@coana-tech/cli 14.12.7 → 14.12.9

package/cli.mjs

@@ -210393,6 +210393,11 @@ async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash)
     const ecosystemToWorkspaceToVulnerabilities = {};
     const purlsFailedToFindWorkspace = /* @__PURE__ */ new Set();
     for (const artifact of artifacts) {
+      let processToplevelAncestors2 = function(artifact2) {
+        const allAncestorIds = getAllToplevelAncestors(artifactMap, artifact2.id);
+        allAncestorIds.forEach((ancestorId) => artifactMap.get(ancestorId)?.manifestFiles?.forEach((ref) => manifestFiles.push(ref.file)));
+      };
+      var processToplevelAncestors = processToplevelAncestors2;
       const ecosystem = getAdvisoryEcosystemFromPurlType(artifact.type);
       if (!ecosystem)
         continue;
@@ -210411,12 +210416,12 @@ async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash)
           if (pipArtifactToRepresentativeManifest[sPurl]) {
             manifestFiles.push(...(pipArtifactToRepresentativeManifest[sPurl].manifestFiles ?? []).map((ref) => ref.file));
           }
+          processToplevelAncestors2(artifact);
           break;
         }
         default: {
           artifact.manifestFiles?.forEach((ref) => manifestFiles.push(ref.file));
-          const allAncestorIds = getAllToplevelAncestors(artifactMap, artifact.id);
-          allAncestorIds.forEach((ancestorId) => artifactMap.get(ancestorId)?.manifestFiles?.forEach((ref) => manifestFiles.push(ref.file)));
+          processToplevelAncestors2(artifact);
           break;
         }
       }
@@ -225604,7 +225609,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version2 = "14.12.7";
+var version2 = "14.12.9";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pick } = import_lodash15.default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.7",
+  "version": "14.12.9",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -96993,11 +96993,12 @@ function getPreInstalledDepInfos(workspaceData) {
 var { groupBy } = import_lodash17.default;
 var CLI_VERSION_TO_USE_CACHING_FROM = { PIP: "14.9.15" };
 var CLI_VERSION_TO_USE_CACHING_FROM_DEFAULT = "13.16.6";
+var SOCKET_MODE = process.env.SOCKET_MODE === "true";
 function assertVulnChainDetails(vs) {
   assert8(vs.every((v) => v.vulnChainDetails));
 }
 var apiKey = COANA_API_KEY ? { type: "present", value: COANA_API_KEY } : { type: "missing" };
-var dashboardAPI = new DashboardAPI(process.env.SOCKET_MODE === "true", process.env.DISABLE_ANALYTICS_SHARING === "true");
+var dashboardAPI = new DashboardAPI(SOCKET_MODE, process.env.DISABLE_ANALYTICS_SHARING === "true");
 async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecomputeForTimeoutsAndAborts, codeAwareScanner, analysisMetadataCollector, statusUpdater) {
   logger.debug("Starting analyzeWithHeuristics");
   assertVulnChainDetails(vulns);
@@ -97085,7 +97086,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
     }
   }
   async function getBucketsBasedOnPreviousResults() {
-    if (process.env.SOCKET_MODE !== "true" && (!COANA_REPORT_ID || apiKey.type === "missing"))
+    if (!SOCKET_MODE && (!COANA_REPORT_ID || apiKey.type === "missing"))
       return void 0;
     const bucketsFromLastAnalysisAndCliVersion = await dashboardAPI.getBucketsForLastReport(relative5(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, vulnerabilities[0].ecosystem ?? "NPM", COANA_REPORT_ID, apiKey);
     if (!bucketsFromLastAnalysisAndCliVersion)
@@ -97321,6 +97322,13 @@ function augmentVulnsWithDetectedOccurrences(vulns, codeAwareScanner, heuristic,
   for (const v of vulns) {
     const detectedOccurrences = result.computeDetectedOccurrences(v);
     if (Array.isArray(detectedOccurrences) ? detectedOccurrences.length === 0 : detectedOccurrences.stacks.length === 0) {
+      if (SOCKET_MODE && result.terminatedEarly && !result.reachedDependencies && Object.keys(v.vulnChainDetails.transitiveDependencies).length > 1) {
+        v.results = {
+          type: "analysisError",
+          message: "Analysis terminated early and did not reach any dependencies"
+        };
+        continue;
+      }
       const packageOnPathFailedToInstall = Object.values(v.vulnChainDetails.transitiveDependencies).map((p) => p.packageName).find((p) => packagesFailedToInstall.includes(p));
       if (packageOnPathFailedToInstall) {
         v.results = {