@coana-tech/cli 14.12.103 → 14.12.104
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cli.mjs +441 -465
- package/package.json +1 -1
- package/reachability-analyzers-cli.mjs +14 -11
- package/repos/coana-tech/goana/bin/goana-darwin-amd64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-darwin-arm64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-linux-amd64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-linux-arm64.gz +0 -0
- package/repos/coana-tech/javap-service/javap-service.jar +0 -0
package/package.json
CHANGED
|
@@ -111651,7 +111651,7 @@ async function getCurrentCommitHash(project) {
|
|
|
111651
111651
|
}
|
|
111652
111652
|
function detectedOccurrencesFromAPMatches(matches, pathPrefixToRemove) {
|
|
111653
111653
|
for (const match2 of Object.values(matches))
|
|
111654
|
-
for (const stack of
|
|
111654
|
+
for (const stack of match2.stacks)
|
|
111655
111655
|
for (const cl of stack) {
|
|
111656
111656
|
if (cl.package === "<app>")
|
|
111657
111657
|
cl.package = ROOT_NODE_STR;
|
|
@@ -111661,8 +111661,8 @@ function detectedOccurrencesFromAPMatches(matches, pathPrefixToRemove) {
|
|
|
111661
111661
|
return ({ vulnerabilityAccessPaths }) => getStacksFromAccPaths(matches, { vulnerabilityAccessPaths });
|
|
111662
111662
|
}
|
|
111663
111663
|
function detectedOccurrencesFromAPMatchesRuby(matches, pathPrefixToPackage) {
|
|
111664
|
-
for (const
|
|
111665
|
-
for (const stack of
|
|
111664
|
+
for (const stacks of Object.values(matches))
|
|
111665
|
+
for (const stack of stacks)
|
|
111666
111666
|
for (const cl of stack) {
|
|
111667
111667
|
if (cl.package === "<app>")
|
|
111668
111668
|
cl.package = ROOT_NODE_STR;
|
|
@@ -111739,7 +111739,11 @@ var PythonCodeAwareVulnerabilityScanner = class {
|
|
|
111739
111739
|
reachedDependencies: false,
|
|
111740
111740
|
terminatedEarly: false,
|
|
111741
111741
|
diagnostics: { timeout: false, aborted: false },
|
|
111742
|
-
computeDetectedOccurrences: (
|
|
111742
|
+
computeDetectedOccurrences: import_lodash14.default.constant({
|
|
111743
|
+
analysisLevel: "function-level",
|
|
111744
|
+
affectedPackages: [],
|
|
111745
|
+
stacks: []
|
|
111746
|
+
})
|
|
111743
111747
|
};
|
|
111744
111748
|
const packagesToExclude = heuristic.getPackagesToExcludeFromAnalysis?.(vulns);
|
|
111745
111749
|
const vulnAccPaths = sortedUniq(vulns.flatMap((v) => v.vulnerabilityAccessPaths).sort());
|
|
@@ -112667,7 +112671,7 @@ function augmentVulnsWithDetectedOccurrences(vulns, codeAwareScanner, heuristic,
|
|
|
112667
112671
|
const packagesFailedToInstall = codeAwareScanner.getPackagesExcludedUnrelatedToHeuristic();
|
|
112668
112672
|
for (const v of vulns) {
|
|
112669
112673
|
const detectedOccurrences = result.computeDetectedOccurrences(v);
|
|
112670
|
-
if (
|
|
112674
|
+
if (detectedOccurrences.stacks.length === 0) {
|
|
112671
112675
|
if (SOCKET_MODE && result.terminatedEarly && !result.reachedDependencies && Object.keys(v.vulnChainDetails.transitiveDependencies).length > 1) {
|
|
112672
112676
|
v.results = {
|
|
112673
112677
|
type: "analysisError",
|
|
@@ -112745,16 +112749,15 @@ var GoAnalyzer = class {
|
|
|
112745
112749
|
const res = otherVulns.length ? await analyzeWithHeuristics(this.state, otherVulns, [GoanaHeuristics.DEFAULT], false, new GoCodeAwareVulnerabilityScanner(this.projectDir, this.state.reachabilityAnalysisOptions), analysisMetadataCollector, statusUpdater) : [];
|
|
112746
112750
|
if (unreachableVulns.length) {
|
|
112747
112751
|
const heuristicName = GoanaHeuristics.IMPORT_REACHABILITY.name;
|
|
112748
|
-
const detectedOccurrences = {
|
|
112749
|
-
analysisLevel: "function-level",
|
|
112750
|
-
affectedPackages: [],
|
|
112751
|
-
stacks: []
|
|
112752
|
-
};
|
|
112753
112752
|
const scanResult = {
|
|
112754
112753
|
type: "success",
|
|
112755
112754
|
heuristicName,
|
|
112756
112755
|
terminatedEarly: false,
|
|
112757
|
-
detectedOccurrences
|
|
112756
|
+
detectedOccurrences: {
|
|
112757
|
+
analysisLevel: "function-level",
|
|
112758
|
+
affectedPackages: [],
|
|
112759
|
+
stacks: []
|
|
112760
|
+
}
|
|
112758
112761
|
};
|
|
112759
112762
|
analysisMetadataCollector?.({
|
|
112760
112763
|
vulnUrls: unreachableVulns.map((v) => v.url),
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|