@contrast/config 1.11.0 → 1.12.0

package/lib/index.d.ts

@@ -172,7 +172,7 @@ export interface Config {
     session_id: string | null;
 
     /** Provide metadata used to create a new session within Contrast UI/ */
-    session_metadtata: string | null;
+    session_metadata: string | null;
   };
 
   assess: {

package/lib/options.js

@@ -465,6 +465,7 @@ const assess = [
   {
     name: 'assess.trust_custom_validators',
     arg: '<trust-custom-validators>',
+    fn: castBoolean,
     default: false,
     desc: 'trust incoming strings when they pass custom validators (Mongoose, Joi)',
   },
@@ -490,6 +491,14 @@ const assess = [
     fn: parseNum,
     desc: 'set limit for maximum number of source events (tracked strings) created per request',
   },
+  {
+    name: 'assess.safe_positives.enable',
+    arg: '[false]',
+    default: false,
+    fn: castBoolean,
+    desc: 'enable detection and reporting of findings regarding safe security practices, aka safe positives. ' +
+      'these results will be written to the location described by the `agent.reporters.file` option.',
+  },
 ];
 
 const server = [

package/lib/util.js

@@ -109,8 +109,9 @@ function checkConfigPath() {
     os.platform() === 'win32'
       ? `${process.env['ProgramData']}\\contrast`
       : '/etc/contrast';
+  const configSubDir = `${configDir}${path.sep}node`;
 
-  for (const dir of [process.cwd(), configDir]) {
+  for (const dir of [process.cwd(), configSubDir, configDir]) {
     const checkPath = path.resolve(dir, 'contrast_security.yaml');
     if (fs.existsSync(checkPath)) {
       return checkPath;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/config",
-  "version": "1.11.0",
+  "version": "1.12.0",
   "description": "An API for discovering Contrast agent configuration data",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -17,7 +17,7 @@
     "test": "../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.9.0",
+    "@contrast/common": "1.10.0",
     "yaml": "^2.2.2"
   }
 }