@codacy/tools-flawfinder-2 0.13.0 → 0.15.0

package/dist/index.js

@@ -2062,7 +2062,7 @@ var descriptor = {
   preferredVersion: "2.0.19",
   languages: ["C", "CPP"],
   filePatterns: ["**/*.c", "**/*.h", "**/*.cpp", "**/*.cc", "**/*.cxx", "**/*.hpp"],
-  supportedOS: ["linux", "darwin"],
+  supportedOS: ["linux", "darwin", "win32"],
   supportedArch: ["x64", "arm64"],
   supportedRunners: ["local", "container"]
 };
@@ -2103,7 +2103,7 @@ async function getVersionFromBinary(binaryPath) {
 }
 async function resolveBinaryPath(ctx) {
   const venvDir = (0, import_tooling.getVenvDir)(ctx.globalDir, adapter.id);
-  const venvBin = import_path.default.join(venvDir, "bin", BINARY);
+  const venvBin = (0, import_tooling.resolveVenvBinary)((0, import_tooling.getVenvPaths)(venvDir), BINARY);
   const venvVersion = await getVersionFromBinary(venvBin);
   if (venvVersion) return venvBin;
   return BINARY;
@@ -2143,7 +2143,7 @@ var adapter = {
       }
     ] : [{ name: "Python", available: false, reason: "Python 3 not found" }];
     const venvDir = (0, import_tooling.getVenvDir)(ctx.globalDir, adapter.id);
-    const venvBinPath = import_path.default.join(venvDir, "bin", BINARY);
+    const venvBinPath = (0, import_tooling.resolveVenvBinary)((0, import_tooling.getVenvPaths)(venvDir), BINARY);
     const venvVersion = await getVersionFromBinary(venvBinPath);
     if (venvVersion) {
       ctx.logger.debug("Found flawfinder in codacy venv", {
@@ -2279,44 +2279,71 @@ var adapter = {
     }
     const binary = await resolveBinaryPath(ctx);
     const absoluteFiles = ctx.targetFiles.map((f) => import_path.default.resolve(ctx.repositoryRoot, f));
-    const args = ["--sarif", "--falsepositive", ...absoluteFiles];
+    const args = ["--sarif", "--falsepositive"];
+    const fileChunks = (0, import_tooling.chunkFilesForArgv)(absoluteFiles);
     try {
-      const { stdout, stderr, exitCode } = await (0, import_tooling.spawnTool)(binary, args, {
-        cwd: ctx.repositoryRoot,
-        logger: ctx.logger
-      });
-      if (exitCode !== 0) {
-        errors.push({
-          toolId: TOOL_ID,
-          phase: "toolInvoke",
-          kind: "NonZeroExit",
-          message: `flawfinder exited with code ${exitCode}${stderr ? `: ${stderr.trim()}` : ""}`,
-          level: "error"
-        });
-        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
-      }
-      if (!stdout.trim()) {
-        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
-      }
-      let sarif;
-      try {
-        sarif = JSON.parse(stdout);
-      } catch (err) {
-        errors.push({
-          toolId: TOOL_ID,
-          phase: "outputParse",
-          kind: "MalformedOutput",
-          message: `Failed to parse flawfinder SARIF output: ${err instanceof Error ? err.message : String(err)}`,
-          level: "error"
-        });
-        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
-      }
-      const run = sarif.runs?.[0];
-      const results = run?.results ?? [];
+      const results = [];
       const ruleIdToFunctionName = /* @__PURE__ */ new Map();
-      for (const rule of run?.tool?.driver?.rules ?? []) {
-        if (rule.id && rule.name) {
-          ruleIdToFunctionName.set(rule.id, extractFunctionName(rule.name));
+      for (const chunk of fileChunks) {
+        const { stdout, stderr, exitCode } = await (0, import_tooling.spawnTool)(binary, [...args, ...chunk], {
+          cwd: ctx.repositoryRoot,
+          logger: ctx.logger
+        });
+        if (exitCode !== 0) {
+          errors.push({
+            toolId: TOOL_ID,
+            phase: "toolInvoke",
+            kind: "NonZeroExit",
+            message: `flawfinder exited with code ${exitCode}${stderr ? `: ${stderr.trim()}` : ""}`,
+            level: "error"
+          });
+          return (0, import_tooling.buildResult)(
+            TOOL_ID,
+            startedAt,
+            /* @__PURE__ */ new Date(),
+            issues,
+            errors,
+            ctx.targetFiles.length
+          );
+        }
+        if (stderr.trim()) {
+          errors.push({
+            toolId: TOOL_ID,
+            phase: "outputParse",
+            kind: "ParseWarning",
+            message: `flawfinder stderr: ${stderr.trim()}`,
+            level: "warning"
+          });
+        }
+        if (!stdout.trim()) continue;
+        let sarif;
+        try {
+          sarif = JSON.parse(stdout);
+        } catch (err) {
+          errors.push({
+            toolId: TOOL_ID,
+            phase: "outputParse",
+            kind: "MalformedOutput",
+            message: `Failed to parse flawfinder SARIF output: ${err instanceof Error ? err.message : String(err)}`,
+            level: "error"
+          });
+          return (0, import_tooling.buildResult)(
+            TOOL_ID,
+            startedAt,
+            /* @__PURE__ */ new Date(),
+            issues,
+            errors,
+            ctx.targetFiles.length
+          );
+        }
+        const run = sarif.runs?.[0];
+        for (const result2 of run?.results ?? []) {
+          results.push(result2);
+        }
+        for (const rule of run?.tool?.driver?.rules ?? []) {
+          if (rule.id && rule.name) {
+            ruleIdToFunctionName.set(rule.id, extractFunctionName(rule.name));
+          }
         }
       }
       const enabledPatterns = new Set(codacyConfig.patterns.map((p) => p.patternId));
@@ -2356,15 +2383,6 @@ var adapter = {
           });
         }
       }
-      if (stderr.trim()) {
-        errors.push({
-          toolId: TOOL_ID,
-          phase: "outputParse",
-          kind: "ParseWarning",
-          message: `flawfinder stderr: ${stderr.trim()}`,
-          level: "warning"
-        });
-      }
     } catch (err) {
       errors.push({
         toolId: TOOL_ID,

package/dist/metadata.js

@@ -29,7 +29,7 @@ var descriptor = {
   preferredVersion: "2.0.19",
   languages: ["C", "CPP"],
   filePatterns: ["**/*.c", "**/*.h", "**/*.cpp", "**/*.cc", "**/*.cxx", "**/*.hpp"],
-  supportedOS: ["linux", "darwin"],
+  supportedOS: ["linux", "darwin", "win32"],
   supportedArch: ["x64", "arm64"],
   supportedRunners: ["local", "container"]
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/tools-flawfinder-2",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "Flawfinder adapter — CLI-mode C/C++ security analyzer",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,7 @@
     "dist"
   ],
   "dependencies": {
-    "@codacy/tooling": "0.13.0"
+    "@codacy/tooling": "0.15.0"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",