@conterra/vuln-scan 0.0.25 → 0.0.27

package/dist/schema/conf-schema.json

@@ -26,6 +26,16 @@
             "type": "boolean",
             "default": true
         },
+        "consoleReport": {
+            "type": "string",
+            "default": "BY_PROJECT_DETAILED",
+            "enum": [
+                "BY_CVE",
+                "BY_PROJECT",
+                "BY_CVE_DETAILED",
+                "BY_PROJECT_DETAILED"
+            ]
+        },
         "mavenRepo": {
             "type": "string",
             "format": "uri",

package/dist/vuln-scan.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-"use strict";var Zi=Object.create;var It=Object.defineProperty;var en=Object.getOwnPropertyDescriptor;var tn=Object.getOwnPropertyNames;var rn=Object.getPrototypeOf,nn=Object.prototype.hasOwnProperty;var h=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports);var on=(t,e,r,i)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of tn(e))!nn.call(t,n)&&n!==r&&It(t,n,{get:()=>e[n],enumerable:!(i=en(e,n))||i.enumerable});return t};var Ke=(t,e,r)=>(r=t!=null?Zi(rn(t)):{},on(e||!t||!t.__esModule?It(r,"default",{value:t,enumerable:!0}):r,t));var O=h(nt=>{"use strict";nt.fromCallback=function(t){return Object.defineProperty(function(...e){if(typeof e[e.length-1]=="function")t.apply(this,e);else return new Promise((r,i)=>{e.push((n,o)=>n!=null?i(n):r(o)),t.apply(this,e)})},"name",{value:t.name})};nt.fromPromise=function(t){return Object.defineProperty(function(...e){let r=e[e.length-1];if(typeof r!="function")return t.apply(this,e);e.pop(),t.apply(this,e).then(i=>r(null,i),r)},"name",{value:t.name})}});var Mt=h((sa,Nt)=>{var z=require("constants"),an=process.cwd,ke=null,cn=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){return ke||(ke=an.call(process)),ke};try{process.cwd()}catch{}typeof process.chdir=="function"&&(ot=process.chdir,process.chdir=function(t){ke=null,ot.call(process,t)},Object.setPrototypeOf&&Object.setPrototypeOf(process.chdir,ot));var ot;Nt.exports=ln;function ln(t){z.hasOwnProperty("O_SYMLINK")&&process.version.match(/^v0\.6\.[0-2]|^v0\.5\./)&&e(t),t.lutimes||r(t),t.chown=o(t.chown),t.fchown=o(t.fchown),t.lchown=o(t.lchown),t.chmod=i(t.chmod),t.fchmod=i(t.fchmod),t.lchmod=i(t.lchmod),t.chownSync=a(t.chownSync),t.fchownSync=a(t.fchownSync),t.lchownSync=a(t.lchownSync),t.chmodSync=n(t.chmodSync),t.fchmodSync=n(t.fchmodSync),t.lchmodSync=n(t.lchmodSync),t.stat=c(t.stat),t.fstat=c(t.fstat),t.lstat=c(t.lstat),t.statSync=u(t.statSync),t.fstatSync=u(t.fstatSync),t.lstatSync=u(t.lstatSync),t.chmod&&!t.lchmod&&(t.lchmod=function(s,m,p){p&&process.nextTick(p)},t.lchmodSync=function(){}),t.chown&&!t.lchown&&(t.lchown=function(s,m,p,f){f&&process.nextTick(f)},t.lchownSync=function(){}),cn==="win32"&&(t.rename=typeof t.rename!="function"?t.rename:function(s){function m(p,f,d){var S=Date.now(),g=0;s(p,f,function b(F){if(F&&(F.code==="EACCES"||F.code==="EPERM"||F.code==="EBUSY")&&Date.now()-S<6e4){setTimeout(function(){t.stat(f,function(T,ie){T&&T.code==="ENOENT"?s(p,f,b):d(F)})},g),g<100&&(g+=10);return}d&&d(F)})}return Object.setPrototypeOf&&Object.setPrototypeOf(m,s),m}(t.rename)),t.read=typeof t.read!="function"?t.read:function(s){function m(p,f,d,S,g,b){var F;if(b&&typeof b=="function"){var T=0;F=function(ie,Ft,Tt){if(ie&&ie.code==="EAGAIN"&&T<10)return T++,s.call(t,p,f,d,S,g,F);b.apply(this,arguments)}}return s.call(t,p,f,d,S,g,F)}return Object.setPrototypeOf&&Object.setPrototypeOf(m,s),m}(t.read),t.readSync=typeof t.readSync!="function"?t.readSync:function(s){return function(m,p,f,d,S){for(var g=0;;)try{return s.call(t,m,p,f,d,S)}catch(b){if(b.code==="EAGAIN"&&g<10){g++;continue}throw b}}}(t.readSync);function e(s){s.lchmod=function(m,p,f){s.open(m,z.O_WRONLY|z.O_SYMLINK,p,function(d,S){if(d){f&&f(d);return}s.fchmod(S,p,function(g){s.close(S,function(b){f&&f(g||b)})})})},s.lchmodSync=function(m,p){var f=s.openSync(m,z.O_WRONLY|z.O_SYMLINK,p),d=!0,S;try{S=s.fchmodSync(f,p),d=!1}finally{if(d)try{s.closeSync(f)}catch{}else s.closeSync(f)}return S}}function r(s){z.hasOwnProperty("O_SYMLINK")&&s.futimes?(s.lutimes=function(m,p,f,d){s.open(m,z.O_SYMLINK,function(S,g){if(S){d&&d(S);return}s.futimes(g,p,f,function(b){s.close(g,function(F){d&&d(b||F)})})})},s.lutimesSync=function(m,p,f){var d=s.openSync(m,z.O_SYMLINK),S,g=!0;try{S=s.futimesSync(d,p,f),g=!1}finally{if(g)try{s.closeSync(d)}catch{}else s.closeSync(d)}return S}):s.futimes&&(s.lutimes=function(m,p,f,d){d&&process.nextTick(d)},s.lutimesSync=function(){})}function i(s){return s&&function(m,p,f){return s.call(t,m,p,function(d){l(d)&&(d=null),f&&f.apply(this,arguments)})}}function n(s){return s&&function(m,p){try{return s.call(t,m,p)}catch(f){if(!l(f))throw f}}}function o(s){return s&&function(m,p,f,d){return s.call(t,m,p,f,function(S){l(S)&&(S=null),d&&d.apply(this,arguments)})}}function a(s){return s&&function(m,p,f){try{return s.call(t,m,p,f)}catch(d){if(!l(d))throw d}}}function c(s){return s&&function(m,p,f){typeof p=="function"&&(f=p,p=null);function d(S,g){g&&(g.uid<0&&(g.uid+=4294967296),g.gid<0&&(g.gid+=4294967296)),f&&f.apply(this,arguments)}return p?s.call(t,m,p,d):s.call(t,m,d)}}function u(s){return s&&function(m,p){var f=p?s.call(t,m,p):s.call(t,m);return f&&(f.uid<0&&(f.uid+=4294967296),f.gid<0&&(f.gid+=4294967296)),f}}function l(s){if(!s||s.code==="ENOSYS")return!0;var m=!process.getuid||process.getuid()!==0;return!!(m&&(s.code==="EINVAL"||s.code==="EPERM"))}}});var Vt=h((aa,At)=>{var Rt=require("stream").Stream;At.exports=un;function un(t){return{ReadStream:e,WriteStream:r};function e(i,n){if(!(this instanceof e))return new e(i,n);Rt.call(this);var o=this;this.path=i,this.fd=null,this.readable=!0,this.paused=!1,this.flags="r",this.mode=438,this.bufferSize=64*1024,n=n||{};for(var a=Object.keys(n),c=0,u=a.length;c<u;c++){var l=a[c];this[l]=n[l]}if(this.encoding&&this.setEncoding(this.encoding),this.start!==void 0){if(typeof this.start!="number")throw TypeError("start must be a Number");if(this.end===void 0)this.end=1/0;else if(typeof this.end!="number")throw TypeError("end must be a Number");if(this.start>this.end)throw new Error("start must be <= end");this.pos=this.start}if(this.fd!==null){process.nextTick(function(){o._read()});return}t.open(this.path,this.flags,this.mode,function(s,m){if(s){o.emit("error",s),o.readable=!1;return}o.fd=m,o.emit("open",m),o._read()})}function r(i,n){if(!(this instanceof r))return new r(i,n);Rt.call(this),this.path=i,this.fd=null,this.writable=!0,this.flags="w",this.encoding="binary",this.mode=438,this.bytesWritten=0,n=n||{};for(var o=Object.keys(n),a=0,c=o.length;a<c;a++){var u=o[a];this[u]=n[u]}if(this.start!==void 0){if(typeof this.start!="number")throw TypeError("start must be a Number");if(this.start<0)throw new Error("start must be >= zero");this.pos=this.start}this.busy=!1,this._queue=[],this.fd===null&&(this._open=t.open,this._queue.push([this._open,this.path,this.flags,this.mode,void 0]),this.flush())}}});var _t=h((ca,$t)=>{"use strict";$t.exports=mn;var fn=Object.getPrototypeOf||function(t){return t.__proto__};function mn(t){if(t===null||typeof t!="object")return t;if(t instanceof Object)var e={__proto__:fn(t)};else var e=Object.create(null);return Object.getOwnPropertyNames(t).forEach(function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}),e}});var le=h((la,ct)=>{var k=require("fs"),dn=Mt(),pn=Vt(),yn=_t(),Ee=require("util"),M,Oe;typeof Symbol=="function"&&typeof Symbol.for=="function"?(M=Symbol.for("graceful-fs.queue"),Oe=Symbol.for("graceful-fs.previous")):(M="___graceful-fs.queue",Oe="___graceful-fs.previous");function hn(){}function Xt(t,e){Object.defineProperty(t,M,{get:function(){return e}})}var oe=hn;Ee.debuglog?oe=Ee.debuglog("gfs4"):/\bgfs4\b/i.test(process.env.NODE_DEBUG||"")&&(oe=function(){var t=Ee.format.apply(Ee,arguments);t="GFS4: "+t.split(/\n/).join(`
-GFS4: `),console.error(t)});k[M]||(qt=global[M]||[],Xt(k,qt),k.close=function(t){function e(r,i){return t.call(k,r,function(n){n||Ut(),typeof i=="function"&&i.apply(this,arguments)})}return Object.defineProperty(e,Oe,{value:t}),e}(k.close),k.closeSync=function(t){function e(r){t.apply(k,arguments),Ut()}return Object.defineProperty(e,Oe,{value:t}),e}(k.closeSync),/\bgfs4\b/i.test(process.env.NODE_DEBUG||"")&&process.on("exit",function(){oe(k[M]),require("assert").equal(k[M].length,0)}));var qt;global[M]||Xt(global,k[M]);ct.exports=st(yn(k));process.env.TEST_GRACEFUL_FS_GLOBAL_PATCH&&!k.__patched&&(ct.exports=st(k),k.__patched=!0);function st(t){dn(t),t.gracefulify=st,t.createReadStream=Ft,t.createWriteStream=Tt;var e=t.readFile;t.readFile=r;function r(y,w,v){return typeof w=="function"&&(v=w,w=null),I(y,w,v);function I(C,D,P,E){return e(C,D,function(x){x&&(x.code==="EMFILE"||x.code==="ENFILE")?ce([I,[C,D,P],x,E||Date.now(),Date.now()]):typeof P=="function"&&P.apply(this,arguments)})}}var i=t.writeFile;t.writeFile=n;function n(y,w,v,I){return typeof v=="function"&&(I=v,v=null),C(y,w,v,I);function C(D,P,E,x,N){return i(D,P,E,function(L){L&&(L.code==="EMFILE"||L.code==="ENFILE")?ce([C,[D,P,E,x],L,N||Date.now(),Date.now()]):typeof x=="function"&&x.apply(this,arguments)})}}var o=t.appendFile;o&&(t.appendFile=a);function a(y,w,v,I){return typeof v=="function"&&(I=v,v=null),C(y,w,v,I);function C(D,P,E,x,N){return o(D,P,E,function(L){L&&(L.code==="EMFILE"||L.code==="ENFILE")?ce([C,[D,P,E,x],L,N||Date.now(),Date.now()]):typeof x=="function"&&x.apply(this,arguments)})}}var c=t.copyFile;c&&(t.copyFile=u);function u(y,w,v,I){return typeof v=="function"&&(I=v,v=0),C(y,w,v,I);function C(D,P,E,x,N){return c(D,P,E,function(L){L&&(L.code==="EMFILE"||L.code==="ENFILE")?ce([C,[D,P,E,x],L,N||Date.now(),Date.now()]):typeof x=="function"&&x.apply(this,arguments)})}}var l=t.readdir;t.readdir=m;var s=/^v[0-5]\./;function m(y,w,v){typeof w=="function"&&(v=w,w=null);var I=s.test(process.version)?function(P,E,x,N){return l(P,C(P,E,x,N))}:function(P,E,x,N){return l(P,E,C(P,E,x,N))};return I(y,w,v);function C(D,P,E,x){return function(N,L){N&&(N.code==="EMFILE"||N.code==="ENFILE")?ce([I,[D,P,E],N,x||Date.now(),Date.now()]):(L&&L.sort&&L.sort(),typeof E=="function"&&E.call(this,N,L))}}}if(process.version.substr(0,4)==="v0.8"){var p=pn(t);b=p.ReadStream,T=p.WriteStream}var f=t.ReadStream;f&&(b.prototype=Object.create(f.prototype),b.prototype.open=F);var d=t.WriteStream;d&&(T.prototype=Object.create(d.prototype),T.prototype.open=ie),Object.defineProperty(t,"ReadStream",{get:function(){return b},set:function(y){b=y},enumerable:!0,configurable:!0}),Object.defineProperty(t,"WriteStream",{get:function(){return T},set:function(y){T=y},enumerable:!0,configurable:!0});var S=b;Object.defineProperty(t,"FileReadStream",{get:function(){return S},set:function(y){S=y},enumerable:!0,configurable:!0});var g=T;Object.defineProperty(t,"FileWriteStream",{get:function(){return g},set:function(y){g=y},enumerable:!0,configurable:!0});function b(y,w){return this instanceof b?(f.apply(this,arguments),this):b.apply(Object.create(b.prototype),arguments)}function F(){var y=this;Ye(y.path,y.flags,y.mode,function(w,v){w?(y.autoClose&&y.destroy(),y.emit("error",w)):(y.fd=v,y.emit("open",v),y.read())})}function T(y,w){return this instanceof T?(d.apply(this,arguments),this):T.apply(Object.create(T.prototype),arguments)}function ie(){var y=this;Ye(y.path,y.flags,y.mode,function(w,v){w?(y.destroy(),y.emit("error",w)):(y.fd=v,y.emit("open",v))})}function Ft(y,w){return new t.ReadStream(y,w)}function Tt(y,w){return new t.WriteStream(y,w)}var zi=t.open;t.open=Ye;function Ye(y,w,v,I){return typeof v=="function"&&(I=v,v=null),C(y,w,v,I);function C(D,P,E,x,N){return zi(D,P,E,function(L,Qs){L&&(L.code==="EMFILE"||L.code==="ENFILE")?ce([C,[D,P,E,x],L,N||Date.now(),Date.now()]):typeof x=="function"&&x.apply(this,arguments)})}}return t}function ce(t){oe("ENQUEUE",t[0].name,t[1]),k[M].push(t),at()}var De;function Ut(){for(var t=Date.now(),e=0;e<k[M].length;++e)k[M][e].length>2&&(k[M][e][3]=t,k[M][e][4]=t);at()}function at(){if(clearTimeout(De),De=void 0,k[M].length!==0){var t=k[M].shift(),e=t[0],r=t[1],i=t[2],n=t[3],o=t[4];if(n===void 0)oe("RETRY",e.name,r),e.apply(null,r);else if(Date.now()-n>=6e4){oe("TIMEOUT",e.name,r);var a=r.pop();typeof a=="function"&&a.call(null,i)}else{var c=Date.now()-o,u=Math.max(o-n,1),l=Math.min(u*1.2,100);c>=l?(oe("RETRY",e.name,r),e.apply(null,r.concat([n]))):k[M].push(t)}De===void 0&&(De=setTimeout(at,0))}}});var V=h(H=>{"use strict";var Bt=O().fromCallback,A=le(),Sn=["access","appendFile","chmod","chown","close","copyFile","fchmod","fchown","fdatasync","fstat","fsync","ftruncate","futimes","lchmod","lchown","link","lstat","mkdir","mkdtemp","open","opendir","readdir","readFile","readlink","realpath","rename","rm","rmdir","stat","symlink","truncate","unlink","utimes","writeFile"].filter(t=>typeof A[t]=="function");Object.assign(H,A);Sn.forEach(t=>{H[t]=Bt(A[t])});H.exists=function(t,e){return typeof e=="function"?A.exists(t,e):new Promise(r=>A.exists(t,r))};H.read=function(t,e,r,i,n,o){return typeof o=="function"?A.read(t,e,r,i,n,o):new Promise((a,c)=>{A.read(t,e,r,i,n,(u,l,s)=>{if(u)return c(u);a({bytesRead:l,buffer:s})})})};H.write=function(t,e,...r){return typeof r[r.length-1]=="function"?A.write(t,e,...r):new Promise((i,n)=>{A.write(t,e,...r,(o,a,c)=>{if(o)return n(o);i({bytesWritten:a,buffer:c})})})};H.readv=function(t,e,...r){return typeof r[r.length-1]=="function"?A.readv(t,e,...r):new Promise((i,n)=>{A.readv(t,e,...r,(o,a,c)=>{if(o)return n(o);i({bytesRead:a,buffers:c})})})};H.writev=function(t,e,...r){return typeof r[r.length-1]=="function"?A.writev(t,e,...r):new Promise((i,n)=>{A.writev(t,e,...r,(o,a,c)=>{if(o)return n(o);i({bytesWritten:a,buffers:c})})})};typeof A.realpath.native=="function"?H.realpath.native=Bt(A.realpath.native):process.emitWarning("fs.realpath.native is not a function. Is fs being monkey-patched?","Warning","fs-extra-WARN0003")});var Wt=h((fa,Gt)=>{"use strict";var gn=require("path");Gt.exports.checkPath=function(e){if(process.platform==="win32"&&/[<>:"|?*]/.test(e.replace(gn.parse(e).root,""))){let i=new Error(`Path contains invalid characters: ${e}`);throw i.code="EINVAL",i}}});var Yt=h((ma,lt)=>{"use strict";var Jt=V(),{checkPath:Ht}=Wt(),Qt=t=>{let e={mode:511};return typeof t=="number"?t:{...e,...t}.mode};lt.exports.makeDir=async(t,e)=>(Ht(t),Jt.mkdir(t,{mode:Qt(e),recursive:!0}));lt.exports.makeDirSync=(t,e)=>(Ht(t),Jt.mkdirSync(t,{mode:Qt(e),recursive:!0}))});var X=h((da,Kt)=>{"use strict";var vn=O().fromPromise,{makeDir:wn,makeDirSync:ut}=Yt(),ft=vn(wn);Kt.exports={mkdirs:ft,mkdirsSync:ut,mkdirp:ft,mkdirpSync:ut,ensureDir:ft,ensureDirSync:ut}});var Z=h((pa,Zt)=>{"use strict";var bn=O().fromPromise,zt=V();function xn(t){return zt.access(t).then(()=>!0).catch(()=>!1)}Zt.exports={pathExists:bn(xn),pathExistsSync:zt.existsSync}});var mt=h((ya,er)=>{"use strict";var ue=V(),Ln=O().fromPromise;async function Pn(t,e,r){let i=await ue.open(t,"r+"),n=null;try{await ue.futimes(i,e,r)}finally{try{await ue.close(i)}catch(o){n=o}}if(n)throw n}function kn(t,e,r){let i=ue.openSync(t,"r+");return ue.futimesSync(i,e,r),ue.closeSync(i)}er.exports={utimesMillis:Ln(Pn),utimesMillisSync:kn}});var se=h((ha,nr)=>{"use strict";var fe=V(),j=require("path"),tr=O().fromPromise;function En(t,e,r){let i=r.dereference?n=>fe.stat(n,{bigint:!0}):n=>fe.lstat(n,{bigint:!0});return Promise.all([i(t),i(e).catch(n=>{if(n.code==="ENOENT")return null;throw n})]).then(([n,o])=>({srcStat:n,destStat:o}))}function Dn(t,e,r){let i,n=r.dereference?a=>fe.statSync(a,{bigint:!0}):a=>fe.lstatSync(a,{bigint:!0}),o=n(t);try{i=n(e)}catch(a){if(a.code==="ENOENT")return{srcStat:o,destStat:null};throw a}return{srcStat:o,destStat:i}}async function On(t,e,r,i){let{srcStat:n,destStat:o}=await En(t,e,i);if(o){if(ye(n,o)){let a=j.basename(t),c=j.basename(e);if(r==="move"&&a!==c&&a.toLowerCase()===c.toLowerCase())return{srcStat:n,destStat:o,isChangingCase:!0};throw new Error("Source and destination must not be the same.")}if(n.isDirectory()&&!o.isDirectory())throw new Error(`Cannot overwrite non-directory '${e}' with directory '${t}'.`);if(!n.isDirectory()&&o.isDirectory())throw new Error(`Cannot overwrite directory '${e}' with non-directory '${t}'.`)}if(n.isDirectory()&&dt(t,e))throw new Error(je(t,e,r));return{srcStat:n,destStat:o}}function jn(t,e,r,i){let{srcStat:n,destStat:o}=Dn(t,e,i);if(o){if(ye(n,o)){let a=j.basename(t),c=j.basename(e);if(r==="move"&&a!==c&&a.toLowerCase()===c.toLowerCase())return{srcStat:n,destStat:o,isChangingCase:!0};throw new Error("Source and destination must not be the same.")}if(n.isDirectory()&&!o.isDirectory())throw new Error(`Cannot overwrite non-directory '${e}' with directory '${t}'.`);if(!n.isDirectory()&&o.isDirectory())throw new Error(`Cannot overwrite directory '${e}' with non-directory '${t}'.`)}if(n.isDirectory()&&dt(t,e))throw new Error(je(t,e,r));return{srcStat:n,destStat:o}}async function rr(t,e,r,i){let n=j.resolve(j.dirname(t)),o=j.resolve(j.dirname(r));if(o===n||o===j.parse(o).root)return;let a;try{a=await fe.stat(o,{bigint:!0})}catch(c){if(c.code==="ENOENT")return;throw c}if(ye(e,a))throw new Error(je(t,r,i));return rr(t,e,o,i)}function ir(t,e,r,i){let n=j.resolve(j.dirname(t)),o=j.resolve(j.dirname(r));if(o===n||o===j.parse(o).root)return;let a;try{a=fe.statSync(o,{bigint:!0})}catch(c){if(c.code==="ENOENT")return;throw c}if(ye(e,a))throw new Error(je(t,r,i));return ir(t,e,o,i)}function ye(t,e){return e.ino&&e.dev&&e.ino===t.ino&&e.dev===t.dev}function dt(t,e){let r=j.resolve(t).split(j.sep).filter(n=>n),i=j.resolve(e).split(j.sep).filter(n=>n);return r.every((n,o)=>i[o]===n)}function je(t,e,r){return`Cannot ${r} '${t}' to a subdirectory of itself, '${e}'.`}nr.exports={checkPaths:tr(On),checkPathsSync:jn,checkParentPaths:tr(rr),checkParentPathsSync:ir,isSrcSubdir:dt,areIdentical:ye}});var lr=h((Sa,cr)=>{"use strict";var R=V(),he=require("path"),{mkdirs:Fn}=X(),{pathExists:Tn}=Z(),{utimesMillis:In}=mt(),Se=se();async function Cn(t,e,r={}){typeof r=="function"&&(r={filter:r}),r.clobber="clobber"in r?!!r.clobber:!0,r.overwrite="overwrite"in r?!!r.overwrite:r.clobber,r.preserveTimestamps&&process.arch==="ia32"&&process.emitWarning(`Using the preserveTimestamps option in 32-bit node is not recommended;
+"use strict";var nn=Object.create;var Rt=Object.defineProperty;var on=Object.getOwnPropertyDescriptor;var sn=Object.getOwnPropertyNames;var an=Object.getPrototypeOf,cn=Object.prototype.hasOwnProperty;var S=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports);var ln=(t,e,r,i)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of sn(e))!cn.call(t,n)&&n!==r&&Rt(t,n,{get:()=>e[n],enumerable:!(i=on(e,n))||i.enumerable});return t};var tt=(t,e,r)=>(r=t!=null?nn(an(t)):{},ln(e||!t||!t.__esModule?Rt(r,"default",{value:t,enumerable:!0}):r,t));var T=S(ct=>{"use strict";ct.fromCallback=function(t){return Object.defineProperty(function(...e){if(typeof e[e.length-1]=="function")t.apply(this,e);else return new Promise((r,i)=>{e.push((n,o)=>n!=null?i(n):r(o)),t.apply(this,e)})},"name",{value:t.name})};ct.fromPromise=function(t){return Object.defineProperty(function(...e){let r=e[e.length-1];if(typeof r!="function")return t.apply(this,e);e.pop(),t.apply(this,e).then(i=>r(null,i),r)},"name",{value:t.name})}});var Vt=S((ha,At)=>{var ee=require("constants"),fn=process.cwd,Oe=null,mn=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){return Oe||(Oe=fn.call(process)),Oe};try{process.cwd()}catch{}typeof process.chdir=="function"&&(lt=process.chdir,process.chdir=function(t){Oe=null,lt.call(process,t)},Object.setPrototypeOf&&Object.setPrototypeOf(process.chdir,lt));var lt;At.exports=dn;function dn(t){ee.hasOwnProperty("O_SYMLINK")&&process.version.match(/^v0\.6\.[0-2]|^v0\.5\./)&&e(t),t.lutimes||r(t),t.chown=o(t.chown),t.fchown=o(t.fchown),t.lchown=o(t.lchown),t.chmod=i(t.chmod),t.fchmod=i(t.fchmod),t.lchmod=i(t.lchmod),t.chownSync=s(t.chownSync),t.fchownSync=s(t.fchownSync),t.lchownSync=s(t.lchownSync),t.chmodSync=n(t.chmodSync),t.fchmodSync=n(t.fchmodSync),t.lchmodSync=n(t.lchmodSync),t.stat=c(t.stat),t.fstat=c(t.fstat),t.lstat=c(t.lstat),t.statSync=u(t.statSync),t.fstatSync=u(t.fstatSync),t.lstatSync=u(t.lstatSync),t.chmod&&!t.lchmod&&(t.lchmod=function(a,f,m){m&&process.nextTick(m)},t.lchmodSync=function(){}),t.chown&&!t.lchown&&(t.lchown=function(a,f,m,d){d&&process.nextTick(d)},t.lchownSync=function(){}),mn==="win32"&&(t.rename=typeof t.rename!="function"?t.rename:function(a){function f(m,d,p){var g=Date.now(),h=0;a(m,d,function w(x){if(x&&(x.code==="EACCES"||x.code==="EPERM"||x.code==="EBUSY")&&Date.now()-g<6e4){setTimeout(function(){t.stat(d,function(D,V){D&&D.code==="ENOENT"?a(m,d,w):p(x)})},h),h<100&&(h+=10);return}p&&p(x)})}return Object.setPrototypeOf&&Object.setPrototypeOf(f,a),f}(t.rename)),t.read=typeof t.read!="function"?t.read:function(a){function f(m,d,p,g,h,w){var x;if(w&&typeof w=="function"){var D=0;x=function(V,Ze,ke){if(V&&V.code==="EAGAIN"&&D<10)return D++,a.call(t,m,d,p,g,h,x);w.apply(this,arguments)}}return a.call(t,m,d,p,g,h,x)}return Object.setPrototypeOf&&Object.setPrototypeOf(f,a),f}(t.read),t.readSync=typeof t.readSync!="function"?t.readSync:function(a){return function(f,m,d,p,g){for(var h=0;;)try{return a.call(t,f,m,d,p,g)}catch(w){if(w.code==="EAGAIN"&&h<10){h++;continue}throw w}}}(t.readSync);function e(a){a.lchmod=function(f,m,d){a.open(f,ee.O_WRONLY|ee.O_SYMLINK,m,function(p,g){if(p){d&&d(p);return}a.fchmod(g,m,function(h){a.close(g,function(w){d&&d(h||w)})})})},a.lchmodSync=function(f,m){var d=a.openSync(f,ee.O_WRONLY|ee.O_SYMLINK,m),p=!0,g;try{g=a.fchmodSync(d,m),p=!1}finally{if(p)try{a.closeSync(d)}catch{}else a.closeSync(d)}return g}}function r(a){ee.hasOwnProperty("O_SYMLINK")&&a.futimes?(a.lutimes=function(f,m,d,p){a.open(f,ee.O_SYMLINK,function(g,h){if(g){p&&p(g);return}a.futimes(h,m,d,function(w){a.close(h,function(x){p&&p(w||x)})})})},a.lutimesSync=function(f,m,d){var p=a.openSync(f,ee.O_SYMLINK),g,h=!0;try{g=a.futimesSync(p,m,d),h=!1}finally{if(h)try{a.closeSync(p)}catch{}else a.closeSync(p)}return g}):a.futimes&&(a.lutimes=function(f,m,d,p){p&&process.nextTick(p)},a.lutimesSync=function(){})}function i(a){return a&&function(f,m,d){return a.call(t,f,m,function(p){l(p)&&(p=null),d&&d.apply(this,arguments)})}}function n(a){return a&&function(f,m){try{return a.call(t,f,m)}catch(d){if(!l(d))throw d}}}function o(a){return a&&function(f,m,d,p){return a.call(t,f,m,d,function(g){l(g)&&(g=null),p&&p.apply(this,arguments)})}}function s(a){return a&&function(f,m,d){try{return a.call(t,f,m,d)}catch(p){if(!l(p))throw p}}}function c(a){return a&&function(f,m,d){typeof m=="function"&&(d=m,m=null);function p(g,h){h&&(h.uid<0&&(h.uid+=4294967296),h.gid<0&&(h.gid+=4294967296)),d&&d.apply(this,arguments)}return m?a.call(t,f,m,p):a.call(t,f,p)}}function u(a){return a&&function(f,m){var d=m?a.call(t,f,m):a.call(t,f);return d&&(d.uid<0&&(d.uid+=4294967296),d.gid<0&&(d.gid+=4294967296)),d}}function l(a){if(!a||a.code==="ENOSYS")return!0;var f=!process.getuid||process.getuid()!==0;return!!(f&&(a.code==="EINVAL"||a.code==="EPERM"))}}});var qt=S((Sa,_t)=>{var $t=require("stream").Stream;_t.exports=pn;function pn(t){return{ReadStream:e,WriteStream:r};function e(i,n){if(!(this instanceof e))return new e(i,n);$t.call(this);var o=this;this.path=i,this.fd=null,this.readable=!0,this.paused=!1,this.flags="r",this.mode=438,this.bufferSize=64*1024,n=n||{};for(var s=Object.keys(n),c=0,u=s.length;c<u;c++){var l=s[c];this[l]=n[l]}if(this.encoding&&this.setEncoding(this.encoding),this.start!==void 0){if(typeof this.start!="number")throw TypeError("start must be a Number");if(this.end===void 0)this.end=1/0;else if(typeof this.end!="number")throw TypeError("end must be a Number");if(this.start>this.end)throw new Error("start must be <= end");this.pos=this.start}if(this.fd!==null){process.nextTick(function(){o._read()});return}t.open(this.path,this.flags,this.mode,function(a,f){if(a){o.emit("error",a),o.readable=!1;return}o.fd=f,o.emit("open",f),o._read()})}function r(i,n){if(!(this instanceof r))return new r(i,n);$t.call(this),this.path=i,this.fd=null,this.writable=!0,this.flags="w",this.encoding="binary",this.mode=438,this.bytesWritten=0,n=n||{};for(var o=Object.keys(n),s=0,c=o.length;s<c;s++){var u=o[s];this[u]=n[u]}if(this.start!==void 0){if(typeof this.start!="number")throw TypeError("start must be a Number");if(this.start<0)throw new Error("start must be >= zero");this.pos=this.start}this.busy=!1,this._queue=[],this.fd===null&&(this._open=t.open,this._queue.push([this._open,this.path,this.flags,this.mode,void 0]),this.flush())}}});var Ut=S((ga,Bt)=>{"use strict";Bt.exports=hn;var yn=Object.getPrototypeOf||function(t){return t.__proto__};function hn(t){if(t===null||typeof t!="object")return t;if(t instanceof Object)var e={__proto__:yn(t)};else var e=Object.create(null);return Object.getOwnPropertyNames(t).forEach(function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}),e}});var ue=S((va,mt)=>{var E=require("fs"),Sn=Vt(),gn=qt(),vn=Ut(),je=require("util"),N,Te;typeof Symbol=="function"&&typeof Symbol.for=="function"?(N=Symbol.for("graceful-fs.queue"),Te=Symbol.for("graceful-fs.previous")):(N="___graceful-fs.queue",Te="___graceful-fs.previous");function wn(){}function Jt(t,e){Object.defineProperty(t,N,{get:function(){return e}})}var se=wn;je.debuglog?se=je.debuglog("gfs4"):/\bgfs4\b/i.test(process.env.NODE_DEBUG||"")&&(se=function(){var t=je.format.apply(je,arguments);t="GFS4: "+t.split(/\n/).join(`
+GFS4: `),console.error(t)});E[N]||(Xt=global[N]||[],Jt(E,Xt),E.close=function(t){function e(r,i){return t.call(E,r,function(n){n||Gt(),typeof i=="function"&&i.apply(this,arguments)})}return Object.defineProperty(e,Te,{value:t}),e}(E.close),E.closeSync=function(t){function e(r){t.apply(E,arguments),Gt()}return Object.defineProperty(e,Te,{value:t}),e}(E.closeSync),/\bgfs4\b/i.test(process.env.NODE_DEBUG||"")&&process.on("exit",function(){se(E[N]),require("assert").equal(E[N].length,0)}));var Xt;global[N]||Jt(global,E[N]);mt.exports=ut(vn(E));process.env.TEST_GRACEFUL_FS_GLOBAL_PATCH&&!E.__patched&&(mt.exports=ut(E),E.__patched=!0);function ut(t){Sn(t),t.gracefulify=ut,t.createReadStream=Ze,t.createWriteStream=ke;var e=t.readFile;t.readFile=r;function r(y,b,v){return typeof b=="function"&&(v=b,b=null),C(y,b,v);function C(M,I,k,O){return e(M,I,function(L){L&&(L.code==="EMFILE"||L.code==="ENFILE")?le([C,[M,I,k],L,O||Date.now(),Date.now()]):typeof k=="function"&&k.apply(this,arguments)})}}var i=t.writeFile;t.writeFile=n;function n(y,b,v,C){return typeof v=="function"&&(C=v,v=null),M(y,b,v,C);function M(I,k,O,L,R){return i(I,k,O,function(P){P&&(P.code==="EMFILE"||P.code==="ENFILE")?le([M,[I,k,O,L],P,R||Date.now(),Date.now()]):typeof L=="function"&&L.apply(this,arguments)})}}var o=t.appendFile;o&&(t.appendFile=s);function s(y,b,v,C){return typeof v=="function"&&(C=v,v=null),M(y,b,v,C);function M(I,k,O,L,R){return o(I,k,O,function(P){P&&(P.code==="EMFILE"||P.code==="ENFILE")?le([M,[I,k,O,L],P,R||Date.now(),Date.now()]):typeof L=="function"&&L.apply(this,arguments)})}}var c=t.copyFile;c&&(t.copyFile=u);function u(y,b,v,C){return typeof v=="function"&&(C=v,v=0),M(y,b,v,C);function M(I,k,O,L,R){return c(I,k,O,function(P){P&&(P.code==="EMFILE"||P.code==="ENFILE")?le([M,[I,k,O,L],P,R||Date.now(),Date.now()]):typeof L=="function"&&L.apply(this,arguments)})}}var l=t.readdir;t.readdir=f;var a=/^v[0-5]\./;function f(y,b,v){typeof b=="function"&&(v=b,b=null);var C=a.test(process.version)?function(k,O,L,R){return l(k,M(k,O,L,R))}:function(k,O,L,R){return l(k,O,M(k,O,L,R))};return C(y,b,v);function M(I,k,O,L){return function(R,P){R&&(R.code==="EMFILE"||R.code==="ENFILE")?le([C,[I,k,O],R,L||Date.now(),Date.now()]):(P&&P.sort&&P.sort(),typeof O=="function"&&O.call(this,R,P))}}}if(process.version.substr(0,4)==="v0.8"){var m=gn(t);w=m.ReadStream,D=m.WriteStream}var d=t.ReadStream;d&&(w.prototype=Object.create(d.prototype),w.prototype.open=x);var p=t.WriteStream;p&&(D.prototype=Object.create(p.prototype),D.prototype.open=V),Object.defineProperty(t,"ReadStream",{get:function(){return w},set:function(y){w=y},enumerable:!0,configurable:!0}),Object.defineProperty(t,"WriteStream",{get:function(){return D},set:function(y){D=y},enumerable:!0,configurable:!0});var g=w;Object.defineProperty(t,"FileReadStream",{get:function(){return g},set:function(y){g=y},enumerable:!0,configurable:!0});var h=D;Object.defineProperty(t,"FileWriteStream",{get:function(){return h},set:function(y){h=y},enumerable:!0,configurable:!0});function w(y,b){return this instanceof w?(d.apply(this,arguments),this):w.apply(Object.create(w.prototype),arguments)}function x(){var y=this;j(y.path,y.flags,y.mode,function(b,v){b?(y.autoClose&&y.destroy(),y.emit("error",b)):(y.fd=v,y.emit("open",v),y.read())})}function D(y,b){return this instanceof D?(p.apply(this,arguments),this):D.apply(Object.create(D.prototype),arguments)}function V(){var y=this;j(y.path,y.flags,y.mode,function(b,v){b?(y.destroy(),y.emit("error",b)):(y.fd=v,y.emit("open",v))})}function Ze(y,b){return new t.ReadStream(y,b)}function ke(y,b){return new t.WriteStream(y,b)}var et=t.open;t.open=j;function j(y,b,v,C){return typeof v=="function"&&(C=v,v=null),M(y,b,v,C);function M(I,k,O,L,R){return et(I,k,O,function(P,na){P&&(P.code==="EMFILE"||P.code==="ENFILE")?le([M,[I,k,O,L],P,R||Date.now(),Date.now()]):typeof L=="function"&&L.apply(this,arguments)})}}return t}function le(t){se("ENQUEUE",t[0].name,t[1]),E[N].push(t),ft()}var Ie;function Gt(){for(var t=Date.now(),e=0;e<E[N].length;++e)E[N][e].length>2&&(E[N][e][3]=t,E[N][e][4]=t);ft()}function ft(){if(clearTimeout(Ie),Ie=void 0,E[N].length!==0){var t=E[N].shift(),e=t[0],r=t[1],i=t[2],n=t[3],o=t[4];if(n===void 0)se("RETRY",e.name,r),e.apply(null,r);else if(Date.now()-n>=6e4){se("TIMEOUT",e.name,r);var s=r.pop();typeof s=="function"&&s.call(null,i)}else{var c=Date.now()-o,u=Math.max(o-n,1),l=Math.min(u*1.2,100);c>=l?(se("RETRY",e.name,r),e.apply(null,r.concat([n]))):E[N].push(t)}Ie===void 0&&(Ie=setTimeout(ft,0))}}});var _=S(Q=>{"use strict";var Wt=T().fromCallback,$=ue(),bn=["access","appendFile","chmod","chown","close","copyFile","fchmod","fchown","fdatasync","fstat","fsync","ftruncate","futimes","lchmod","lchown","link","lstat","mkdir","mkdtemp","open","opendir","readdir","readFile","readlink","realpath","rename","rm","rmdir","stat","symlink","truncate","unlink","utimes","writeFile"].filter(t=>typeof $[t]=="function");Object.assign(Q,$);bn.forEach(t=>{Q[t]=Wt($[t])});Q.exists=function(t,e){return typeof e=="function"?$.exists(t,e):new Promise(r=>$.exists(t,r))};Q.read=function(t,e,r,i,n,o){return typeof o=="function"?$.read(t,e,r,i,n,o):new Promise((s,c)=>{$.read(t,e,r,i,n,(u,l,a)=>{if(u)return c(u);s({bytesRead:l,buffer:a})})})};Q.write=function(t,e,...r){return typeof r[r.length-1]=="function"?$.write(t,e,...r):new Promise((i,n)=>{$.write(t,e,...r,(o,s,c)=>{if(o)return n(o);i({bytesWritten:s,buffer:c})})})};Q.readv=function(t,e,...r){return typeof r[r.length-1]=="function"?$.readv(t,e,...r):new Promise((i,n)=>{$.readv(t,e,...r,(o,s,c)=>{if(o)return n(o);i({bytesRead:s,buffers:c})})})};Q.writev=function(t,e,...r){return typeof r[r.length-1]=="function"?$.writev(t,e,...r):new Promise((i,n)=>{$.writev(t,e,...r,(o,s,c)=>{if(o)return n(o);i({bytesWritten:s,buffers:c})})})};typeof $.realpath.native=="function"?Q.realpath.native=Wt($.realpath.native):process.emitWarning("fs.realpath.native is not a function. Is fs being monkey-patched?","Warning","fs-extra-WARN0003")});var Yt=S((ba,Ht)=>{"use strict";var xn=require("path");Ht.exports.checkPath=function(e){if(process.platform==="win32"&&/[<>:"|?*]/.test(e.replace(xn.parse(e).root,""))){let i=new Error(`Path contains invalid characters: ${e}`);throw i.code="EINVAL",i}}});var Zt=S((xa,dt)=>{"use strict";var Qt=_(),{checkPath:Kt}=Yt(),zt=t=>{let e={mode:511};return typeof t=="number"?t:{...e,...t}.mode};dt.exports.makeDir=async(t,e)=>(Kt(t),Qt.mkdir(t,{mode:zt(e),recursive:!0}));dt.exports.makeDirSync=(t,e)=>(Kt(t),Qt.mkdirSync(t,{mode:zt(e),recursive:!0}))});var J=S((La,er)=>{"use strict";var Ln=T().fromPromise,{makeDir:Pn,makeDirSync:pt}=Zt(),yt=Ln(Pn);er.exports={mkdirs:yt,mkdirsSync:pt,mkdirp:yt,mkdirpSync:pt,ensureDir:yt,ensureDirSync:pt}});var te=S((Pa,rr)=>{"use strict";var kn=T().fromPromise,tr=_();function En(t){return tr.access(t).then(()=>!0).catch(()=>!1)}rr.exports={pathExists:kn(En),pathExistsSync:tr.existsSync}});var ht=S((ka,ir)=>{"use strict";var fe=_(),Dn=T().fromPromise;async function On(t,e,r){let i=await fe.open(t,"r+"),n=null;try{await fe.futimes(i,e,r)}finally{try{await fe.close(i)}catch(o){n=o}}if(n)throw n}function jn(t,e,r){let i=fe.openSync(t,"r+");return fe.futimesSync(i,e,r),fe.closeSync(i)}ir.exports={utimesMillis:Dn(On),utimesMillisSync:jn}});var ae=S((Ea,ar)=>{"use strict";var me=_(),F=require("path"),nr=T().fromPromise;function In(t,e,r){let i=r.dereference?n=>me.stat(n,{bigint:!0}):n=>me.lstat(n,{bigint:!0});return Promise.all([i(t),i(e).catch(n=>{if(n.code==="ENOENT")return null;throw n})]).then(([n,o])=>({srcStat:n,destStat:o}))}function Tn(t,e,r){let i,n=r.dereference?s=>me.statSync(s,{bigint:!0}):s=>me.lstatSync(s,{bigint:!0}),o=n(t);try{i=n(e)}catch(s){if(s.code==="ENOENT")return{srcStat:o,destStat:null};throw s}return{srcStat:o,destStat:i}}async function Fn(t,e,r,i){let{srcStat:n,destStat:o}=await In(t,e,i);if(o){if(he(n,o)){let s=F.basename(t),c=F.basename(e);if(r==="move"&&s!==c&&s.toLowerCase()===c.toLowerCase())return{srcStat:n,destStat:o,isChangingCase:!0};throw new Error("Source and destination must not be the same.")}if(n.isDirectory()&&!o.isDirectory())throw new Error(`Cannot overwrite non-directory '${e}' with directory '${t}'.`);if(!n.isDirectory()&&o.isDirectory())throw new Error(`Cannot overwrite directory '${e}' with non-directory '${t}'.`)}if(n.isDirectory()&&St(t,e))throw new Error(Fe(t,e,r));return{srcStat:n,destStat:o}}function Cn(t,e,r,i){let{srcStat:n,destStat:o}=Tn(t,e,i);if(o){if(he(n,o)){let s=F.basename(t),c=F.basename(e);if(r==="move"&&s!==c&&s.toLowerCase()===c.toLowerCase())return{srcStat:n,destStat:o,isChangingCase:!0};throw new Error("Source and destination must not be the same.")}if(n.isDirectory()&&!o.isDirectory())throw new Error(`Cannot overwrite non-directory '${e}' with directory '${t}'.`);if(!n.isDirectory()&&o.isDirectory())throw new Error(`Cannot overwrite directory '${e}' with non-directory '${t}'.`)}if(n.isDirectory()&&St(t,e))throw new Error(Fe(t,e,r));return{srcStat:n,destStat:o}}async function or(t,e,r,i){let n=F.resolve(F.dirname(t)),o=F.resolve(F.dirname(r));if(o===n||o===F.parse(o).root)return;let s;try{s=await me.stat(o,{bigint:!0})}catch(c){if(c.code==="ENOENT")return;throw c}if(he(e,s))throw new Error(Fe(t,r,i));return or(t,e,o,i)}function sr(t,e,r,i){let n=F.resolve(F.dirname(t)),o=F.resolve(F.dirname(r));if(o===n||o===F.parse(o).root)return;let s;try{s=me.statSync(o,{bigint:!0})}catch(c){if(c.code==="ENOENT")return;throw c}if(he(e,s))throw new Error(Fe(t,r,i));return sr(t,e,o,i)}function he(t,e){return e.ino&&e.dev&&e.ino===t.ino&&e.dev===t.dev}function St(t,e){let r=F.resolve(t).split(F.sep).filter(n=>n),i=F.resolve(e).split(F.sep).filter(n=>n);return r.every((n,o)=>i[o]===n)}function Fe(t,e,r){return`Cannot ${r} '${t}' to a subdirectory of itself, '${e}'.`}ar.exports={checkPaths:nr(Fn),checkPathsSync:Cn,checkParentPaths:nr(or),checkParentPathsSync:sr,isSrcSubdir:St,areIdentical:he}});var mr=S((Da,fr)=>{"use strict";var A=_(),Se=require("path"),{mkdirs:Mn}=J(),{pathExists:Rn}=te(),{utimesMillis:Nn}=ht(),ge=ae();async function An(t,e,r={}){typeof r=="function"&&(r={filter:r}),r.clobber="clobber"in r?!!r.clobber:!0,r.overwrite="overwrite"in r?!!r.overwrite:r.clobber,r.preserveTimestamps&&process.arch==="ia32"&&process.emitWarning(`Using the preserveTimestamps option in 32-bit node is not recommended;
 
-	see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:i,destStat:n}=await Se.checkPaths(t,e,"copy",r);if(await Se.checkParentPaths(t,i,e,"copy"),!await sr(t,e,r))return;let a=he.dirname(e);await Tn(a)||await Fn(a),await ar(n,t,e,r)}async function sr(t,e,r){return r.filter?r.filter(t,e):!0}async function ar(t,e,r,i){let o=await(i.dereference?R.stat:R.lstat)(e);if(o.isDirectory())return An(o,t,e,r,i);if(o.isFile()||o.isCharacterDevice()||o.isBlockDevice())return Nn(o,t,e,r,i);if(o.isSymbolicLink())return Vn(t,e,r,i);throw o.isSocket()?new Error(`Cannot copy a socket file: ${e}`):o.isFIFO()?new Error(`Cannot copy a FIFO pipe: ${e}`):new Error(`Unknown file: ${e}`)}async function Nn(t,e,r,i,n){if(!e)return or(t,r,i,n);if(n.overwrite)return await R.unlink(i),or(t,r,i,n);if(n.errorOnExist)throw new Error(`'${i}' already exists`)}async function or(t,e,r,i){if(await R.copyFile(e,r),i.preserveTimestamps){Mn(t.mode)&&await Rn(r,t.mode);let n=await R.stat(e);await In(r,n.atime,n.mtime)}return R.chmod(r,t.mode)}function Mn(t){return(t&128)===0}function Rn(t,e){return R.chmod(t,e|128)}async function An(t,e,r,i,n){e||await R.mkdir(i);let o=await R.readdir(r);await Promise.all(o.map(async a=>{let c=he.join(r,a),u=he.join(i,a);if(!await sr(c,u,n))return;let{destStat:s}=await Se.checkPaths(c,u,"copy",n);return ar(s,c,u,n)})),e||await R.chmod(i,t.mode)}async function Vn(t,e,r,i){let n=await R.readlink(e);if(i.dereference&&(n=he.resolve(process.cwd(),n)),!t)return R.symlink(n,r);let o=null;try{o=await R.readlink(r)}catch(a){if(a.code==="EINVAL"||a.code==="UNKNOWN")return R.symlink(n,r);throw a}if(i.dereference&&(o=he.resolve(process.cwd(),o)),Se.isSrcSubdir(n,o))throw new Error(`Cannot copy '${n}' to a subdirectory of itself, '${o}'.`);if(Se.isSrcSubdir(o,n))throw new Error(`Cannot overwrite '${o}' with '${n}'.`);return await R.unlink(r),R.symlink(n,r)}cr.exports=Cn});var pr=h((ga,dr)=>{"use strict";var $=le(),ge=require("path"),$n=X().mkdirsSync,_n=mt().utimesMillisSync,ve=se();function qn(t,e,r){typeof r=="function"&&(r={filter:r}),r=r||{},r.clobber="clobber"in r?!!r.clobber:!0,r.overwrite="overwrite"in r?!!r.overwrite:r.clobber,r.preserveTimestamps&&process.arch==="ia32"&&process.emitWarning(`Using the preserveTimestamps option in 32-bit node is not recommended;
+	see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:i,destStat:n}=await ge.checkPaths(t,e,"copy",r);if(await ge.checkParentPaths(t,i,e,"copy"),!await lr(t,e,r))return;let s=Se.dirname(e);await Rn(s)||await Mn(s),await ur(n,t,e,r)}async function lr(t,e,r){return r.filter?r.filter(t,e):!0}async function ur(t,e,r,i){let o=await(i.dereference?A.stat:A.lstat)(e);if(o.isDirectory())return qn(o,t,e,r,i);if(o.isFile()||o.isCharacterDevice()||o.isBlockDevice())return Vn(o,t,e,r,i);if(o.isSymbolicLink())return Bn(t,e,r,i);throw o.isSocket()?new Error(`Cannot copy a socket file: ${e}`):o.isFIFO()?new Error(`Cannot copy a FIFO pipe: ${e}`):new Error(`Unknown file: ${e}`)}async function Vn(t,e,r,i,n){if(!e)return cr(t,r,i,n);if(n.overwrite)return await A.unlink(i),cr(t,r,i,n);if(n.errorOnExist)throw new Error(`'${i}' already exists`)}async function cr(t,e,r,i){if(await A.copyFile(e,r),i.preserveTimestamps){$n(t.mode)&&await _n(r,t.mode);let n=await A.stat(e);await Nn(r,n.atime,n.mtime)}return A.chmod(r,t.mode)}function $n(t){return(t&128)===0}function _n(t,e){return A.chmod(t,e|128)}async function qn(t,e,r,i,n){e||await A.mkdir(i);let o=await A.readdir(r);await Promise.all(o.map(async s=>{let c=Se.join(r,s),u=Se.join(i,s);if(!await lr(c,u,n))return;let{destStat:a}=await ge.checkPaths(c,u,"copy",n);return ur(a,c,u,n)})),e||await A.chmod(i,t.mode)}async function Bn(t,e,r,i){let n=await A.readlink(e);if(i.dereference&&(n=Se.resolve(process.cwd(),n)),!t)return A.symlink(n,r);let o=null;try{o=await A.readlink(r)}catch(s){if(s.code==="EINVAL"||s.code==="UNKNOWN")return A.symlink(n,r);throw s}if(i.dereference&&(o=Se.resolve(process.cwd(),o)),ge.isSrcSubdir(n,o))throw new Error(`Cannot copy '${n}' to a subdirectory of itself, '${o}'.`);if(ge.isSrcSubdir(o,n))throw new Error(`Cannot overwrite '${o}' with '${n}'.`);return await A.unlink(r),A.symlink(n,r)}fr.exports=An});var Sr=S((Oa,hr)=>{"use strict";var q=ue(),ve=require("path"),Un=J().mkdirsSync,Xn=ht().utimesMillisSync,we=ae();function Gn(t,e,r){typeof r=="function"&&(r={filter:r}),r=r||{},r.clobber="clobber"in r?!!r.clobber:!0,r.overwrite="overwrite"in r?!!r.overwrite:r.clobber,r.preserveTimestamps&&process.arch==="ia32"&&process.emitWarning(`Using the preserveTimestamps option in 32-bit node is not recommended;
 
-	see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:i,destStat:n}=ve.checkPathsSync(t,e,"copy",r);if(ve.checkParentPathsSync(t,i,e,"copy"),r.filter&&!r.filter(t,e))return;let o=ge.dirname(e);return $.existsSync(o)||$n(o),ur(n,t,e,r)}function ur(t,e,r,i){let o=(i.dereference?$.statSync:$.lstatSync)(e);if(o.isDirectory())return Hn(o,t,e,r,i);if(o.isFile()||o.isCharacterDevice()||o.isBlockDevice())return Un(o,t,e,r,i);if(o.isSymbolicLink())return Kn(t,e,r,i);throw o.isSocket()?new Error(`Cannot copy a socket file: ${e}`):o.isFIFO()?new Error(`Cannot copy a FIFO pipe: ${e}`):new Error(`Unknown file: ${e}`)}function Un(t,e,r,i,n){return e?Xn(t,r,i,n):fr(t,r,i,n)}function Xn(t,e,r,i){if(i.overwrite)return $.unlinkSync(r),fr(t,e,r,i);if(i.errorOnExist)throw new Error(`'${r}' already exists`)}function fr(t,e,r,i){return $.copyFileSync(e,r),i.preserveTimestamps&&Bn(t.mode,e,r),pt(r,t.mode)}function Bn(t,e,r){return Gn(t)&&Wn(r,t),Jn(e,r)}function Gn(t){return(t&128)===0}function Wn(t,e){return pt(t,e|128)}function pt(t,e){return $.chmodSync(t,e)}function Jn(t,e){let r=$.statSync(t);return _n(e,r.atime,r.mtime)}function Hn(t,e,r,i,n){return e?mr(r,i,n):Qn(t.mode,r,i,n)}function Qn(t,e,r,i){return $.mkdirSync(r),mr(e,r,i),pt(r,t)}function mr(t,e,r){$.readdirSync(t).forEach(i=>Yn(i,t,e,r))}function Yn(t,e,r,i){let n=ge.join(e,t),o=ge.join(r,t);if(i.filter&&!i.filter(n,o))return;let{destStat:a}=ve.checkPathsSync(n,o,"copy",i);return ur(a,n,o,i)}function Kn(t,e,r,i){let n=$.readlinkSync(e);if(i.dereference&&(n=ge.resolve(process.cwd(),n)),t){let o;try{o=$.readlinkSync(r)}catch(a){if(a.code==="EINVAL"||a.code==="UNKNOWN")return $.symlinkSync(n,r);throw a}if(i.dereference&&(o=ge.resolve(process.cwd(),o)),ve.isSrcSubdir(n,o))throw new Error(`Cannot copy '${n}' to a subdirectory of itself, '${o}'.`);if(ve.isSrcSubdir(o,n))throw new Error(`Cannot overwrite '${o}' with '${n}'.`);return zn(n,r)}else return $.symlinkSync(n,r)}function zn(t,e){return $.unlinkSync(e),$.symlinkSync(t,e)}dr.exports=qn});var Fe=h((va,yr)=>{"use strict";var Zn=O().fromPromise;yr.exports={copy:Zn(lr()),copySync:pr()}});var we=h((wa,Sr)=>{"use strict";var hr=le(),eo=O().fromCallback;function to(t,e){hr.rm(t,{recursive:!0,force:!0},e)}function ro(t){hr.rmSync(t,{recursive:!0,force:!0})}Sr.exports={remove:eo(to),removeSync:ro}});var kr=h((ba,Pr)=>{"use strict";var io=O().fromPromise,wr=V(),br=require("path"),xr=X(),Lr=we(),gr=io(async function(e){let r;try{r=await wr.readdir(e)}catch{return xr.mkdirs(e)}return Promise.all(r.map(i=>Lr.remove(br.join(e,i))))});function vr(t){let e;try{e=wr.readdirSync(t)}catch{return xr.mkdirsSync(t)}e.forEach(r=>{r=br.join(t,r),Lr.removeSync(r)})}Pr.exports={emptyDirSync:vr,emptydirSync:vr,emptyDir:gr,emptydir:gr}});var jr=h((xa,Or)=>{"use strict";var no=O().fromPromise,Er=require("path"),Q=V(),Dr=X();async function oo(t){let e;try{e=await Q.stat(t)}catch{}if(e&&e.isFile())return;let r=Er.dirname(t),i=null;try{i=await Q.stat(r)}catch(n){if(n.code==="ENOENT"){await Dr.mkdirs(r),await Q.writeFile(t,"");return}else throw n}i.isDirectory()?await Q.writeFile(t,""):await Q.readdir(r)}function so(t){let e;try{e=Q.statSync(t)}catch{}if(e&&e.isFile())return;let r=Er.dirname(t);try{Q.statSync(r).isDirectory()||Q.readdirSync(r)}catch(i){if(i&&i.code==="ENOENT")Dr.mkdirsSync(r);else throw i}Q.writeFileSync(t,"")}Or.exports={createFile:no(oo),createFileSync:so}});var Nr=h((La,Cr)=>{"use strict";var ao=O().fromPromise,Fr=require("path"),ee=V(),Tr=X(),{pathExists:co}=Z(),{areIdentical:Ir}=se();async function lo(t,e){let r;try{r=await ee.lstat(e)}catch{}let i;try{i=await ee.lstat(t)}catch(a){throw a.message=a.message.replace("lstat","ensureLink"),a}if(r&&Ir(i,r))return;let n=Fr.dirname(e);await co(n)||await Tr.mkdirs(n),await ee.link(t,e)}function uo(t,e){let r;try{r=ee.lstatSync(e)}catch{}try{let o=ee.lstatSync(t);if(r&&Ir(o,r))return}catch(o){throw o.message=o.message.replace("lstat","ensureLink"),o}let i=Fr.dirname(e);return ee.existsSync(i)||Tr.mkdirsSync(i),ee.linkSync(t,e)}Cr.exports={createLink:ao(lo),createLinkSync:uo}});var Rr=h((Pa,Mr)=>{"use strict";var te=require("path"),be=V(),{pathExists:fo}=Z(),mo=O().fromPromise;async function po(t,e){if(te.isAbsolute(t)){try{await be.lstat(t)}catch(o){throw o.message=o.message.replace("lstat","ensureSymlink"),o}return{toCwd:t,toDst:t}}let r=te.dirname(e),i=te.join(r,t);if(await fo(i))return{toCwd:i,toDst:t};try{await be.lstat(t)}catch(o){throw o.message=o.message.replace("lstat","ensureSymlink"),o}return{toCwd:t,toDst:te.relative(r,t)}}function yo(t,e){if(te.isAbsolute(t)){if(!be.existsSync(t))throw new Error("absolute srcpath does not exist");return{toCwd:t,toDst:t}}let r=te.dirname(e),i=te.join(r,t);if(be.existsSync(i))return{toCwd:i,toDst:t};if(!be.existsSync(t))throw new Error("relative srcpath does not exist");return{toCwd:t,toDst:te.relative(r,t)}}Mr.exports={symlinkPaths:mo(po),symlinkPathsSync:yo}});var $r=h((ka,Vr)=>{"use strict";var Ar=V(),ho=O().fromPromise;async function So(t,e){if(e)return e;let r;try{r=await Ar.lstat(t)}catch{return"file"}return r&&r.isDirectory()?"dir":"file"}function go(t,e){if(e)return e;let r;try{r=Ar.lstatSync(t)}catch{return"file"}return r&&r.isDirectory()?"dir":"file"}Vr.exports={symlinkType:ho(So),symlinkTypeSync:go}});var Xr=h((Ea,Ur)=>{"use strict";var vo=O().fromPromise,_r=require("path"),B=V(),{mkdirs:wo,mkdirsSync:bo}=X(),{symlinkPaths:xo,symlinkPathsSync:Lo}=Rr(),{symlinkType:Po,symlinkTypeSync:ko}=$r(),{pathExists:Eo}=Z(),{areIdentical:qr}=se();async function Do(t,e,r){let i;try{i=await B.lstat(e)}catch{}if(i&&i.isSymbolicLink()){let[c,u]=await Promise.all([B.stat(t),B.stat(e)]);if(qr(c,u))return}let n=await xo(t,e);t=n.toDst;let o=await Po(n.toCwd,r),a=_r.dirname(e);return await Eo(a)||await wo(a),B.symlink(t,e,o)}function Oo(t,e,r){let i;try{i=B.lstatSync(e)}catch{}if(i&&i.isSymbolicLink()){let c=B.statSync(t),u=B.statSync(e);if(qr(c,u))return}let n=Lo(t,e);t=n.toDst,r=ko(n.toCwd,r);let o=_r.dirname(e);return B.existsSync(o)||bo(o),B.symlinkSync(t,e,r)}Ur.exports={createSymlink:vo(Do),createSymlinkSync:Oo}});var Kr=h((Da,Yr)=>{"use strict";var{createFile:Br,createFileSync:Gr}=jr(),{createLink:Wr,createLinkSync:Jr}=Nr(),{createSymlink:Hr,createSymlinkSync:Qr}=Xr();Yr.exports={createFile:Br,createFileSync:Gr,ensureFile:Br,ensureFileSync:Gr,createLink:Wr,createLinkSync:Jr,ensureLink:Wr,ensureLinkSync:Jr,createSymlink:Hr,createSymlinkSync:Qr,ensureSymlink:Hr,ensureSymlinkSync:Qr}});var Te=h((Oa,zr)=>{function jo(t,{EOL:e=`
-`,finalEOL:r=!0,replacer:i=null,spaces:n}={}){let o=r?e:"";return JSON.stringify(t,i,n).replace(/\n/g,e)+o}function Fo(t){return Buffer.isBuffer(t)&&(t=t.toString("utf8")),t.replace(/^\uFEFF/,"")}zr.exports={stringify:jo,stripBom:Fo}});var ri=h((ja,ti)=>{var me;try{me=le()}catch{me=require("fs")}var Ie=O(),{stringify:Zr,stripBom:ei}=Te();async function To(t,e={}){typeof e=="string"&&(e={encoding:e});let r=e.fs||me,i="throws"in e?e.throws:!0,n=await Ie.fromCallback(r.readFile)(t,e);n=ei(n);let o;try{o=JSON.parse(n,e?e.reviver:null)}catch(a){if(i)throw a.message=`${t}: ${a.message}`,a;return null}return o}var Io=Ie.fromPromise(To);function Co(t,e={}){typeof e=="string"&&(e={encoding:e});let r=e.fs||me,i="throws"in e?e.throws:!0;try{let n=r.readFileSync(t,e);return n=ei(n),JSON.parse(n,e.reviver)}catch(n){if(i)throw n.message=`${t}: ${n.message}`,n;return null}}async function No(t,e,r={}){let i=r.fs||me,n=Zr(e,r);await Ie.fromCallback(i.writeFile)(t,n,r)}var Mo=Ie.fromPromise(No);function Ro(t,e,r={}){let i=r.fs||me,n=Zr(e,r);return i.writeFileSync(t,n,r)}var Ao={readFile:Io,readFileSync:Co,writeFile:Mo,writeFileSync:Ro};ti.exports=Ao});var ni=h((Fa,ii)=>{"use strict";var Ce=ri();ii.exports={readJson:Ce.readFile,readJsonSync:Ce.readFileSync,writeJson:Ce.writeFile,writeJsonSync:Ce.writeFileSync}});var Ne=h((Ta,ai)=>{"use strict";var Vo=O().fromPromise,yt=V(),oi=require("path"),si=X(),$o=Z().pathExists;async function _o(t,e,r="utf-8"){let i=oi.dirname(t);return await $o(i)||await si.mkdirs(i),yt.writeFile(t,e,r)}function qo(t,...e){let r=oi.dirname(t);yt.existsSync(r)||si.mkdirsSync(r),yt.writeFileSync(t,...e)}ai.exports={outputFile:Vo(_o),outputFileSync:qo}});var li=h((Ia,ci)=>{"use strict";var{stringify:Uo}=Te(),{outputFile:Xo}=Ne();async function Bo(t,e,r={}){let i=Uo(e,r);await Xo(t,i,r)}ci.exports=Bo});var fi=h((Ca,ui)=>{"use strict";var{stringify:Go}=Te(),{outputFileSync:Wo}=Ne();function Jo(t,e,r){let i=Go(e,r);Wo(t,i,r)}ui.exports=Jo});var di=h((Na,mi)=>{"use strict";var Ho=O().fromPromise,_=ni();_.outputJson=Ho(li());_.outputJsonSync=fi();_.outputJSON=_.outputJson;_.outputJSONSync=_.outputJsonSync;_.writeJSON=_.writeJson;_.writeJSONSync=_.writeJsonSync;_.readJSON=_.readJson;_.readJSONSync=_.readJsonSync;mi.exports=_});var gi=h((Ma,Si)=>{"use strict";var Qo=V(),pi=require("path"),{copy:Yo}=Fe(),{remove:hi}=we(),{mkdirp:Ko}=X(),{pathExists:zo}=Z(),yi=se();async function Zo(t,e,r={}){let i=r.overwrite||r.clobber||!1,{srcStat:n,isChangingCase:o=!1}=await yi.checkPaths(t,e,"move",r);await yi.checkParentPaths(t,n,e,"move");let a=pi.dirname(e);return pi.parse(a).root!==a&&await Ko(a),es(t,e,i,o)}async function es(t,e,r,i){if(!i){if(r)await hi(e);else if(await zo(e))throw new Error("dest already exists.")}try{await Qo.rename(t,e)}catch(n){if(n.code!=="EXDEV")throw n;await ts(t,e,r)}}async function ts(t,e,r){return await Yo(t,e,{overwrite:r,errorOnExist:!0,preserveTimestamps:!0}),hi(t)}Si.exports=Zo});var Li=h((Ra,xi)=>{"use strict";var wi=le(),St=require("path"),rs=Fe().copySync,bi=we().removeSync,is=X().mkdirpSync,vi=se();function ns(t,e,r){r=r||{};let i=r.overwrite||r.clobber||!1,{srcStat:n,isChangingCase:o=!1}=vi.checkPathsSync(t,e,"move",r);return vi.checkParentPathsSync(t,n,e,"move"),os(e)||is(St.dirname(e)),ss(t,e,i,o)}function os(t){let e=St.dirname(t);return St.parse(e).root===e}function ss(t,e,r,i){if(i)return ht(t,e,r);if(r)return bi(e),ht(t,e,r);if(wi.existsSync(e))throw new Error("dest already exists.");return ht(t,e,r)}function ht(t,e,r){try{wi.renameSync(t,e)}catch(i){if(i.code!=="EXDEV")throw i;return as(t,e,r)}}function as(t,e,r){return rs(t,e,{overwrite:r,errorOnExist:!0,preserveTimestamps:!0}),bi(t)}xi.exports=ns});var ki=h((Aa,Pi)=>{"use strict";var cs=O().fromPromise;Pi.exports={move:cs(gi()),moveSync:Li()}});var Di=h((Va,Ei)=>{"use strict";Ei.exports={...V(),...Fe(),...kr(),...Kr(),...di(),...X(),...ki(),...Ne(),...Z(),...we()}});var Oi=h(Me=>{"use strict";Object.defineProperty(Me,"__esModule",{value:!0});Me.EXTENSIONS_LANGUAGES=void 0;Me.EXTENSIONS_LANGUAGES={1:"Groff",2:"Groff",3:"Groff",4:"Groff",5:"Groff",6:"Groff",7:"Groff",8:"Groff",9:"Groff",abap:"ABAP",asc:"Public Key",ash:"AGS Script",ampl:"AMPL",mod:"XML",g4:"ANTLR",apib:"API Blueprint",apl:"APL",dyalog:"APL",asp:"ASP",asax:"ASP",ascx:"ASP",ashx:"ASP",asmx:"ASP",aspx:"ASP",axd:"ASP",dats:"ATS",hats:"ATS",sats:"ATS",as:"ActionScript",adb:"Ada",ada:"Ada",ads:"Ada",agda:"Agda",als:"Alloy",apacheconf:"ApacheConf",vhost:"Nginx",cls:"Visual Basic",applescript:"AppleScript",scpt:"AppleScript",arc:"Arc",ino:"Arduino",asciidoc:"AsciiDoc",adoc:"AsciiDoc",aj:"AspectJ",asm:"Assembly",a51:"Assembly",inc:"SourcePawn",nasm:"Assembly",aug:"Augeas",ahk:"AutoHotkey",ahkl:"AutoHotkey",au3:"AutoIt",awk:"Awk",auk:"Awk",gawk:"Awk",mawk:"Awk",nawk:"Awk",bat:"Batchfile",cmd:"Batchfile",befunge:"Befunge",bison:"Bison",bb:"BlitzBasic",decls:"BlitzBasic",bmx:"BlitzMax",bsv:"Bluespec",boo:"Boo",b:"Limbo",bf:"HyPhy",brs:"Brightscript",bro:"Bro",c:"C",cats:"C",h:"Objective-C",idc:"C",w:"C",cs:"Smalltalk",cake:"CoffeeScript",cshtml:"C#",csx:"C#",cpp:"C++","c++":"C++",cc:"C++",cp:"Component Pascal",cxx:"C++","h++":"C++",hh:"Hack",hpp:"C++",hxx:"C++",inl:"C++",ipp:"C++",tcc:"C++",tpp:"C++","c-objdump":"C-ObjDump",chs:"C2hs Haskell",clp:"CLIPS",cmake:"CMake","cmake.in":"CMake",cob:"COBOL",cbl:"COBOL",ccp:"COBOL",cobol:"COBOL",cpy:"COBOL",css:"CSS",csv:"CSV",capnp:"Cap'n Proto",mss:"CartoCSS",ceylon:"Ceylon",chpl:"Chapel",ch:"xBase",ck:"ChucK",cirru:"Cirru",clw:"Clarion",icl:"Clean",dcl:"Clean",click:"Click",clj:"Clojure",boot:"Clojure",cl2:"Clojure",cljc:"Clojure",cljs:"Clojure","cljs.hl":"Clojure",cljscm:"Clojure",cljx:"Clojure",hic:"Clojure",coffee:"CoffeeScript",_coffee:"CoffeeScript",cjsx:"CoffeeScript",cson:"CoffeeScript",iced:"CoffeeScript",cfm:"ColdFusion",cfml:"ColdFusion",cfc:"ColdFusion CFC",lisp:"NewLisp",asd:"Common Lisp",cl:"OpenCL",l:"PicoLisp",lsp:"NewLisp",ny:"Common Lisp",podsl:"Common Lisp",sexp:"Common Lisp",cps:"Component Pascal",coq:"Coq",v:"Verilog",cppobjdump:"Cpp-ObjDump","c++-objdump":"Cpp-ObjDump","c++objdump":"Cpp-ObjDump","cpp-objdump":"Cpp-ObjDump","cxx-objdump":"Cpp-ObjDump",creole:"Creole",cr:"Crystal",feature:"Cucumber",cu:"Cuda",cuh:"Cuda",cy:"Cycript",pyx:"Cython",pxd:"Cython",pxi:"Cython",d:"Makefile",di:"D","d-objdump":"D-ObjDump",com:"DIGITAL Command Language",dm:"DM",zone:"DNS Zone",arpa:"DNS Zone",darcspatch:"Darcs Patch",dpatch:"Darcs Patch",dart:"Dart",diff:"Diff",patch:"Diff",dockerfile:"Dockerfile",djs:"Dogescript",dylan:"Dylan",dyl:"Dylan",intr:"Dylan",lid:"Dylan",E:"E",ecl:"ECLiPSe",eclxml:"ECL",sch:"KiCad",brd:"KiCad",epj:"Ecere Projects",e:"Eiffel",ex:"Elixir",exs:"Elixir",elm:"Elm",el:"Emacs Lisp",emacs:"Emacs Lisp","emacs.desktop":"Emacs Lisp",em:"EmberScript",emberscript:"EmberScript",erl:"Erlang",es:"JavaScript",escript:"Erlang",hrl:"Erlang",xrl:"Erlang",yrl:"Erlang",fs:"GLSL",fsi:"F#",fsx:"F#",fx:"HLSL",flux:"FLUX",f90:"FORTRAN",f:"Forth",f03:"FORTRAN",f08:"FORTRAN",f77:"FORTRAN",f95:"FORTRAN",for:"Forth",fpp:"FORTRAN",factor:"Factor",fy:"Fancy",fancypack:"Fancy",fan:"Fantom","eam.fs":"Formatted",fth:"Forth","4th":"Forth",forth:"Forth",fr:"Text",frt:"Forth",ftl:"FreeMarker",g:"GAP",gco:"G-code",gcode:"G-code",gms:"GAMS",gap:"GAP",gd:"GDScript",gi:"GAP",tst:"Scilab",s:"GAS",ms:"MAXScript",glsl:"GLSL",fp:"GLSL",frag:"JavaScript",frg:"GLSL",fsh:"GLSL",fshader:"GLSL",geo:"GLSL",geom:"GLSL",glslv:"GLSL",gshader:"GLSL",shader:"GLSL",vert:"GLSL",vrx:"GLSL",vsh:"GLSL",vshader:"GLSL",gml:"XML",kid:"Genshi",ebuild:"Gentoo Ebuild",eclass:"Gentoo Eclass",po:"Gettext Catalog",pot:"Gettext Catalog",glf:"Glyph",gp:"Gnuplot",gnu:"Gnuplot",gnuplot:"Gnuplot",plot:"Gnuplot",plt:"Gnuplot",go:"Go",golo:"Golo",gs:"JavaScript",gst:"Gosu",gsx:"Gosu",vark:"Gosu",grace:"Grace",gradle:"Gradle",gf:"Grammatical Framework",graphql:"GraphQL",dot:"Graphviz (DOT)",gv:"Graphviz (DOT)",man:"Groff","1in":"Groff","1m":"Groff","1x":"Groff","3in":"Groff","3m":"Groff","3qt":"Groff","3x":"Groff",me:"Groff",n:"Nemerle",rno:"Groff",roff:"Groff",groovy:"Groovy",grt:"Groovy",gtpl:"Groovy",gvy:"Groovy",gsp:"Groovy Server Pages",hcl:"HCL",tf:"HCL",hlsl:"HLSL",fxh:"HLSL",hlsli:"HLSL",html:"HTML",htm:"HTML","html.hl":"HTML",st:"Smalltalk",xht:"HTML",xhtml:"HTML",mustache:"HTML+Django",jinja:"HTML+Django",eex:"HTML+EEX",erb:"HTML+ERB","erb.deface":"HTML+ERB",phtml:"HTML+PHP",http:"HTTP",php:"PHP",haml:"Haml","haml.deface":"Haml",handlebars:"Handlebars",hbs:"Handlebars",hb:"Harbour",hs:"Haskell",hsc:"Haskell",hx:"Haxe",hxsl:"Haxe",hy:"Hy",pro:"QMake",dlm:"IDL",ipf:"IGOR Pro",ini:"INI",cfg:"INI",prefs:"INI",properties:"INI",irclog:"IRC log",weechatlog:"IRC log",idr:"Idris",lidr:"Idris",ni:"Inform 7",i7x:"Inform 7",iss:"Inno Setup",io:"Io",ik:"Ioke",thy:"Isabelle",ijs:"J",flex:"JFlex",jflex:"JFlex",json:"JSON",geojson:"JSON",lock:"JSON",topojson:"JSON",json5:"JSON5",jsonld:"JSONLD",jq:"JSONiq",jsx:"JSX",jade:"Jade",j:"Objective-J",java:"Java",jsp:"Java Server Pages",js:"JavaScript",_js:"JavaScript",bones:"JavaScript",es6:"JavaScript",jake:"JavaScript",jsb:"JavaScript",jscad:"JavaScript",jsfl:"JavaScript",jsm:"JavaScript",jss:"JavaScript",njs:"JavaScript",pac:"JavaScript",sjs:"JavaScript",ssjs:"JavaScript","sublime-build":"JavaScript","sublime-commands":"JavaScript","sublime-completions":"JavaScript","sublime-keymap":"JavaScript","sublime-macro":"JavaScript","sublime-menu":"JavaScript","sublime-mousemap":"JavaScript","sublime-project":"JavaScript","sublime-settings":"JavaScript","sublime-theme":"JavaScript","sublime-workspace":"JavaScript",sublime_metrics:"JavaScript",sublime_session:"JavaScript",xsjs:"JavaScript",xsjslib:"JavaScript",jl:"Julia",ipynb:"Jupyter Notebook",krl:"KRL",kicad_pcb:"KiCad",kit:"Kit",kt:"Kotlin",ktm:"Kotlin",kts:"Kotlin",lfe:"LFE",ll:"LLVM",lol:"LOLCODE",lsl:"LSL",lslp:"LSL",lvproj:"LabVIEW",lasso:"Lasso",las:"Lasso",lasso8:"Lasso",lasso9:"Lasso",ldml:"Lasso",latte:"Latte",lean:"Lean",hlean:"Lean",less:"Less",lex:"Lex",ly:"LilyPond",ily:"LilyPond",m:"Objective-C",ld:"Linker Script",lds:"Linker Script",liquid:"Liquid",lagda:"Literate Agda",litcoffee:"Literate CoffeeScript",lhs:"Literate Haskell",ls:"LoomScript",_ls:"LiveScript",xm:"Logos",x:"Logos",xi:"Logos",lgt:"Logtalk",logtalk:"Logtalk",lookml:"LookML",lua:"Lua",fcgi:"Shell",nse:"Lua",pd_lua:"Lua",rbxs:"Lua",wlua:"Lua",mumps:"M",m4:"M4Sugar",mcr:"MAXScript",mtml:"MTML",muf:"MUF",mak:"Makefile",mk:"Makefile",mkfile:"Makefile",mako:"Mako",mao:"Mako",md:"Markdown",markdown:"Markdown",mkd:"Markdown",mkdn:"Markdown",mkdown:"Markdown",ron:"Markdown",mask:"Mask",mathematica:"Mathematica",cdf:"Mathematica",ma:"Mathematica",mt:"Mathematica",nb:"Text",nbp:"Mathematica",wl:"Mathematica",wlt:"Mathematica",matlab:"Matlab",maxpat:"Max",maxhelp:"Max",maxproj:"Max",mxt:"Max",pat:"Max",mediawiki:"MediaWiki",wiki:"MediaWiki",moo:"Moocode",metal:"Metal",minid:"MiniD",druby:"Mirah",duby:"Mirah",mir:"Mirah",mirah:"Mirah",mo:"Modelica",mms:"Module Management System",mmk:"Module Management System",monkey:"Monkey",moon:"MoonScript",myt:"Myghty",ncl:"Text",nl:"NewLisp",nsi:"NSIS",nsh:"NSIS",axs:"NetLinx",axi:"NetLinx","axs.erb":"NetLinx+ERB","axi.erb":"NetLinx+ERB",nlogo:"NetLogo",nginxconf:"Nginx",nim:"Nimrod",nimrod:"Nimrod",ninja:"Ninja",nit:"Nit",nix:"Nix",nu:"Nu",numpy:"NumPy",numpyw:"NumPy",numsc:"NumPy",ml:"OCaml",eliom:"OCaml",eliomi:"OCaml",ml4:"OCaml",mli:"OCaml",mll:"OCaml",mly:"OCaml",objdump:"ObjDump",mm:"XML",sj:"Objective-J",omgrofl:"Omgrofl",opa:"Opa",opal:"Opal",opencl:"OpenCL",p:"OpenEdge ABL",scad:"OpenSCAD",org:"Org",ox:"Ox",oxh:"Ox",oxo:"Ox",oxygene:"Oxygene",oz:"Oz",pwn:"PAWN",aw:"PHP",ctp:"PHP",php3:"PHP",php4:"PHP",php5:"PHP",phps:"PHP",phpt:"PHP",pls:"PLSQL",pck:"PLSQL",pkb:"PLSQL",pks:"PLSQL",plb:"PLSQL",plsql:"PLSQL",sql:"SQLPL",pov:"POV-Ray SDL",pan:"Pan",psc:"Papyrus",parrot:"Parrot",pasm:"Parrot Assembly",pir:"Parrot Internal Representation",pas:"Pascal",dfm:"Pascal",dpr:"Pascal",lpr:"Pascal",pp:"Puppet",pl:"Prolog",al:"Perl",cgi:"Shell",perl:"Perl",ph:"Perl",plx:"Perl",pm:"Perl6",pod:"Pod",psgi:"Perl",t:"Turing","6pl":"Perl6","6pm":"Perl6",nqp:"Perl6",p6:"Perl6",p6l:"Perl6",p6m:"Perl6",pl6:"Perl6",pm6:"Perl6",pkl:"Pickle",pig:"PigLatin",pike:"Pike",pmod:"Pike",pogo:"PogoScript",pony:"Pony",ps:"PostScript",eps:"PostScript",ps1:"PowerShell",psd1:"PowerShell",psm1:"PowerShell",pde:"Processing",prolog:"Prolog",yap:"Prolog",spin:"Propeller Spin",proto:"Protocol Buffer",pub:"Public Key",pd:"Pure Data",pb:"PureBasic",pbi:"PureBasic",purs:"PureScript",py:"Python",bzl:"Python",gyp:"Python",lmi:"Python",pyde:"Python",pyp:"Python",pyt:"Python",pyw:"Python",rpy:"Ren'Py",tac:"Python",wsgi:"Python",xpy:"Python",pytb:"Python traceback",qml:"QML",qbs:"QML",pri:"QMake",r:"Rebol",rd:"R",rsx:"R",raml:"RAML",rdoc:"RDoc",rbbas:"REALbasic",rbfrm:"REALbasic",rbmnu:"REALbasic",rbres:"REALbasic",rbtbar:"REALbasic",rbuistate:"REALbasic",rhtml:"RHTML",rmd:"RMarkdown",rkt:"Racket",rktd:"Racket",rktl:"Racket",scrbl:"Racket",rl:"Ragel in Ruby Host",raw:"Raw token data",reb:"Rebol",r2:"Rebol",r3:"Rebol",rebol:"Rebol",red:"Red",reds:"Red",cw:"Redcode",rs:"Rust",rsh:"RenderScript",robot:"RobotFramework",rg:"Rouge",rb:"Ruby",builder:"Ruby",gemspec:"Ruby",god:"Ruby",irbrc:"Ruby",jbuilder:"Ruby",mspec:"Ruby",pluginspec:"XML",podspec:"Ruby",rabl:"Ruby",rake:"Ruby",rbuild:"Ruby",rbw:"Ruby",rbx:"Ruby",ru:"Ruby",ruby:"Ruby",thor:"Ruby",watchr:"Ruby","rs.in":"Rust",sas:"SAS",scss:"SCSS",smt2:"SMT",smt:"SMT",sparql:"SPARQL",rq:"SPARQL",sqf:"SQF",hqf:"SQF",cql:"SQL",ddl:"SQL",prc:"SQL",tab:"SQL",udf:"SQL",viw:"SQL",db2:"SQLPL",ston:"STON",svg:"SVG",sage:"Sage",sagews:"Sage",sls:"Scheme",sass:"Sass",scala:"Scala",sbt:"Scala",sc:"SuperCollider",scaml:"Scaml",scm:"Scheme",sld:"Scheme",sps:"Scheme",ss:"Scheme",sci:"Scilab",sce:"Scilab",self:"Self",sh:"Shell",bash:"Shell",bats:"Shell",command:"Shell",ksh:"Shell","sh.in":"Shell",tmux:"Shell",tool:"Shell",zsh:"Shell","sh-session":"ShellSession",shen:"Shen",sl:"Slash",slim:"Slim",smali:"Smali",tpl:"Smarty",sp:"SourcePawn",sma:"SourcePawn",nut:"Squirrel",stan:"Stan",ML:"Standard ML",fun:"Standard ML",sig:"Standard ML",sml:"Standard ML",do:"Stata",ado:"Stata",doh:"Stata",ihlp:"Stata",mata:"Stata",matah:"Stata",sthlp:"Stata",styl:"Stylus",scd:"SuperCollider",swift:"Swift",sv:"SystemVerilog",svh:"SystemVerilog",vh:"SystemVerilog",toml:"TOML",txl:"TXL",tcl:"Tcl",adp:"Tcl",tm:"Tcl",tcsh:"Tcsh",csh:"Tcsh",tex:"TeX",aux:"TeX",bbx:"TeX",bib:"TeX",cbx:"TeX",dtx:"TeX",ins:"TeX",lbx:"TeX",ltx:"TeX",mkii:"TeX",mkiv:"TeX",mkvi:"TeX",sty:"TeX",toc:"TeX",tea:"Tea",txt:"Text",no:"Text",textile:"Textile",thrift:"Thrift",tu:"Turing",ttl:"Turtle",twig:"Twig",ts:"XML",tsx:"XML",upc:"Unified Parallel C",anim:"Unity3D Asset",asset:"Unity3D Asset",mat:"Unity3D Asset",meta:"Unity3D Asset",prefab:"Unity3D Asset",unity:"Unity3D Asset",uno:"Uno",uc:"UnrealScript",ur:"UrWeb",urs:"UrWeb",vcl:"VCL",vhdl:"VHDL",vhd:"VHDL",vhf:"VHDL",vhi:"VHDL",vho:"VHDL",vhs:"VHDL",vht:"VHDL",vhw:"VHDL",vala:"Vala",vapi:"Vala",veo:"Verilog",vim:"VimL",vb:"Visual Basic",bas:"Visual Basic",frm:"Visual Basic",frx:"Visual Basic",vba:"Visual Basic",vbhtml:"Visual Basic",vbs:"Visual Basic",volt:"Volt",vue:"Vue",owl:"Web Ontology Language",webidl:"WebIDL",x10:"X10",xc:"XC",xml:"XML",ant:"XML",axml:"XML",ccxml:"XML",clixml:"XML",cproject:"XML",csl:"XML",csproj:"XML",ct:"XML",dita:"XML",ditamap:"XML",ditaval:"XML","dll.config":"XML",dotsettings:"XML",filters:"XML",fsproj:"XML",fxml:"XML",glade:"XML",grxml:"XML",iml:"XML",ivy:"XML",jelly:"XML",jsproj:"XML",kml:"XML",launch:"XML",mdpolicy:"XML",mxml:"XML",nproj:"XML",nuspec:"XML",odd:"XML",osm:"XML",plist:"XML",props:"XML",ps1xml:"XML",psc1:"XML",pt:"XML",rdf:"XML",rss:"XML",scxml:"XML",srdf:"XML",storyboard:"XML",stTheme:"XML","sublime-snippet":"XML",targets:"XML",tmCommand:"XML",tml:"XML",tmLanguage:"XML",tmPreferences:"XML",tmSnippet:"XML",tmTheme:"XML",ui:"XML",urdf:"XML",ux:"XML",vbproj:"XML",vcxproj:"XML",vssettings:"XML",vxml:"XML",wsdl:"XML",wsf:"XML",wxi:"XML",wxl:"XML",wxs:"XML",x3d:"XML",xacro:"XML",xaml:"XML",xib:"XML",xlf:"XML",xliff:"XML",xmi:"XML","xml.dist":"XML",xproj:"XML",xsd:"XML",xul:"XML",zcml:"XML","xsp-config":"XPages","xsp.metadata":"XPages",xpl:"XProc",xproc:"XProc",xquery:"XQuery",xq:"XQuery",xql:"XQuery",xqm:"XQuery",xqy:"XQuery",xs:"XS",xslt:"XSLT",xsl:"XSLT",xojo_code:"Xojo",xojo_menu:"Xojo",xojo_report:"Xojo",xojo_script:"Xojo",xojo_toolbar:"Xojo",xojo_window:"Xojo",xtend:"Xtend",yml:"YAML",reek:"YAML",rviz:"YAML","sublime-syntax":"YAML",syntax:"YAML",yaml:"YAML","yaml-tmlanguage":"YAML",yang:"YANG",y:"Yacc",yacc:"Yacc",yy:"Yacc",zep:"Zephir",zimpl:"Zimpl",zmpl:"Zimpl",zpl:"Zimpl",desktop:"desktop","desktop.in":"desktop",ec:"eC",eh:"eC",edn:"edn",fish:"fish",mu:"mupad",nc:"nesC",ooc:"ooc",rst:"reStructuredText",rest:"reStructuredText","rest.txt":"reStructuredText","rst.txt":"reStructuredText",wisp:"wisp",prg:"xBase",prw:"xBase"}});var xe=h(gt=>{"use strict";Object.defineProperty(gt,"__esModule",{value:!0});gt.setOptionValues=ls;function ls(t,e){for(let r of Object.keys(e))t[r]!==void 0&&(e[r]=t[r]);return e}});var Fi=h(Re=>{"use strict";Object.defineProperty(Re,"__esModule",{value:!0});Re.SarifBuilder=void 0;var us=require("path"),ji=Di(),fs=Oi(),ms=xe(),vt=class{constructor(e={}){this.log={$schema:"http://json.schemastore.org/sarif-2.1.0.json",version:"2.1.0",runs:[]},(0,ms.setOptionValues)(e,this.log)}addRun(e){this.log.runs.push(e.run)}generateSarifFileSync(e){let r=this.buildSarifJsonString();ji.writeFileSync(e,r,"utf8")}async generateSarifFile(e){let r=this.buildSarifJsonString();await ji.writeFile(e,r,"utf8")}buildSarifOutput(){return this.log.runs=this.log.runs.map(e=>this.completeRunFields(e)),this.log}buildSarifJsonString(e={indent:!1}){this.buildSarifOutput();let r=e.indent?JSON.stringify(this.log,null,2):JSON.stringify(this.log);if(r.includes("SARIF_BUILDER_INVALID"))throw new Error("Your SARIF log is invalid, please solve SARIF_BUILDER_INVALID messages");return r}completeRunFields(e){var r,i,n,o;e.artifacts=e.artifacts||[];for(let u of e.results)for(let l of u.locations||[])if(!((i=(r=l?.physicalLocation)===null||r===void 0?void 0:r.artifactLocation)===null||i===void 0)&&i.uri&&e.artifacts.filter(s=>{var m;return((m=s?.location)===null||m===void 0?void 0:m.uri)===l.physicalLocation.artifactLocation.uri}).length===0){let s=us.extname(l.physicalLocation.artifactLocation.uri).replace(".",""),m=fs.EXTENSIONS_LANGUAGES[s]||"unknown";e.artifacts.push({sourceLanguage:m,location:{uri:l.physicalLocation.artifactLocation.uri}})}let a=e.artifacts.map(u=>{var l;return(l=u?.location)===null||l===void 0?void 0:l.uri}),c=(((o=(n=e?.tool)===null||n===void 0?void 0:n.driver)===null||o===void 0?void 0:o.rules)||[]).map(u=>u.id);return e.results=e.results.map(u=>(c.indexOf(u.ruleId)>-1&&(u.ruleIndex=c.indexOf(u.ruleId)),u.locations&&(u.locations=u.locations.map(l=>{var s,m;let p=(m=(s=l?.physicalLocation)===null||s===void 0?void 0:s.artifactLocation)===null||m===void 0?void 0:m.uri;return p&&a.indexOf(p)>-1&&(l.physicalLocation.artifactLocation.index=a.indexOf(p)),l})),u)),e}};Re.SarifBuilder=vt});var Ti=h(Ae=>{"use strict";Object.defineProperty(Ae,"__esModule",{value:!0});Ae.SarifResultBuilder=void 0;var ds=xe(),wt=class{constructor(e={}){this.result={level:"error",message:{},ruleId:"SARIF_BUILDER_INVALID: Please send the rule Id ruleId property, or call setRuleId(ruleId)"},(0,ds.setOptionValues)(e,this.result)}initSimple(e){if(this.setLevel(e.level),this.setMessageText(e.messageText),this.setRuleId(e.ruleId),e.fileUri&&this.setLocationArtifactUri({uri:e.fileUri}),e.startLine!==null&&e.startLine!==void 0){let r={startLine:e.startLine,startColumn:e.startColumn||1,endLine:e.endLine||e.startLine,endColumn:e.endColumn||1};if(e.startLine===0||e.startColumn===0||e.endLine===0||e.endColumn===0)throw new Error("Region limit can not be 0 (minimum line 1 or column 1) in "+JSON.stringify(e));this.setLocationRegion(r)}return this}setLevel(e){this.result.level=e}setMessageText(e){this.result.message.text=e}setRuleId(e){this.result.ruleId=e}setLocationRegion(e){this.manageInitPhysicalLocation(),this.result.locations[0].physicalLocation.region=e}setLocationArtifactUri(e){this.manageInitPhysicalLocation(),this.result.locations[0].physicalLocation.artifactLocation=e}manageInitLocation(){var e,r;!((r=(e=this.result)===null||e===void 0?void 0:e.locations)===null||r===void 0)&&r.length||(this.result.locations=[{}])}manageInitPhysicalLocation(){var e;this.manageInitLocation(),!(!((e=this.result)===null||e===void 0)&&e.locations[0].physicalLocation)&&(this.result.locations[0].physicalLocation={})}};Ae.SarifResultBuilder=wt});var Ii=h(Ve=>{"use strict";Object.defineProperty(Ve,"__esModule",{value:!0});Ve.SarifRuleBuilder=void 0;var ps=xe(),bt=class{constructor(e={}){this.rule={id:"SARIF_BUILDER_INVALID: Please send the rule identifier in id property, or call setRuleId(ruleId)",shortDescription:{text:"SARIF_BUILDER_INVALID: Please send the rule text in shortDescription.text property, or call setShortDescriptionText(text)"}},(0,ps.setOptionValues)(e,this.rule)}initSimple(e){return this.setRuleId(e.ruleId),e.shortDescriptionText&&this.setShortDescriptionText(e.shortDescriptionText),e.fullDescriptionText&&this.setFullDescriptionText(e.fullDescriptionText),e.helpUri&&this.setHelpUri(e.helpUri),this}setRuleId(e){this.rule.id=e}setShortDescriptionText(e){this.rule.shortDescription.text=e}setFullDescriptionText(e){this.rule.fullDescription=this.rule.fullDescription||{text:""},this.rule.fullDescription.text=e}setHelpUri(e){this.rule.helpUri=e}};Ve.SarifRuleBuilder=bt});var Ci=h($e=>{"use strict";Object.defineProperty($e,"__esModule",{value:!0});$e.SarifRunBuilder=void 0;var ys=xe(),xt=class{constructor(e={}){this.run={tool:{driver:{name:process.env.npm_package_name||"SARIF_BUILDER_INVALID: Please send the tool name in tool.driver.name property, or call setToolName(name)",rules:[]}},results:[]},(0,ys.setOptionValues)(e,this.run)}initSimple(e){return this.setToolDriverName(e.toolDriverName),this.setToolDriverVersion(e.toolDriverVersion),e.url&&this.setToolDriverUri(e.url),this}addRule(e){this.run.tool.driver.rules.push(e.rule)}addResult(e){this.run.results.push(e.result)}setToolDriverName(e){this.run.tool.driver.name=e}setToolDriverVersion(e){this.run.tool.driver.version=e}setToolDriverUri(e){this.run.tool.driver.informationUri=e}};$e.SarifRunBuilder=xt});var Ni=h(G=>{"use strict";Object.defineProperty(G,"__esModule",{value:!0});G.SarifResultBuilder=G.SarifRuleBuilder=G.SarifRunBuilder=G.SarifBuilder=void 0;var hs=Fi();Object.defineProperty(G,"SarifBuilder",{enumerable:!0,get:function(){return hs.SarifBuilder}});var Ss=Ti();Object.defineProperty(G,"SarifResultBuilder",{enumerable:!0,get:function(){return Ss.SarifResultBuilder}});var gs=Ii();Object.defineProperty(G,"SarifRuleBuilder",{enumerable:!0,get:function(){return gs.SarifRuleBuilder}});var vs=Ci();Object.defineProperty(G,"SarifRunBuilder",{enumerable:!0,get:function(){return vs.SarifRunBuilder}})});var Ri=h((Wa,Mi)=>{"use strict";var ws=/["'&<>]/;Mi.exports=bs;function bs(t){var e=""+t,r=ws.exec(e);if(!r)return e;var i,n="",o=0,a=0;for(o=r.index;o<e.length;o++){switch(e.charCodeAt(o)){case 34:i="&quot;";break;case 38:i="&amp;";break;case 39:i="&#39;";break;case 60:i="&lt;";break;case 62:i="&gt;";break;default:continue}a!==o&&(n+=e.substring(a,o)),a=o+1,n+=i}return a!==o?n+e.substring(a,o):n}});var Qe=require("zx"),ae=require("fs/promises");var W={UNKNOWN:0,LOW:1,MEDIUM:2,HIGH:3,CRITICAL:4};var Le=class{allById=new Map;getAllVulnIds(){return new Set(this.allById.keys())}getAllVulnerabilitiesSortedBySeverity(){let e=Array.from(this.allById.values());return e.sort((r,i)=>{let n=Ct(r.severity,i.severity);return n===0?r.id.localeCompare(i.id):-n}),e}addVulnerability(e,r){let i=e.id,n=this.allById;if(!n.has(i))n.set(i,e);else{let o=n.get(i);o.title=o.title||e.title,o.severity=sn(o.severity,e.severity),o.scannerSeverity[r]=e.severity,o.detectedBy=ze(o.detectedBy,r),o.components=ze(o.components,e.components[0]),o.refs=ze(o.refs,e.refs[0])}}enhanceWithVexData(e){let r=[];for(let i of this.allById.values()){let n=e.newestVulnerabilityStatement(i.id);if(!n){r.push({id:i.id,severity:i.severity});continue}i.vexStatement=n}return{unmatchedVulnerabilities:r}}};function sn(t,e){return Ct(t,e)>0?t:e}function Ct(t,e){return W[t]-W[e]}function ze(t,e){return e?Array.from(new Set([...t,e]).values()):t}var Pe=Ke(require("path"));var q=require("fs/promises"),Ze=require("path");async function U(t){if(await ne(t))return JSON.parse(await(0,q.readFile)(t,{encoding:"utf-8"}))}async function et(t,e){await(0,q.writeFile)(t,JSON.stringify(e,null,4)+`
-`,{encoding:"utf-8"})}function J(t){return t&&t.replace(/\?.*$/,"")}async function ne(t){try{return await(0,q.access)(t,q.constants.F_OK),!0}catch{return!1}}async function tt(t){let e=(0,Ze.resolve)(t),r=await(0,q.readdir)(e,{withFileTypes:!0});for(let i of r){let n=(0,Ze.resolve)(i.parentPath,i.name);i.isDirectory()?await tt(n):await(0,q.rm)(n)}await(0,q.rmdir)(e)}async function pe(t,e){let r=e?.user&&e?.pw?{Authorization:`Basic ${Buffer.from(`${e.user}:${e.pw}`).toString("base64")}`}:{},i=await fetch(t,{headers:r});if(!i.ok){let n="";try{n=await i.text()}catch(o){n=`${o}`}throw new Error(`Failed to fetch: ${t}: ${i.status} - ${i.statusText}: ${n}`)}return i}var rt;async function it(t){if(rt)return rt;let e="https://repository.conterra.de/repository/maven-mirror-ct",r=K(t.workingDir,"input/vex"),i=K(t.workingDir,"output"),n=K(t.workingDir,"cache"),o=["grype","trivy","ossindex"],a=K(t.workingDir,"vuln-scan-conf.json"),c=await U(a);if(!c)throw new Error(`Missing project configuration file '${a}'`);let u=c.findNoLongerDetectedVulnerabilitiesOnlyForSnapshots??!1;return rt={projectConfigFileLocation:a,onNewVulnerabilities:c.onNewVulnerabilities??(c.failOnNewVulnerabilities?"fail":"warn"),onNoLongerDetectedVulnerabilities:c.onNoLongerDetectedVulnerabilities??"ignore",reportNoLongerDetectedVulnerabilities:c.reportNoLongerDetectedVulnerabilities??!0,createSubDirsForProject:c.createSubDirsForProject??!0,mavenRepo:c.mavenRepo??e,vexUrls:c.vexUrls??[],vexDir:K(t.workingDir,c.vexDir)??r,outDir:K(t.workingDir,c.outDir)??i,cacheDir:K(t.workingDir,c.cacheDir)??n,scanners:c.scanners??o,projects:(c.projects??[]).map(l=>{let s=l;if(!s.name)throw new Error("Project name is missing on entry:"+JSON.stringify(s));if(!s.version)throw new Error("Project version is missing on entry:"+JSON.stringify(s));if(!s.purl)throw new Error("Project purl is missing on entry:"+JSON.stringify(s));return s.purlAliases||(s.purlAliases=[]),s.enabled==null&&(s.enabled=!0),s.silent==null&&(s.silent=!1),s.minimumSeverity||(s.minimumSeverity="UNKNOWN"),s.sbomFile?{...s,sbomFile:K(t.workingDir,s.sbomFile)}:(s.detectNoLongerUsedVulnerabilities=u?s.purl.endsWith("-SNAPSHOT"):!0,l)})}}function K(t,e){if(e)return Pe.default.isAbsolute(e)?e:(0,Pe.resolve)(t,e)}var re=Ke(Ni());var Ai=Ke(Ri());function Vi(t,e){let r=new re.SarifRunBuilder().initSimple({toolDriverName:`${e.name} - ${e.version}`,toolDriverVersion:"0.0.1"}),i=new Date().toISOString().split("T")[0];r.run.tool.driver.fullDescription={text:`Security Scan from ${i}`},r.run.tool.driver.properties={"microsoft/qualityDomain":`Security Scan from ${i}`};for(let o of t){let a=Ls(o.severity),c=o.id,u=xs(o.refs),l=new re.SarifRuleBuilder().initSimple({ruleId:c,shortDescriptionText:o.title,fullDescriptionText:o.description,helpUri:u}),s=o.vexStatement,m,p="new",f="";s?(m=[{kind:"external",status:"accepted"}],p="updated",f=`--- INVESTIGATED (${s.status}) --- `,s.status==="under_investigation"&&(m[0].status="underReview",f="--- UNDER INVESTIGATION --- ")):W[e.minimumSeverity]>W[o.severity]?(m=[{kind:"external",status:"accepted"}],p="updated",f=`--- BELOW MINIMUM SEVERITY '${e.minimumSeverity}' ---`):e.silent&&(m=[{kind:"external",status:"accepted"}],p="updated",f="--- PROJECT SILENT ---"),Object.assign(l.rule,{name:`${f}[${o.severity}] - ${o.title.replace(`[${c}]`,"")}`,messageStrings:{default:{text:o.description,markdown:Ps(o,u,f)}},properties:{severity:o.severity,scanners:o.scannerSeverity,links:o.refs,tags:["cve","vulnerability","security",`severity_${o.severity.toLowerCase()}`]}}),r.addRule(l);for(let d of o.components){let S=new re.SarifResultBuilder().initSimple({ruleId:c,level:a,messageText:`${c} [${o.severity}] - ${d}`});S.result.message.id="default",S.result.locations=[{logicalLocations:[{fullyQualifiedName:d}]}],S.result.baselineState=p,S.result.suppressions=m,r.addResult(S)}}let n=new re.SarifBuilder;return n.addRun(r),n.buildSarifOutput()}function xs(t){for(let e of t)if(e.startsWith("https://nvd.nist.gov"))return e;return t[0]}function Ls(t){switch(t){case"CRITICAL":return"error";case"HIGH":return"error";case"MEDIUM":return"warning";case"LOW":return"warning";default:return"note"}}function Ps(t,e,r){let i=t.vexStatement,n=i?`
+	see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:i,destStat:n}=we.checkPathsSync(t,e,"copy",r);if(we.checkParentPathsSync(t,i,e,"copy"),r.filter&&!r.filter(t,e))return;let o=ve.dirname(e);return q.existsSync(o)||Un(o),dr(n,t,e,r)}function dr(t,e,r,i){let o=(i.dereference?q.statSync:q.lstatSync)(e);if(o.isDirectory())return zn(o,t,e,r,i);if(o.isFile()||o.isCharacterDevice()||o.isBlockDevice())return Jn(o,t,e,r,i);if(o.isSymbolicLink())return to(t,e,r,i);throw o.isSocket()?new Error(`Cannot copy a socket file: ${e}`):o.isFIFO()?new Error(`Cannot copy a FIFO pipe: ${e}`):new Error(`Unknown file: ${e}`)}function Jn(t,e,r,i,n){return e?Wn(t,r,i,n):pr(t,r,i,n)}function Wn(t,e,r,i){if(i.overwrite)return q.unlinkSync(r),pr(t,e,r,i);if(i.errorOnExist)throw new Error(`'${r}' already exists`)}function pr(t,e,r,i){return q.copyFileSync(e,r),i.preserveTimestamps&&Hn(t.mode,e,r),gt(r,t.mode)}function Hn(t,e,r){return Yn(t)&&Qn(r,t),Kn(e,r)}function Yn(t){return(t&128)===0}function Qn(t,e){return gt(t,e|128)}function gt(t,e){return q.chmodSync(t,e)}function Kn(t,e){let r=q.statSync(t);return Xn(e,r.atime,r.mtime)}function zn(t,e,r,i,n){return e?yr(r,i,n):Zn(t.mode,r,i,n)}function Zn(t,e,r,i){return q.mkdirSync(r),yr(e,r,i),gt(r,t)}function yr(t,e,r){q.readdirSync(t).forEach(i=>eo(i,t,e,r))}function eo(t,e,r,i){let n=ve.join(e,t),o=ve.join(r,t);if(i.filter&&!i.filter(n,o))return;let{destStat:s}=we.checkPathsSync(n,o,"copy",i);return dr(s,n,o,i)}function to(t,e,r,i){let n=q.readlinkSync(e);if(i.dereference&&(n=ve.resolve(process.cwd(),n)),t){let o;try{o=q.readlinkSync(r)}catch(s){if(s.code==="EINVAL"||s.code==="UNKNOWN")return q.symlinkSync(n,r);throw s}if(i.dereference&&(o=ve.resolve(process.cwd(),o)),we.isSrcSubdir(n,o))throw new Error(`Cannot copy '${n}' to a subdirectory of itself, '${o}'.`);if(we.isSrcSubdir(o,n))throw new Error(`Cannot overwrite '${o}' with '${n}'.`);return ro(n,r)}else return q.symlinkSync(n,r)}function ro(t,e){return q.unlinkSync(e),q.symlinkSync(t,e)}hr.exports=Gn});var Ce=S((ja,gr)=>{"use strict";var io=T().fromPromise;gr.exports={copy:io(mr()),copySync:Sr()}});var be=S((Ia,wr)=>{"use strict";var vr=ue(),no=T().fromCallback;function oo(t,e){vr.rm(t,{recursive:!0,force:!0},e)}function so(t){vr.rmSync(t,{recursive:!0,force:!0})}wr.exports={remove:no(oo),removeSync:so}});var Or=S((Ta,Dr)=>{"use strict";var ao=T().fromPromise,Lr=_(),Pr=require("path"),kr=J(),Er=be(),br=ao(async function(e){let r;try{r=await Lr.readdir(e)}catch{return kr.mkdirs(e)}return Promise.all(r.map(i=>Er.remove(Pr.join(e,i))))});function xr(t){let e;try{e=Lr.readdirSync(t)}catch{return kr.mkdirsSync(t)}e.forEach(r=>{r=Pr.join(t,r),Er.removeSync(r)})}Dr.exports={emptyDirSync:xr,emptydirSync:xr,emptyDir:br,emptydir:br}});var Fr=S((Fa,Tr)=>{"use strict";var co=T().fromPromise,jr=require("path"),K=_(),Ir=J();async function lo(t){let e;try{e=await K.stat(t)}catch{}if(e&&e.isFile())return;let r=jr.dirname(t),i=null;try{i=await K.stat(r)}catch(n){if(n.code==="ENOENT"){await Ir.mkdirs(r),await K.writeFile(t,"");return}else throw n}i.isDirectory()?await K.writeFile(t,""):await K.readdir(r)}function uo(t){let e;try{e=K.statSync(t)}catch{}if(e&&e.isFile())return;let r=jr.dirname(t);try{K.statSync(r).isDirectory()||K.readdirSync(r)}catch(i){if(i&&i.code==="ENOENT")Ir.mkdirsSync(r);else throw i}K.writeFileSync(t,"")}Tr.exports={createFile:co(lo),createFileSync:uo}});var Ar=S((Ca,Nr)=>{"use strict";var fo=T().fromPromise,Cr=require("path"),re=_(),Mr=J(),{pathExists:mo}=te(),{areIdentical:Rr}=ae();async function po(t,e){let r;try{r=await re.lstat(e)}catch{}let i;try{i=await re.lstat(t)}catch(s){throw s.message=s.message.replace("lstat","ensureLink"),s}if(r&&Rr(i,r))return;let n=Cr.dirname(e);await mo(n)||await Mr.mkdirs(n),await re.link(t,e)}function yo(t,e){let r;try{r=re.lstatSync(e)}catch{}try{let o=re.lstatSync(t);if(r&&Rr(o,r))return}catch(o){throw o.message=o.message.replace("lstat","ensureLink"),o}let i=Cr.dirname(e);return re.existsSync(i)||Mr.mkdirsSync(i),re.linkSync(t,e)}Nr.exports={createLink:fo(po),createLinkSync:yo}});var $r=S((Ma,Vr)=>{"use strict";var ie=require("path"),xe=_(),{pathExists:ho}=te(),So=T().fromPromise;async function go(t,e){if(ie.isAbsolute(t)){try{await xe.lstat(t)}catch(o){throw o.message=o.message.replace("lstat","ensureSymlink"),o}return{toCwd:t,toDst:t}}let r=ie.dirname(e),i=ie.join(r,t);if(await ho(i))return{toCwd:i,toDst:t};try{await xe.lstat(t)}catch(o){throw o.message=o.message.replace("lstat","ensureSymlink"),o}return{toCwd:t,toDst:ie.relative(r,t)}}function vo(t,e){if(ie.isAbsolute(t)){if(!xe.existsSync(t))throw new Error("absolute srcpath does not exist");return{toCwd:t,toDst:t}}let r=ie.dirname(e),i=ie.join(r,t);if(xe.existsSync(i))return{toCwd:i,toDst:t};if(!xe.existsSync(t))throw new Error("relative srcpath does not exist");return{toCwd:t,toDst:ie.relative(r,t)}}Vr.exports={symlinkPaths:So(go),symlinkPathsSync:vo}});var Br=S((Ra,qr)=>{"use strict";var _r=_(),wo=T().fromPromise;async function bo(t,e){if(e)return e;let r;try{r=await _r.lstat(t)}catch{return"file"}return r&&r.isDirectory()?"dir":"file"}function xo(t,e){if(e)return e;let r;try{r=_r.lstatSync(t)}catch{return"file"}return r&&r.isDirectory()?"dir":"file"}qr.exports={symlinkType:wo(bo),symlinkTypeSync:xo}});var Jr=S((Na,Gr)=>{"use strict";var Lo=T().fromPromise,Ur=require("path"),W=_(),{mkdirs:Po,mkdirsSync:ko}=J(),{symlinkPaths:Eo,symlinkPathsSync:Do}=$r(),{symlinkType:Oo,symlinkTypeSync:jo}=Br(),{pathExists:Io}=te(),{areIdentical:Xr}=ae();async function To(t,e,r){let i;try{i=await W.lstat(e)}catch{}if(i&&i.isSymbolicLink()){let[c,u]=await Promise.all([W.stat(t),W.stat(e)]);if(Xr(c,u))return}let n=await Eo(t,e);t=n.toDst;let o=await Oo(n.toCwd,r),s=Ur.dirname(e);return await Io(s)||await Po(s),W.symlink(t,e,o)}function Fo(t,e,r){let i;try{i=W.lstatSync(e)}catch{}if(i&&i.isSymbolicLink()){let c=W.statSync(t),u=W.statSync(e);if(Xr(c,u))return}let n=Do(t,e);t=n.toDst,r=jo(n.toCwd,r);let o=Ur.dirname(e);return W.existsSync(o)||ko(o),W.symlinkSync(t,e,r)}Gr.exports={createSymlink:Lo(To),createSymlinkSync:Fo}});var ei=S((Aa,Zr)=>{"use strict";var{createFile:Wr,createFileSync:Hr}=Fr(),{createLink:Yr,createLinkSync:Qr}=Ar(),{createSymlink:Kr,createSymlinkSync:zr}=Jr();Zr.exports={createFile:Wr,createFileSync:Hr,ensureFile:Wr,ensureFileSync:Hr,createLink:Yr,createLinkSync:Qr,ensureLink:Yr,ensureLinkSync:Qr,createSymlink:Kr,createSymlinkSync:zr,ensureSymlink:Kr,ensureSymlinkSync:zr}});var Me=S((Va,ti)=>{function Co(t,{EOL:e=`
+`,finalEOL:r=!0,replacer:i=null,spaces:n}={}){let o=r?e:"";return JSON.stringify(t,i,n).replace(/\n/g,e)+o}function Mo(t){return Buffer.isBuffer(t)&&(t=t.toString("utf8")),t.replace(/^\uFEFF/,"")}ti.exports={stringify:Co,stripBom:Mo}});var oi=S(($a,ni)=>{var de;try{de=ue()}catch{de=require("fs")}var Re=T(),{stringify:ri,stripBom:ii}=Me();async function Ro(t,e={}){typeof e=="string"&&(e={encoding:e});let r=e.fs||de,i="throws"in e?e.throws:!0,n=await Re.fromCallback(r.readFile)(t,e);n=ii(n);let o;try{o=JSON.parse(n,e?e.reviver:null)}catch(s){if(i)throw s.message=`${t}: ${s.message}`,s;return null}return o}var No=Re.fromPromise(Ro);function Ao(t,e={}){typeof e=="string"&&(e={encoding:e});let r=e.fs||de,i="throws"in e?e.throws:!0;try{let n=r.readFileSync(t,e);return n=ii(n),JSON.parse(n,e.reviver)}catch(n){if(i)throw n.message=`${t}: ${n.message}`,n;return null}}async function Vo(t,e,r={}){let i=r.fs||de,n=ri(e,r);await Re.fromCallback(i.writeFile)(t,n,r)}var $o=Re.fromPromise(Vo);function _o(t,e,r={}){let i=r.fs||de,n=ri(e,r);return i.writeFileSync(t,n,r)}var qo={readFile:No,readFileSync:Ao,writeFile:$o,writeFileSync:_o};ni.exports=qo});var ai=S((_a,si)=>{"use strict";var Ne=oi();si.exports={readJson:Ne.readFile,readJsonSync:Ne.readFileSync,writeJson:Ne.writeFile,writeJsonSync:Ne.writeFileSync}});var Ae=S((qa,ui)=>{"use strict";var Bo=T().fromPromise,vt=_(),ci=require("path"),li=J(),Uo=te().pathExists;async function Xo(t,e,r="utf-8"){let i=ci.dirname(t);return await Uo(i)||await li.mkdirs(i),vt.writeFile(t,e,r)}function Go(t,...e){let r=ci.dirname(t);vt.existsSync(r)||li.mkdirsSync(r),vt.writeFileSync(t,...e)}ui.exports={outputFile:Bo(Xo),outputFileSync:Go}});var mi=S((Ba,fi)=>{"use strict";var{stringify:Jo}=Me(),{outputFile:Wo}=Ae();async function Ho(t,e,r={}){let i=Jo(e,r);await Wo(t,i,r)}fi.exports=Ho});var pi=S((Ua,di)=>{"use strict";var{stringify:Yo}=Me(),{outputFileSync:Qo}=Ae();function Ko(t,e,r){let i=Yo(e,r);Qo(t,i,r)}di.exports=Ko});var hi=S((Xa,yi)=>{"use strict";var zo=T().fromPromise,B=ai();B.outputJson=zo(mi());B.outputJsonSync=pi();B.outputJSON=B.outputJson;B.outputJSONSync=B.outputJsonSync;B.writeJSON=B.writeJson;B.writeJSONSync=B.writeJsonSync;B.readJSON=B.readJson;B.readJSONSync=B.readJsonSync;yi.exports=B});var bi=S((Ga,wi)=>{"use strict";var Zo=_(),Si=require("path"),{copy:es}=Ce(),{remove:vi}=be(),{mkdirp:ts}=J(),{pathExists:rs}=te(),gi=ae();async function is(t,e,r={}){let i=r.overwrite||r.clobber||!1,{srcStat:n,isChangingCase:o=!1}=await gi.checkPaths(t,e,"move",r);await gi.checkParentPaths(t,n,e,"move");let s=Si.dirname(e);return Si.parse(s).root!==s&&await ts(s),ns(t,e,i,o)}async function ns(t,e,r,i){if(!i){if(r)await vi(e);else if(await rs(e))throw new Error("dest already exists.")}try{await Zo.rename(t,e)}catch(n){if(n.code!=="EXDEV")throw n;await os(t,e,r)}}async function os(t,e,r){return await es(t,e,{overwrite:r,errorOnExist:!0,preserveTimestamps:!0}),vi(t)}wi.exports=is});var Ei=S((Ja,ki)=>{"use strict";var Li=ue(),bt=require("path"),ss=Ce().copySync,Pi=be().removeSync,as=J().mkdirpSync,xi=ae();function cs(t,e,r){r=r||{};let i=r.overwrite||r.clobber||!1,{srcStat:n,isChangingCase:o=!1}=xi.checkPathsSync(t,e,"move",r);return xi.checkParentPathsSync(t,n,e,"move"),ls(e)||as(bt.dirname(e)),us(t,e,i,o)}function ls(t){let e=bt.dirname(t);return bt.parse(e).root===e}function us(t,e,r,i){if(i)return wt(t,e,r);if(r)return Pi(e),wt(t,e,r);if(Li.existsSync(e))throw new Error("dest already exists.");return wt(t,e,r)}function wt(t,e,r){try{Li.renameSync(t,e)}catch(i){if(i.code!=="EXDEV")throw i;return fs(t,e,r)}}function fs(t,e,r){return ss(t,e,{overwrite:r,errorOnExist:!0,preserveTimestamps:!0}),Pi(t)}ki.exports=cs});var Oi=S((Wa,Di)=>{"use strict";var ms=T().fromPromise;Di.exports={move:ms(bi()),moveSync:Ei()}});var Ii=S((Ha,ji)=>{"use strict";ji.exports={..._(),...Ce(),...Or(),...ei(),...hi(),...J(),...Oi(),...Ae(),...te(),...be()}});var Ti=S(Ve=>{"use strict";Object.defineProperty(Ve,"__esModule",{value:!0});Ve.EXTENSIONS_LANGUAGES=void 0;Ve.EXTENSIONS_LANGUAGES={1:"Groff",2:"Groff",3:"Groff",4:"Groff",5:"Groff",6:"Groff",7:"Groff",8:"Groff",9:"Groff",abap:"ABAP",asc:"Public Key",ash:"AGS Script",ampl:"AMPL",mod:"XML",g4:"ANTLR",apib:"API Blueprint",apl:"APL",dyalog:"APL",asp:"ASP",asax:"ASP",ascx:"ASP",ashx:"ASP",asmx:"ASP",aspx:"ASP",axd:"ASP",dats:"ATS",hats:"ATS",sats:"ATS",as:"ActionScript",adb:"Ada",ada:"Ada",ads:"Ada",agda:"Agda",als:"Alloy",apacheconf:"ApacheConf",vhost:"Nginx",cls:"Visual Basic",applescript:"AppleScript",scpt:"AppleScript",arc:"Arc",ino:"Arduino",asciidoc:"AsciiDoc",adoc:"AsciiDoc",aj:"AspectJ",asm:"Assembly",a51:"Assembly",inc:"SourcePawn",nasm:"Assembly",aug:"Augeas",ahk:"AutoHotkey",ahkl:"AutoHotkey",au3:"AutoIt",awk:"Awk",auk:"Awk",gawk:"Awk",mawk:"Awk",nawk:"Awk",bat:"Batchfile",cmd:"Batchfile",befunge:"Befunge",bison:"Bison",bb:"BlitzBasic",decls:"BlitzBasic",bmx:"BlitzMax",bsv:"Bluespec",boo:"Boo",b:"Limbo",bf:"HyPhy",brs:"Brightscript",bro:"Bro",c:"C",cats:"C",h:"Objective-C",idc:"C",w:"C",cs:"Smalltalk",cake:"CoffeeScript",cshtml:"C#",csx:"C#",cpp:"C++","c++":"C++",cc:"C++",cp:"Component Pascal",cxx:"C++","h++":"C++",hh:"Hack",hpp:"C++",hxx:"C++",inl:"C++",ipp:"C++",tcc:"C++",tpp:"C++","c-objdump":"C-ObjDump",chs:"C2hs Haskell",clp:"CLIPS",cmake:"CMake","cmake.in":"CMake",cob:"COBOL",cbl:"COBOL",ccp:"COBOL",cobol:"COBOL",cpy:"COBOL",css:"CSS",csv:"CSV",capnp:"Cap'n Proto",mss:"CartoCSS",ceylon:"Ceylon",chpl:"Chapel",ch:"xBase",ck:"ChucK",cirru:"Cirru",clw:"Clarion",icl:"Clean",dcl:"Clean",click:"Click",clj:"Clojure",boot:"Clojure",cl2:"Clojure",cljc:"Clojure",cljs:"Clojure","cljs.hl":"Clojure",cljscm:"Clojure",cljx:"Clojure",hic:"Clojure",coffee:"CoffeeScript",_coffee:"CoffeeScript",cjsx:"CoffeeScript",cson:"CoffeeScript",iced:"CoffeeScript",cfm:"ColdFusion",cfml:"ColdFusion",cfc:"ColdFusion CFC",lisp:"NewLisp",asd:"Common Lisp",cl:"OpenCL",l:"PicoLisp",lsp:"NewLisp",ny:"Common Lisp",podsl:"Common Lisp",sexp:"Common Lisp",cps:"Component Pascal",coq:"Coq",v:"Verilog",cppobjdump:"Cpp-ObjDump","c++-objdump":"Cpp-ObjDump","c++objdump":"Cpp-ObjDump","cpp-objdump":"Cpp-ObjDump","cxx-objdump":"Cpp-ObjDump",creole:"Creole",cr:"Crystal",feature:"Cucumber",cu:"Cuda",cuh:"Cuda",cy:"Cycript",pyx:"Cython",pxd:"Cython",pxi:"Cython",d:"Makefile",di:"D","d-objdump":"D-ObjDump",com:"DIGITAL Command Language",dm:"DM",zone:"DNS Zone",arpa:"DNS Zone",darcspatch:"Darcs Patch",dpatch:"Darcs Patch",dart:"Dart",diff:"Diff",patch:"Diff",dockerfile:"Dockerfile",djs:"Dogescript",dylan:"Dylan",dyl:"Dylan",intr:"Dylan",lid:"Dylan",E:"E",ecl:"ECLiPSe",eclxml:"ECL",sch:"KiCad",brd:"KiCad",epj:"Ecere Projects",e:"Eiffel",ex:"Elixir",exs:"Elixir",elm:"Elm",el:"Emacs Lisp",emacs:"Emacs Lisp","emacs.desktop":"Emacs Lisp",em:"EmberScript",emberscript:"EmberScript",erl:"Erlang",es:"JavaScript",escript:"Erlang",hrl:"Erlang",xrl:"Erlang",yrl:"Erlang",fs:"GLSL",fsi:"F#",fsx:"F#",fx:"HLSL",flux:"FLUX",f90:"FORTRAN",f:"Forth",f03:"FORTRAN",f08:"FORTRAN",f77:"FORTRAN",f95:"FORTRAN",for:"Forth",fpp:"FORTRAN",factor:"Factor",fy:"Fancy",fancypack:"Fancy",fan:"Fantom","eam.fs":"Formatted",fth:"Forth","4th":"Forth",forth:"Forth",fr:"Text",frt:"Forth",ftl:"FreeMarker",g:"GAP",gco:"G-code",gcode:"G-code",gms:"GAMS",gap:"GAP",gd:"GDScript",gi:"GAP",tst:"Scilab",s:"GAS",ms:"MAXScript",glsl:"GLSL",fp:"GLSL",frag:"JavaScript",frg:"GLSL",fsh:"GLSL",fshader:"GLSL",geo:"GLSL",geom:"GLSL",glslv:"GLSL",gshader:"GLSL",shader:"GLSL",vert:"GLSL",vrx:"GLSL",vsh:"GLSL",vshader:"GLSL",gml:"XML",kid:"Genshi",ebuild:"Gentoo Ebuild",eclass:"Gentoo Eclass",po:"Gettext Catalog",pot:"Gettext Catalog",glf:"Glyph",gp:"Gnuplot",gnu:"Gnuplot",gnuplot:"Gnuplot",plot:"Gnuplot",plt:"Gnuplot",go:"Go",golo:"Golo",gs:"JavaScript",gst:"Gosu",gsx:"Gosu",vark:"Gosu",grace:"Grace",gradle:"Gradle",gf:"Grammatical Framework",graphql:"GraphQL",dot:"Graphviz (DOT)",gv:"Graphviz (DOT)",man:"Groff","1in":"Groff","1m":"Groff","1x":"Groff","3in":"Groff","3m":"Groff","3qt":"Groff","3x":"Groff",me:"Groff",n:"Nemerle",rno:"Groff",roff:"Groff",groovy:"Groovy",grt:"Groovy",gtpl:"Groovy",gvy:"Groovy",gsp:"Groovy Server Pages",hcl:"HCL",tf:"HCL",hlsl:"HLSL",fxh:"HLSL",hlsli:"HLSL",html:"HTML",htm:"HTML","html.hl":"HTML",st:"Smalltalk",xht:"HTML",xhtml:"HTML",mustache:"HTML+Django",jinja:"HTML+Django",eex:"HTML+EEX",erb:"HTML+ERB","erb.deface":"HTML+ERB",phtml:"HTML+PHP",http:"HTTP",php:"PHP",haml:"Haml","haml.deface":"Haml",handlebars:"Handlebars",hbs:"Handlebars",hb:"Harbour",hs:"Haskell",hsc:"Haskell",hx:"Haxe",hxsl:"Haxe",hy:"Hy",pro:"QMake",dlm:"IDL",ipf:"IGOR Pro",ini:"INI",cfg:"INI",prefs:"INI",properties:"INI",irclog:"IRC log",weechatlog:"IRC log",idr:"Idris",lidr:"Idris",ni:"Inform 7",i7x:"Inform 7",iss:"Inno Setup",io:"Io",ik:"Ioke",thy:"Isabelle",ijs:"J",flex:"JFlex",jflex:"JFlex",json:"JSON",geojson:"JSON",lock:"JSON",topojson:"JSON",json5:"JSON5",jsonld:"JSONLD",jq:"JSONiq",jsx:"JSX",jade:"Jade",j:"Objective-J",java:"Java",jsp:"Java Server Pages",js:"JavaScript",_js:"JavaScript",bones:"JavaScript",es6:"JavaScript",jake:"JavaScript",jsb:"JavaScript",jscad:"JavaScript",jsfl:"JavaScript",jsm:"JavaScript",jss:"JavaScript",njs:"JavaScript",pac:"JavaScript",sjs:"JavaScript",ssjs:"JavaScript","sublime-build":"JavaScript","sublime-commands":"JavaScript","sublime-completions":"JavaScript","sublime-keymap":"JavaScript","sublime-macro":"JavaScript","sublime-menu":"JavaScript","sublime-mousemap":"JavaScript","sublime-project":"JavaScript","sublime-settings":"JavaScript","sublime-theme":"JavaScript","sublime-workspace":"JavaScript",sublime_metrics:"JavaScript",sublime_session:"JavaScript",xsjs:"JavaScript",xsjslib:"JavaScript",jl:"Julia",ipynb:"Jupyter Notebook",krl:"KRL",kicad_pcb:"KiCad",kit:"Kit",kt:"Kotlin",ktm:"Kotlin",kts:"Kotlin",lfe:"LFE",ll:"LLVM",lol:"LOLCODE",lsl:"LSL",lslp:"LSL",lvproj:"LabVIEW",lasso:"Lasso",las:"Lasso",lasso8:"Lasso",lasso9:"Lasso",ldml:"Lasso",latte:"Latte",lean:"Lean",hlean:"Lean",less:"Less",lex:"Lex",ly:"LilyPond",ily:"LilyPond",m:"Objective-C",ld:"Linker Script",lds:"Linker Script",liquid:"Liquid",lagda:"Literate Agda",litcoffee:"Literate CoffeeScript",lhs:"Literate Haskell",ls:"LoomScript",_ls:"LiveScript",xm:"Logos",x:"Logos",xi:"Logos",lgt:"Logtalk",logtalk:"Logtalk",lookml:"LookML",lua:"Lua",fcgi:"Shell",nse:"Lua",pd_lua:"Lua",rbxs:"Lua",wlua:"Lua",mumps:"M",m4:"M4Sugar",mcr:"MAXScript",mtml:"MTML",muf:"MUF",mak:"Makefile",mk:"Makefile",mkfile:"Makefile",mako:"Mako",mao:"Mako",md:"Markdown",markdown:"Markdown",mkd:"Markdown",mkdn:"Markdown",mkdown:"Markdown",ron:"Markdown",mask:"Mask",mathematica:"Mathematica",cdf:"Mathematica",ma:"Mathematica",mt:"Mathematica",nb:"Text",nbp:"Mathematica",wl:"Mathematica",wlt:"Mathematica",matlab:"Matlab",maxpat:"Max",maxhelp:"Max",maxproj:"Max",mxt:"Max",pat:"Max",mediawiki:"MediaWiki",wiki:"MediaWiki",moo:"Moocode",metal:"Metal",minid:"MiniD",druby:"Mirah",duby:"Mirah",mir:"Mirah",mirah:"Mirah",mo:"Modelica",mms:"Module Management System",mmk:"Module Management System",monkey:"Monkey",moon:"MoonScript",myt:"Myghty",ncl:"Text",nl:"NewLisp",nsi:"NSIS",nsh:"NSIS",axs:"NetLinx",axi:"NetLinx","axs.erb":"NetLinx+ERB","axi.erb":"NetLinx+ERB",nlogo:"NetLogo",nginxconf:"Nginx",nim:"Nimrod",nimrod:"Nimrod",ninja:"Ninja",nit:"Nit",nix:"Nix",nu:"Nu",numpy:"NumPy",numpyw:"NumPy",numsc:"NumPy",ml:"OCaml",eliom:"OCaml",eliomi:"OCaml",ml4:"OCaml",mli:"OCaml",mll:"OCaml",mly:"OCaml",objdump:"ObjDump",mm:"XML",sj:"Objective-J",omgrofl:"Omgrofl",opa:"Opa",opal:"Opal",opencl:"OpenCL",p:"OpenEdge ABL",scad:"OpenSCAD",org:"Org",ox:"Ox",oxh:"Ox",oxo:"Ox",oxygene:"Oxygene",oz:"Oz",pwn:"PAWN",aw:"PHP",ctp:"PHP",php3:"PHP",php4:"PHP",php5:"PHP",phps:"PHP",phpt:"PHP",pls:"PLSQL",pck:"PLSQL",pkb:"PLSQL",pks:"PLSQL",plb:"PLSQL",plsql:"PLSQL",sql:"SQLPL",pov:"POV-Ray SDL",pan:"Pan",psc:"Papyrus",parrot:"Parrot",pasm:"Parrot Assembly",pir:"Parrot Internal Representation",pas:"Pascal",dfm:"Pascal",dpr:"Pascal",lpr:"Pascal",pp:"Puppet",pl:"Prolog",al:"Perl",cgi:"Shell",perl:"Perl",ph:"Perl",plx:"Perl",pm:"Perl6",pod:"Pod",psgi:"Perl",t:"Turing","6pl":"Perl6","6pm":"Perl6",nqp:"Perl6",p6:"Perl6",p6l:"Perl6",p6m:"Perl6",pl6:"Perl6",pm6:"Perl6",pkl:"Pickle",pig:"PigLatin",pike:"Pike",pmod:"Pike",pogo:"PogoScript",pony:"Pony",ps:"PostScript",eps:"PostScript",ps1:"PowerShell",psd1:"PowerShell",psm1:"PowerShell",pde:"Processing",prolog:"Prolog",yap:"Prolog",spin:"Propeller Spin",proto:"Protocol Buffer",pub:"Public Key",pd:"Pure Data",pb:"PureBasic",pbi:"PureBasic",purs:"PureScript",py:"Python",bzl:"Python",gyp:"Python",lmi:"Python",pyde:"Python",pyp:"Python",pyt:"Python",pyw:"Python",rpy:"Ren'Py",tac:"Python",wsgi:"Python",xpy:"Python",pytb:"Python traceback",qml:"QML",qbs:"QML",pri:"QMake",r:"Rebol",rd:"R",rsx:"R",raml:"RAML",rdoc:"RDoc",rbbas:"REALbasic",rbfrm:"REALbasic",rbmnu:"REALbasic",rbres:"REALbasic",rbtbar:"REALbasic",rbuistate:"REALbasic",rhtml:"RHTML",rmd:"RMarkdown",rkt:"Racket",rktd:"Racket",rktl:"Racket",scrbl:"Racket",rl:"Ragel in Ruby Host",raw:"Raw token data",reb:"Rebol",r2:"Rebol",r3:"Rebol",rebol:"Rebol",red:"Red",reds:"Red",cw:"Redcode",rs:"Rust",rsh:"RenderScript",robot:"RobotFramework",rg:"Rouge",rb:"Ruby",builder:"Ruby",gemspec:"Ruby",god:"Ruby",irbrc:"Ruby",jbuilder:"Ruby",mspec:"Ruby",pluginspec:"XML",podspec:"Ruby",rabl:"Ruby",rake:"Ruby",rbuild:"Ruby",rbw:"Ruby",rbx:"Ruby",ru:"Ruby",ruby:"Ruby",thor:"Ruby",watchr:"Ruby","rs.in":"Rust",sas:"SAS",scss:"SCSS",smt2:"SMT",smt:"SMT",sparql:"SPARQL",rq:"SPARQL",sqf:"SQF",hqf:"SQF",cql:"SQL",ddl:"SQL",prc:"SQL",tab:"SQL",udf:"SQL",viw:"SQL",db2:"SQLPL",ston:"STON",svg:"SVG",sage:"Sage",sagews:"Sage",sls:"Scheme",sass:"Sass",scala:"Scala",sbt:"Scala",sc:"SuperCollider",scaml:"Scaml",scm:"Scheme",sld:"Scheme",sps:"Scheme",ss:"Scheme",sci:"Scilab",sce:"Scilab",self:"Self",sh:"Shell",bash:"Shell",bats:"Shell",command:"Shell",ksh:"Shell","sh.in":"Shell",tmux:"Shell",tool:"Shell",zsh:"Shell","sh-session":"ShellSession",shen:"Shen",sl:"Slash",slim:"Slim",smali:"Smali",tpl:"Smarty",sp:"SourcePawn",sma:"SourcePawn",nut:"Squirrel",stan:"Stan",ML:"Standard ML",fun:"Standard ML",sig:"Standard ML",sml:"Standard ML",do:"Stata",ado:"Stata",doh:"Stata",ihlp:"Stata",mata:"Stata",matah:"Stata",sthlp:"Stata",styl:"Stylus",scd:"SuperCollider",swift:"Swift",sv:"SystemVerilog",svh:"SystemVerilog",vh:"SystemVerilog",toml:"TOML",txl:"TXL",tcl:"Tcl",adp:"Tcl",tm:"Tcl",tcsh:"Tcsh",csh:"Tcsh",tex:"TeX",aux:"TeX",bbx:"TeX",bib:"TeX",cbx:"TeX",dtx:"TeX",ins:"TeX",lbx:"TeX",ltx:"TeX",mkii:"TeX",mkiv:"TeX",mkvi:"TeX",sty:"TeX",toc:"TeX",tea:"Tea",txt:"Text",no:"Text",textile:"Textile",thrift:"Thrift",tu:"Turing",ttl:"Turtle",twig:"Twig",ts:"XML",tsx:"XML",upc:"Unified Parallel C",anim:"Unity3D Asset",asset:"Unity3D Asset",mat:"Unity3D Asset",meta:"Unity3D Asset",prefab:"Unity3D Asset",unity:"Unity3D Asset",uno:"Uno",uc:"UnrealScript",ur:"UrWeb",urs:"UrWeb",vcl:"VCL",vhdl:"VHDL",vhd:"VHDL",vhf:"VHDL",vhi:"VHDL",vho:"VHDL",vhs:"VHDL",vht:"VHDL",vhw:"VHDL",vala:"Vala",vapi:"Vala",veo:"Verilog",vim:"VimL",vb:"Visual Basic",bas:"Visual Basic",frm:"Visual Basic",frx:"Visual Basic",vba:"Visual Basic",vbhtml:"Visual Basic",vbs:"Visual Basic",volt:"Volt",vue:"Vue",owl:"Web Ontology Language",webidl:"WebIDL",x10:"X10",xc:"XC",xml:"XML",ant:"XML",axml:"XML",ccxml:"XML",clixml:"XML",cproject:"XML",csl:"XML",csproj:"XML",ct:"XML",dita:"XML",ditamap:"XML",ditaval:"XML","dll.config":"XML",dotsettings:"XML",filters:"XML",fsproj:"XML",fxml:"XML",glade:"XML",grxml:"XML",iml:"XML",ivy:"XML",jelly:"XML",jsproj:"XML",kml:"XML",launch:"XML",mdpolicy:"XML",mxml:"XML",nproj:"XML",nuspec:"XML",odd:"XML",osm:"XML",plist:"XML",props:"XML",ps1xml:"XML",psc1:"XML",pt:"XML",rdf:"XML",rss:"XML",scxml:"XML",srdf:"XML",storyboard:"XML",stTheme:"XML","sublime-snippet":"XML",targets:"XML",tmCommand:"XML",tml:"XML",tmLanguage:"XML",tmPreferences:"XML",tmSnippet:"XML",tmTheme:"XML",ui:"XML",urdf:"XML",ux:"XML",vbproj:"XML",vcxproj:"XML",vssettings:"XML",vxml:"XML",wsdl:"XML",wsf:"XML",wxi:"XML",wxl:"XML",wxs:"XML",x3d:"XML",xacro:"XML",xaml:"XML",xib:"XML",xlf:"XML",xliff:"XML",xmi:"XML","xml.dist":"XML",xproj:"XML",xsd:"XML",xul:"XML",zcml:"XML","xsp-config":"XPages","xsp.metadata":"XPages",xpl:"XProc",xproc:"XProc",xquery:"XQuery",xq:"XQuery",xql:"XQuery",xqm:"XQuery",xqy:"XQuery",xs:"XS",xslt:"XSLT",xsl:"XSLT",xojo_code:"Xojo",xojo_menu:"Xojo",xojo_report:"Xojo",xojo_script:"Xojo",xojo_toolbar:"Xojo",xojo_window:"Xojo",xtend:"Xtend",yml:"YAML",reek:"YAML",rviz:"YAML","sublime-syntax":"YAML",syntax:"YAML",yaml:"YAML","yaml-tmlanguage":"YAML",yang:"YANG",y:"Yacc",yacc:"Yacc",yy:"Yacc",zep:"Zephir",zimpl:"Zimpl",zmpl:"Zimpl",zpl:"Zimpl",desktop:"desktop","desktop.in":"desktop",ec:"eC",eh:"eC",edn:"edn",fish:"fish",mu:"mupad",nc:"nesC",ooc:"ooc",rst:"reStructuredText",rest:"reStructuredText","rest.txt":"reStructuredText","rst.txt":"reStructuredText",wisp:"wisp",prg:"xBase",prw:"xBase"}});var Le=S(xt=>{"use strict";Object.defineProperty(xt,"__esModule",{value:!0});xt.setOptionValues=ds;function ds(t,e){for(let r of Object.keys(e))t[r]!==void 0&&(e[r]=t[r]);return e}});var Ci=S($e=>{"use strict";Object.defineProperty($e,"__esModule",{value:!0});$e.SarifBuilder=void 0;var ps=require("path"),Fi=Ii(),ys=Ti(),hs=Le(),Lt=class{constructor(e={}){this.log={$schema:"http://json.schemastore.org/sarif-2.1.0.json",version:"2.1.0",runs:[]},(0,hs.setOptionValues)(e,this.log)}addRun(e){this.log.runs.push(e.run)}generateSarifFileSync(e){let r=this.buildSarifJsonString();Fi.writeFileSync(e,r,"utf8")}async generateSarifFile(e){let r=this.buildSarifJsonString();await Fi.writeFile(e,r,"utf8")}buildSarifOutput(){return this.log.runs=this.log.runs.map(e=>this.completeRunFields(e)),this.log}buildSarifJsonString(e={indent:!1}){this.buildSarifOutput();let r=e.indent?JSON.stringify(this.log,null,2):JSON.stringify(this.log);if(r.includes("SARIF_BUILDER_INVALID"))throw new Error("Your SARIF log is invalid, please solve SARIF_BUILDER_INVALID messages");return r}completeRunFields(e){var r,i,n,o;e.artifacts=e.artifacts||[];for(let u of e.results)for(let l of u.locations||[])if(!((i=(r=l?.physicalLocation)===null||r===void 0?void 0:r.artifactLocation)===null||i===void 0)&&i.uri&&e.artifacts.filter(a=>{var f;return((f=a?.location)===null||f===void 0?void 0:f.uri)===l.physicalLocation.artifactLocation.uri}).length===0){let a=ps.extname(l.physicalLocation.artifactLocation.uri).replace(".",""),f=ys.EXTENSIONS_LANGUAGES[a]||"unknown";e.artifacts.push({sourceLanguage:f,location:{uri:l.physicalLocation.artifactLocation.uri}})}let s=e.artifacts.map(u=>{var l;return(l=u?.location)===null||l===void 0?void 0:l.uri}),c=(((o=(n=e?.tool)===null||n===void 0?void 0:n.driver)===null||o===void 0?void 0:o.rules)||[]).map(u=>u.id);return e.results=e.results.map(u=>(c.indexOf(u.ruleId)>-1&&(u.ruleIndex=c.indexOf(u.ruleId)),u.locations&&(u.locations=u.locations.map(l=>{var a,f;let m=(f=(a=l?.physicalLocation)===null||a===void 0?void 0:a.artifactLocation)===null||f===void 0?void 0:f.uri;return m&&s.indexOf(m)>-1&&(l.physicalLocation.artifactLocation.index=s.indexOf(m)),l})),u)),e}};$e.SarifBuilder=Lt});var Mi=S(_e=>{"use strict";Object.defineProperty(_e,"__esModule",{value:!0});_e.SarifResultBuilder=void 0;var Ss=Le(),Pt=class{constructor(e={}){this.result={level:"error",message:{},ruleId:"SARIF_BUILDER_INVALID: Please send the rule Id ruleId property, or call setRuleId(ruleId)"},(0,Ss.setOptionValues)(e,this.result)}initSimple(e){if(this.setLevel(e.level),this.setMessageText(e.messageText),this.setRuleId(e.ruleId),e.fileUri&&this.setLocationArtifactUri({uri:e.fileUri}),e.startLine!==null&&e.startLine!==void 0){let r={startLine:e.startLine,startColumn:e.startColumn||1,endLine:e.endLine||e.startLine,endColumn:e.endColumn||1};if(e.startLine===0||e.startColumn===0||e.endLine===0||e.endColumn===0)throw new Error("Region limit can not be 0 (minimum line 1 or column 1) in "+JSON.stringify(e));this.setLocationRegion(r)}return this}setLevel(e){this.result.level=e}setMessageText(e){this.result.message.text=e}setRuleId(e){this.result.ruleId=e}setLocationRegion(e){this.manageInitPhysicalLocation(),this.result.locations[0].physicalLocation.region=e}setLocationArtifactUri(e){this.manageInitPhysicalLocation(),this.result.locations[0].physicalLocation.artifactLocation=e}manageInitLocation(){var e,r;!((r=(e=this.result)===null||e===void 0?void 0:e.locations)===null||r===void 0)&&r.length||(this.result.locations=[{}])}manageInitPhysicalLocation(){var e;this.manageInitLocation(),!(!((e=this.result)===null||e===void 0)&&e.locations[0].physicalLocation)&&(this.result.locations[0].physicalLocation={})}};_e.SarifResultBuilder=Pt});var Ri=S(qe=>{"use strict";Object.defineProperty(qe,"__esModule",{value:!0});qe.SarifRuleBuilder=void 0;var gs=Le(),kt=class{constructor(e={}){this.rule={id:"SARIF_BUILDER_INVALID: Please send the rule identifier in id property, or call setRuleId(ruleId)",shortDescription:{text:"SARIF_BUILDER_INVALID: Please send the rule text in shortDescription.text property, or call setShortDescriptionText(text)"}},(0,gs.setOptionValues)(e,this.rule)}initSimple(e){return this.setRuleId(e.ruleId),e.shortDescriptionText&&this.setShortDescriptionText(e.shortDescriptionText),e.fullDescriptionText&&this.setFullDescriptionText(e.fullDescriptionText),e.helpUri&&this.setHelpUri(e.helpUri),this}setRuleId(e){this.rule.id=e}setShortDescriptionText(e){this.rule.shortDescription.text=e}setFullDescriptionText(e){this.rule.fullDescription=this.rule.fullDescription||{text:""},this.rule.fullDescription.text=e}setHelpUri(e){this.rule.helpUri=e}};qe.SarifRuleBuilder=kt});var Ni=S(Be=>{"use strict";Object.defineProperty(Be,"__esModule",{value:!0});Be.SarifRunBuilder=void 0;var vs=Le(),Et=class{constructor(e={}){this.run={tool:{driver:{name:process.env.npm_package_name||"SARIF_BUILDER_INVALID: Please send the tool name in tool.driver.name property, or call setToolName(name)",rules:[]}},results:[]},(0,vs.setOptionValues)(e,this.run)}initSimple(e){return this.setToolDriverName(e.toolDriverName),this.setToolDriverVersion(e.toolDriverVersion),e.url&&this.setToolDriverUri(e.url),this}addRule(e){this.run.tool.driver.rules.push(e.rule)}addResult(e){this.run.results.push(e.result)}setToolDriverName(e){this.run.tool.driver.name=e}setToolDriverVersion(e){this.run.tool.driver.version=e}setToolDriverUri(e){this.run.tool.driver.informationUri=e}};Be.SarifRunBuilder=Et});var Ai=S(H=>{"use strict";Object.defineProperty(H,"__esModule",{value:!0});H.SarifResultBuilder=H.SarifRuleBuilder=H.SarifRunBuilder=H.SarifBuilder=void 0;var ws=Ci();Object.defineProperty(H,"SarifBuilder",{enumerable:!0,get:function(){return ws.SarifBuilder}});var bs=Mi();Object.defineProperty(H,"SarifResultBuilder",{enumerable:!0,get:function(){return bs.SarifResultBuilder}});var xs=Ri();Object.defineProperty(H,"SarifRuleBuilder",{enumerable:!0,get:function(){return xs.SarifRuleBuilder}});var Ls=Ni();Object.defineProperty(H,"SarifRunBuilder",{enumerable:!0,get:function(){return Ls.SarifRunBuilder}})});var $i=S((rc,Vi)=>{"use strict";var Ps=/["'&<>]/;Vi.exports=ks;function ks(t){var e=""+t,r=Ps.exec(e);if(!r)return e;var i,n="",o=0,s=0;for(o=r.index;o<e.length;o++){switch(e.charCodeAt(o)){case 34:i="&quot;";break;case 38:i="&amp;";break;case 39:i="&#39;";break;case 60:i="&lt;";break;case 62:i="&gt;";break;default:continue}s!==o&&(n+=e.substring(s,o)),s=o+1,n+=i}return s!==o?n+e.substring(s,o):n}});var ze=require("zx"),ce=require("fs/promises");var X={UNKNOWN:0,LOW:1,MEDIUM:2,HIGH:3,CRITICAL:4};var Ee=class{allById=new Map;getAllVulnIds(){return new Set(this.allById.keys())}getAllVulnerabilitiesSortedBySeverity(){let e=Array.from(this.allById.values());return e.sort((r,i)=>{let n=Nt(r.severity,i.severity);return n===0?r.id.localeCompare(i.id):-n}),e}addVulnerability(e,r){let i=e.id,n=this.allById;if(!n.has(i))n.set(i,e);else{let o=n.get(i);o.title=o.title||e.title,o.severity=un(o.severity,e.severity),o.scannerSeverity[r]=e.severity,o.detectedBy=rt(o.detectedBy,r),o.components=rt(o.components,e.components[0]),o.refs=rt(o.refs,e.refs[0])}}enhanceWithVexData(e){let r=[];for(let i of this.allById.values()){let n=e.newestVulnerabilityStatement(i.id);if(!n){r.push({id:i.id,severity:i.severity,title:i.title,description:i.description,components:i.components,refs:i.refs});continue}i.vexStatement=n}return{unmatchedVulnerabilities:r}}};function un(t,e){return Nt(t,e)>0?t:e}function Nt(t,e){return X[t]-X[e]}function rt(t,e){return e?Array.from(new Set([...t,e]).values()):t}var De=tt(require("path"));var U=require("fs/promises"),it=require("path");async function G(t){if(await oe(t))return JSON.parse(await(0,U.readFile)(t,{encoding:"utf-8"}))}async function nt(t,e){await(0,U.writeFile)(t,JSON.stringify(e,null,4)+`
+`,{encoding:"utf-8"})}function Y(t){return t&&t.replace(/\?.*$/,"")}async function oe(t){try{return await(0,U.access)(t,U.constants.F_OK),!0}catch{return!1}}async function ot(t){let e=(0,it.resolve)(t),r=await(0,U.readdir)(e,{withFileTypes:!0});for(let i of r){let n=(0,it.resolve)(i.parentPath,i.name);i.isDirectory()?await ot(n):await(0,U.rm)(n)}await(0,U.rmdir)(e)}async function ye(t,e){let r=e?.user&&e?.pw?{Authorization:`Basic ${Buffer.from(`${e.user}:${e.pw}`).toString("base64")}`}:{},i=await fetch(t,{headers:r});if(!i.ok){let n="";try{n=await i.text()}catch(o){n=`${o}`}throw new Error(`Failed to fetch: ${t}: ${i.status} - ${i.statusText}: ${n}`)}return i}var st;async function at(t){if(st)return st;let e="https://repository.conterra.de/repository/maven-mirror-ct",r=Z(t.workingDir,"input/vex"),i=Z(t.workingDir,"output"),n=Z(t.workingDir,"cache"),o=["grype","trivy","ossindex"],s=Z(t.workingDir,"vuln-scan-conf.json"),c=await G(s);if(!c)throw new Error(`Missing project configuration file '${s}'`);let u=c.findNoLongerDetectedVulnerabilitiesOnlyForSnapshots??!1;return st={projectConfigFileLocation:s,onNewVulnerabilities:c.onNewVulnerabilities??(c.failOnNewVulnerabilities?"fail":"warn"),onNoLongerDetectedVulnerabilities:c.onNoLongerDetectedVulnerabilities??"ignore",reportNoLongerDetectedVulnerabilities:c.reportNoLongerDetectedVulnerabilities??!0,consoleReport:c.consoleReport||"BY_PROJECT_DETAILED",createSubDirsForProject:c.createSubDirsForProject??!0,mavenRepo:c.mavenRepo??e,vexUrls:c.vexUrls??[],vexDir:Z(t.workingDir,c.vexDir)??r,outDir:Z(t.workingDir,c.outDir)??i,cacheDir:Z(t.workingDir,c.cacheDir)??n,scanners:(c.scanners??o).map(l=>{if(typeof l!="string")throw new Error(`Invalid scanner name '${l}' in configuration file '${s}'`);let a=l.split("@");if(a.length>2)throw new Error(`Invalid scanner name '${l}' in configuration file '${s}'`);let f=a[0],m=a[1]??"";return{name:f,version:m}}),projects:(c.projects??[]).map(l=>{let a=l;if(!a.name)throw new Error("Project name is missing on entry:"+JSON.stringify(a));if(!a.version)throw new Error("Project version is missing on entry:"+JSON.stringify(a));if(!a.purl)throw new Error("Project purl is missing on entry:"+JSON.stringify(a));return a.purlAliases||(a.purlAliases=[]),a.enabled==null&&(a.enabled=!0),a.silent==null&&(a.silent=!1),a.minimumSeverity||(a.minimumSeverity="UNKNOWN"),a.sbomFile?{...a,sbomFile:Z(t.workingDir,a.sbomFile)}:(a.detectNoLongerUsedVulnerabilities=u?a.purl.endsWith("-SNAPSHOT"):!0,l)})}}function Z(t,e){if(e)return De.default.isAbsolute(e)?e:(0,De.resolve)(t,e)}var ne=tt(Ai());var _i=tt($i());function qi(t,e){let r=new ne.SarifRunBuilder().initSimple({toolDriverName:`${e.name}@${e.version}`,toolDriverVersion:"0.0.1"}),i=new Date().toISOString().split("T")[0];r.run.tool.driver.fullDescription={text:`Security Scan from ${i}`},r.run.tool.driver.properties={"microsoft/qualityDomain":`Security Scan from ${i}`};for(let o of t){let s=Ds(o.severity),c=o.id,u=Es(o.refs),l=new ne.SarifRuleBuilder().initSimple({ruleId:c,shortDescriptionText:o.title,fullDescriptionText:o.description,helpUri:u}),a=o.vexStatement,f,m="new",d="";a?(f=[{kind:"external",status:"accepted"}],m="updated",d=`--- INVESTIGATED (${a.status}) --- `,a.status==="under_investigation"&&(f[0].status="underReview",d="--- UNDER INVESTIGATION --- ")):X[e.minimumSeverity]>X[o.severity]?(f=[{kind:"external",status:"accepted"}],m="updated",d=`--- BELOW MINIMUM SEVERITY '${e.minimumSeverity}' ---`):e.silent&&(f=[{kind:"external",status:"accepted"}],m="updated",d="--- PROJECT SILENT ---"),Object.assign(l.rule,{name:`${d}[${o.severity}] - ${o.title.replace(`[${c}]`,"")}`,messageStrings:{default:{text:o.description,markdown:Os(o,u,d)}},properties:{severity:o.severity,scanners:o.scannerSeverity,links:o.refs,tags:["cve","vulnerability","security",`severity_${o.severity.toLowerCase()}`]}}),r.addRule(l);for(let p of o.components){let g=new ne.SarifResultBuilder().initSimple({ruleId:c,level:s,messageText:`${c} [${o.severity}] - ${p}`});g.result.message.id="default",g.result.locations=[{logicalLocations:[{fullyQualifiedName:p}]}],g.result.baselineState=m,g.result.suppressions=f,r.addResult(g)}}let n=new ne.SarifBuilder;return n.addRun(r),n.buildSarifOutput()}function Es(t){for(let e of t)if(e.startsWith("https://nvd.nist.gov"))return e;return t[0]}function Ds(t){switch(t){case"CRITICAL":return"error";case"HIGH":return"error";case"MEDIUM":return"warning";case"LOW":return"warning";default:return"note"}}function Os(t,e,r){let i=t.vexStatement,n=i?`
 ${r}
 ${i.justification??""}
 ${i.impact_statement??""}
@@ -18,13 +18,13 @@ ${n}
 
 --- DETAILS ---
 
-${(0,Ai.default)(t.description)}
+${(0,_i.default)(t.description)}
 
 ${t.refs.map(o=>`* <${o}>`).join(`
 `)}
-`}var qe=require("fs/promises");async function $i(t,e,r){if("sbomFile"in t)return await(0,qe.copyFile)(t.sbomFile,e),t.sbomFile=e,t;let i=await r.downloadArtifact(t.sbomMavenCoordinates);return await(0,qe.writeFile)(e,i),{...t,sbomFile:e}}var _e=class{constructor(e,r){this.repo=e;this.authn=r}async downloadArtifact(e){let r=this.toArtifactInfo(e);if(this.isSnapshotVersion(r.version)&&!r.timestamp){let o=await this.fetchLatestSnapshotTimestamp(r);r={...r,timestamp:o}}let i=this.toArtifactUrl(r),n=await pe(i,this.authn);return Buffer.from(await n.arrayBuffer())}async fetchLatestSnapshotTimestamp(e){let r=`${this.toArtifactBaseUrl(e)}/maven-metadata.xml`,n=await(await pe(r,this.authn)).text();return ks(n,e)}toArtifactUrl(e){let r=this.toArtifactBaseUrl(e),i=this.isSnapshotVersion(e.version)&&e.timestamp?e.version.replace(/SNAPSHOT$/,e.timestamp):e.version;return`${r}/${e.artifactId}-${i}-${e.classifier}.${e.extension}`}toArtifactBaseUrl(e){return`${this.repo}/${e.groupId.replace(/\./g,"/")}/${e.artifactId}/${e.version}`}isSnapshotVersion(e){return e.endsWith("-SNAPSHOT")}toArtifactInfo(e){let r=e.split(":");return{groupId:r[0],artifactId:r[1],version:r[2],classifier:r[3],extension:"json"}}};function ks(t,e){if(e.classifier&&e.extension){let n=t.match(new RegExp(`<snapshotVersion>\\s*<classifier>${e.classifier}</classifier>\\s*<extension>${e.extension}</extension>\\s*<value>([^<]+)</value>\\s*<updated>[^<]+</updated>\\s*</snapshotVersion>`)),o=e.version.replace(/SNAPSHOT$/,"");if(n?.[1])return n[1].replace(o,"")}let r=t.match(/<timestamp>([^<]+)<\/timestamp>/),i=t.match(/<buildNumber>([^<]+)<\/buildNumber>/);if(!r||!i)throw new Error(`Failed to get timestamp and build number from ${t} for artifact '${e.artifactId}'`);return`${r[1]}-${i[1]}`}var Ue=require("fs/promises"),Lt=require("path");var Pt=class{constructor(e){this.location=e}async read(){let e=await U(this.location);if(!e)throw new Error("Invalid VEX file");return e}async write(e){await et(this.location,e)}async delete(){await(0,Ue.unlink)(this.location)}};async function Xe(t,e){for(let r of await(0,Ue.readdir)(t,{withFileTypes:!0}))r.name.endsWith(".json")?await e(new Pt((0,Lt.resolve)(r.parentPath,r.name))):r.isDirectory()&&await Xe((0,Lt.resolve)(r.parentPath,r.name),e)}function Et(t){let e=t.vulnerability.name;return new Set([e,...t.vulnerability.aliases??[]])}var de=class t{statements=[];filteredToProducts=[];static async fromUrl(e,r,i=new t){let o=await(await pe(e,r)).json();return i.add(o),i}static async fromFiles(e,r=new t){return await Xe(e,async i=>{let n=await i.read();r.add(n)}),r}add(e){Ds(e);let r=e.timestamp;for(let i of e.statements){i.timestamp=i.timestamp??r;let n=Date.parse(i.timestamp),o=i.vulnerability.name,a=Et(i),c=new Set(i.products?.map(l=>l["@id"]).filter(l=>!!l)??[]),u=new kt(n,o,a,c,i);this.statements.push(u)}this.sortStatementsByTimestampNewestFirst()}filterByProduct(e){if(this.assertCorrectProductId(e),this.filteredToProducts.length)return this;let r=new t;return r.filteredToProducts=e.slice(0),r.statements=this.statements.filter(i=>i.matchesAtLeastOneProduct(e)),r}findNotMatchingVulnerabilities(e,r){let i=this.filterByProduct(r??this.filteredToProducts),n=new Set;for(let o of i.statements)n.add(o.vulnName);for(let o of e)n.delete(o);return Array.from(n)}newestVulnerabilityStatement(e,r){let i=this.filterByProduct(r??this.filteredToProducts);for(let n of i.statements)if(n.matchesVulnerability(e))return this.reduceToProductInformation(n,i.filteredToProducts[0])}toVexFileForProduct(e){let r=this.filterByProduct(e??this.filteredToProducts),i=r.statements.map(n=>this.reduceToProductInformation(n,r.filteredToProducts[0]));return this.toVexFile(i)}toVexFile(e){let r=e.filter(n=>n.status!=="under_investigation");if(r.length===0)return;this.sortVexStatementsByTimestampNewestFirst(r);let i=r[0].timestamp;return{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://openvex.dev/docs/public/vex-fc763e6eb63bfbcda20b7cbbddd4e9f8feaaa317fe8d8a6f51a5663a1180343e",author:"conterra",timestamp:i,last_updated:i,version:1,statements:r}}assertCorrectProductId(e){if(!e||e.length===0)throw new Error("Product ID must be provided");if(this.filteredToProducts.length&&!Es(this.filteredToProducts,e))throw new Error("Cannot filter to a different product")}reduceToProductInformation(e,r){let i={timestamp:new Date(e.timestamp).toISOString(),...e.statement};if(!r)return i;let n=i.products?.filter(o=>o["@id"]===r);return n?.length||(n=[{"@id":r}]),{...i,products:n}}sortStatementsByTimestampNewestFirst(){this.statements.sort((e,r)=>r.timestamp-e.timestamp)}sortVexStatementsByTimestampNewestFirst(e){e.sort((r,i)=>Date.parse(i.timestamp)-Date.parse(r.timestamp))}};function Es(t,e){return t.length===e.length&&t.every((r,i)=>r===e[i])}var kt=class{constructor(e,r,i,n,o){this.timestamp=e;this.vulnName=r;this.vulnAliases=i;this.products=n;this.statement=o}matchesProduct(e){return this.products.has(e)}matchesAtLeastOneProduct(e){return e.some(this.matchesProduct.bind(this))}matchesVulnerability(e){return this.vulnAliases.has(e)}};function Ds(t){if(t?.["@context"]!=="https://openvex.dev/ns/v0.2.0")throw new Error("Invalid VEX file format")}var Ge=require("path"),_i=require("fs/promises");var Be=class{constructor(e,r,i){this.project=e;this.outputDir=r;this.useSubDirForProject=i}async lookupOutputFileForWriting(e){let r=this.useSubDirForProject?`${this.project.name}-${this.project.version}`:"",i=`${this.project.name}-${this.project.version}-`,n=this.getFileSuffix(e),o=(0,Ge.resolve)(this.outputDir,r,`${i}${n}`),a=(0,Ge.dirname)(o);return await ne(a)||await(0,_i.mkdir)(a,{recursive:!0}),o}getFileSuffix(e){switch(e){case"grype-results":return"scan-grype-results.json";case"trivy-results":return"scan-trivy-results.json";case"ossindex-results":return"scan-ossindex-results.json";case"aggregate-results":return"scan-aggregate-results.json";case"aggregated-sarif-results":return"scan-aggregated-results.sarif.json";case"project-cyclonedx-sbom-file":return"sbom.cdx.json";case"project-openvex-file":return"openvex.vex.json";default:throw new Error(`Unknown output file key: ${e}`)}}};var Ot=require("zx");var We=require("path"),qi="anchore/grype:latest",Dt=process.getuid?.()??0;async function Ui(t,e){e&&console.log(`Initializing Grype DB in cache directory: ${t} using user ID: ${Dt}`);let r=await Ot.$`docker run --rm -v '${t}:/tmp/.cache' -e GRYPE_DB_CACHE_DIR=/tmp/.cache -e TMPDIR=/tmp --user ${Dt} ${qi} db update`.nothrow();if(r.stdout&&console.log(` Grype DB Update: ${r.stdout}`),r.stderr&&console.log(` Grype DB Update error: ${r.stderr}`),r.exitCode!==0)throw new Error(`Grype DB update failed with exit code ${r.exitCode}: ${r.stderr}`)}async function Xi(t,e,r,i,n,o){let a=(0,We.dirname)(e),c=(0,We.basename)(e),u=[];n||u.push("--quiet");let l=await Ot.$`docker run --rm -v '${t}:/tmp/.cache' --user ${Dt} -v '${a}:/tmp/output' -v '${r.sbomFile}:/tmp/input.json' -e GRYPE_DB_CACHE_DIR=/tmp/.cache -e TMPDIR=/tmp -e GRYPE_DB_AUTO_UPDATE=false ${qi} sbom:/tmp/input.json -o json --file '/tmp/output/${c}' --by-cve ${u}`.nothrow();if(l.stdout&&o(` Scan log: ${l.stdout}`),l.stderr&&o(` Scan error: ${l.stderr}`),l.exitCode!==0)throw new Error(`Grype scan failed with exit code ${l.exitCode}: ${l.stderr}`);o(`  Grype output file: ${e}`);let s=await U(e);Os(i,s)}function Os(t,e){if(e)for(let r of e.matches){let i=js(r);t.addVulnerability(i,"grype")}}function js(t){let e=t.vulnerability,r=e.id,i=J(t.artifact.purl),n=J(e.dataSource),o=Fs(e.severity);return{id:r,severity:o,scannerSeverity:{grype:o},title:"",description:e.description,components:[i],detectedBy:["grype"],refs:[n]}}function Fs(t){switch(t){case"Negligible":return"LOW";case"Low":return"LOW";case"Medium":return"MEDIUM";case"High":return"HIGH";case"Critical":return"CRITICAL";default:return"UNKNOWN"}}var Bi=require("fs/promises");async function Gi(t,e,r,i,n,o){let a={},c="";r.user&&r.token&&(a.Authorization=`Basic ${Buffer.from(`${r.user}:${r.token}`).toString("base64")}`,c="/authorized");let u=`https://ossindex.sonatype.org/api/v3${c}/component-report`,l=await Ts(e.sbomFile),s=new Set(l.map(f=>f.purl.replace(/\?.*$/,"")));As(s);let m=Array.from(s),p=[];for(let f=0;f<m.length;f+=128){let d=JSON.stringify({coordinates:m.slice(f,f+128)});n&&o(`  Sonatype OssIndex request ${u} with body: ${d}`);let g=await(await fetch(u,{method:"POST",headers:{...a,"Content-Type":"application/vnd.ossindex.component-report-request.v1+json"},body:d})).json();Array.isArray(g)?p.push(...g.filter(b=>b.vulnerabilities.length>0)):o(`  Sonatype OssIndex Error: ${g.code} - ${g.message}`)}await(0,Bi.writeFile)(t,JSON.stringify(p,null,2)),o(`  Sonatype OssIndex output file: ${t}`),Ns(i,p)}async function Ts(t){return(await U(t)).components.filter(r=>Is(r)&&!Cs(r))}function Is(t){return!!t.purl}function Cs(t){return t.group?t.group.startsWith("de.conterra")||t.group.startsWith("org.n52.security"):!1}function Ns(t,e){if(e)for(let r of e)for(let i of r.vulnerabilities){let n=Ms(i,r.coordinates);t.addVulnerability(n,"ossindex")}}function Ms(t,e){let r=t.cve||t.id,i=J(e),n=J(t.reference),o=Rs(t.cvssScore);return{id:r,severity:o,scannerSeverity:{ossindex:o},title:t.title,description:t.description,components:[i],detectedBy:["ossindex"],refs:n?[n]:[]}}function Rs(t){return t===0?"UNKNOWN":t<4?"LOW":t<7?"MEDIUM":t<9?"HIGH":"CRITICAL"}function As(t){let e=Array.from(t);for(let r of e){let i=r.replace(/(@[^-]+)-.*$/g,"$1");t.add(i)}}var jt=require("zx");var Je=require("path"),Wi="aquasec/trivy:latest";async function Ji(t,e,r){let i=[];e&&(i.push("-e"),i.push(`GITHUB_TOKEN=${e}`));let n=[];n.push("--db-repository"),n.push("public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db"),r||n.push("--quiet");let o=await jt.$`docker run --rm -v '${t}:/.cache' ${i} ${Wi} ${n} --cache-dir '/.cache' sbom --download-db-only`.nothrow();if(!o.stdout&&!o.stderr&&console.log(" Trivy DB Update: finished"),o.stdout&&console.log(` Trivy DB Update: ${o.stdout}`),o.stderr&&console.log(` Trivy DB Update error: ${o.stderr}`),o.exitCode!==0)throw new Error(`Trivy DB update failed with exit code ${o.exitCode}: ${o.stderr}`)}async function Hi(t,e,r,i,n,o){let a=(0,Je.dirname)(e),c=(0,Je.basename)(e),u=[];n||u.push("--quiet");let l=await jt.$`docker run --rm -v '${t}:/.cache' -v '${a}:/tmp/output' -v '${r.sbomFile}:/tmp/input.json' ${Wi} sbom --cache-dir '/.cache' --format json --output '/tmp/output/${c}' ${u} --skip-db-update /tmp/input.json`.nothrow();if(l.stdout&&o(` Scan log: ${l.stdout}`),l.stderr&&o(` Scan error: ${l.stderr}`),l.exitCode!==0)throw new Error(`Trivy scan failed with exit code ${l.exitCode}: ${l.stderr}`);o(`  Trivy output file: ${e}`);let s=await U(e);Vs(i,s)}function Vs(t,e){if(e){for(let r of e.Results??[])if(r.Vulnerabilities)for(let i of r.Vulnerabilities){let n=$s(i);t.addVulnerability(n,"trivy")}}}function $s(t){let e=t.VulnerabilityID,r=J(t.PkgIdentifier.PURL),i=J(t.PrimaryURL),n=_s(t.Severity);return{id:e,severity:n,scannerSeverity:{trivy:n},title:t.Title,description:t.Description,components:[r],detectedBy:["trivy"],refs:[i]}}function _s(t){switch(t){case"UNKNOWN":case"LOW":case"MEDIUM":case"HIGH":case"CRITICAL":return t;default:return"UNKNOWN"}}var He=class{constructor(e,r,i){this.scannerNames=e;this.cacheDir=r;this.options=i}async init(e){let r=[];for(let i of this.scannerNames)switch(i){case"grype":r.push(Ui(this.cacheDir,e));break;case"trivy":r.push(Ji(this.cacheDir,this.options.trivyGithubToken,e));break;case"ossindex":continue}await Promise.all(r)}async scanProject(e,r,i,n,o){let a=[];for(let c of this.scannerNames)a.push(this.scanProjectBy(c,e,r,this.cacheDir,i,this.options.ossIndexApiUser,this.options.ossIndexApiToken,n,o));await Promise.all(a)}async scanProjectBy(e,r,i,n,o,a,c,u,l){switch(e){case"grype":return Xi(n,await i.lookupOutputFileForWriting("grype-results"),r,o,u,l);case"trivy":return Hi(n,await i.lookupOutputFileForWriting("trivy-results"),r,o,u,l);case"ossindex":return Gi(await i.lookupOutputFileForWriting("ossindex-results"),r,{user:a,token:c},o,u,l)}}};async function Qi(t,e,r){await Xe(t,async i=>{let n=await i.read(),o=!1,a=n.statements,c=[];for(let u of a){if(r&&!Et(u).has(r)||!u.products)continue;let l=u.products.findIndex(s=>s["@id"]===e);l!==-1&&(u.products.splice(l,1),o=!0,u.products.length===0&&c.push(u))}if(o){for(let u of c){let l=a.indexOf(u);a.splice(l,1)}if(a.length===0){console.info(`Remove ${e} from ${i.location} and delete file.`),await i.delete();return}console.info(`Remove ${e} from ${i.location}`),await i.write(n)}})}Qe.os.type().startsWith("Windows")&&(0,Qe.usePowerShell)();async function Yi(t){let e=await it(t),r=e.cacheDir;await ne(r)||await(0,ae.mkdir)(r);let i=e.outDir;await ne(i)&&await tt(i),await(0,ae.mkdir)(i);let n=await Gs(e,{user:t.vexUrlsUser,pw:t.vexUrlsPw}),o=new _e(e.mavenRepo,{user:t.mavenRepoUser,pw:t.mavenRepoPw}),a=Ws(e,t,r),c=Date.now();console.log("Initializing scanner engines ..."),await a.init(t.verbose),console.log(`Scanner engines initialization took ${Date.now()-c}ms
-`);let u=Js(t),l=e.projects,s=new Map,m=Date.now();console.log("Scanning projects ...");let p=1,f=0,d=[];for(let g of l){if(!u(g))continue;f>=p&&(await Promise.race(d),--f);let b=new Be(g,i,e.createSubDirsForProject),F=[],T=ie=>{F.push(ie)};d.push(qs(g,b,o,a,n,T,s,t,F)),++f}await Promise.all(d),console.log(`Scanning took ${Date.now()-m}ms`),t.autoRemoveUnusedStatements&&await Hs(s,e.vexDir);let S=Us(s,e.reportNoLongerDetectedVulnerabilities);if(S.hasError)return 1;if(S.hasNewVuln){if(e.onNewVulnerabilities==="fail")return 1;e.onNewVulnerabilities==="warn"&&(console.log("##vso[task.logissue type=warning;]NEW_VULNERABILITIES_DETECTED"),console.log("##vso[task.complete result=SucceededWithIssues;]"))}if(S.hasNoLongerDetectedVuln){if(e.onNoLongerDetectedVulnerabilities==="fail")return 1;e.onNoLongerDetectedVulnerabilities==="warn"&&(console.log("##vso[task.logissue type=warning;]NO_LONGER_DETECTED_VULNERABILITIES"),console.log("##vso[task.complete result=SucceededWithIssues;]"))}return 0}async function qs(t,e,r,i,n,o,a,c,u){try{let{unmatchedVulnerabilities:l,noLongerDetectedVulnerabilities:s}=await Xs(t,e,r,i,n,c.verbose,o);a.set(t.purl,{project:t,newVulns:l,noLongerDetectedVulns:s})}catch(l){let s=l;a.set(t.purl,{project:t,error:`${s}`,newVulns:[],noLongerDetectedVulns:[]})}if(c.verbose)for(let l of u)console.log(l)}function Us(t,e){let r=!1,i=!1,n=!1,o=new Map,a=new Map,c=[];for(let u of t.values()){let l=u.project,s=`${l.name} - ${l.version}`;if(u.error&&(r=!0,c.push({project:s,error:u.error})),l.silent)continue;let p=W[l.minimumSeverity],f=u.newVulns.filter(d=>p<=W[d.severity]);for(let d of f)i=!0,o.has(d.id)||o.set(d.id,{severity:d.severity,projects:[]}),o.get(d.id).projects.push(s);if(e)for(let d of u.noLongerDetectedVulns)n=!0,a.has(d)||a.set(d,[]),a.get(d).push(s)}if(console.log(`
-Scan results:`),c.length)for(let{project:u,error:l}of c)console.error(`  ${u}:`),console.error(`    Error: ${l}`);if(o.size){console.log("  New vulnerabilities:");for(let[u,{severity:l,projects:s}]of o.entries()){console.log(`    [${l}] ${u} detected in:`);for(let m of s)console.log(`      - ${m}`)}}if(a.size){console.log("  Declared but no longer detected vulnerabilities:");for(let[u,l]of a.entries()){console.log(`    ${u} was declared in:`);for(let s of l)console.log(`      - ${s}`)}}return!r&&!i&&!n&&console.log("  No issues found"),{hasError:r,hasNewVuln:i,hasNoLongerDetectedVuln:n}}async function Xs(t,e,r,i,n,o,a){let c=await $i(t,await e.lookupOutputFileForWriting("project-cyclonedx-sbom-file"),r);a(`Analyzing project: ${c.name} - ${c.version} - ${c.sbomFile}`);let u=new Le;await i.scanProject(c,e,u,o,a);let l=n.filterByProduct([c.purl,...c.purlAliases]),{unmatchedVulnerabilities:s}=u.enhanceWithVexData(l),m=c.detectNoLongerUsedVulnerabilities?l.findNotMatchingVulnerabilities(u.getAllVulnIds()):[];return await Bs(e,c,u,l,a),{unmatchedVulnerabilities:s,noLongerDetectedVulnerabilities:m}}async function Bs(t,e,r,i,n){let o=r.getAllVulnerabilitiesSortedBySeverity(),a=await t.lookupOutputFileForWriting("aggregate-results");await(0,ae.writeFile)(a,JSON.stringify(o,null,2)),n(`  Vulnerabilities output file: ${a}`);let c=await t.lookupOutputFileForWriting("aggregated-sarif-results"),u=Vi(o,e);await(0,ae.writeFile)(c,JSON.stringify(u,null,2)),n(`  Vuln Sarif output file: ${c}`);let l=i.toVexFileForProduct();if(!l)return;let s=await t.lookupOutputFileForWriting("project-openvex-file");await(0,ae.writeFile)(s,JSON.stringify(l,null,2)),n(`  OpenVex file: ${s}`)}async function Gs(t,e){let r=t.vexDir,i;await ne(r)?i=await de.fromFiles(r):i=new de;for(let n of t.vexUrls)await de.fromUrl(n,e,i);return i}function Ws(t,e,r){if(e.scannerEngine)return e.scannerEngine;if(t.scanners.length===0)throw new Error("No scanners configured");return new He(t.scanners,r,e)}function Js(t){let{reduceToProjectName:e,reduceToProjectVersion:r}=t;return i=>!(!i.enabled||e&&(i.name!==e||r&&i.version!==r))}async function Hs(t,e){for(let r of t.values())if(!r.project.silent)for(let i of r.noLongerDetectedVulns)await Qi(e,r.project.purl,i)}var Ki=require("zx");Ki.dotenv.config();var Y=process.env;(async()=>{let t=await Yi({workingDir:process.cwd(),reduceToProjectName:process.argv[2],reduceToProjectVersion:process.argv[3],ossIndexApiUser:Y.OSS_INDEX_API_USER,ossIndexApiToken:Y.OSS_INDEX_API_TOKEN,mavenRepoUser:Y.MAVEN_REPO_USER,mavenRepoPw:Y.MAVEN_REPO_PW,trivyGithubToken:Y.TRIVY_GITHUB_TOKEN,vexUrlsUser:Y.VEX_URLS_USER,vexUrlsPw:Y.VEX_URLS_PW,verbose:Y.VERBOSE==="true",autoRemoveUnusedStatements:Y.AUTO_REMOVE_UNUSED_STATEMENTS==="true"});process.exit(t)})();
+`}var Xe=require("fs/promises");async function Bi(t,e,r){if("sbomFile"in t)return await(0,Xe.copyFile)(t.sbomFile,e),t.sbomFile=e,t;let i=await r.downloadArtifact(t.sbomMavenCoordinates);return await(0,Xe.writeFile)(e,i),{...t,sbomFile:e}}var Ue=class{constructor(e,r){this.repo=e;this.authn=r}async downloadArtifact(e){let r=this.toArtifactInfo(e);if(this.isSnapshotVersion(r.version)&&!r.timestamp){let o=await this.fetchLatestSnapshotTimestamp(r);r={...r,timestamp:o}}let i=this.toArtifactUrl(r),n=await ye(i,this.authn);return Buffer.from(await n.arrayBuffer())}async fetchLatestSnapshotTimestamp(e){let r=`${this.toArtifactBaseUrl(e)}/maven-metadata.xml`,n=await(await ye(r,this.authn)).text();return js(n,e)}toArtifactUrl(e){let r=this.toArtifactBaseUrl(e),i=this.isSnapshotVersion(e.version)&&e.timestamp?e.version.replace(/SNAPSHOT$/,e.timestamp):e.version;return`${r}/${e.artifactId}-${i}-${e.classifier}.${e.extension}`}toArtifactBaseUrl(e){return`${this.repo}/${e.groupId.replace(/\./g,"/")}/${e.artifactId}/${e.version}`}isSnapshotVersion(e){return e.endsWith("-SNAPSHOT")}toArtifactInfo(e){let r=e.split(":");return{groupId:r[0],artifactId:r[1],version:r[2],classifier:r[3],extension:"json"}}};function js(t,e){if(e.classifier&&e.extension){let n=t.match(new RegExp(`<snapshotVersion>\\s*<classifier>${e.classifier}</classifier>\\s*<extension>${e.extension}</extension>\\s*<value>([^<]+)</value>\\s*<updated>[^<]+</updated>\\s*</snapshotVersion>`)),o=e.version.replace(/SNAPSHOT$/,"");if(n?.[1])return n[1].replace(o,"")}let r=t.match(/<timestamp>([^<]+)<\/timestamp>/),i=t.match(/<buildNumber>([^<]+)<\/buildNumber>/);if(!r||!i)throw new Error(`Failed to get timestamp and build number from ${t} for artifact '${e.artifactId}'`);return`${r[1]}-${i[1]}`}var Ge=require("fs/promises"),Dt=require("path");var Ot=class{constructor(e){this.location=e}async read(){let e=await G(this.location);if(!e)throw new Error("Invalid VEX file");return e}async write(e){await nt(this.location,e)}async delete(){await(0,Ge.unlink)(this.location)}};async function Je(t,e){for(let r of await(0,Ge.readdir)(t,{withFileTypes:!0}))r.name.endsWith(".json")?await e(new Ot((0,Dt.resolve)(r.parentPath,r.name))):r.isDirectory()&&await Je((0,Dt.resolve)(r.parentPath,r.name),e)}function It(t){let e=t.vulnerability.name;return new Set([e,...t.vulnerability.aliases??[]])}var pe=class t{statements=[];filteredToProducts=[];static async fromUrl(e,r,i=new t){let o=await(await ye(e,r)).json();return i.add(o),i}static async fromFiles(e,r=new t){return await Je(e,async i=>{let n=await i.read();r.add(n)}),r}add(e){Ts(e);let r=e.timestamp;for(let i of e.statements){i.timestamp=i.timestamp??r;let n=Date.parse(i.timestamp),o=i.vulnerability.name,s=It(i),c=new Set(i.products?.map(l=>l["@id"]).filter(l=>!!l)??[]),u=new jt(n,o,s,c,i);this.statements.push(u)}this.sortStatementsByTimestampNewestFirst()}filterByProduct(e){if(this.assertCorrectProductId(e),this.filteredToProducts.length)return this;let r=new t;return r.filteredToProducts=e.slice(0),r.statements=this.statements.filter(i=>i.matchesAtLeastOneProduct(e)),r}findNotMatchingVulnerabilities(e,r){let i=this.filterByProduct(r??this.filteredToProducts),n=new Set;for(let o of i.statements)n.add(o.vulnName);for(let o of e)n.delete(o);return Array.from(n)}newestVulnerabilityStatement(e,r){let i=this.filterByProduct(r??this.filteredToProducts);for(let n of i.statements)if(n.matchesVulnerability(e))return this.reduceToProductInformation(n,i.filteredToProducts[0])}toVexFileForProduct(e){let r=this.filterByProduct(e??this.filteredToProducts),i=r.statements.map(n=>this.reduceToProductInformation(n,r.filteredToProducts[0]));return this.toVexFile(i)}toVexFile(e){let r=e.filter(n=>n.status!=="under_investigation");if(r.length===0)return;this.sortVexStatementsByTimestampNewestFirst(r);let i=r[0].timestamp;return{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://openvex.dev/docs/public/vex-fc763e6eb63bfbcda20b7cbbddd4e9f8feaaa317fe8d8a6f51a5663a1180343e",author:"conterra",timestamp:i,last_updated:i,version:1,statements:r}}assertCorrectProductId(e){if(!e||e.length===0)throw new Error("Product ID must be provided");if(this.filteredToProducts.length&&!Is(this.filteredToProducts,e))throw new Error("Cannot filter to a different product")}reduceToProductInformation(e,r){let i={timestamp:new Date(e.timestamp).toISOString(),...e.statement};if(!r)return i;let n=i.products?.filter(o=>o["@id"]===r);return n?.length||(n=[{"@id":r}]),{...i,products:n}}sortStatementsByTimestampNewestFirst(){this.statements.sort((e,r)=>r.timestamp-e.timestamp)}sortVexStatementsByTimestampNewestFirst(e){e.sort((r,i)=>Date.parse(i.timestamp)-Date.parse(r.timestamp))}};function Is(t,e){return t.length===e.length&&t.every((r,i)=>r===e[i])}var jt=class{constructor(e,r,i,n,o){this.timestamp=e;this.vulnName=r;this.vulnAliases=i;this.products=n;this.statement=o}matchesProduct(e){return this.products.has(e)}matchesAtLeastOneProduct(e){return e.some(this.matchesProduct.bind(this))}matchesVulnerability(e){return this.vulnAliases.has(e)}};function Ts(t){if(t?.["@context"]!=="https://openvex.dev/ns/v0.2.0")throw new Error("Invalid VEX file format")}var He=require("path"),Ui=require("fs/promises");var We=class{constructor(e,r,i){this.project=e;this.outputDir=r;this.useSubDirForProject=i}async lookupOutputFileForWriting(e){let r=this.useSubDirForProject?`${this.project.name}-${this.project.version}`:"",i=`${this.project.name}-${this.project.version}-`,n=this.getFileSuffix(e),o=(0,He.resolve)(this.outputDir,r,`${i}${n}`),s=(0,He.dirname)(o);return await oe(s)||await(0,Ui.mkdir)(s,{recursive:!0}),o}getFileSuffix(e){switch(e){case"grype-results":return"scan-grype-results.json";case"trivy-results":return"scan-trivy-results.json";case"ossindex-results":return"scan-ossindex-results.json";case"aggregate-results":return"scan-aggregate-results.json";case"aggregated-sarif-results":return"scan-aggregated-results.sarif.json";case"project-cyclonedx-sbom-file":return"sbom.cdx.json";case"project-openvex-file":return"openvex.vex.json";default:throw new Error(`Unknown output file key: ${e}`)}}};var Tt=require("zx");var Ye=require("path"),Xi="anchore/grype";async function Gi(t,e,r){r&&console.log(`Initializing Grype DB in cache directory: ${e}`);let i=`${Xi}:${t||"latest"}`,n=await Tt.$`docker run --rm -v '${e}:/tmp/.cache' -e GRYPE_DB_CACHE_DIR=/tmp/.cache -e TMPDIR=/tmp ${i} db update`.nothrow();if(n.stdout&&console.log(` Grype DB Update: ${n.stdout}`),n.stderr&&console.log(` Grype DB Update error: ${n.stderr}`),n.exitCode!==0)throw new Error(`Grype DB update failed with exit code ${n.exitCode}: ${n.stderr}`)}async function Ji(t,e,r,i,n,o,s){let c=(0,Ye.dirname)(r),u=(0,Ye.basename)(r),l=[];o||l.push("--quiet");let a=`${Xi}:${t||"latest"}`,f=await Tt.$`docker run --rm -v '${e}:/tmp/.cache' -v '${c}:/tmp/output' -v '${i.sbomFile}:/tmp/input.json' -e GRYPE_DB_CACHE_DIR=/tmp/.cache -e TMPDIR=/tmp -e GRYPE_DB_AUTO_UPDATE=false ${a} sbom:/tmp/input.json -o json --file '/tmp/output/${u}' --by-cve ${l}`.nothrow();if(f.stdout&&s(` Scan log: ${f.stdout}`),f.stderr&&s(` Scan error: ${f.stderr}`),f.exitCode!==0)throw new Error(`Grype scan failed with exit code ${f.exitCode}: ${f.stderr}`);s(`  Grype output file: ${r}`);try{let m=await G(r);Fs(n,m)}catch(m){throw new Error(`Grype scan results could not be read from '${r}': ${m}`,{cause:m})}}function Fs(t,e){if(e)for(let r of e.matches){let i=Cs(r);t.addVulnerability(i,"grype")}}function Cs(t){let e=t.vulnerability,r=e.id,i=Y(t.artifact.purl),n=Y(e.dataSource),o=Ms(e.severity);return{id:r,severity:o,scannerSeverity:{grype:o},title:"",description:e.description,components:[i],detectedBy:["grype"],refs:[n]}}function Ms(t){switch(t){case"Negligible":return"LOW";case"Low":return"LOW";case"Medium":return"MEDIUM";case"High":return"HIGH";case"Critical":return"CRITICAL";default:return"UNKNOWN"}}var Wi=require("fs/promises");async function Hi(t,e,r,i,n,o){try{let s={},c="";r.user&&r.token&&(s.Authorization=`Basic ${Buffer.from(`${r.user}:${r.token}`).toString("base64")}`,c="/authorized");let u=`https://ossindex.sonatype.org/api/v3${c}/component-report`,l=await Rs(e.sbomFile),a=new Set(l.map(d=>d.purl.replace(/\?.*$/,"")));qs(a);let f=Array.from(a),m=[];for(let d=0;d<f.length;d+=128){let p=JSON.stringify({coordinates:f.slice(d,d+128)});n&&o(`  Sonatype OssIndex request ${u} with body: ${p}`);let h=await(await fetch(u,{method:"POST",headers:{...s,"Content-Type":"application/vnd.ossindex.component-report-request.v1+json"},body:p})).json();Array.isArray(h)?m.push(...h.filter(w=>w.vulnerabilities.length>0)):o(`  Sonatype OssIndex Error: ${h.code} - ${h.message}`)}await(0,Wi.writeFile)(t,JSON.stringify(m,null,2)),o(`  Sonatype OssIndex output file: ${t}`),Vs(i,m)}catch(s){throw new Error(`Sonatype OSS Index scan failed: ${s}`,{cause:s})}}async function Rs(t){return(await G(t)).components.filter(r=>Ns(r)&&!As(r))}function Ns(t){return!!t.purl}function As(t){return t.group?t.group.startsWith("de.conterra")||t.group.startsWith("org.n52.security"):!1}function Vs(t,e){if(e)for(let r of e)for(let i of r.vulnerabilities){let n=$s(i,r.coordinates);t.addVulnerability(n,"ossindex")}}function $s(t,e){let r=t.cve||t.id,i=Y(e),n=Y(t.reference),o=_s(t.cvssScore);return{id:r,severity:o,scannerSeverity:{ossindex:o},title:t.title,description:t.description,components:[i],detectedBy:["ossindex"],refs:n?[n]:[]}}function _s(t){return t===0?"UNKNOWN":t<4?"LOW":t<7?"MEDIUM":t<9?"HIGH":"CRITICAL"}function qs(t){let e=Array.from(t);for(let r of e){let i=r.replace(/(@[^-]+)-.*$/g,"$1");t.add(i)}}var Ft=require("zx");var Qe=require("path"),Yi="aquasec/trivy";async function Qi(t,e,r,i){let n=[];r&&(n.push("-e"),n.push(`GITHUB_TOKEN=${r}`));let o=[];o.push("--db-repository"),o.push("public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db"),i||o.push("--quiet");let s=`${Yi}:${t||"latest"}`,c=await Ft.$`docker run --rm -v '${e}:/.cache' ${n} ${s} ${o} --cache-dir '/.cache' sbom --download-db-only`.nothrow();if(!c.stdout&&!c.stderr&&console.log(" Trivy DB Update: finished"),c.stdout&&console.log(` Trivy DB Update: ${c.stdout}`),c.stderr&&console.log(` Trivy DB Update error: ${c.stderr}`),c.exitCode!==0)throw new Error(`Trivy DB update failed with exit code ${c.exitCode}: ${c.stderr}`)}async function Ki(t,e,r,i,n,o,s){let c=(0,Qe.dirname)(r),u=(0,Qe.basename)(r),l=[];o||l.push("--quiet");let a=`${Yi}:${t||"latest"}`,f=await Ft.$`docker run --rm -v '${e}:/.cache' -v '${c}:/tmp/output' -v '${i.sbomFile}:/tmp/input.json' ${a} sbom --cache-dir '/.cache' --format json --output '/tmp/output/${u}' ${l} --skip-db-update /tmp/input.json`.nothrow();if(f.stdout&&s(` Scan log: ${f.stdout}`),f.stderr&&s(` Scan error: ${f.stderr}`),f.exitCode!==0)throw new Error(`Trivy scan failed with exit code ${f.exitCode}: ${f.stderr}`);s(`  Trivy output file: ${r}`);try{let m=await G(r);Bs(n,m)}catch(m){throw new Error(`Trivy scan results could not be read from '${r}': ${m}`,{cause:m})}}function Bs(t,e){if(e){for(let r of e.Results??[])if(r.Vulnerabilities)for(let i of r.Vulnerabilities){let n=Us(i);t.addVulnerability(n,"trivy")}}}function Us(t){let e=t.VulnerabilityID,r=Y(t.PkgIdentifier.PURL),i=Y(t.PrimaryURL),n=Xs(t.Severity);return{id:e,severity:n,scannerSeverity:{trivy:n},title:t.Title,description:t.Description,components:[r],detectedBy:["trivy"],refs:[i]}}function Xs(t){switch(t){case"UNKNOWN":case"LOW":case"MEDIUM":case"HIGH":case"CRITICAL":return t;default:return"UNKNOWN"}}var Ke=class{constructor(e,r,i){this.scanners=e;this.cacheDir=r;this.options=i}async init(e){let r=[];for(let i of this.scanners)switch(i.name){case"grype":r.push(Gi(i.version,this.cacheDir,e));break;case"trivy":r.push(Qi(i.version,this.cacheDir,this.options.trivyGithubToken,e));break;case"ossindex":continue}await Promise.all(r)}async scanProject(e,r,i,n,o){let s=[];for(let c of this.scanners)s.push(this.scanProjectBy(c,e,r,this.cacheDir,i,this.options.ossIndexApiUser,this.options.ossIndexApiToken,n,o));await Promise.all(s)}async scanProjectBy(e,r,i,n,o,s,c,u,l){switch(e.name){case"grype":return Ji(e.version,n,await i.lookupOutputFileForWriting("grype-results"),r,o,u,l);case"trivy":return Ki(e.version,n,await i.lookupOutputFileForWriting("trivy-results"),r,o,u,l);case"ossindex":return Hi(await i.lookupOutputFileForWriting("ossindex-results"),r,{user:s,token:c},o,u,l)}}};async function zi(t,e,r){await Je(t,async i=>{let n=await i.read(),o=!1,s=n.statements,c=[];for(let u of s){if(r&&!It(u).has(r)||!u.products)continue;let l=u.products.findIndex(a=>a["@id"]===e);l!==-1&&(u.products.splice(l,1),o=!0,u.products.length===0&&c.push(u))}if(o){for(let u of c){let l=s.indexOf(u);s.splice(l,1)}if(s.length===0){console.info(`Remove ${e} from ${i.location} and delete file.`),await i.delete();return}console.info(`Remove ${e} from ${i.location}`),await i.write(n)}})}var Pe=require("fs/promises"),Ct=require("path");async function en(t,e){let{orderBy:r,reportNoLongerDetectedVulnerabilities:i,reportCveDetails:n,outputDirectory:o}={orderBy:"CVE",reportNoLongerDetectedVulnerabilities:!0,reportCveDetails:!1,...e},s=!1,c=!1,u=!1,l=new Map,a=new Map,f=new Map,m=new Map,d=new Map,p=[];for(let x of t.values()){let D=x.project,V=`${D.name}@${D.version}`;if(x.error&&(s=!0,p.push({project:V,error:x.error})),D.silent)continue;let ke=X[D.minimumSeverity],et=x.newVulns.filter(j=>ke<=X[j.severity]);for(let j of et){if(c=!0,!l.has(j.id))l.set(j.id,j);else{let y=l.get(j.id);Ys(y,j)}a.has(j.id)||a.set(j.id,[]),m.has(V)||m.set(V,[]),m.get(V).push(j.id),a.get(j.id).push(V)}for(let j of x.noLongerDetectedVulns)u=!0,f.has(j)||f.set(j,[]),d.has(V)||d.set(V,[]),d.get(V).push(j),f.get(j).push(V)}let g;o&&(g=(0,Ct.join)(o,"scan-summary.txt"),await(0,Pe.writeFile)(g,"","utf8"));let h=async x=>{console.log(x),g&&await(0,Pe.appendFile)(g,x+`
+`,"utf8")};switch(await h("=== Scan summary ==="),p.length&&await Gs(h,p),n&&await Hs(h,l),r){case"CVE":{await Ws(h,a,l,i?f:new Map);break}case"PROJECT":{await Js(h,m,i?d:new Map,l);break}}!s&&!c&&(!u||!i)&&await h("  No issues found");let w={errors:p,vulnerabilities:Object.fromEntries(l),vulnerabilityToProject:Object.fromEntries(a.entries()),projectToVulnerability:Object.fromEntries(m.entries()),noLongerDetectedVulnerabilities:Object.fromEntries(f)};if(o){let x=(0,Ct.join)(o,"scan-summary.json");await(0,Pe.writeFile)(x,JSON.stringify(w,null,2),"utf8")}return{hasError:s,hasNewVuln:c,hasNoLongerDetectedVuln:u}}async function Gs(t,e){await t(""),await t("- Errors during scan:");for(let{project:r,error:i}of e)await t(`    - ${r}:`),await t(`        Error: ${i}`)}async function Js(t,e,r,i){let n=new Set([...Array.from(e.keys()),...Array.from(r.keys())]),o=Array.from(n.keys()).sort();if(o.length){await t(""),await t("- Vulnerabilities by project:");for(let s of o){await t(`    - ${s}:`);let c=e.get(s)??[];for(let l of c.slice().sort(Mt(a=>i.get(a).severity))){let{severity:a}=i.get(l);await t(`        - [${a}] ${l}`)}let u=(r.get(s)??[]).slice().sort();for(let l of u)await t(`        - ${l} (no longer detected)`)}}}async function Ws(t,e,r,i){let n=Array.from(e.keys()).sort(Mt(s=>r.get(s).severity));if(n.length){await t(""),await t("- New vulnerabilities:");for(let s of n){let c=e.get(s),{severity:u}=r.get(s);await t(`    - [${u}] ${s}`);for(let l of c.slice().sort())await t(`        - ${l}`)}}let o=Array.from(i.keys()).sort();if(o.length){await t(""),await t("- Declared but no longer detected vulnerabilities:");for(let s of o){let c=i.get(s);await t(`    - ${s}`);for(let u of c.slice().sort())await t(`        - ${u}`)}}}async function Hs(t,e){if(e.size===0)return;await t(""),await t("- Vulnerability details:");let r=Array.from(e.keys()).sort(Mt(i=>e.get(i).severity));for(let i of r){let n=e.get(i);if(await t(`    - [${n.severity}] ${n.id} - ${n.title||""}:`),n.description){await t("        Description:");let o=n.description.split(/\r?\n/);for(let s of o)await t(`          ${s}`)}if(n.components.length){await t("        Dependencies:");for(let o of n.components)await t(`          - ${o}`)}if(n.refs.length){await t("        Links:");for(let o of n.refs)await t(`          - ${o}`)}}}function Ys(t,e){t.title=t.title||e.title,t.severity=X[t.severity]>X[e.severity]?t.severity:e.severity,t.description=t.description||e.description,t.components=Zi(t.components,e.components),t.refs=Zi(t.refs,e.refs)}function Zi(t,e){let r=new Set([...t,...e]);return Array.from(r)}function Mt(t){return(e,r)=>{let i=t(e),n=t(r),o=X[i],s=X[n];return o!==s?o>s?-1:1:e.localeCompare(r)}}ze.os.type().startsWith("Windows")&&(0,ze.usePowerShell)();async function tn(t){let e=await at(t),r=e.cacheDir;await oe(r)||await(0,ce.mkdir)(r);let i=e.outDir;await oe(i)&&await ot(i),await(0,ce.mkdir)(i);let n=await Zs(e,{user:t.vexUrlsUser,pw:t.vexUrlsPw}),o=new Ue(e.mavenRepo,{user:t.mavenRepoUser,pw:t.mavenRepoPw}),s=ea(e,t,r),c=Date.now();console.log("Initializing scanner engines ..."),await s.init(t.verbose),console.log(`Scanner engines initialization took ${Date.now()-c}ms
+`);let u=ta(t),l=e.projects,a=new Map,f=Date.now();console.log("Scanning projects ...");let m=l.filter(u).map(p=>{let g=new We(p,i,e.createSubDirsForProject),h=[],w=D=>{h.push(D)};return{scan(){return Qs(p,g,o,s,n,w,a,t,h)}}});await ia(m),console.log(`Scanning took ${Date.now()-f}ms`),t.autoRemoveUnusedStatements&&await ra(a,e.vexDir);let d=await en(a,{orderBy:e.consoleReport.startsWith("BY_CVE")?"CVE":"PROJECT",reportCveDetails:e.consoleReport.endsWith("_DETAILED"),reportNoLongerDetectedVulnerabilities:e.reportNoLongerDetectedVulnerabilities,outputDirectory:i});if(d.hasError)return 1;if(d.hasNewVuln){if(e.onNewVulnerabilities==="fail")return 1;e.onNewVulnerabilities==="warn"&&(console.log("##vso[task.logissue type=warning;]NEW_VULNERABILITIES_DETECTED"),console.log("##vso[task.complete result=SucceededWithIssues;]"))}if(d.hasNoLongerDetectedVuln){if(e.onNoLongerDetectedVulnerabilities==="fail")return 1;e.onNoLongerDetectedVulnerabilities==="warn"&&(console.log("##vso[task.logissue type=warning;]NO_LONGER_DETECTED_VULNERABILITIES"),console.log("##vso[task.complete result=SucceededWithIssues;]"))}return 0}async function Qs(t,e,r,i,n,o,s,c,u){try{let{unmatchedVulnerabilities:l,noLongerDetectedVulnerabilities:a}=await Ks(t,e,r,i,n,c.verbose,o);s.set(t.purl,{project:t,newVulns:l,noLongerDetectedVulns:a})}catch(l){let a=l;s.set(t.purl,{project:t,error:`${a}`,newVulns:[],noLongerDetectedVulns:[]})}if(c.verbose)for(let l of u)console.log(l)}async function Ks(t,e,r,i,n,o,s){let c=await Bi(t,await e.lookupOutputFileForWriting("project-cyclonedx-sbom-file"),r);s(`Analyzing project: ${c.name} - ${c.version} - ${c.sbomFile}`);let u=new Ee;await i.scanProject(c,e,u,o,s);let l=n.filterByProduct([c.purl,...c.purlAliases]),{unmatchedVulnerabilities:a}=u.enhanceWithVexData(l),f=c.detectNoLongerUsedVulnerabilities?l.findNotMatchingVulnerabilities(u.getAllVulnIds()):[];return await zs(e,c,u,l,s),{unmatchedVulnerabilities:a,noLongerDetectedVulnerabilities:f}}async function zs(t,e,r,i,n){let o=r.getAllVulnerabilitiesSortedBySeverity(),s=await t.lookupOutputFileForWriting("aggregate-results");await(0,ce.writeFile)(s,JSON.stringify(o,null,2)),n(`  Vulnerabilities output file: ${s}`);let c=await t.lookupOutputFileForWriting("aggregated-sarif-results"),u=qi(o,e);await(0,ce.writeFile)(c,JSON.stringify(u,null,2)),n(`  Vuln Sarif output file: ${c}`);let l=i.toVexFileForProduct();if(!l)return;let a=await t.lookupOutputFileForWriting("project-openvex-file");await(0,ce.writeFile)(a,JSON.stringify(l,null,2)),n(`  OpenVex file: ${a}`)}async function Zs(t,e){let r=t.vexDir,i;await oe(r)?i=await pe.fromFiles(r):i=new pe;for(let n of t.vexUrls)await pe.fromUrl(n,e,i);return i}function ea(t,e,r){if(e.scannerEngine)return e.scannerEngine;if(t.scanners.length===0)throw new Error("No scanners configured");return new Ke(t.scanners,r,e)}function ta(t){let{reduceToProjectName:e,reduceToProjectVersion:r}=t;return i=>!(!i.enabled||e&&(i.name!==e||r&&i.version!==r))}async function ra(t,e){for(let r of t.values())if(!r.project.silent)for(let i of r.noLongerDetectedVulns)await zi(e,r.project.purl,i)}async function ia(t,e=5){let r=0,i=0,n=0,o=t.length,s,c=new Promise(l=>{s=l});function u(){for(;r<e&&n<o;){let l=t[n++];r++,l.scan().finally(()=>{r--,i++,i>=o?s():u()})}}u(),await c}var rn=require("zx");rn.dotenv.config();var z=process.env;(async()=>{let t=await tn({workingDir:process.cwd(),reduceToProjectName:process.argv[2],reduceToProjectVersion:process.argv[3],ossIndexApiUser:z.OSS_INDEX_API_USER,ossIndexApiToken:z.OSS_INDEX_API_TOKEN,mavenRepoUser:z.MAVEN_REPO_USER,mavenRepoPw:z.MAVEN_REPO_PW,trivyGithubToken:z.TRIVY_GITHUB_TOKEN,vexUrlsUser:z.VEX_URLS_USER,vexUrlsPw:z.VEX_URLS_PW,verbose:z.VERBOSE==="true",autoRemoveUnusedStatements:z.AUTO_REMOVE_UNUSED_STATEMENTS==="true"});process.exitCode=t})();
 /*! Bundled license information:
 
 escape-html/index.js:

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@conterra/vuln-scan",
-    "version": "0.0.25",
+    "version": "0.0.27",
     "description": "con terra vulnerability scan process",
     "author": "con terra GmbH",
     "license": "Apache-2.0",
@@ -45,8 +45,8 @@
         "node-sarif-builder": "3.2.0",
         "rimraf": "6.0.1",
         "typescript": "5.8.3",
-        "typescript-eslint": "8.34.0",
-        "vitest": "3.2.3",
+        "typescript-eslint": "8.34.1",
+        "vitest": "3.2.4",
         "@inquirer/prompts": "7.5.3"
     }
 }