@coana-tech/cli 14.12.51 → 14.12.52
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cli.mjs +25 -10
- package/package.json +1 -1
- package/reachability-analyzers-cli.mjs +1305 -934
- package/repos/coana-tech/alucard/alucard.jar +0 -0
- package/repos/coana-tech/class-graph-analysis/dist/bundle/class-graph-analysis-cli.mjs +16 -4
- package/repos/coana-tech/goana/bin/goana-darwin-amd64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-darwin-arm64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-linux-amd64.gz +0 -0
- package/repos/coana-tech/goana/bin/goana-linux-arm64.gz +0 -0
- package/repos/coana-tech/mambalade/dist/{mambalade-0.3.13-py3-none-any.whl → mambalade-0.3.14-py3-none-any.whl} +0 -0
package/cli.mjs
CHANGED
|
@@ -197422,7 +197422,11 @@ var ecosystemMap = {
|
|
|
197422
197422
|
versionSatisfiesRelation: versionSatisfiesRelationWithComparisonFunction(nugetCompareVersions),
|
|
197423
197423
|
versionSatisfiesRange: versionSatisfiesWithVersionComparisonFunction(nugetCompareVersions)
|
|
197424
197424
|
},
|
|
197425
|
-
RUBYGEMS:
|
|
197425
|
+
RUBYGEMS: {
|
|
197426
|
+
...buildUnsupportedEcosystem("RUBYGEMS"),
|
|
197427
|
+
// XXX: Currently only used for checking vulnerability access paths in `check-match-on-versions.ts`!
|
|
197428
|
+
versionSatisfiesRange: semverSatisfiesRange
|
|
197429
|
+
},
|
|
197426
197430
|
COMPOSER: buildUnsupportedEcosystem("COMPOSER"),
|
|
197427
197431
|
SWIFT: buildUnsupportedEcosystem("SWIFT"),
|
|
197428
197432
|
ERLANG: buildUnsupportedEcosystem("ERLANG"),
|
|
@@ -213583,13 +213587,13 @@ async function getCargoTomlFilesForCargoLockFile(rootDir, cargoLockFile, cargoTo
|
|
|
213583
213587
|
if (!toml) return void 0;
|
|
213584
213588
|
const memberPatterns = [];
|
|
213585
213589
|
const excludePatterns = [];
|
|
213586
|
-
const members = getNestedValue(toml, "
|
|
213590
|
+
const members = getNestedValue(toml, "workspace.members");
|
|
213587
213591
|
for (const member of members instanceof TOMLArray ? members : []) {
|
|
213588
213592
|
if (member instanceof TOMLScalar && typeof member[value] === "string") {
|
|
213589
213593
|
memberPatterns.push(member[value]);
|
|
213590
213594
|
}
|
|
213591
213595
|
}
|
|
213592
|
-
const excludes = getNestedValue(toml, "
|
|
213596
|
+
const excludes = getNestedValue(toml, "workspace.exclude");
|
|
213593
213597
|
for (const exclude of excludes instanceof TOMLArray ? excludes : []) {
|
|
213594
213598
|
if (exclude instanceof TOMLScalar && typeof exclude[value] === "string") {
|
|
213595
213599
|
excludePatterns.push(exclude[value]);
|
|
@@ -218165,6 +218169,9 @@ function inferWorkspaceFromManifestPath(ecosystem, manifestPath, properPythonPro
|
|
|
218165
218169
|
const dir = dirname15(manifestPath);
|
|
218166
218170
|
return base === "go.mod" ? dir || "." : void 0;
|
|
218167
218171
|
}
|
|
218172
|
+
case "RUBYGEMS": {
|
|
218173
|
+
return dirname15(manifestPath) || ".";
|
|
218174
|
+
}
|
|
218168
218175
|
default: {
|
|
218169
218176
|
return ".";
|
|
218170
218177
|
}
|
|
@@ -218536,10 +218543,10 @@ ${upgrades.map(({ purl, upgradeVersion }) => ` ${prettyPrintPurlUpgrade(purl, up
|
|
|
218536
218543
|
const subprojectPromiseQueue = new PromiseQueue(Number(options.concurrency));
|
|
218537
218544
|
supportedSubprojects.forEach((subproject) => {
|
|
218538
218545
|
subprojectPromiseQueue.enqueueTask(async () => {
|
|
218539
|
-
const workspacePathsMatchingGlob = subproject.workspacePaths.filter((wsPath) => minimatch(join25(subproject.subprojectPath, wsPath), options.
|
|
218546
|
+
const workspacePathsMatchingGlob = subproject.workspacePaths.filter((wsPath) => minimatch(join25(subproject.subprojectPath, wsPath), options.glob ?? "**"));
|
|
218540
218547
|
if (workspacePathsMatchingGlob.length === 0)
|
|
218541
218548
|
return;
|
|
218542
|
-
logger.info(`Found workspaces for subproject ${subproject.subprojectPath}${options.
|
|
218549
|
+
logger.info(`Found workspaces for subproject ${subproject.subprojectPath}${options.glob ? `matching glob ${options.glob}` : ""}:
|
|
218543
218550
|
${workspacePathsMatchingGlob.map((wsPath) => ` ${wsPath}`).join("\n")}`);
|
|
218544
218551
|
const fixingData = await otherModulesCommunicator.getFixingData(subproject.packageManagerName, subproject.subprojectPath, workspacePathsMatchingGlob);
|
|
218545
218552
|
const workspaceToFixes = {};
|
|
@@ -218659,7 +218666,7 @@ async function computeFixesAndUpgradePurls(path2, options, logFile) {
|
|
|
218659
218666
|
runWithoutDocker: options.runWithoutDocker,
|
|
218660
218667
|
manifestsTarHash: options.manifestsTarHash,
|
|
218661
218668
|
concurrency: "1",
|
|
218662
|
-
|
|
218669
|
+
glob: options.glob,
|
|
218663
218670
|
rangeStyle: options.rangeStyle
|
|
218664
218671
|
}, void 0, autofixRunId, socketFactArtifacts) ?? "fixed-all";
|
|
218665
218672
|
if (autofixRunId) {
|
|
@@ -219395,7 +219402,7 @@ function toSocketReachabilitySchema(vulnerability) {
|
|
|
219395
219402
|
}
|
|
219396
219403
|
if (codeAwareScanResult.type === "otherError") {
|
|
219397
219404
|
if (codeAwareScanResult.message.includes("Reachability analysis for languages using"))
|
|
219398
|
-
return { type: "unknown" };
|
|
219405
|
+
return { type: "unknown", reason: codeAwareScanResult.message };
|
|
219399
219406
|
return { type: "error", error: codeAwareScanResult.message };
|
|
219400
219407
|
}
|
|
219401
219408
|
if (codeAwareScanResult.type === "success") {
|
|
@@ -234352,7 +234359,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
|
|
|
234352
234359
|
}
|
|
234353
234360
|
|
|
234354
234361
|
// dist/version.js
|
|
234355
|
-
var version2 = "14.12.
|
|
234362
|
+
var version2 = "14.12.52";
|
|
234356
234363
|
|
|
234357
234364
|
// dist/cli-core.js
|
|
234358
234365
|
var { mapValues, omit, partition, pick } = import_lodash15.default;
|
|
@@ -234546,7 +234553,15 @@ var CliCore = class {
|
|
|
234546
234553
|
otherModulesCommunicator,
|
|
234547
234554
|
this.rootWorkingDirectory,
|
|
234548
234555
|
ecosystem,
|
|
234549
|
-
[
|
|
234556
|
+
[
|
|
234557
|
+
"NPM",
|
|
234558
|
+
"PIP",
|
|
234559
|
+
"GO",
|
|
234560
|
+
"MAVEN",
|
|
234561
|
+
"NUGET",
|
|
234562
|
+
"RUST"
|
|
234563
|
+
/*, 'RUBYGEMS' */
|
|
234564
|
+
].includes(ecosystem) && isEcosystemToAnalyze,
|
|
234550
234565
|
(workspaceName, workspaceNumber, totalWorkspacesForCurrentEcosystem) => {
|
|
234551
234566
|
currentOverallWorkspace++;
|
|
234552
234567
|
logger.info(bold(`Analyzing ecosystem ${ecosystem} for project ${workspaceName} (${workspaceNumber}/${totalWorkspacesForCurrentEcosystem}) - Overall progress: Project ${currentOverallWorkspace}/${totalWorkspaces}, ecosystem ${ecosystemIndex + 1}/${totalEcosystems}`));
|
|
@@ -235125,7 +235140,7 @@ async function initializeComputeFixesAndUpgradePurls(path2, options) {
|
|
|
235125
235140
|
"silent",
|
|
235126
235141
|
"applyFixesTo",
|
|
235127
235142
|
"dryRun",
|
|
235128
|
-
"
|
|
235143
|
+
"glob",
|
|
235129
235144
|
"manifestsTarHash",
|
|
235130
235145
|
"rangeStyle",
|
|
235131
235146
|
"disableMajorUpdates",
|