@coana-tech/cli 14.0.20 → 14.1.0

package/cli.js

@@ -67427,15 +67427,15 @@ function updateCatalog(update2, map2) {
     }
   }
 }
-var import_path2, import_promises3, import_yaml, import_lockfile_file, PnpmFixingManager;
+var import_promises3, import_path2, import_yaml, import_lockfile_file, PnpmFixingManager;
 var init_pnpm_fixing_manager = __esm({
   "../fixing-management/src/fixing-management/npm/pnpm-fixing-manager.ts"() {
     "use strict";
+    import_promises3 = require("fs/promises");
     import_path2 = require("path");
-    init_npm_utils();
     init_command_utils();
+    init_npm_utils();
     init_logger_singleton();
-    import_promises3 = require("fs/promises");
     import_yaml = __toESM(require_dist());
     import_lockfile_file = __toESM(require_lib16());
     init_npm_ecosystem_fixing_manager();
@@ -84521,21 +84521,21 @@ var require_yarnlock_parse_raw = __commonJS({
 });
 
 // ../fixing-management/src/fixing-management/npm/yarn-fixing-manager.ts
-var import_promises4, import_path4, import_yarnlock_parse_raw, import_fs3, YarnFixingManager;
+var import_fs3, import_promises4, import_path4, import_yarnlock_parse_raw, YarnFixingManager;
 var init_yarn_fixing_manager = __esm({
   "../fixing-management/src/fixing-management/npm/yarn-fixing-manager.ts"() {
     "use strict";
+    import_fs3 = require("fs");
     import_promises4 = require("fs/promises");
     import_path4 = require("path");
     init_command_utils();
+    init_npm_utils();
     init_package_utils();
+    init_async();
     init_logger_singleton();
     init_package_utils2();
     import_yarnlock_parse_raw = __toESM(require_yarnlock_parse_raw());
-    init_npm_utils();
     init_npm_ecosystem_fixing_manager();
-    init_async();
-    import_fs3 = require("fs");
     YarnFixingManager = class extends NpmEcosystemFixingManager {
       yarnType = this.getYarnType();
       getYarnType() {
@@ -88831,8 +88831,8 @@ var init_go_fixing_manager = __esm({
   "../fixing-management/src/fixing-management/go/go-fixing-manager.ts"() {
     "use strict";
     import_path9 = require("path");
-    init_command_utils();
     import_semver2 = __toESM(require_semver2());
+    init_command_utils();
     init_async();
     GoFixingManager = class {
       constructor(rootDir, subprojectPath) {
@@ -95526,6 +95526,38 @@ var init_docker_manager = __esm({
   }
 });
 
+// ../utils/src/file-utils.ts
+function findParent(dir, predicate, wholePath) {
+  let curr = dir;
+  let last2 = dir;
+  do {
+    const name = wholePath ? curr : (0, import_path16.basename)(curr);
+    if (predicate(name)) return curr;
+    last2 = curr;
+    curr = (0, import_path16.resolve)(curr, "..");
+  } while (curr !== last2);
+  return void 0;
+}
+async function exists(path2, mode) {
+  try {
+    await (0, import_promises10.access)(path2, mode);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var import_promises10, import_lodash4, import_micromatch, import_path16;
+var init_file_utils = __esm({
+  "../utils/src/file-utils.ts"() {
+    "use strict";
+    import_promises10 = require("fs/promises");
+    import_lodash4 = __toESM(require_lodash());
+    import_micromatch = __toESM(require_micromatch());
+    import_path16 = require("path");
+    init_async();
+  }
+});
+
 // ../utils/src/tmp-file.ts
 var tmp_file_exports = {};
 __export(tmp_file_exports, {
@@ -95534,7 +95566,7 @@ __export(tmp_file_exports, {
 });
 async function createTmpDirectory(prefix) {
   try {
-    const tmpDir = await (0, import_promises10.mkdtemp)((0, import_path16.join)((0, import_os2.tmpdir)(), prefix));
+    const tmpDir = await (0, import_promises11.mkdtemp)((0, import_path17.join)((0, import_os2.tmpdir)(), prefix));
     return tmpDir;
   } catch (err) {
     console.log("Error creating tmp directory", err);
@@ -95546,16 +95578,16 @@ async function withTmpDirectory(prefix, fn2) {
   try {
     return await fn2(tmpDir);
   } finally {
-    await (0, import_promises10.rm)(tmpDir, { recursive: true, force: true });
+    await (0, import_promises11.rm)(tmpDir, { recursive: true, force: true });
   }
 }
-var import_promises10, import_os2, import_path16;
+var import_promises11, import_os2, import_path17;
 var init_tmp_file = __esm({
   "../utils/src/tmp-file.ts"() {
     "use strict";
-    import_promises10 = require("fs/promises");
+    import_promises11 = require("fs/promises");
     import_os2 = require("os");
-    import_path16 = require("path");
+    import_path17 = require("path");
   }
 });
 
@@ -95636,86 +95668,6 @@ var init_esm_node = __esm({
   }
 });
 
-// ../utils/src/file-utils.ts
-function findParent(dir, predicate, wholePath) {
-  let curr = dir;
-  let last2 = dir;
-  do {
-    const name = wholePath ? curr : (0, import_path17.basename)(curr);
-    if (predicate(name)) return curr;
-    last2 = curr;
-    curr = (0, import_path17.resolve)(curr, "..");
-  } while (curr !== last2);
-  return void 0;
-}
-async function exists(path2, mode) {
-  try {
-    await (0, import_promises11.access)(path2, mode);
-    return true;
-  } catch {
-    return false;
-  }
-}
-var import_promises11, import_lodash4, import_micromatch, import_path17;
-var init_file_utils = __esm({
-  "../utils/src/file-utils.ts"() {
-    "use strict";
-    import_promises11 = require("fs/promises");
-    import_lodash4 = __toESM(require_lodash());
-    import_micromatch = __toESM(require_micromatch());
-    import_path17 = require("path");
-    init_async();
-  }
-});
-
-// ../utils/src/constants.ts
-var import_path18, import_lodash5, COANA_ROOT2, COANA_REPOS_PATH, REQUIREMENTS_FILES_SEARCH_DEPTH;
-var init_constants2 = __esm({
-  "../utils/src/constants.ts"() {
-    "use strict";
-    import_path18 = require("path");
-    init_file_utils();
-    import_lodash5 = __toESM(require_lodash());
-    COANA_ROOT2 = (0, import_lodash5.once)(() => {
-      const coanaRoot = process.env.COANA_ROOT ?? findParent(__dirname, (d2) => ["coana-package-manager", "coana"].includes(d2));
-      if (!coanaRoot) {
-        throw new Error("COANA_ROOT not set and could not be found");
-      }
-      return coanaRoot;
-    });
-    COANA_REPOS_PATH = (0, import_lodash5.once)(() => {
-      return process.env.COANA_REPOS_PATH ?? (0, import_path18.resolve)(COANA_ROOT2(), "coana-repos");
-    });
-    REQUIREMENTS_FILES_SEARCH_DEPTH = 2;
-  }
-});
-
-// ../other-modules-communicator/src/constants.ts
-var import_lodash6, import_path19, PACKAGE_MANAGER_SCRIPT_PATH, REACHABILITY_ANALYZERS_SCRIPT_PATH, DOCKER_ENV_WHITE_LIST;
-var init_constants3 = __esm({
-  "../other-modules-communicator/src/constants.ts"() {
-    "use strict";
-    import_lodash6 = __toESM(require_lodash());
-    import_path19 = require("path");
-    init_constants2();
-    PACKAGE_MANAGER_SCRIPT_PATH = (0, import_lodash6.once)(() => {
-      return process.env.PACKAGE_MANAGER_SCRIPT_PATH ?? (0, import_path19.resolve)(COANA_ROOT2(), "packages", "package-management", "dist", "package-management-cli.js");
-    });
-    REACHABILITY_ANALYZERS_SCRIPT_PATH = (0, import_lodash6.once)(() => {
-      return process.env.REACHABILITY_ANALYZERS_SCRIPT_PATH ?? (0, import_path19.resolve)(COANA_ROOT2(), "packages", "reachability-analyzers", "dist", "reachability-analyzers-cli.js");
-    });
-    DOCKER_ENV_WHITE_LIST = [
-      "GITHUB_",
-      "GH_",
-      "SSH_",
-      "_PASSWORD",
-      "_USER",
-      "COANA_REPORT_ID",
-      "COANA_API_KEY"
-    ];
-  }
-});
-
 // ../../node_modules/.pnpm/remeda@2.17.4/node_modules/remeda/dist/chunk-SUASHYJW.cjs
 var require_chunk_SUASHYJW = __commonJS({
   "../../node_modules/.pnpm/remeda@2.17.4/node_modules/remeda/dist/chunk-SUASHYJW.cjs"(exports2) {
@@ -99289,6 +99241,54 @@ var require_ecosystem_support = __commonJS({
   }
 });
 
+// ../utils/src/constants.ts
+var import_path18, import_lodash5, COANA_ROOT2, COANA_REPOS_PATH, REQUIREMENTS_FILES_SEARCH_DEPTH;
+var init_constants2 = __esm({
+  "../utils/src/constants.ts"() {
+    "use strict";
+    import_path18 = require("path");
+    init_file_utils();
+    import_lodash5 = __toESM(require_lodash());
+    COANA_ROOT2 = (0, import_lodash5.once)(() => {
+      const coanaRoot = process.env.COANA_ROOT ?? findParent(__dirname, (d2) => ["coana-package-manager", "coana"].includes(d2));
+      if (!coanaRoot) {
+        throw new Error("COANA_ROOT not set and could not be found");
+      }
+      return coanaRoot;
+    });
+    COANA_REPOS_PATH = (0, import_lodash5.once)(() => {
+      return process.env.COANA_REPOS_PATH ?? (0, import_path18.resolve)(COANA_ROOT2(), "coana-repos");
+    });
+    REQUIREMENTS_FILES_SEARCH_DEPTH = 2;
+  }
+});
+
+// ../other-modules-communicator/src/constants.ts
+var import_lodash6, import_path19, PACKAGE_MANAGER_SCRIPT_PATH, REACHABILITY_ANALYZERS_SCRIPT_PATH, DOCKER_ENV_WHITE_LIST;
+var init_constants3 = __esm({
+  "../other-modules-communicator/src/constants.ts"() {
+    "use strict";
+    import_lodash6 = __toESM(require_lodash());
+    import_path19 = require("path");
+    init_constants2();
+    PACKAGE_MANAGER_SCRIPT_PATH = (0, import_lodash6.once)(() => {
+      return process.env.PACKAGE_MANAGER_SCRIPT_PATH ?? (0, import_path19.resolve)(COANA_ROOT2(), "packages", "package-management", "dist", "package-management-cli.js");
+    });
+    REACHABILITY_ANALYZERS_SCRIPT_PATH = (0, import_lodash6.once)(() => {
+      return process.env.REACHABILITY_ANALYZERS_SCRIPT_PATH ?? (0, import_path19.resolve)(COANA_ROOT2(), "packages", "reachability-analyzers", "dist", "reachability-analyzers-cli.js");
+    });
+    DOCKER_ENV_WHITE_LIST = [
+      "GITHUB_",
+      "GH_",
+      "SSH_",
+      "_PASSWORD",
+      "_USER",
+      "COANA_REPORT_ID",
+      "COANA_API_KEY"
+    ];
+  }
+});
+
 // ../other-modules-communicator/src/other-modules-communicator.ts
 var other_modules_communicator_exports = {};
 __export(other_modules_communicator_exports, {
@@ -99304,30 +99304,31 @@ async function getEcosystemSpecificDockerArgs(ecosystem) {
   }
   return [];
 }
-var import_promises12, import_lodash7, import_os3, import_path20, import_logger_singleton7, import_fs10, import_child_process2, import_ecosystem_support2, pullDockerImage, OtherModulesCommunicator, setUpGoModuleCache;
+var import_child_process2, import_fs10, import_promises12, import_lodash7, import_os3, import_path20, import_ecosystem_support2, import_logger_singleton7, pullDockerImage, OtherModulesCommunicator, setUpGoModuleCache;
 var init_other_modules_communicator = __esm({
   "../other-modules-communicator/src/other-modules-communicator.ts"() {
     "use strict";
+    import_child_process2 = require("child_process");
     init_docker_manager();
+    import_fs10 = require("fs");
     import_promises12 = require("fs/promises");
     import_lodash7 = __toESM(require_lodash());
     import_os3 = require("os");
     import_path20 = require("path");
     init_command_utils();
+    init_file_utils();
+    init_spinner();
     init_tmp_file();
     init_esm_node();
+    import_ecosystem_support2 = __toESM(require_ecosystem_support());
     import_logger_singleton7 = __toESM(require_logger_singleton());
     init_constants3();
-    init_spinner();
-    init_file_utils();
-    import_fs10 = require("fs");
-    import_child_process2 = require("child_process");
-    import_ecosystem_support2 = __toESM(require_ecosystem_support());
     pullDockerImage = (0, import_lodash7.memoize)(async (image) => execPipeAndLogOnFailure(["docker", "pull", image]));
     OtherModulesCommunicator = class {
-      constructor(rootWorkingDir, options) {
+      constructor(rootWorkingDir, options, apiKey) {
         this.rootWorkingDir = rootWorkingDir;
         this.options = options;
+        this.apiKey = apiKey;
       }
       // Memoize temporary directory per subprojectPath
       getTmpDirForSubproject = (0, import_lodash7.memoize)(
@@ -99415,7 +99416,11 @@ var init_other_modules_communicator = __esm({
           subprojectPath,
           [...args2, "-o", outputFilePath],
           extraDockerArgs,
-          { ...env ?? process.env, COANA_REPORT_ID: this.options.reportId, COANA_API_KEY: this.options.apiKey }
+          {
+            ...env ?? process.env,
+            COANA_REPORT_ID: this.options.reportId,
+            COANA_API_KEY: this.apiKey.type === "present" ? this.apiKey.value : ""
+          }
         );
         return JSON.parse(await (0, import_promises12.readFile)(outputFilePath, "utf-8")).result;
       }
@@ -99474,7 +99479,7 @@ var init_other_modules_communicator = __esm({
       }
       async runInDocker(ecosystem, image, entryPoint, commandName, args2, subprojectPath, tmpDir, env = process.env) {
         if (!await pullDockerImage(image)) return false;
-        const envArgs = Object.keys(process.env).filter((key) => DOCKER_ENV_WHITE_LIST.some((whiteListedKey) => key.includes(whiteListedKey))).flatMap((key) => ["-e", key]);
+        const envArgs = Object.keys(env).filter((key) => DOCKER_ENV_WHITE_LIST.some((whiteListedKey) => key.includes(whiteListedKey))).flatMap((key) => ["-e", key]);
         const cmd = cmdt`docker run --pull=never --rm -v ${this.rootWorkingDir}:/project -v ${tmpDir}:${tmpDir}
       -v=${this.options.coanaLogPath}:${this.options.coanaLogPath}
       ${await getEcosystemSpecificDockerArgs(ecosystem)}
@@ -99550,7 +99555,11 @@ var init_other_modules_communicator = __esm({
           subprojectPath,
           workspacePath,
           argt`-i ${inputFile}`,
-          { ...process.env, COANA_REPORT_ID: this.options.reportId, COANA_API_KEY: this.options.apiKey }
+          {
+            ...process.env,
+            COANA_REPORT_ID: this.options.reportId,
+            COANA_API_KEY: this.apiKey.type === "present" ? this.apiKey.value : ""
+          }
         );
       }
     };
@@ -127077,8 +127086,9 @@ __export(dashboard_integration_exports, {
   submitSubprojects: () => submitSubprojects
 });
 async function createReport(repoUrl, projectName, cliVersion, commitSha, branchName, cliOptions, apiKey, cliRunEnv) {
+  if (apiKey.type === "missing") throw new Error("Don't call createReport with a missing apiKey");
   try {
-    return (await sendPostRequest(coanaAPIUrls.CREATE_REPORT, apiKey, { repoUrl, projectName }, {
+    return (await sendPostRequest(coanaAPIUrls.CREATE_REPORT, apiKey.value, { repoUrl, projectName }, {
       reportType: "v6",
       cliVersion,
       commitSha,
@@ -127092,20 +127102,25 @@ async function createReport(repoUrl, projectName, cliVersion, commitSha, branchN
   }
 }
 async function submitSubprojects(subprojects, reportId, apiKey) {
-  if (!reportId) return;
+  if (!reportId || apiKey.type === "missing") return;
   try {
-    await sendPostRequest(`${coanaAPIUrls.REPORT_SUBPROJECTS.replace(":reportId", reportId)}`, apiKey, {}, subprojects);
+    await sendPostRequest(
+      `${coanaAPIUrls.REPORT_SUBPROJECTS.replace(":reportId", reportId)}`,
+      apiKey.value,
+      {},
+      subprojects
+    );
   } catch (e) {
     sendWarningToDashboard("Unable to submit subprojects", { reportId }, subprojects, reportId, apiKey);
     logger.warn("Unable to submit subprojects:", e.message);
   }
 }
 async function createAnalysisMetadata(subprojectPath, workspacePath, ecosystem, analysisMetadata, reportId, apiKey) {
-  if (!reportId) return;
+  if (!reportId || apiKey.type === "missing") return;
   try {
     await sendPostRequest(
       coanaAPIUrls.CREATE_ANALYSIS_METADATA.replace(":reportId", reportId),
-      apiKey,
+      apiKey.value,
       {},
       { subprojectPath, workspacePath, ecosystem, ...analysisMetadata }
     );
@@ -127114,12 +127129,12 @@ async function createAnalysisMetadata(subprojectPath, workspacePath, ecosystem,
   }
 }
 async function getBucketsForLastReport(subprojectPath, workspacePath, ecosystem, newReportId, apiKey) {
-  if (!newReportId) return;
+  if (!newReportId || apiKey.type === "missing") return;
   try {
     return (await axios_default.get(coanaAPIUrls.GET_LATEST_BUCKETS, {
       headers: {
         "Content-Type": "application/json",
-        apiKey
+        apiKey: apiKey.value
       },
       params: { newReportId, subprojectPath, workspacePath, ecosystem }
     })).data;
@@ -127136,12 +127151,12 @@ async function getBucketsForLastReport(subprojectPath, workspacePath, ecosystem,
   }
 }
 async function getPreviousAnalysisResults(subprojectPath, workspacePath, newReportId, apiKey) {
-  if (!newReportId) return;
+  if (!newReportId || apiKey.type === "missing") return;
   try {
     return (await axios_default.get(coanaAPIUrls.GET_LATEST_RESULTS, {
       headers: {
         "Content-Type": "application/json",
-        apiKey
+        apiKey: apiKey.value
       },
       params: { newReportId, subprojectPath, workspacePath }
     })).data;
@@ -127160,11 +127175,11 @@ async function getPreviousAnalysisResults(subprojectPath, workspacePath, newRepo
   }
 }
 async function sendRegressionsToDashboard(regressions, subprojectPath, workspacePath, reportId, apiKey) {
-  if (!reportId) return;
+  if (!reportId || apiKey.type === "missing") return;
   try {
     await sendPostRequest(
       coanaAPIUrls.CREATE_REGRESSIONS.replace(":reportId", reportId),
-      apiKey,
+      apiKey.value,
       { subprojectPath, workspacePath },
       regressions
     );
@@ -127183,12 +127198,12 @@ async function sendRegressionsToDashboard(regressions, subprojectPath, workspace
   }
 }
 async function getExperimentName(subprojectPath, workspacePath, ecosystem, reportId, apiKey) {
-  if (!reportId) return;
+  if (!reportId || apiKey.type === "missing") return;
   try {
     return (await axios_default.get(coanaAPIUrls.GET_EXPERIMENT_NAME, {
       headers: {
         "Content-Type": "application/json",
-        apiKey
+        apiKey: apiKey.value
       },
       params: { subprojectPath, workspacePath, ecosystem, reportId }
     })).data;
@@ -127203,11 +127218,11 @@ async function getExperimentName(subprojectPath, workspacePath, ecosystem, repor
   }
 }
 async function sendCLIProgressToDashboard(cliProgressEvent, isStartEvent, reportId, apiKey) {
-  if (!reportId) return;
+  if (!reportId || apiKey.type === "missing") return;
   try {
     await sendPostRequest(
       coanaAPIUrls.REPORT_CLI_PROGRESS.replace(":reportId", reportId),
-      apiKey,
+      apiKey.value,
       { isStartEvent, time: (/* @__PURE__ */ new Date()).toISOString() },
       cliProgressEvent
     );
@@ -127216,18 +127231,24 @@ async function sendCLIProgressToDashboard(cliProgressEvent, isStartEvent, report
   }
 }
 async function sendWarningToDashboard(message2, data2, additionalData, reportId, apiKey) {
-  if (!reportId) return;
+  if (!reportId || apiKey.type === "missing") return;
   try {
-    await sendPostRequest(coanaAPIUrls.SUBMIT_REPORT_WARNING, apiKey, { reportId }, { message: message2, data: data2, additionalData });
+    await sendPostRequest(
+      coanaAPIUrls.SUBMIT_REPORT_WARNING,
+      apiKey.value,
+      { reportId },
+      { message: message2, data: data2, additionalData }
+    );
   } catch (error) {
     handleError(error, "Error sending warning to dashboard", false);
   }
 }
 async function sendDependencyTreesToDashboard(dependencyTrees, reportId, apiKey) {
+  if (apiKey.type === "missing") return;
   try {
     await sendPostRequest(
       coanaAPIUrls.SEND_DEPENDENCY_TREES.replace(":reportId", reportId),
-      apiKey,
+      apiKey.value,
       {},
       dependencyTrees
     );
@@ -127237,6 +127258,7 @@ async function sendDependencyTreesToDashboard(dependencyTrees, reportId, apiKey)
   }
 }
 async function sendToDashboard(report, writeReportToFile, reportId, apiKey) {
+  if (apiKey.type === "missing") return;
   try {
     if (writeReportToFile) {
       logger.info("Writing report to dashboard-report.json");
@@ -127246,13 +127268,14 @@ async function sendToDashboard(report, writeReportToFile, reportId, apiKey) {
         (0, import_artifact.create)().uploadArtifact("dashboard-report", ["dashboard-report.json"], process.cwd());
       }
     }
-    await sendPostRequest(coanaAPIUrls.SUBMIT_REPORT, apiKey, { reportId }, report);
+    await sendPostRequest(coanaAPIUrls.SUBMIT_REPORT, apiKey.value, { reportId }, report);
     logger.info("Report submitted to dashboard successfully");
   } catch (error) {
     handleError(error, "Error submitting report to dashboard");
   }
 }
 async function sendErrorReportToDashboard(apiKey, stackTrace, shouldLogSharing, reportId, repoUrl, projectName, logContent) {
+  if (apiKey.type === "missing") return;
   if (shouldLogSharing) {
     console.log("Sending crash report to Coana");
     console.log("The report will help team Coana debug the crash");
@@ -127263,7 +127286,7 @@ async function sendErrorReportToDashboard(apiKey, stackTrace, shouldLogSharing,
       stackTrace,
       logContent
     };
-    await sendPostRequest(coanaAPIUrls.SUBMIT_REPORT_ERROR, apiKey, { repoUrl, projectName, reportId }, report);
+    await sendPostRequest(coanaAPIUrls.SUBMIT_REPORT_ERROR, apiKey.value, { repoUrl, projectName, reportId }, report);
     if (shouldLogSharing) {
       console.log("Crash report submitted to dashboard successfully");
     }
@@ -127299,10 +127322,11 @@ function GET_AXIOS_CLIENT_TESTING_ONLY() {
   return axiosClient;
 }
 async function sendLogToDashboard(logContent, reportId, apiKey) {
+  if (apiKey.type === "missing") return;
   if (!logContent) return;
   logger.info("Sending log to Coana");
   try {
-    await sendPostRequest(coanaAPIUrls.SEND_LOG.replace(":reportId", reportId), apiKey, { reportId }, {
+    await sendPostRequest(coanaAPIUrls.SEND_LOG.replace(":reportId", reportId), apiKey.value, { reportId }, {
       logContent
     });
   } catch (error) {
@@ -127387,10 +127411,15 @@ async function disableRetryOnErrors() {
 }
 async function getVulnerabilities(dependencyTree, apiKey, timeout) {
   try {
+    const headers = {
+      "Content-Type": "application/json",
+      ...apiKey.type === "present" ? { authorization: `api-key ${apiKey.value}` } : {}
+    };
+    const url2 = apiKey.type === "present" ? ApiUrls.post.fetchVulnerabilities : ApiUrls.post.fetchVulnerabilitiesPublic;
     const axiosResponse = await axiosClient2.post(
-      ApiUrls.post.fetchVulnerabilities,
+      url2,
       { dependencyTree: await dependencyTree, version: SECURITY_AUDITOR_VERSION },
-      { timeout, headers: { authorization: `api-key ${apiKey}` } }
+      { timeout, headers }
     );
     return axiosResponse.data;
   } catch (e) {
@@ -127415,11 +127444,12 @@ async function getFixesFromId(dependencyTree, fixId, timeout) {
 }
 async function getVulnerabilityMetadata(data2, apiKey, timeout) {
   try {
-    const response = await axiosClient2.post(
-      ApiUrls.post.getVulnerabilityMetadata,
-      { packages: data2.packages },
-      { headers: { authorization: `api-key ${apiKey}` }, timeout: timeout ?? 2e4 }
-    );
+    const url2 = apiKey.type === "present" ? ApiUrls.post.getVulnerabilityMetadata : ApiUrls.post.getVulnerabilityMetadataPublic;
+    const headers = {
+      "Content-Type": "application/json",
+      ...apiKey.type === "present" ? { authorization: `api-key ${apiKey.value}` } : {}
+    };
+    const response = await axiosClient2.post(url2, { packages: data2.packages }, { headers, timeout: timeout ?? 2e4 });
     return response.data;
   } catch (e) {
     handleError2(e, "Failed to fetch vulnerability metadata", true);
@@ -127474,8 +127504,10 @@ var init_security_auditor_api = __esm({
     ApiUrls = {
       post: {
         fetchVulnerabilities: `${securityAuditorURL}/security-auditor/audit-dependency-tree`,
+        fetchVulnerabilitiesPublic: `${securityAuditorURL}/security-auditor/audit-dependency-tree-public`,
         getFixFromId: `${securityAuditorURL}/security-auditor/get-fix-from-id`,
-        getVulnerabilityMetadata: `${securityAuditorURL}/security-auditor/vulnerability-metadata-with-names`
+        getVulnerabilityMetadata: `${securityAuditorURL}/security-auditor/vulnerability-metadata-with-names`,
+        getVulnerabilityMetadataPublic: `${securityAuditorURL}/security-auditor/vulnerability-metadata-with-names-public`
       }
     };
   }
@@ -127523,7 +127555,9 @@ var require_cli_apply_fix = __commonJS({
     async function applyFix(path2, fixIds, options) {
       logger_singleton_1.logger.initWinstonLogger(options.debug);
       logger_singleton_1.logger.silent = options.silent;
-      const otherModulesCommunicator = new other_modules_communicator_1.OtherModulesCommunicator(path2, options);
+      const otherModulesCommunicator = new other_modules_communicator_1.OtherModulesCommunicator(path2, options, {
+        type: "missing"
+      });
       logger_singleton_1.logger.info(`Applying fixes for ${fixIds.length} fix ${fixIds.length > 1 ? "IDs" : "ID"}`);
       const parsedFixIds = fixIds.map((fixId) => {
         if (!fixId.startsWith("fix_")) {
@@ -127929,6 +127963,9 @@ var init_dependency_types = __esm({
 });
 
 // ../web-compat-utils/src/vulnerability-grouping.ts
+function getVulnerabilityIdentifier(packageName, vulnerabilityUrl) {
+  return `${packageName}-${extractGHSAIdFromUrl(vulnerabilityUrl)}`;
+}
 function getVulnerabilityAggregates(vulns) {
   const grouped = groupVulnsByUrlAndReachability(vulns, (byVulnInstances) => {
     const dependencyTypes = byVulnInstances.map((res) => res.dependencyType);
@@ -127936,7 +127973,7 @@ function getVulnerabilityAggregates(vulns) {
     const first2 = byVulnInstances[0];
     return {
       ecosystem: first2.ecosystem,
-      identifier: `${first2.packageName}-${extractGHSAIdFromUrl(first2.vulnerabilityUrl)}`,
+      identifier: getVulnerabilityIdentifier(first2.packageName ?? "", first2.vulnerabilityUrl),
       packageName: first2.packageName,
       reachability: first2.reachability,
       reportId: first2.reportId,
@@ -132266,9 +132303,6 @@ var require_github_pr_tools = __commonJS({
         if (!token) {
           throw new Error("No GitHub token provided. Can't add a comment to the pull request.");
         }
-        if (!this.apiKey) {
-          throw new Error("No Coana API key provided. Can't add a comment to the pull request.");
-        }
         const pullRequest = githubContext.payload.pull_request;
         if (!pullRequest) {
           this.context = { enabled: false };
@@ -132508,7 +132542,8 @@ var require_cli_compare_reports = __commonJS({
       await compareReportsWithDiff(diff, options, newReport);
     }
     async function compareReportsWithDiff(diff, options, newReport) {
-      const ghPRTools = new github_pr_tools_1.GitHubPRTools(options.apiKey, options.prComment);
+      const apiKey = options.apiKey ? { type: "present", value: options.apiKey } : { type: "missing" };
+      const ghPRTools = new github_pr_tools_1.GitHubPRTools(apiKey, options.prComment);
       const ignoredGHSAs = await ghPRTools.getIgnoredGHSAs();
       console.log(`Ignoring the following GHSA IDs: ${ignoredGHSAs.join(", ")}`);
       const nonIgnoredDiff = diff.filter((vuln) => !ignoredGHSAs.includes((0, ghsa_1.extractGHSAIdFromUrl)(vuln.vulnerabilityUrl) ?? ""));
@@ -133771,9 +133806,9 @@ var init_project_manager = __esm({
   "../project-management/src/project-management/project-manager.ts"() {
     "use strict";
     import_path23 = require("path");
+    init_ecosystem_support();
     init_ecosystem_manager();
     init_ecosystem_specs();
-    init_ecosystem_support();
     ProjectManager = class _ProjectManager {
       constructor(ecosystemToEcosystemManager, projectDir, otherModulesCommunicator) {
         this.ecosystemToEcosystemManager = ecosystemToEcosystemManager;
@@ -133949,7 +133984,7 @@ function mkTrie() {
   return { children: {}, leaf: false };
 }
 function addPathToTrie(root3, vulnPath) {
-  if (!vulnPath.length) return;
+  if (!vulnPath.length) return root3;
   let curr = root3;
   let i6 = vulnPath.length - 1;
   while (i6 >= 0) {
@@ -133957,6 +133992,7 @@ function addPathToTrie(root3, vulnPath) {
     --i6;
   }
   curr.leaf = true;
+  return curr;
 }
 function isShortestPath(root3, vulnPath) {
   let curr = root3;
@@ -193953,8 +193989,8 @@ var require_vulnerability_scanning = __commonJS({
         if (offlineVulnerabilityScannerDBPath) {
           return await offlineScan(dependencyTree, offlineVulnerabilityScannerDBPath);
         } else {
-          if (!apiKey || !timeout) {
-            throw new Error("API key and a timeout value is required for online vulnerability scanning");
+          if (!timeout) {
+            throw new Error("A timeout value is required for online vulnerability scanning");
           }
           return await onlineScan(dependencyTree, apiKey, timeout);
         }
@@ -193990,7 +194026,7 @@ var require_version = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.version = void 0;
-    exports2.version = "14.0.20";
+    exports2.version = "14.1.0";
   }
 });
 
@@ -194036,6 +194072,9 @@ var require_cli_core = __commonJS({
       coanaLogPath = "";
       shareWithDashboard;
       reportId;
+      apiKey = {
+        type: "missing"
+      };
       constructor(rootWorkingDirectory, options) {
         this.options = options;
         this.analysisMemoryLimitInMb = +this.options.memoryLimit;
@@ -194049,20 +194088,42 @@ var require_cli_core = __commonJS({
         this.spinner = spinner_1.Spinner.instance({ text: "Running Coana CLI", isSilent: this.options.silent });
         this.shareWithDashboard = !!(this.options.apiKey && !this.options.disableReportSubmission && (this.options.repoUrl ?? this.options.projectName));
       }
+      verifyApiKey(key) {
+        const checkIfApiKeyIsEmptyMessage = "You may be trying to provide the API key through an environment variable or CI secret which is either undefined or empty.";
+        if (key === "api-key-unavailable") {
+          throw new Error("API key is is 'api-key-unavailable'. This is likely a default value assigned because you forgot to provide the API key as a secret in your CI environment.");
+        }
+        if (key.length < 15 && key.startsWith("-")) {
+          throw new Error(`The provided API key '${key}' is invalid. ${checkIfApiKeyIsEmptyMessage}`);
+        }
+        if (key.length < 20 || key.length > 21) {
+          throw new Error(`The provided API key is invalid. ${checkIfApiKeyIsEmptyMessage}`);
+        }
+      }
       verifyOptions() {
         if (this.options.writeReportToFile) {
           logger_singleton_1.logger.warn("--write-report-to-file is deprecated. Please use --output json instead");
         }
-        if (!this.options.offlineDatabase && !this.options.apiKey) {
+        if (!this.options.offlineDatabase && !this.options.apiKey && !this.options.guardrailMode) {
           throw new Error("An API key is required to run the Coana CLI");
         }
+        if (this.options.guardrailMode) {
+          this.options.disableReportSubmission = true;
+        }
         if (this.options.apiKey) {
-          const checkIfApiKeyIsEmptyMessage = "You may be trying to provide the API key through an environment variable or CI secret which is either undefined or empty.";
-          if (this.options.apiKey.length < 15 && this.options.apiKey.startsWith("-")) {
-            throw new Error(`The provided API key '${this.options.apiKey}' is invalid. ${checkIfApiKeyIsEmptyMessage}`);
-          }
-          if (this.options.apiKey.length < 20 || this.options.apiKey.length > 21) {
-            throw new Error(`The provided API key is invalid. ${checkIfApiKeyIsEmptyMessage}`);
+          try {
+            this.verifyApiKey(this.options.apiKey);
+            this.apiKey = {
+              type: "present",
+              value: this.options.apiKey
+            };
+          } catch (e) {
+            if (this.options.guardrailMode) {
+              logger_singleton_1.logger.warn("API key is missing or invalid. Continuing in unauthenticated guardrail mode.");
+              this.apiKey = { type: "missing" };
+            } else {
+              throw e;
+            }
           }
         }
         if (!this.options.repoUrl && !this.options.projectName && !this.options.disableReportSubmission) {
@@ -194090,9 +194151,9 @@ var require_cli_core = __commonJS({
         }
         this.spinner.start();
         try {
-          if (this.shareWithDashboard) {
+          if (this.shareWithDashboard && this.apiKey.type === "present") {
             const gitData = await getGitDataToMetadataIfAvailable(this.rootWorkingDirectory);
-            this.reportId = await (0, dashboard_integration_1.createReport)(this.options.repoUrl, this.options.projectName, version_12.version, gitData?.sha, gitData?.branchName, (0, lodash_1.omit)(this.options, "apiKey", "print-report", "repoUrl", "projectName", "writeReportToFile"), this.options.apiKey, this.options.runEnv);
+            this.reportId = await (0, dashboard_integration_1.createReport)(this.options.repoUrl, this.options.projectName, version_12.version, gitData?.sha, gitData?.branchName, (0, lodash_1.omit)(this.options, "apiKey", "print-report", "repoUrl", "projectName", "writeReportToFile"), this.apiKey, this.options.runEnv);
           }
           const report = await this.computeReport();
           logger_singleton_1.logger.info("Report computed successfully");
@@ -194119,13 +194180,11 @@ var require_cli_core = __commonJS({
         return logContent;
       }
       async shareErrorLogWithDashboard(e, shouldLogSharing) {
-        if (this.options.apiKey) {
-          await (0, dashboard_integration_1.sendErrorReportToDashboard)(this.options.apiKey, e.stack ?? e.message ?? "Unknown stack trace", shouldLogSharing, this.reportId, this.options.repoUrl, this.options.projectName, await this.getLogContent());
-        }
+        await (0, dashboard_integration_1.sendErrorReportToDashboard)(this.apiKey, e.stack ?? e.message ?? "Unknown stack trace", shouldLogSharing, this.reportId, this.options.repoUrl, this.options.projectName, await this.getLogContent());
       }
       async shareLogWithDashboard() {
-        if (this.options.apiKey && this.reportId)
-          await (0, dashboard_integration_1.sendLogToDashboard)(await this.getLogContent(), this.reportId, this.options.apiKey);
+        if (this.reportId)
+          await (0, dashboard_integration_1.sendLogToDashboard)(await this.getLogContent(), this.reportId, this.apiKey);
       }
       async outputAndShareReport(report) {
         const outputDir = this.options.outputDir;
@@ -194135,7 +194194,7 @@ var require_cli_core = __commonJS({
           (0, fs_1.writeFileSync)(jsonReportPath, JSON.stringify(report, null, 2));
           logger_singleton_1.logger.info(kleur_1.default.green(`JSON report written to: ${jsonReportPath}`));
         }
-        const shareWithDashboard = this.options.apiKey && !this.options.disableReportSubmission && (this.options.repoUrl ?? this.options.projectName);
+        const shareWithDashboard = this.apiKey.type === "present" && !this.options.disableReportSubmission && (this.options.repoUrl ?? this.options.projectName);
         if (!shareWithDashboard) {
           if (this.options.offlineDatabase) {
             logger_singleton_1.logger.info("Running in offline mode. Skipping report submission to the dashboard");
@@ -194146,7 +194205,7 @@ var require_cli_core = __commonJS({
         }
         if (shareWithDashboard) {
           logger_singleton_1.logger.info("Submitting report to the dashboard");
-          await (0, dashboard_integration_1.sendToDashboard)(report, this.options.writeReportToFile, this.reportId, this.options.apiKey);
+          await (0, dashboard_integration_1.sendToDashboard)(report, this.options.writeReportToFile, this.reportId, this.apiKey);
         }
         if (report.vulnerabilities.some((v) => v.codeAwareScanResult.type === "analysisError")) {
           logger_singleton_1.logger.warn("Analysis error detected in the report - sharing log with Coana to help debug the issue");
@@ -194165,9 +194224,8 @@ var require_cli_core = __commonJS({
           debug: this.options.debug,
           silent: this.options.silent,
           coanaLogPath: this.coanaLogPath,
-          reportId: this.reportId,
-          apiKey: this.options.apiKey
-        });
+          reportId: this.reportId
+        }, this.apiKey);
         const startTime = (/* @__PURE__ */ new Date()).toISOString();
         this.sendProgress("CREATE_PROJECT_MANAGER", true);
         const manager = await project_manager_1.ProjectManager.create(this.rootWorkingDirectory, otherModulesCommunicator, this.options.ecosystems, this.options.includeDirs, this.options.excludeDirs, this.options.changedFiles);
@@ -194176,7 +194234,7 @@ var require_cli_core = __commonJS({
         (0, dashboard_integration_1.submitSubprojects)([...reachabilitySupport, ...traditionalScaSupport, ...noSupport].map((sp) => ({
           ...sp,
           subprojectPath: (0, path_1.relative)(this.rootWorkingDirectory, sp.subprojectPath) || "."
-        })), this.reportId, this.options.apiKey);
+        })), this.reportId, this.apiKey);
         for (const unsupported of noSupport)
           logger_singleton_1.logger.warn(unsupported.unsupportedMsg);
         const includeScaOnlyMsg = `Coana found some projects where it supports traditional SCA, but the reachability analysis is not yet supported. Use --include-projects-with-no-reachability-support to conduct traditional SCA on these projects`;
@@ -194267,7 +194325,7 @@ var require_cli_core = __commonJS({
           debug: this.options.debug,
           silent: this.options.silent,
           coanaLogPath: this.coanaLogPath
-        });
+        }, this.apiKey);
         const providerManager = await project_manager_1.ProjectManager.create(providerProject, providerOtherModulesCommunicator, ["MAVEN"]);
         const providerSubproject = providerManager.getSubproject("MAVEN", ".");
         if (!providerSubproject) {
@@ -194354,14 +194412,14 @@ var require_cli_core = __commonJS({
             subprojectPath: (0, path_1.relative)(rootWorkingDirectory, subprojectPath) || "."
           }));
           if (this.shareWithDashboard)
-            (0, dashboard_integration_1.sendDependencyTreesToDashboard)(dependencyTrees, this.reportId, this.options.apiKey);
+            (0, dashboard_integration_1.sendDependencyTreesToDashboard)(dependencyTrees, this.reportId, this.apiKey);
           const workspaceToVulnerabilities = Object.fromEntries(await (0, async_1.asyncMap)(workspacePaths, async (workspacePath) => this.spinner.wrap(`Scanning for vulnerabilities: (${subProjAndWsPath.packageManagerName}) ${(0, path_1.join)(subProjAndWsPath.subprojectPath, workspacePath)}`, async () => {
             const dependencyTree = projectInfo[workspacePath].dataForAnalysis.dependencyTree;
             this.sendProgress("SCAN_FOR_VULNERABILITIES", true, subprojectPath, workspacePath);
             try {
               return [
                 workspacePath,
-                (await (0, vulnerability_scanning_1.scanForVulnerabilities)(dependencyTree, this.options.offlineDatabase, this.options.apiKey, Number(this.options.timeout))).vulnerabilities
+                (await (0, vulnerability_scanning_1.scanForVulnerabilities)(dependencyTree, this.options.offlineDatabase, this.apiKey, Number(this.options.timeout))).vulnerabilities
               ];
             } catch (e) {
               logger_singleton_1.logger.error(`Scanning for vulnerabilities failed for subproject ${subprojectPath} in workspace ${workspacePath}`);
@@ -194432,7 +194490,7 @@ var require_cli_core = __commonJS({
           type,
           ...subprojectPath ? { subprojectPath: (0, path_1.relative)(this.rootWorkingDirectory, subprojectPath) || "." } : {},
           ...workspacePath ? { workspacePath } : {}
-        }, isStartEvent, this.reportId, this.options.apiKey);
+        }, isStartEvent, this.reportId, this.apiKey);
       }
       /**
        * Augment the results field of the `vulns` with metadata.
@@ -194447,9 +194505,7 @@ var require_cli_core = __commonJS({
           let dependencyType = getDependencyType(v.vulnChainDetails, v.results, directDependencies, reachability);
           if (!dependencyType || dependencyType === "unknown") {
             dependencyType = "prod&dev";
-            if (this.options.apiKey) {
-              (0, dashboard_integration_1.sendWarningToDashboard)("Unable to determine dependency type", { subprojectPath, workspacePath }, { vulnChainDetails: v.vulnChainDetails, results: v.results, directDependencies, reachability }, this.reportId, this.options.apiKey);
-            }
+            (0, dashboard_integration_1.sendWarningToDashboard)("Unable to determine dependency type", { subprojectPath, workspacePath }, { vulnChainDetails: v.vulnChainDetails, results: v.results, directDependencies, reachability }, this.reportId, this.apiKey);
           }
           return {
             vulnerabilityUrl: v.url,
@@ -194528,7 +194584,7 @@ var cli_core_1 = require_cli_core();
 var version_1 = require_version();
 var program = new commander_1.Command();
 var run = new commander_1.Command();
-run.name("run").argument("<path>", "File system path to folder containing the project").option("-o, --output-dir <path>", "Write json report to <path>/coana-report.json").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("-p, --print-report", "Print the report to the console", false).option("--offline-database <path>", "Path to a coana-offline-db.json file for running the CLI without internet connectivity", void 0).option("-t, --timeout <timeout>", "Set API <timeout> in milliseconds to Coana backend.", "300000").option("-a, --analysis-timeout <timeout>", "Set <timeout> in seconds for each reachability analysis run").option("--memory-limit <memoryInMB>", "Set memory limit for analysis to <memoryInMB> megabytes of memory.", "8192").option("-c, --concurrency <concurrency>", "Set the maximum number of concurrent reachability analysis runs. It's recommended to choose a concurrency level that ensures that each analysis run has at least the --memory-limit amount of memory available.", "1").option("--api-key <key>", "Set the Coana dashboard API key. By setting you also enable the dashboard integration.").addOption(new commander_1.Option("--write-report-to-file", "Write the report dashboard-compatible report to dashboard-report.json. This report may help the Coana team debug issues with the report insertion mechanism.").default(false).hideHelp()).option("--project-name <repoName>", "Set the name of the repository. Used for dashboard integration.").option("--repo-url <repoUrl>", "Set the URL of the repository. Used for dashboard integration.").option("--include-dirs <dirs...>", "globs for directories to include from the detection of subprojects (space-separated). Notice, projects that are not included may still be scanned if they are referenced from included projects.").option("--exclude-dirs <dirs...>", "globs for directories to exclude from the detection of subprojects (space-separated). Notice, excluded projects may still be scanned if they are referenced from non-excluded projects.").option("--disable-analysis-splitting", "Limits Coana to at most 1 reachability analysis run per workspace").option("--print-analysis-log-file", "Store log output from the JavaScript/TypeScript reachability analysis in the file js-analysis.log file in the root of each workspace", false).option("--entry-points <entryPoints...>", "List of files to analyze for root workspace. The reachability analysis automatically analyzes all files used by the entry points. If not provided, all JavaScript and TypeScript files are considered entry points. For non-root workspaces, all JavaScript and TypeScript files are analyzed as well.").option("--include-projects-with-no-reachability-support", "Also runs Coana on projects where we support traditional SCA, but does not yet support reachability analysis.", false).option("--ecosystems <ecosystems...>", "List of ecosystems to analyze. Currently NPM, PIP, MAVEN and GO are supported. Default is all supported ecosystems.", (ecosystems) => ecosystems.split(" ").map((e) => e.toUpperCase())).option("--changed-files <files...>", "List of files that have changed. If provided, Coana only analyzes workspaces and modules that contain changed files.").option("--disable-report-submission", "Disable the submission of the report to the Coana dashboard. Used by the pipeline blocking feature.", false).option("--provider-project <path>", "File system path to folder containing the provider project (Only supported for Maven, Gradle, and SBT)").option("--provider-workspaces <dirs...>", "List of workspaces that build the provided runtime environment (Only supported for Maven, Gradle, and SBT)", (paths) => paths.split(" ")).option("--lightweight-reachability", "Runs Coana in lightweight mode. This increases analysis speed but also raises the risk of Coana misclassifying the reachability of certain complex vulnerabilities. Recommended only for use with Coana Guardrails mode.", false).addOption(new commander_1.Option("--run-without-docker", "Run package managers and reachability analyzers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new commander_1.Option("--run-env <env>", "Specifies the environment in which the CLI is run. So far only MANAGED_SCAN and UNKNOWN are supported.").default("UNKNOWN").choices(["UNKNOWN", "MANAGED_SCAN"]).hideHelp()).version(version_1.version).configureHelp({ sortOptions: true }).action(async (path2, options) => {
+run.name("run").argument("<path>", "File system path to folder containing the project").option("-o, --output-dir <path>", "Write json report to <path>/coana-report.json").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("-p, --print-report", "Print the report to the console", false).option("--offline-database <path>", "Path to a coana-offline-db.json file for running the CLI without internet connectivity", void 0).option("-t, --timeout <timeout>", "Set API <timeout> in milliseconds to Coana backend.", "300000").option("-a, --analysis-timeout <timeout>", "Set <timeout> in seconds for each reachability analysis run").option("--memory-limit <memoryInMB>", "Set memory limit for analysis to <memoryInMB> megabytes of memory.", "8192").option("-c, --concurrency <concurrency>", "Set the maximum number of concurrent reachability analysis runs. It's recommended to choose a concurrency level that ensures that each analysis run has at least the --memory-limit amount of memory available.", "1").option("--api-key <key>", "Set the Coana dashboard API key. By setting you also enable the dashboard integration.").addOption(new commander_1.Option("--write-report-to-file", "Write the report dashboard-compatible report to dashboard-report.json. This report may help the Coana team debug issues with the report insertion mechanism.").default(false).hideHelp()).option("--project-name <repoName>", "Set the name of the repository. Used for dashboard integration.").option("--repo-url <repoUrl>", "Set the URL of the repository. Used for dashboard integration.").option("--include-dirs <dirs...>", "globs for directories to include from the detection of subprojects (space-separated). Notice, projects that are not included may still be scanned if they are referenced from included projects.").option("--exclude-dirs <dirs...>", "globs for directories to exclude from the detection of subprojects (space-separated). Notice, excluded projects may still be scanned if they are referenced from non-excluded projects.").option("--disable-analysis-splitting", "Limits Coana to at most 1 reachability analysis run per workspace").option("--print-analysis-log-file", "Store log output from the JavaScript/TypeScript reachability analysis in the file js-analysis.log file in the root of each workspace", false).option("--entry-points <entryPoints...>", "List of files to analyze for root workspace. The reachability analysis automatically analyzes all files used by the entry points. If not provided, all JavaScript and TypeScript files are considered entry points. For non-root workspaces, all JavaScript and TypeScript files are analyzed as well.").option("--include-projects-with-no-reachability-support", "Also runs Coana on projects where we support traditional SCA, but does not yet support reachability analysis.", false).option("--ecosystems <ecosystems...>", "List of ecosystems to analyze. Currently NPM, PIP, MAVEN and GO are supported. Default is all supported ecosystems.", (ecosystems) => ecosystems.split(" ").map((e) => e.toUpperCase())).option("--changed-files <files...>", "List of files that have changed. If provided, Coana only analyzes workspaces and modules that contain changed files.").option("--disable-report-submission", "Disable the submission of the report to the Coana dashboard. Used by the pipeline blocking feature.", false).option("--provider-project <path>", "File system path to folder containing the provider project (Only supported for Maven, Gradle, and SBT)").option("--provider-workspaces <dirs...>", "List of workspaces that build the provided runtime environment (Only supported for Maven, Gradle, and SBT)", (paths) => paths.split(" ")).option("--lightweight-reachability", "Runs Coana in lightweight mode. This increases analysis speed but also raises the risk of Coana misclassifying the reachability of certain complex vulnerabilities. Recommended only for use with Coana Guardrails mode.", false).addOption(new commander_1.Option("--run-without-docker", "Run package managers and reachability analyzers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new commander_1.Option("--run-env <env>", "Specifies the environment in which the CLI is run. So far only MANAGED_SCAN and UNKNOWN are supported.").default("UNKNOWN").choices(["UNKNOWN", "MANAGED_SCAN"]).hideHelp()).addOption(new commander_1.Option("--guardrail-mode", "Run Coana in guardrail mode. This mode is used to prevent new reachable vulnerabilities from being introduced into the codebase. Usually run as a CI check when pushing new commits to a pull request.").default(false)).version(version_1.version).configureHelp({ sortOptions: true }).action(async (path2, options) => {
   process.env.DOCKER_IMAGE_TAG ??= version_1.version;
   await new cli_core_1.CliCore(path2, options).main();
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.0.20",
+  "version": "14.1.0",
   "description": "Coana CLI",
   "bin": {
     "@coana-tech/cli": "./cli.js"