@coana-tech/cli 14.12.6 → 14.12.8

package/cli.mjs

@@ -197989,12 +197989,14 @@ async function computeSocketFactArtifacts(rootDir, relativeManifestFilePaths) {
     return void 0;
   }
 }
-async function registerAutofixOrUpgradePurlRun(manifestsTarHash, repositoryName, options, cliCommand) {
+async function registerAutofixOrUpgradePurlRun(manifestsTarHash, options, cliCommand) {
   try {
     const url2 = getSocketApiUrl(`orgs/${process.env.SOCKET_ORG_SLUG}/fixes/register-autofix-or-upgrade-cli-run`);
     const data2 = {
       manifestsTarHash,
-      repositoryName,
+      // disabling rule to also catch case where process.env.SOCKET_REPO_NAME is the empty string.
+      // eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing
+      repositoryName: process.env.SOCKET_REPO_NAME || "unknown-repo",
       options,
       cliCommand
     };
@@ -225602,7 +225604,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version2 = "14.12.6";
+var version2 = "14.12.8";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pick } = import_lodash15.default;
@@ -226293,7 +226295,7 @@ async function upgradePurl(path2, upgrades, options, logFile, cliFixRunId) {
   logger.silent = options.silent;
   let cliRunId = cliFixRunId;
   if (!cliRunId && options.manifestsTarHash) {
-    cliRunId = await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, path2, options, "upgrade-purls");
+    cliRunId = await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, options, "upgrade-purls");
   }
   const upgradePurlRunId = cliRunId && await getSocketAPI().registerUpgradePurlRun(cliRunId, upgrades);
   Spinner.instance({ text: "Running Coana Upgrade Purl CLI", isSilent: options.silent }).start();
@@ -226423,7 +226425,7 @@ ${vulnerabilityFixes.map((fix) => `	${fix.dependencyName} from ${fix.currentVers
 
 // dist/cli-compute-fixes-and-upgrade-purls.js
 async function computeFixesAndUpgradePurls(path2, options, logFile) {
-  const autofixRunId = options.manifestsTarHash && await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, path2, options, "autofix");
+  const autofixRunId = options.manifestsTarHash && await getSocketAPI().registerAutofixOrUpgradePurlRun(options.manifestsTarHash, options, "autofix");
   const { artifacts, ghsaToVulnerableArtifactIds } = await computeInputForComputingFixes(path2, options);
   if (Object.keys(ghsaToVulnerableArtifactIds).length === 0) {
     logger.info("No vulnerabilities to compute fixes for");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.6",
+  "version": "14.12.8",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -73399,12 +73399,14 @@ async function getLatestBucketsSocket(subprojectPath, workspacePath) {
     return void 0;
   }
 }
-async function registerAutofixOrUpgradePurlRun(manifestsTarHash, repositoryName, options, cliCommand) {
+async function registerAutofixOrUpgradePurlRun(manifestsTarHash, options, cliCommand) {
   try {
     const url2 = getSocketApiUrl(`orgs/${process.env.SOCKET_ORG_SLUG}/fixes/register-autofix-or-upgrade-cli-run`);
     const data2 = {
       manifestsTarHash,
-      repositoryName,
+      // disabling rule to also catch case where process.env.SOCKET_REPO_NAME is the empty string.
+      // eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing
+      repositoryName: process.env.SOCKET_REPO_NAME || "unknown-repo",
       options,
       cliCommand
     };
@@ -96991,11 +96993,12 @@ function getPreInstalledDepInfos(workspaceData) {
 var { groupBy } = import_lodash17.default;
 var CLI_VERSION_TO_USE_CACHING_FROM = { PIP: "14.9.15" };
 var CLI_VERSION_TO_USE_CACHING_FROM_DEFAULT = "13.16.6";
+var SOCKET_MODE = process.env.SOCKET_MODE === "true";
 function assertVulnChainDetails(vs) {
   assert8(vs.every((v) => v.vulnChainDetails));
 }
 var apiKey = COANA_API_KEY ? { type: "present", value: COANA_API_KEY } : { type: "missing" };
-var dashboardAPI = new DashboardAPI(process.env.SOCKET_MODE === "true", process.env.DISABLE_ANALYTICS_SHARING === "true");
+var dashboardAPI = new DashboardAPI(SOCKET_MODE, process.env.DISABLE_ANALYTICS_SHARING === "true");
 async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecomputeForTimeoutsAndAborts, codeAwareScanner, analysisMetadataCollector, statusUpdater) {
   logger.debug("Starting analyzeWithHeuristics");
   assertVulnChainDetails(vulns);
@@ -97083,7 +97086,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
     }
   }
   async function getBucketsBasedOnPreviousResults() {
-    if (process.env.SOCKET_MODE !== "true" && (!COANA_REPORT_ID || apiKey.type === "missing"))
+    if (!SOCKET_MODE && (!COANA_REPORT_ID || apiKey.type === "missing"))
       return void 0;
     const bucketsFromLastAnalysisAndCliVersion = await dashboardAPI.getBucketsForLastReport(relative5(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, vulnerabilities[0].ecosystem ?? "NPM", COANA_REPORT_ID, apiKey);
     if (!bucketsFromLastAnalysisAndCliVersion)
@@ -97319,6 +97322,13 @@ function augmentVulnsWithDetectedOccurrences(vulns, codeAwareScanner, heuristic,
   for (const v of vulns) {
     const detectedOccurrences = result.computeDetectedOccurrences(v);
     if (Array.isArray(detectedOccurrences) ? detectedOccurrences.length === 0 : detectedOccurrences.stacks.length === 0) {
+      if (SOCKET_MODE && result.terminatedEarly && !result.reachedDependencies && Object.keys(v.vulnChainDetails.transitiveDependencies).length > 1) {
+        v.results = {
+          type: "analysisError",
+          message: "Analysis terminated early and did not reach any dependencies"
+        };
+        continue;
+      }
       const packageOnPathFailedToInstall = Object.values(v.vulnChainDetails.transitiveDependencies).map((p) => p.packageName).find((p) => packagesFailedToInstall.includes(p));
       if (packageOnPathFailedToInstall) {
         v.results = {