@codacy/tools-opengrep-1 0.6.0 → 0.6.1

package/dist/index.js

@@ -28515,6 +28515,48 @@ function truncate(str, maxLen) {
   if (str.length <= maxLen) return str;
   return str.slice(0, maxLen - 3) + "...";
 }
+var ARGV_BYTE_BUDGET = 200 * 1024;
+function minimalCoverDirs(files) {
+  const dirs = /* @__PURE__ */ new Set();
+  for (const f of files) {
+    const d = import_path.default.dirname(f);
+    dirs.add(d === "" ? "." : d);
+  }
+  const sorted = [...dirs].sort((a, b) => {
+    if (a === ".") return -1;
+    if (b === ".") return 1;
+    return a.split(import_path.default.sep).length - b.split(import_path.default.sep).length;
+  });
+  const kept = [];
+  for (const d of sorted) {
+    const covered = kept.some((k) => {
+      if (k === d) return true;
+      if (k === ".") return true;
+      return d.startsWith(k + import_path.default.sep);
+    });
+    if (!covered) kept.push(d);
+  }
+  return kept;
+}
+function argvBytes(paths) {
+  let total = 0;
+  for (const p of paths) total += Buffer.byteLength(p) + 1;
+  return total;
+}
+function chooseScanTargets(validatedAbsoluteFiles, repositoryRoot) {
+  if (argvBytes(validatedAbsoluteFiles) <= ARGV_BYTE_BUDGET) {
+    return { targets: validatedAbsoluteFiles, strategy: "files" };
+  }
+  const relFiles = validatedAbsoluteFiles.map((f) => import_path.default.relative(repositoryRoot, f));
+  const dirs = minimalCoverDirs(relFiles);
+  if (dirs.length > 0 && !(dirs.length === 1 && dirs[0] === ".")) {
+    const absoluteDirs = dirs.map((d) => import_path.default.resolve(repositoryRoot, d));
+    if (argvBytes(absoluteDirs) <= ARGV_BYTE_BUDGET) {
+      return { targets: absoluteDirs, strategy: "dirs" };
+    }
+  }
+  return { targets: [repositoryRoot], strategy: "root" };
+}
 async function materializeConfig(ctx, enabledPatterns) {
   let rulesContent;
   try {
@@ -28691,20 +28733,36 @@ var adapter = {
       });
       return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
     }
-    const absoluteFiles = [];
+    const targetPathSet = /* @__PURE__ */ new Set();
+    const validatedAbsoluteFiles = [];
     for (const f of ctx.targetFiles) {
       const abs = import_path.default.resolve(ctx.repositoryRoot, f);
       try {
         const real = await import_promises.default.realpath(abs);
         const stat = await import_promises.default.stat(real);
-        if (stat.isFile()) absoluteFiles.push(real);
+        if (stat.isFile()) {
+          targetPathSet.add(real);
+          targetPathSet.add(abs);
+          targetPathSet.add(import_path.default.relative(ctx.repositoryRoot, abs));
+          validatedAbsoluteFiles.push(real);
+        }
       } catch {
         ctx.logger.debug("Skipping unresolvable file", { file: f });
       }
     }
-    if (absoluteFiles.length === 0) {
+    if (targetPathSet.size === 0) {
       return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, 0);
     }
+    const { targets: scanTargets, strategy: scanStrategy } = chooseScanTargets(
+      validatedAbsoluteFiles,
+      ctx.repositoryRoot
+    );
+    ctx.logger.debug("Opengrep scan targets chosen", {
+      toolId: TOOL_ID,
+      strategy: scanStrategy,
+      targetCount: scanTargets.length,
+      fileCount: ctx.targetFiles.length
+    });
     const args = [
       "scan",
       "--json",
@@ -28718,7 +28776,8 @@ var adapter = {
       "0",
       "--max-memory",
       "5000",
-      ...absoluteFiles
+      "--disable-version-check",
+      ...scanTargets
     ];
     try {
       const { stdout, stderr, exitCode } = await (0, import_tooling.spawnTool)(binary, args, {
@@ -28774,6 +28833,11 @@ var adapter = {
       const findingsByFile = /* @__PURE__ */ new Map();
       for (const finding of output.results) {
         if (finding.extra.is_ignored) continue;
+        const absFinding = import_path.default.isAbsolute(finding.path) ? finding.path : import_path.default.resolve(ctx.repositoryRoot, finding.path);
+        const relFinding = import_path.default.relative(ctx.repositoryRoot, absFinding);
+        if (!targetPathSet.has(finding.path) && !targetPathSet.has(absFinding) && !targetPathSet.has(relFinding)) {
+          continue;
+        }
         const list = findingsByFile.get(finding.path) ?? [];
         list.push(finding);
         findingsByFile.set(finding.path, list);

package/package.json

@@ -1,15 +1,16 @@
 {
   "name": "@codacy/tools-opengrep-1",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Opengrep adapter — CLI-mode multi-language SAST scanner",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [
-    "dist"
+    "dist",
+    "src/rules.yaml"
   ],
   "dependencies": {
     "yaml": "^2.6.0",
-    "@codacy/tooling": "0.6.0"
+    "@codacy/tooling": "0.6.1"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",