@coana-tech/cli 14.12.211 → 14.12.214
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cli.mjs +3 -3
- package/package.json +1 -1
- package/reachability-analyzers-cli.mjs +10 -8
- package/repos/coana-tech/goana/bin/goana-darwin-amd64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-darwin-arm64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-linux-amd64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-linux-arm64.gz +0 -0
- package/repos/coana-tech/javap-service/javap-service.jar +0 -0
- package/repos/coana-tech/spar/sparjs-aarch64-apple-darwin.gz +0 -0
- package/repos/coana-tech/spar/sparjs-aarch64-unknown-linux-musl.gz +0 -0
- package/repos/coana-tech/spar/sparjs-x86_64-apple-darwin.gz +0 -0
- package/repos/coana-tech/spar/sparjs-x86_64-unknown-linux-musl.gz +0 -0
package/cli.mjs
CHANGED
|
@@ -234796,7 +234796,7 @@ async function computeFixesAndUpgradePurls(path9, options, logFile) {
|
|
|
234796
234796
|
}
|
|
234797
234797
|
if (upgrades.size === 0) {
|
|
234798
234798
|
if (autofixRunId) {
|
|
234799
|
-
await getSocketAPI().finalizeAutofixRun(autofixRunId, "fixed-none");
|
|
234799
|
+
await getSocketAPI().finalizeAutofixRun(autofixRunId, "fixed-none", void 0, await logger.getLogContent(logFile));
|
|
234800
234800
|
}
|
|
234801
234801
|
throw new Error(`Unable to compute fixes for any of the requested vulnerabilities: ${prettyApplyFixesTo(options.applyFixesTo)}`);
|
|
234802
234802
|
}
|
|
@@ -234814,7 +234814,7 @@ async function computeFixesAndUpgradePurls(path9, options, logFile) {
|
|
|
234814
234814
|
}, autofixRunId) ?? "fixed-all";
|
|
234815
234815
|
if (autofixRunId) {
|
|
234816
234816
|
const allGhsasFailed = fixesFound.length === 0;
|
|
234817
|
-
await getSocketAPI().finalizeAutofixRun(autofixRunId, ghsasWithFailedArtifacts.length === 0 && applyFixesStatus === "fixed-all" ? "fixed-all" : allGhsasFailed || applyFixesStatus === "fixed-none" ? "fixed-none" : "fixed-some");
|
|
234817
|
+
await getSocketAPI().finalizeAutofixRun(autofixRunId, ghsasWithFailedArtifacts.length === 0 && applyFixesStatus === "fixed-all" ? "fixed-all" : allGhsasFailed || applyFixesStatus === "fixed-none" ? "fixed-none" : "fixed-some", void 0, await logger.getLogContent(logFile));
|
|
234818
234818
|
}
|
|
234819
234819
|
return {
|
|
234820
234820
|
type: "applied-fixes",
|
|
@@ -251742,7 +251742,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
|
|
|
251742
251742
|
}
|
|
251743
251743
|
|
|
251744
251744
|
// dist/version.js
|
|
251745
|
-
var version3 = "14.12.
|
|
251745
|
+
var version3 = "14.12.214";
|
|
251746
251746
|
|
|
251747
251747
|
// dist/cli-core.js
|
|
251748
251748
|
var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;
|
package/package.json
CHANGED
|
@@ -110898,7 +110898,7 @@ function tarjanAndCondensation(packageMetadatas) {
|
|
|
110898
110898
|
|
|
110899
110899
|
// dist/whole-program-code-aware-vulnerability-scanner/js/dependency-preparation.js
|
|
110900
110900
|
async function prepareNpmDependencies(subprojectDir, workspaceDir, artifactIdToArtifact, directDependencies, packageNamesToInstall) {
|
|
110901
|
-
if (existsSync10(resolve12(subprojectDir, "node_modules")))
|
|
110901
|
+
if (existsSync10(resolve12(subprojectDir, "node_modules")) || existsSync10(resolve12(workspaceDir, "node_modules")))
|
|
110902
110902
|
return { failedPackages: [], installedPackages: [] };
|
|
110903
110903
|
const artifactToOriginal = /* @__PURE__ */ new Map();
|
|
110904
110904
|
const transitiveDependenciesToInstall = Object.fromEntries(Object.entries(artifactIdToArtifact).filter(([_, dep]) => packageNamesToInstall.includes(getPackageName(dep))).map(([depId, dep]) => {
|
|
@@ -111873,6 +111873,7 @@ var SparJSAnalysisEngine = class extends JSAnalysisEngine {
|
|
|
111873
111873
|
${/* XXX: Requires Node 22+ */
|
|
111874
111874
|
approx && "--approx"}
|
|
111875
111875
|
--callstacks-json ${callStackFile}
|
|
111876
|
+
--escape-patch-resolved-reads
|
|
111876
111877
|
--unresolved-non-vulnerable
|
|
111877
111878
|
${parseShellArgs(process.env.COANA_SPARJS_ADDITIONAL_FLAGS ?? "")}
|
|
111878
111879
|
${filesToAnalyze}
|
|
@@ -114393,8 +114394,9 @@ var NpmAnalyzer = class {
|
|
|
114393
114394
|
}
|
|
114394
114395
|
async runReachabilityAnalysis(vulns, analysisMetadataCollector, statusUpdater) {
|
|
114395
114396
|
const heuristicsInOrder = this.state.otherAnalysisOptions.lightweightReachability ? [heuristics.IGNORE_DEPENDENCIES_AND_MAX_ROUNDS_3] : [heuristics.ONLY_VULN_PATH_PACKAGES_EXCEPT_VULNERABLE_PACKAGE];
|
|
114396
|
-
const
|
|
114397
|
-
|
|
114397
|
+
const nodeModulesAlreadyExistedInSubprojectDir = existsSync14(resolve22(this.state.subprojectDir, "node_modules"));
|
|
114398
|
+
const nodeModulesAlreadyExistedInProjectDir = existsSync14(resolve22(this.projectDir, "node_modules"));
|
|
114399
|
+
this.preinstalledDependencies = nodeModulesAlreadyExistedInSubprojectDir || nodeModulesAlreadyExistedInProjectDir ? "YES" : "NO";
|
|
114398
114400
|
const wrappedCollector = (metadata) => {
|
|
114399
114401
|
const jellyDiagnostics = metadata.analysisDiagnostics;
|
|
114400
114402
|
if (jellyDiagnostics?.modules !== void 0) {
|
|
@@ -114518,11 +114520,11 @@ ${e.stack}` : String(e),
|
|
|
114518
114520
|
return res;
|
|
114519
114521
|
} finally {
|
|
114520
114522
|
await Promise.all([this.engine.cleanup(), vulnerabilityScanner.cleanup()]);
|
|
114521
|
-
if (!
|
|
114522
|
-
|
|
114523
|
-
|
|
114524
|
-
|
|
114525
|
-
|
|
114523
|
+
if (!nodeModulesAlreadyExistedInSubprojectDir) {
|
|
114524
|
+
await rm8(resolve22(this.state.subprojectDir, "node_modules"), { recursive: true, force: true });
|
|
114525
|
+
}
|
|
114526
|
+
if (!nodeModulesAlreadyExistedInProjectDir) {
|
|
114527
|
+
await rm8(resolve22(this.projectDir, "node_modules"), { recursive: true, force: true });
|
|
114526
114528
|
}
|
|
114527
114529
|
}
|
|
114528
114530
|
}
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|