                console.error("please answer security topics in ".concat(createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME, " by adding responsible people and check/cross in the table"));
-                                return [2 /*return*/, (0, ts_results_es_1.Err)("audit document has no answered topics")];
-                            }
-                            console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
-                            return [2 /*return*/, (0, ts_results_es_1.Ok)({})];
-                    }
-                });
-            }); }));
-            return [2 /*return*/];
-        });
-    });
+async function commandEvaluate(vorpal) {
+    vorpal
+        .command("security-audit-evaluate <path>", "Evaluates security audit document in given <path>")
+        .action(resultAsExitCode(async (args) => {
+        console.log("evaluating security audit document...");
+        const result = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: args.path });
+        if (result.isErr()) {
+            console.error(result.error);
+            console.error(`please make sure the security audit document ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} is in the repository`);
+        }
+        else {
+            console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(result.value));
+        }
+        return result;
+    }));
 }
-function commandEvaluate(vorpal) {
-    return __awaiter(this, void 0, void 0, function () {
-        var _this = this;
-        return __generator(this, function (_a) {
-            vorpal
-                .command("security-audit-evaluate <path>", "Evaluates security audit document in given <path>")
-                .action(resultAsExitCode(function (args) { return __awaiter(_this, void 0, void 0, function () {
-                var result;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            console.log("evaluating security audit document...");
-                            return [4 /*yield*/, (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: args.path })];
-                        case 1:
-                            result = _a.sent();
-                            if (result.isErr()) {
-                                console.error(result.error);
-                                console.error("please make sure the security audit document ".concat(createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME, " is in the repository"));
-                            }
-                            else {
-                                console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(result.value));
-                            }
-                            return [2 /*return*/, result];
-                    }
-                });
-            }); }));
-            return [2 /*return*/];
+async function commandCreate(vorpal) {
+    vorpal
+        .command("security-audit-create <token> <mainBranch> <projectId> <userId>", `Creates a MR in given project with the latest security audit template document
+
+<token> gitlab token with 'api' scopes and permissions to create a new branch
+<main-branch> main branch name
+<project-id> project id to create security audit for
+<user-id> gitlab user id that will be assignee of the audit
+`)
+        .action(resultAsExitCode(async (args) => {
+        const { token, mainBranch, projectId, userId } = args;
+        const api = new rest_1.Gitlab({
+            host: GITLAB_HOST,
+            token,
         });
-    });
-}
-function commandCreate(vorpal) {
-    return __awaiter(this, void 0, void 0, function () {
-        var _this = this;
-        return __generator(this, function (_a) {
-            vorpal
-                .command("security-audit-create <token> <mainBranch> <projectId> <userId>", "Creates a MR in given project with the latest security audit template document\n\n<token> gitlab token with 'api' scopes and permissions to create a new branch\n<main-branch> main branch name\n<project-id> project id to create security audit for\n<user-id> gitlab user id that will be assignee of the audit\n")
-                .action(resultAsExitCode(function (args) { return __awaiter(_this, void 0, void 0, function () {
-                var token, mainBranch, projectId, userId, api, result;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            token = args.token, mainBranch = args.mainBranch, projectId = args.projectId, userId = args.userId;
-                            api = new rest_1.Gitlab({
-                                host: GITLAB_HOST,
-                                token: token,
-                            });
-                            return [4 /*yield*/, (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
-                                    api: api,
-                                    mainBranch: mainBranch,
-                                    projectId: projectId,
-                                    userId: parseInt(userId),
-                                })];
-                        case 1:
-                            result = _a.sent();
-                            if (result.isErr()) {
-                                console.error("could not create security audit merge request: ".concat(result.error));
-                            }
-                            else {
-                                console.log("security audit merge request created successfully");
-                                console.log("please finish the MR by updating SECURITY.md document: ".concat(result.value.web_url));
-                            }
-                            return [2 /*return*/, result];
-                    }
-                });
-            }); }));
-            return [2 /*return*/];
+        const result = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+            api,
+            mainBranch,
+            projectId,
+            userId: parseInt(userId),
         });
-    });
+        if (result.isErr()) {
+            console.error(`could not create security audit merge request: ${result.error}`);
+        }
+        else {
+            console.log("security audit merge request created successfully");
+            console.log(`please finish the MR by updating SECURITY.md document: ${result.value.web_url}`);
+        }
+        return result;
+    }));
 }
 //# sourceMappingURL=commands.js.map
 
 /***/ }),
 
 /***/ 8933:
-/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
 "use strict";
 
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.createSecurityAuditMergeRequest = exports.SECURITY_AUDIT_FILE_NAME = void 0;
-var ts_results_es_1 = __nccwpck_require__(2807);
-var auditDocument_1 = __nccwpck_require__(2488);
+const ts_results_es_1 = __nccwpck_require__(2807);
+const auditDocument_1 = __nccwpck_require__(2488);
 function makeDatedBranchName(branchName) {
-    var date = new Date().toISOString().slice(0, -5).replaceAll(/[:.T]/g, "-");
-    return "".concat(branchName, "-").concat(date);
+    const date = new Date().toISOString().slice(0, -5).replaceAll(/[:.T]/g, "-");
+    return `${branchName}-${date}`;
 }
-var MR_TITLE = "Draft: chore(security): add security audit document";
+const MR_TITLE = "Draft: chore(security): add security audit document";
 exports.SECURITY_AUDIT_FILE_NAME = "SECURITY.md";
-function createSecurityAuditMergeRequest(_a) {
-    return __awaiter(this, arguments, void 0, function (_b) {
-        var mrs, existingMr, auditTemplate, branch, commit, mr;
-        var projectId = _b.projectId, mainBranch = _b.mainBranch, userId = _b.userId, api = _b.api;
-        return __generator(this, function (_c) {
-            switch (_c.label) {
-                case 0: return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
-                        return api.MergeRequests.all({
-                            state: "opened",
-                            wip: "yes",
-                            labels: "security-audit",
-                        });
-                    })];
-                case 1:
-                    mrs = (_c.sent()).mapErr(function () { return "could not search for existing merge requests"; });
-                    if (mrs.isErr())
-                        return [2 /*return*/, mrs];
-                    existingMr = mrs.value[0];
-                    if (existingMr)
-                        return [2 /*return*/, (0, ts_results_es_1.Err)("open merge request with security audit already exists: ".concat(existingMr.web_url))];
-                    auditTemplate = ts_results_es_1.Result.wrap(function () { return (0, auditDocument_1.makeTemplate)(); }).mapErr(function () { return "could not make security audit template document"; });
-                    if (auditTemplate.isErr())
-                        return [2 /*return*/, auditTemplate];
-                    return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
-                            return api.Branches.create(projectId, makeDatedBranchName("chore/security-audit"), mainBranch);
-                        })];
-                case 2:
-                    branch = (_c.sent()).mapErr(function (e) {
-                        console.log(e);
-                        return "could not create branch";
-                    });
-                    if (branch.isErr())
-                        return [2 /*return*/, branch];
-                    return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
-                            return api.Commits.create(projectId, branch.value.name, "chore(security): add empty security audit document template", [
-                                {
-                                    action: "create",
-                                    filePath: exports.SECURITY_AUDIT_FILE_NAME,
-                                    content: auditTemplate.value,
-                                    encoding: "text",
-                                },
-                            ]);
-                        })];
-                case 3:
-                    commit = (_c.sent()).mapErr(function () { return "could not create commit"; });
-                    if (commit.isErr())
-                        return [2 /*return*/, commit];
-                    return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
-                            return api.MergeRequests.create(projectId, branch.value.name, mainBranch, MR_TITLE, {
-                                description: "Please follow and update security audit document in `".concat(exports.SECURITY_AUDIT_FILE_NAME, "`."),
-                                assigneeId: userId,
-                                squash: true,
-                                labels: "security-audit",
-                                removeSourceBranch: true,
-                            });
-                        })];
-                case 4:
-                    mr = (_c.sent()).mapErr(function () { return "could not create merge request"; });
-                    return [2 /*return*/, mr];
-            }
-        });
+async function createSecurityAuditMergeRequest({ projectId, mainBranch, userId, api, }) {
+    const mrs = (await ts_results_es_1.Result.wrapAsync(() => api.MergeRequests.all({
+        state: "opened",
+        wip: "yes",
+        labels: "security-audit",
+    }))).mapErr(() => `could not search for existing merge requests`);
+    if (mrs.isErr())
+        return mrs;
+    const existingMr = mrs.value[0];
+    if (existingMr)
+        return (0, ts_results_es_1.Err)(`open merge request with security audit already exists: ${existingMr.web_url}`);
+    const auditTemplate = ts_results_es_1.Result.wrap(() => (0, auditDocument_1.makeTemplate)()).mapErr(() => "could not make security audit template document");
+    if (auditTemplate.isErr())
+        return auditTemplate;
+    const branch = (await ts_results_es_1.Result.wrapAsync(() => api.Branches.create(projectId, makeDatedBranchName("chore/security-audit"), mainBranch))).mapErr((e) => {
+        console.log(e);
+        return "could not create branch";
     });
+    if (branch.isErr())
+        return branch;
+    const commit = (await ts_results_es_1.Result.wrapAsync(() => api.Commits.create(projectId, branch.value.name, "chore(security): add empty security audit document template", [
+        {
+            action: "create",
+            filePath: exports.SECURITY_AUDIT_FILE_NAME,
+            content: auditTemplate.value,
+            encoding: "text",
+        },
+    ]))).mapErr(() => "could not create commit");
+    if (commit.isErr())
+        return commit;
+    const mr = (await ts_results_es_1.Result.wrapAsync(() => api.MergeRequests.create(projectId, branch.value.name, mainBranch, MR_TITLE, {
+        description: `Please follow and update security audit document in \`${exports.SECURITY_AUDIT_FILE_NAME}\`.`,
+        assigneeId: userId,
+        squash: true,
+        labels: "security-audit",
+        removeSourceBranch: true,
+    }))).mapErr(() => "could not create merge request");
+    return mr;
 }
 exports.createSecurityAuditMergeRequest = createSecurityAuditMergeRequest;
 //# sourceMappingURL=createSecurityAuditMergeRequest.js.map
@@ -544,82 +331,34 @@ exports.createSecurityAuditMergeRequest = createSecurityAuditMergeRequest;
 /***/ }),
 
 /***/ 6725:
-/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
 "use strict";
 
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.makeSecurityAuditOverview = exports.evaluateSecurityAudit = void 0;
-var ts_results_es_1 = __nccwpck_require__(2807);
-var path_1 = __nccwpck_require__(1017);
-var promises_1 = __nccwpck_require__(3292);
-var createSecurityAuditMergeRequest_1 = __nccwpck_require__(8933);
-var auditDocument_1 = __nccwpck_require__(2488);
-function evaluateSecurityAudit(_a) {
-    return __awaiter(this, arguments, void 0, function (_b) {
-        var _this = this;
-        var path = _b.path;
-        return __generator(this, function (_c) {
-            switch (_c.label) {
-                case 0: return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () { return __awaiter(_this, void 0, void 0, function () {
-                        var filePath, docData, doc;
-                        return __generator(this, function (_a) {
-                            switch (_a.label) {
-                                case 0:
-                                    filePath = (0, path_1.join)(path, createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME);
-                                    return [4 /*yield*/, (0, promises_1.readFile)(filePath)];
-                                case 1:
-                                    docData = _a.sent();
-                                    doc = docData.toString("utf-8");
-                                    return [2 /*return*/, (0, auditDocument_1.evaluateDocument)(doc)];
-                            }
-                        });
-                    }); })];
-                case 1: return [2 /*return*/, (_c.sent()).mapErr(function (e) { return "could not evaluate ".concat(createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME, ": ").concat(e); })];
-            }
-        });
-    });
+const ts_results_es_1 = __nccwpck_require__(2807);
+const path_1 = __nccwpck_require__(1017);
+const promises_1 = __nccwpck_require__(3292);
+const createSecurityAuditMergeRequest_1 = __nccwpck_require__(8933);
+const auditDocument_1 = __nccwpck_require__(2488);
+async function evaluateSecurityAudit({ path }) {
+    return (await ts_results_es_1.Result.wrapAsync(async () => {
+        const filePath = (0, path_1.join)(path, createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME);
+        const docData = await (0, promises_1.readFile)(filePath);
+        const doc = docData.toString("utf-8");
+        return (0, auditDocument_1.evaluateDocument)(doc);
+    })).mapErr((e) => `could not evaluate ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}: ${e}`);
 }
 exports.evaluateSecurityAudit = evaluateSecurityAudit;
 function makeSecurityAuditOverview(evaluation) {
-    var ratingToEmo = function (r) { return (r < 33 ? "🟥" : r < 66 ? "🟨" : "🟩"); };
-    return "Project security posture overview:\n \uD83E\uDDD0 Total topics: ".concat(evaluation.score.totalTopics, "\n \uD83D\uDD12 Secured topics: ").concat(evaluation.score.securedTopics, "\n \uD83D\uDCE2 Answered topics: ").concat(evaluation.score.answeredTopics, "\n \u2754 Unknown topics: ").concat(evaluation.score.unknownTopics, "\n \uD83D\uDCCA Rating: ").concat(ratingToEmo(evaluation.score.rating), " ").concat(evaluation.score.rating, "/100");
+    const ratingToEmo = (r) => (r < 33 ? "🟥" : r < 66 ? "🟨" : "🟩");
+    return `Project security posture overview:
+ 🧐 Total topics: ${evaluation.score.totalTopics}
+ 🔒 Secured topics: ${evaluation.score.securedTopics}
+ 📢 Answered topics: ${evaluation.score.answeredTopics}
+ ❔ Unknown topics: ${evaluation.score.unknownTopics}
+ 📊 Rating: ${ratingToEmo(evaluation.score.rating)} ${evaluation.score.rating}/100`;
 }
 exports.makeSecurityAuditOverview = makeSecurityAuditOverview;
 //# sourceMappingURL=evaluateSecurityAudit.js.map
@@ -637,9 +376,9 @@ exports.makeSecurityAuditOverview = makeSecurityAuditOverview;
 // this will point to the root package.json
 var _a;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-var path = ((_a = require.main) === null || _a === void 0 ? void 0 : _a.path) + "/../package.json";
+const path = ((_a = require.main) === null || _a === void 0 ? void 0 : _a.path) + "/../package.json";
 // eslint-disable-next-line @typescript-eslint/no-var-requires
-var ownPkg = require(path);
+const ownPkg = require(path);
 exports["default"] = ownPkg;
 //# sourceMappingURL=packageInfos.js.map
 
@@ -72012,7 +71751,7 @@ var __webpack_exports__ = {};
 var exports = __webpack_exports__;
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-var catci_1 = __nccwpck_require__(1123);
+const catci_1 = __nccwpck_require__(1123);
 (0, catci_1.runCatCi)();
 //# sourceMappingURL=catci.js.map
 })();