@coana-tech/cli 14.9.2 → 14.9.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cli.mjs +55 -47
- package/package.json +1 -1
package/cli.mjs
CHANGED
|
@@ -197213,6 +197213,45 @@ function groupVulnsByUrlAndReachability(vulnerabilityInstances, mapper) {
|
|
|
197213
197213
|
return groupedInstances;
|
|
197214
197214
|
}
|
|
197215
197215
|
|
|
197216
|
+
// ../web-compat-utils/src/dependency-tree.ts
|
|
197217
|
+
function getEcosystem({ ecosystem }) {
|
|
197218
|
+
return ecosystem ?? "NPM";
|
|
197219
|
+
}
|
|
197220
|
+
var ADVISORY_ECOSYSTEMS = [
|
|
197221
|
+
"COMPOSER",
|
|
197222
|
+
"ERLANG",
|
|
197223
|
+
"ACTIONS",
|
|
197224
|
+
"GO",
|
|
197225
|
+
"MAVEN",
|
|
197226
|
+
"NPM",
|
|
197227
|
+
"NUGET",
|
|
197228
|
+
"PIP",
|
|
197229
|
+
"PUB",
|
|
197230
|
+
"RUBYGEMS",
|
|
197231
|
+
"RUST",
|
|
197232
|
+
"SWIFT"
|
|
197233
|
+
];
|
|
197234
|
+
var ADVISORY_SEVERITIES = [
|
|
197235
|
+
"INFO",
|
|
197236
|
+
"LOW",
|
|
197237
|
+
"MODERATE",
|
|
197238
|
+
"HIGH",
|
|
197239
|
+
"CRITICAL"
|
|
197240
|
+
];
|
|
197241
|
+
var ADVISORY_SEVERITIES_SORTED = ADVISORY_SEVERITIES.toReversed();
|
|
197242
|
+
function toPlainDependencyTree(dependencyTree) {
|
|
197243
|
+
function pickNode(node) {
|
|
197244
|
+
return i3(node, ["packageName", "version", "dependencies", "resolvedType"]);
|
|
197245
|
+
}
|
|
197246
|
+
return {
|
|
197247
|
+
...pickNode(dependencyTree),
|
|
197248
|
+
transitiveDependencies: Object.fromEntries(
|
|
197249
|
+
Object.entries(dependencyTree.transitiveDependencies).map(([key, value]) => [key, pickNode(value)])
|
|
197250
|
+
),
|
|
197251
|
+
ecosystem: dependencyTree.ecosystem
|
|
197252
|
+
};
|
|
197253
|
+
}
|
|
197254
|
+
|
|
197216
197255
|
// ../web-compat-utils/src/vulnerability-diff-utils.ts
|
|
197217
197256
|
function vulnerabilitiesDiff(oldVulnerabilities, newVulnerabilities, dismissedVulnerabilities = []) {
|
|
197218
197257
|
const changedVulnerabilityWithReason = [];
|
|
@@ -198287,37 +198326,6 @@ function isShortestPath(root3, vulnPath) {
|
|
|
198287
198326
|
// ../web-compat-utils/src/analysis-error-keys.ts
|
|
198288
198327
|
var CLI_ANALYSIS_ERROR_MESSAGE = "Sharing log due to analysis error";
|
|
198289
198328
|
|
|
198290
|
-
// ../web-compat-utils/src/dependency-tree.ts
|
|
198291
|
-
function getEcosystem({ ecosystem }) {
|
|
198292
|
-
return ecosystem ?? "NPM";
|
|
198293
|
-
}
|
|
198294
|
-
var ADVISORY_ECOSYSTEMS = [
|
|
198295
|
-
"COMPOSER",
|
|
198296
|
-
"ERLANG",
|
|
198297
|
-
"ACTIONS",
|
|
198298
|
-
"GO",
|
|
198299
|
-
"MAVEN",
|
|
198300
|
-
"NPM",
|
|
198301
|
-
"NUGET",
|
|
198302
|
-
"PIP",
|
|
198303
|
-
"PUB",
|
|
198304
|
-
"RUBYGEMS",
|
|
198305
|
-
"RUST",
|
|
198306
|
-
"SWIFT"
|
|
198307
|
-
];
|
|
198308
|
-
function toPlainDependencyTree(dependencyTree) {
|
|
198309
|
-
function pickNode(node) {
|
|
198310
|
-
return i3(node, ["packageName", "version", "dependencies", "resolvedType"]);
|
|
198311
|
-
}
|
|
198312
|
-
return {
|
|
198313
|
-
...pickNode(dependencyTree),
|
|
198314
|
-
transitiveDependencies: Object.fromEntries(
|
|
198315
|
-
Object.entries(dependencyTree.transitiveDependencies).map(([key, value]) => [key, pickNode(value)])
|
|
198316
|
-
),
|
|
198317
|
-
ecosystem: dependencyTree.ecosystem
|
|
198318
|
-
};
|
|
198319
|
-
}
|
|
198320
|
-
|
|
198321
198329
|
// ../web-compat-utils/src/vuln-chain-detail-utils.ts
|
|
198322
198330
|
var ROOT_NODE_STR = "";
|
|
198323
198331
|
function augmentWithParentsMap(d3) {
|
|
@@ -211976,13 +211984,13 @@ import { join as join16 } from "path";
|
|
|
211976
211984
|
var { memoize: memoize3 } = import_lodash14.default;
|
|
211977
211985
|
var memoizedParseShellArgs = memoize3(parseShellArgs);
|
|
211978
211986
|
var MAVEN_PUBLIC_REPOSITORIES = [
|
|
211979
|
-
"https://repo1.maven.org/maven2",
|
|
211980
|
-
"https://packages.atlassian.com/artifactory/maven-atlassian-external",
|
|
211981
|
-
"https://maven.wso2.org/nexus/content/repositories/releases",
|
|
211982
|
-
"https://repository.jboss.org/nexus/content/repositories/ea",
|
|
211983
|
-
"https://maven.pkg.jetbrains.space/public/p/ktor/eap",
|
|
211984
|
-
"https://maven.wso2.org/nexus/content/repositories/public",
|
|
211985
|
-
"https://nexus.bedatadriven.com/content/groups/public"
|
|
211987
|
+
"https://repo1.maven.org/maven2/",
|
|
211988
|
+
"https://packages.atlassian.com/artifactory/maven-atlassian-external/",
|
|
211989
|
+
"https://maven.wso2.org/nexus/content/repositories/releases/",
|
|
211990
|
+
"https://repository.jboss.org/nexus/content/repositories/ea/",
|
|
211991
|
+
"https://maven.pkg.jetbrains.space/public/p/ktor/eap/",
|
|
211992
|
+
"https://maven.wso2.org/nexus/content/repositories/public/",
|
|
211993
|
+
"https://nexus.bedatadriven.com/content/groups/public/"
|
|
211986
211994
|
];
|
|
211987
211995
|
async function findRepositoriesForMavenPackageAndVersion(groupId, artifactId, version3) {
|
|
211988
211996
|
try {
|
|
@@ -212008,17 +212016,17 @@ async function findRepositoriesForMavenPackageAndVersion(groupId, artifactId, ve
|
|
|
212008
212016
|
);
|
|
212009
212017
|
return availableRepos.length ? availableRepos : void 0;
|
|
212010
212018
|
}
|
|
212019
|
+
function getUrlForProject(repository, groupId, artifactId) {
|
|
212020
|
+
return new URL(`${groupId.replaceAll(".", "/")}/${artifactId}/`, repository).href;
|
|
212021
|
+
}
|
|
212011
212022
|
function getUrlForPackage(repository, groupId, artifactId, version3) {
|
|
212012
|
-
return `${
|
|
212013
|
-
".",
|
|
212014
|
-
"/"
|
|
212015
|
-
)}/${artifactId}/${version3}/`;
|
|
212023
|
+
return new URL(`${version3}/`, getUrlForProject(repository, groupId, artifactId)).href;
|
|
212016
212024
|
}
|
|
212017
212025
|
function getUrlForArtifact(repository, groupId, artifactId, type, classifier, version3) {
|
|
212018
|
-
return
|
|
212019
|
-
"
|
|
212020
|
-
|
|
212021
|
-
)
|
|
212026
|
+
return new URL(
|
|
212027
|
+
`${artifactId}-${version3}${classifier ? `-${classifier}` : ""}.${type ?? "jar"}`,
|
|
212028
|
+
getUrlForPackage(repository, groupId, artifactId, version3)
|
|
212029
|
+
).href;
|
|
212022
212030
|
}
|
|
212023
212031
|
|
|
212024
212032
|
// ../security-auditor/security-auditor-api/src/vulnerability-patterns-helper/get-interesting-urls-for-vulnerability.ts
|
|
@@ -213327,7 +213335,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
|
|
|
213327
213335
|
}
|
|
213328
213336
|
|
|
213329
213337
|
// dist/version.js
|
|
213330
|
-
var version2 = "14.9.
|
|
213338
|
+
var version2 = "14.9.5";
|
|
213331
213339
|
|
|
213332
213340
|
// dist/cli-core.js
|
|
213333
213341
|
var { omit, partition, pick } = import_lodash15.default;
|