@coana-tech/cli 14.12.189 → 14.12.191

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/cli.mjs CHANGED
@@ -235872,7 +235872,8 @@ async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash,
235872
235872
  vulnerabilityAccessPaths: vuln.reachabilityData?.undeterminableReachability ? vuln.reachabilityData.publicComment ?? "" : vuln.reachabilityData?.pattern ?? null,
235873
235873
  ecosystem,
235874
235874
  artifactId: artifact.id,
235875
- precomputedReachabilityResult: vuln.reachabilityData?.precomputedReachabilityResult ?? null
235875
+ precomputedReachabilityResult: vuln.reachabilityData?.precomputedReachabilityResult ?? null,
235876
+ activationStatus: vuln.reachabilityData?.activationStatus ?? null
235876
235877
  };
235877
235878
  const vulnId = `${ecosystem}-${workspace}-${artifact.namespace}-${artifact.name}-${artifact.version}-${vulnerability.url}`;
235878
235879
  if (!ecosystemWorkspaceVulnIds.has(vulnId)) {
@@ -236598,9 +236599,12 @@ function toSocketFactsSocketDependencyTree(artifacts, vulnerabilities, tier1Reac
236598
236599
  if (!reachabilityForGHSA) {
236599
236600
  reachabilityForGHSA = {
236600
236601
  ghsa_id: vulnerability.vulnerabilityUrl.replace("https://github.com/advisories/", ""),
236601
- reachability: []
236602
+ reachability: [],
236603
+ ...vulnerability.activationStatus ? { activation_status: vulnerability.activationStatus } : {}
236602
236604
  };
236603
236605
  component.reachability.push(reachabilityForGHSA);
236606
+ } else if (vulnerability.activationStatus && !reachabilityForGHSA.activation_status) {
236607
+ reachabilityForGHSA.activation_status = vulnerability.activationStatus;
236604
236608
  }
236605
236609
  if (vulnerability.codeAwareScanResult.type === "precomputed") {
236606
236610
  reachabilityForGHSA.reachability.push(vulnerability.codeAwareScanResult);
@@ -251519,7 +251523,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
251519
251523
  }
251520
251524
 
251521
251525
  // dist/version.js
251522
- var version3 = "14.12.189";
251526
+ var version3 = "14.12.191";
251523
251527
 
251524
251528
  // dist/cli-core.js
251525
251529
  var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;
@@ -252311,7 +252315,8 @@ Subproject: ${subproject}`);
252311
252315
  reachability,
252312
252316
  purl: v.purl,
252313
252317
  purlType: v.purlType,
252314
- artifactId: v.artifactId
252318
+ artifactId: v.artifactId,
252319
+ activationStatus: v.activationStatus
252315
252320
  };
252316
252321
  });
252317
252322
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@coana-tech/cli",
3
- "version": "14.12.189",
3
+ "version": "14.12.191",
4
4
  "description": "Coana CLI",
5
5
  "type": "module",
6
6
  "bin": {
@@ -7165,7 +7165,18 @@ function extractClassReferences(javapOutput) {
7165
7165
  }
7166
7166
  break;
7167
7167
  }
7168
- case "String":
7168
+ case "String": {
7169
+ const resolved = resolveConstantPoolEntry(index, pool);
7170
+ if (resolved) {
7171
+ references.add(resolved.replace(/\//g, "."));
7172
+ if (resolved.includes("L") || resolved.includes("/")) {
7173
+ for (const className of extractClassNamesFromDescriptor(resolved)) {
7174
+ references.add(className);
7175
+ }
7176
+ }
7177
+ }
7178
+ break;
7179
+ }
7169
7180
  case "Utf8": {
7170
7181
  const value = entry.value;
7171
7182
  if (value && (value.includes("L") || value.includes("/"))) {