@contrast/contrast 1.0.16 → 1.0.17

package/dist/common/errorHandling.js

@@ -1,107 +1,63 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.maxAppError = exports.reportFailureError = exports.vulnerabilitiesFailureError = exports.snapshotFailureError = exports.findCommandOnError = exports.libraryAnalysisError = exports.handleResponseErrors = exports.getErrorMessage = exports.generalError = exports.failOptionError = exports.proxyError = exports.forbiddenError = exports.badRequestError = exports.unauthenticatedError = exports.genericError = void 0;
-const i18n_1 = __importDefault(require("i18n"));
-const handleResponseErrors = (res, api) => {
-    if (res.statusCode === 400) {
-        api === 'catalogue' ? badRequestError(true) : badRequestError(false);
-    }
-    else if (res.statusCode === 401) {
-        unauthenticatedError();
-    }
-    else if (res.statusCode === 403) {
-        forbiddenError();
-    }
-    else if (res.statusCode === 407) {
-        proxyError();
-    }
-    else {
-        if (api === 'snapshot' || api === 'catalogue') {
-            snapshotFailureError();
-        }
-        if (api === 'vulnerabilities') {
-            vulnerabilitiesFailureError();
-        }
-        if (api === 'report') {
-            reportFailureError();
-        }
-    }
-};
-exports.handleResponseErrors = handleResponseErrors;
+const i18n = require('i18n');
 const libraryAnalysisError = () => {
-    console.log(i18n_1.default.__('libraryAnalysisError'));
+    console.log(i18n.__('libraryAnalysisError'));
 };
-exports.libraryAnalysisError = libraryAnalysisError;
 const snapshotFailureError = () => {
-    console.log(i18n_1.default.__('snapshotFailureMessage'));
+    console.log(i18n.__('snapshotFailureMessage'));
 };
-exports.snapshotFailureError = snapshotFailureError;
 const vulnerabilitiesFailureError = () => {
-    console.log(i18n_1.default.__('vulnerabilitiesFailureMessage'));
+    console.log(i18n.__('vulnerabilitiesFailureMessage'));
 };
-exports.vulnerabilitiesFailureError = vulnerabilitiesFailureError;
 const reportFailureError = () => {
-    console.log(i18n_1.default.__('auditReportFailureMessage'));
+    console.log(i18n.__('auditReportFailureMessage'));
 };
-exports.reportFailureError = reportFailureError;
 const genericError = () => {
-    console.error(i18n_1.default.__('genericErrorMessage'));
+    console.error(i18n.__('genericErrorMessage'));
     process.exit(1);
 };
-exports.genericError = genericError;
 const unauthenticatedError = () => {
     generalError('unauthenticatedErrorHeader', 'unauthenticatedErrorMessage');
 };
-exports.unauthenticatedError = unauthenticatedError;
-const badRequestError = (catalogue) => {
+const badRequestError = catalogue => {
     catalogue === true
         ? generalError('badRequestErrorHeader', 'badRequestCatalogueErrorMessage')
         : generalError('badRequestErrorHeader', 'badRequestErrorMessage');
 };
-exports.badRequestError = badRequestError;
 const forbiddenError = () => {
     generalError('forbiddenRequestErrorHeader', 'forbiddenRequestErrorMessage');
     process.exit(1);
 };
-exports.forbiddenError = forbiddenError;
 const proxyError = () => {
     generalError('proxyErrorHeader', 'proxyErrorMessage');
 };
-exports.proxyError = proxyError;
 const maxAppError = () => {
     generalError('No applications remaining', 'You have reached the maximum number of application you can create.');
     process.exit(1);
 };
-exports.maxAppError = maxAppError;
 const failOptionError = () => {
     console.log('\n ******************************** ' +
-        i18n_1.default.__('snapshotFailureHeader') +
+        i18n.__('snapshotFailureHeader') +
         ' ********************************\n' +
-        i18n_1.default.__('failOptionErrorMessage'));
+        i18n.__('failOptionErrorMessage'));
 };
-exports.failOptionError = failOptionError;
 const getErrorMessage = (header, message) => {
-    const title = `******************************** ${i18n_1.default.__(header)} ********************************`;
+    const title = `******************************** ${i18n.__(header)} ********************************`;
     const multiLine = message?.includes('\n');
     let finalMessage = '';
     if (multiLine) {
         finalMessage = `\n${message}`;
     }
     else if (message) {
-        finalMessage = `\n${i18n_1.default.__(message)}`;
+        finalMessage = `\n${i18n.__(message)}`;
     }
     return `${title}${finalMessage}`;
 };
-exports.getErrorMessage = getErrorMessage;
 const generalError = (header, message) => {
     const finalMessage = getErrorMessage(header, message);
     console.log(finalMessage);
 };
-exports.generalError = generalError;
-const findCommandOnError = (unknownOptions) => {
+const findCommandOnError = unknownOptions => {
     const commandKeywords = {
         auth: 'auth',
         audit: 'audit',
@@ -115,4 +71,19 @@ const findCommandOnError = (unknownOptions) => {
         return foundCommands[0];
     }
 };
-exports.findCommandOnError = findCommandOnError;
+module.exports = {
+    genericError,
+    unauthenticatedError,
+    badRequestError,
+    forbiddenError,
+    proxyError,
+    failOptionError,
+    generalError,
+    getErrorMessage,
+    libraryAnalysisError,
+    findCommandOnError,
+    snapshotFailureError,
+    vulnerabilitiesFailureError,
+    reportFailureError,
+    maxAppError
+};

package/dist/common/versionChecker.js

@@ -1,20 +1,15 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isCorrectNodeVersion = exports.findLatestCLIVersion = exports.getLatestVersion = void 0;
-const constants_1 = require("../constants/constants");
-const boxen_1 = __importDefault(require("boxen"));
-const chalk_1 = __importDefault(require("chalk"));
-const semver_1 = __importDefault(require("semver"));
-const commonApi_1 = __importDefault(require("../utils/commonApi"));
-const http2_1 = require("http2");
+const { APP_VERSION } = require('../constants/constants');
+const boxen = require('boxen');
+const chalk = require('chalk');
+const semver = require('semver');
+const commonApi = require('../utils/commonApi');
+const { constants } = require('http2');
 const getLatestVersion = async (config) => {
-    const client = commonApi_1.default.getHttpClient(config);
+    const client = commonApi.getHttpClient(config);
     try {
         const res = await client.getLatestVersion();
-        if (res.statusCode === http2_1.constants.HTTP_STATUS_OK) {
+        if (res.statusCode === constants.HTTP_STATUS_OK) {
             return res.body;
         }
     }
@@ -22,24 +17,23 @@ const getLatestVersion = async (config) => {
         return undefined;
     }
 };
-exports.getLatestVersion = getLatestVersion;
-async function findLatestCLIVersion(config) {
+const findLatestCLIVersion = async (config) => {
     const isCI = process.env.CONTRAST_CODESEC_CI
         ? JSON.parse(process.env.CONTRAST_CODESEC_CI.toLowerCase())
         : false;
     if (!isCI) {
-        let latestCLIVersion = await (0, exports.getLatestVersion)(config);
+        let latestCLIVersion = await getLatestVersion(config);
         if (latestCLIVersion === undefined) {
             config.set('numOfRuns', 0);
             console.log('Failed to retrieve latest version info. Continuing execution.');
             return;
         }
         latestCLIVersion = latestCLIVersion.substring(8).replace('\n', '');
-        if (semver_1.default.lt(constants_1.APP_VERSION, latestCLIVersion)) {
-            const updateAvailableMessage = `Update available ${chalk_1.default.yellow(constants_1.APP_VERSION)} → ${chalk_1.default.green(latestCLIVersion)}`;
-            const npmUpdateAvailableCommand = `Run ${chalk_1.default.cyan('npm i @contrast/contrast -g')} to update via npm`;
-            const homebrewUpdateAvailableCommand = `Run ${chalk_1.default.cyan('brew install contrastsecurity/tap/contrast')} to update via brew`;
-            console.log((0, boxen_1.default)(`${updateAvailableMessage}\n${npmUpdateAvailableCommand}\n\n${homebrewUpdateAvailableCommand}`, {
+        if (semver.lt(APP_VERSION, latestCLIVersion)) {
+            const updateAvailableMessage = `Update available ${chalk.yellow(APP_VERSION)} → ${chalk.green(latestCLIVersion)}`;
+            const npmUpdateAvailableCommand = `Run ${chalk.cyan('npm i @contrast/contrast -g')} to update via npm`;
+            const homebrewUpdateAvailableCommand = `Run ${chalk.cyan('brew install contrastsecurity/tap/contrast')} to update via brew`;
+            console.log(boxen(`${updateAvailableMessage}\n${npmUpdateAvailableCommand}\n\n${homebrewUpdateAvailableCommand}`, {
                 titleAlignment: 'center',
                 margin: 1,
                 padding: 1,
@@ -47,9 +41,12 @@ async function findLatestCLIVersion(config) {
             }));
         }
     }
-}
-exports.findLatestCLIVersion = findLatestCLIVersion;
-async function isCorrectNodeVersion(currentVersion) {
-    return semver_1.default.satisfies(currentVersion, '>=16');
-}
-exports.isCorrectNodeVersion = isCorrectNodeVersion;
+};
+const isCorrectNodeVersion = async (currentVersion) => {
+    return semver.satisfies(currentVersion, '>=16');
+};
+module.exports = {
+    getLatestVersion,
+    findLatestCLIVersion,
+    isCorrectNodeVersion
+};

package/dist/constants/constants.js

@@ -12,7 +12,7 @@ const MEDIUM = 'MEDIUM';
 const HIGH = 'HIGH';
 const CRITICAL = 'CRITICAL';
 const APP_NAME = 'contrast';
-const APP_VERSION = '1.0.16';
+const APP_VERSION = '1.0.17';
 const TIMEOUT = 120000;
 const HIGH_COLOUR = '#ff9900';
 const CRITICAL_COLOUR = '#e35858';

package/dist/constants/locales.js

@@ -139,9 +139,9 @@ const en_locales = () => {
         constantsProxyCert: 'Path to the Cert file',
         constantsProxyCaCert: 'Path to the CaCert file',
         goReadProjectFile: 'Failed to read the project file @ "%s" because: "%s"',
-        mavenDependencyTreeNonZero: 'Building maven dependancy tree failed with a non 0 exit code',
+        mavenDependencyTreeNonZero: 'Building maven dependency tree failed with a non 0 exit code',
         gradleWrapperUnavailable: 'Gradle wrapper not found in root of project. Please ensure gradlew or gradlew.bat is in root of the project.',
-        gradleDependencyTreeNonZero: "Building gradle dependancy tree failed with a non 0 exit code. \n Please check you have the correct version of Java installed to compile your project? \n If running against a muti module project ensure you are using the '--sub-project' flag",
+        gradleDependencyTreeNonZero: "Building gradle dependency tree failed with a non 0 exit code. \n Please check you have the correct version of Java installed to compile your project? \n If running against a muti module project ensure you are using the '--sub-project' flag",
         constantsMetadata: 'Define a set of key=value pairs (which conforms to RFC 2253) for specifying user-defined metadata associated with the application.',
         constantsTags: 'Apply labels to an application. Labels must be formatted as a comma-delimited list. Example - label1,label2,label3',
         constantsCode: 'Add the application code this application should use in the Contrast UI',
@@ -281,10 +281,13 @@ const en_locales = () => {
         auditSCAAnalysisBegins: 'Contrast SCA audit started',
         auditSCAAnalysisComplete: 'Contrast audit complete',
         commonHelpHeader: 'Need More Help?',
+        commonHelpEnterpriseHeader: 'Existing Contrast user?',
         commonHelpCheckOutHeader: chalk.hex('#9DC184')('Check out:'),
         commonHelpCheckOutText: ' https://support.contrastsecurity.com',
         commonHelpLearnMoreHeader: chalk.hex('#9DC184')('Learn more at:'),
-        commonHelpLearnMoreText: ' https://developer.contrastsecurity.com',
+        commonHelpLearnMoreEnterpriseHeader: chalk.hex('#9DC184')('Read our docs:'),
+        commonHelpLearnMoreText: ' https://www.contrastsecurity.com/developer ',
+        commonHelpLearnMoreEnterpriseText: ' https://docs.contrastsecurity.com/en/run-contrast-cli.html ',
         commonHelpJoinDiscussionHeader: chalk.hex('#9DC184')('Join the discussion:'),
         commonHelpJoinDiscussionText: ' https://dev.to/codesec',
         ...lambda

package/dist/lambda/help.js

@@ -81,6 +81,7 @@ const lambdaUsageGuide = (0, command_line_usage_1.default)([
             { name: i18n_1.default.__('lambdaHelpOption'), summary: i18n_1.default.__('helpSummary') }
         ]
     },
-    (0, commonHelp_1.commonHelpLinks)()
+    (0, commonHelp_1.commonHelpLinks)()[0],
+    (0, commonHelp_1.commonHelpLinks)()[1]
 ]);
 exports.lambdaUsageGuide = lambdaUsageGuide;

package/dist/lambda/lambda.js

@@ -23,7 +23,7 @@ const oraWrapper_1 = __importDefault(require("../utils/oraWrapper"));
 const analytics_1 = require("./analytics");
 const types_1 = require("./types");
 const constants_2 = require("../constants/constants");
-const chalk_1 = __importDefault(require("chalk"));
+const commonHelp_1 = require("../common/commonHelp");
 const failedStates = [
     'UNSUPPORTED',
     'EXCLUDED',
@@ -110,7 +110,7 @@ const processLambda = async (argv) => {
         }
         await (0, analytics_1.postAnalytics)(endCommandAnalytics).catch((error) => {
         });
-        postRunMessage();
+        (0, commonHelp_1.postRunMessage)('lambda');
         if (errorMsg) {
             process.exit(1);
         }
@@ -193,8 +193,3 @@ const handleLambdaHelp = () => {
     printHelpMessage();
     process.exit(0);
 };
-const postRunMessage = () => {
-    console.log('\n' + chalk_1.default.underline.bold('Other Codesec Features:'));
-    console.log("'contrast scan' to run CodeSec’s industry leading SAST scanner");
-    console.log("'contrast audit' to find vulnerabilities in your open source dependencies\n");
-};

package/dist/scaAnalysis/java/analysis.js

@@ -1,8 +1,11 @@
 "use strict";
 const child_process = require('child_process');
+const spawn = require('cross-spawn');
 const path = require('path');
 const i18n = require('i18n');
 const fs = require('fs');
+const readLine = require('readline');
+const paramHandler = require('../../utils/paramsUtil/paramHandler');
 const MAVEN = 'maven';
 const GRADLE = 'gradle';
 const determineProjectTypeAndCwd = (files, config) => {
@@ -23,15 +26,20 @@ const determineProjectTypeAndCwd = (files, config) => {
 };
 const buildMaven = (config, projectData, timeout) => {
     let cmdStdout;
-    let mvn_settings = '';
     try {
+        let command = 'mvn';
+        let args = ['dependency:tree', '-B'];
         if (config.mavenSettingsPath) {
-            mvn_settings = ' -s ' + config.mavenSettingsPath;
+            args.push('-s');
+            args.push(config.mavenSettingsPath);
         }
-        cmdStdout = child_process.execSync('mvn dependency:tree -B' + mvn_settings, {
+        cmdStdout = spawn
+            .sync(command, args, {
+            env: process.env,
             cwd: projectData.cwd,
             timeout
-        });
+        })
+            .stdout.toString();
         return cmdStdout.toString();
     }
     catch (err) {
@@ -103,7 +111,34 @@ const getJavaBuildDeps = (config, files) => {
         console.log(err.message.toString());
     }
 };
+const agreementPrompt = async (config) => {
+    const rl = readLine.createInterface({
+        input: process.stdin,
+        output: process.stdout
+    });
+    return new Promise((resolve, reject) => {
+        rl.question('❔ Do you want to continue? Type Y or N', async (input) => {
+            if (input.toLowerCase() === 'yes' || input.toLowerCase() === 'y') {
+                config.javaAgreement = paramHandler.setAgreement(true);
+                rl.close();
+                resolve(config);
+            }
+            else if (input.toLowerCase() === 'no' || input.toLowerCase() === 'n') {
+                rl.close();
+                resolve(process.exit(1));
+            }
+            else {
+                rl.close();
+                console.log('Invalid Input: Exiting');
+                resolve(process.exit(1));
+            }
+        });
+    }).catch(e => {
+        throw e;
+    });
+};
 module.exports = {
     getJavaBuildDeps,
-    determineProjectTypeAndCwd
+    determineProjectTypeAndCwd,
+    agreementPrompt
 };

package/dist/scaAnalysis/java/index.js

@@ -3,10 +3,13 @@ const analysis = require('./analysis');
 const { parseBuildDeps } = require('./javaBuildDepsParser');
 const { createJavaTSMessage } = require('../common/formatMessage');
 const { parseDependenciesForSCAServices } = require('../common/scaParserForGoAndJava');
-const javaAnalysis = (config, languageFiles) => {
+const chalk = require('chalk');
+const _ = require('lodash');
+const javaAnalysis = async (config, languageFiles) => {
     languageFiles.JAVA.forEach(file => {
         file.replace('build.gradle.kts', 'build.gradle');
     });
+    await getAgreement(config);
     const javaDeps = buildJavaTree(config, languageFiles.JAVA);
     if (config.experimental) {
         return parseDependenciesForSCAServices(javaDeps);
@@ -15,10 +18,20 @@ const javaAnalysis = (config, languageFiles) => {
         return createJavaTSMessage(javaDeps);
     }
 };
+const getAgreement = async (config) => {
+    console.log(chalk.bold('Java project detected'));
+    console.log('Java analysis uses maven / gradle which are potentially susceptible to command injection. Be sure that the code you are running Contrast CLI on is trusted before continuing.');
+    if (_.isNil(!process.env.CI) && _.isNil(!config.javaAgreement)) {
+        console.log('should print');
+        return await analysis.agreementPrompt(config);
+    }
+    return config;
+};
 const buildJavaTree = (config, files) => {
     const javaBuildDeps = analysis.getJavaBuildDeps(config, files);
     return parseBuildDeps(config, javaBuildDeps);
 };
 module.exports = {
-    javaAnalysis
+    javaAnalysis,
+    getAgreement
 };

package/dist/scan/autoDetection.js

@@ -1,8 +1,16 @@
 "use strict";
 const i18n = require('i18n');
 const fileFinder = require('./fileUtils');
-const rootFile = require('../audit/languageAnalysisEngine/getProjectRootFilenames');
-const path = require('path');
+const autoDetectFingerprintInfo = async (filePath) => {
+    let complexObj = await fileFinder.findAllFiles(filePath);
+    let result = [];
+    let count = 0;
+    complexObj.forEach(i => {
+        count++;
+        result.push({ filePath: i, id: count.toString() });
+    });
+    return result;
+};
 const autoDetectFileAndLanguage = async (configToUse) => {
     const entries = await fileFinder.findFile();
     if (entries.length === 1) {
@@ -78,5 +86,6 @@ module.exports = {
     autoDetectFileAndLanguage,
     errorOnFileDetection,
     autoDetectAuditFilesAndLanguages,
-    errorOnAuditFileDetection
+    errorOnAuditFileDetection,
+    autoDetectFingerprintInfo
 };

package/dist/scan/fileUtils.js

@@ -10,6 +10,28 @@ const findFile = async () => {
         onlyFiles: true
     });
 };
+const findAllFiles = async (filePath) => {
+    const result = await fg([
+        '**/pom.xml',
+        '**/build.gradle',
+        '**/build.gradle.kts',
+        '**/package.json',
+        '**/Pipfile',
+        '**/*.csproj',
+        '**/Gemfile',
+        '**/go.mod'
+    ], {
+        dot: false,
+        deep: 2,
+        onlyFiles: true,
+        absolute: true,
+        cwd: filePath ? filePath : process.cwd()
+    });
+    if (result.length > 0) {
+        return result;
+    }
+    return [];
+};
 const findFilesJava = async (languagesFound, filePath) => {
     const result = await fg(['**/pom.xml', '**/build.gradle', '**/build.gradle.kts'], {
         dot: false,
@@ -136,5 +158,6 @@ module.exports = {
     findFilesPhp,
     findFilesRuby,
     findFilesDotNet,
-    fileIsEmpty
+    fileIsEmpty,
+    findAllFiles
 };

package/dist/scan/help.js

@@ -36,7 +36,8 @@ const scanUsageGuide = commandLineUsage([
             'application-name'
         ]
     },
-    commonHelpLinks()
+    commonHelpLinks()[0],
+    commonHelpLinks()[1]
 ]);
 module.exports = {
     scanUsageGuide

package/dist/scan/saveResults.js

@@ -3,7 +3,7 @@ const fs = require('fs');
 const writeResultsToFile = async (responseBody, name = 'results.sarif') => {
     try {
         fs.writeFileSync(name, JSON.stringify(responseBody, null, 2));
-        console.log(`Scan Results saved to ${name}`);
+        return name;
     }
     catch (err) {
         console.log('Error writing Scan Results to file');

package/dist/utils/commonApi.js

@@ -1,6 +1,6 @@
 "use strict";
 const HttpClient = require('./../common/HTTPClient');
-const { badRequestError, unauthenticatedError, forbiddenError, proxyError, genericError, maxAppError } = require('../common/errorHandling');
+const { badRequestError, unauthenticatedError, forbiddenError, proxyError, genericError, maxAppError, snapshotFailureError, vulnerabilitiesFailureError, reportFailureError } = require('../common/errorHandling');
 const handleResponseErrors = (res, api) => {
     if (res.statusCode === 400) {
         api === 'catalogue' ? badRequestError(true) : badRequestError(false);
@@ -18,6 +18,15 @@ const handleResponseErrors = (res, api) => {
         maxAppError();
     }
     else {
+        if (api === 'snapshot' || api === 'catalogue') {
+            snapshotFailureError();
+        }
+        if (api === 'vulnerabilities') {
+            vulnerabilitiesFailureError();
+        }
+        if (api === 'report') {
+            reportFailureError();
+        }
         console.log(res.statusCode);
         genericError(res);
     }

package/dist/utils/generalAPI.js

@@ -1,7 +1,6 @@
 "use strict";
 const { featuresTeamServer } = require('./capabilities');
 const semver = require('semver');
-const { handleResponseErrors } = require('../common/errorHandling');
 const commonApi = require('./commonApi');
 const { isNil } = require('lodash');
 const getGlobalProperties = async (config) => {
@@ -13,7 +12,7 @@ const getGlobalProperties = async (config) => {
             return res.body;
         }
         else {
-            handleResponseErrors(res, 'globalProperties');
+            commonApi.handleResponseErrors(res, 'globalProperties');
         }
     })
         .catch(err => {

package/dist/utils/paramsUtil/configStoreParams.js

@@ -15,4 +15,15 @@ const getAuth = () => {
     }
     return ContrastConfToUse;
 };
-module.exports = { getAuth: getAuth };
+const getAgreement = () => {
+    const ContrastConf = config.localConfig(APP_NAME, APP_VERSION);
+    let ContrastConfToUse = {};
+    ContrastConfToUse.javaAgreement = ContrastConf.get('javaAgreement');
+    return ContrastConfToUse;
+};
+const setAgreement = agreement => {
+    const ContrastConf = config.localConfig(APP_NAME, APP_VERSION);
+    ContrastConf.set('javaAgreement', agreement);
+    return agreement;
+};
+module.exports = { getAuth, getAgreement, setAgreement };

package/dist/utils/paramsUtil/paramHandler.js

@@ -22,4 +22,10 @@ const getAuth = params => {
         process.exit(1);
     }
 };
-module.exports = { getAuth: getAuth };
+const getAgreement = () => {
+    return configStoreParams.getAgreement();
+};
+const setAgreement = answer => {
+    return configStoreParams.setAgreement(answer);
+};
+module.exports = { getAuth, getAgreement, setAgreement };

package/dist/utils/saveFile.js

@@ -8,7 +8,8 @@ const saveScanFile = async (config, scanResults) => {
         const scanId = scanResults.scanDetail.id;
         const client = commonApi.getHttpClient(config);
         const rawResults = await client.getSpecificScanResultSarif(config, scanId);
-        await saveResults.writeResultsToFile(rawResults?.body);
+        const name = await saveResults.writeResultsToFile(rawResults?.body);
+        console.log(`Scan Results saved to ${name}`);
     }
     else {
         console.log(i18n.__('scanNoFiletypeSpecifiedForSave'));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/contrast",
-  "version": "1.0.16",
+  "version": "1.0.17",
   "description": "Contrast Security's command line tool",
   "main": "dist/index.js",
   "bin": {
@@ -54,6 +54,7 @@
     "command-line-args": "^5.2.1",
     "command-line-usage": "^6.1.3",
     "conf": "^10.1.2",
+    "cross-spawn": "^7.0.3",
     "dotenv": "^16.0.0",
     "fast-glob": "^3.2.11",
     "gradle-to-js": "^2.0.1",

package/src/audit/catalogueApplication/catalogueApplication.js

@@ -45,7 +45,7 @@ const tryRetrieveAppIdFromMessages = messages => {
 }
 
 module.exports = {
-  catalogueApplication: catalogueApplication,
+  catalogueApplication,
   doesMessagesContainAppId,
   tryRetrieveAppIdFromMessages
 }

package/src/cliConstants.js

@@ -334,6 +334,10 @@ const auditOptionDefinitions = [
   {
     name: 'maven-settings-path'
   },
+  {
+    name: 'fingerprint',
+    type: Boolean
+  },
   {
     name: 'organization-id',
     alias: 'o',
@@ -461,7 +465,8 @@ const mainUsageGuide = commandLineUsage([
       { name: i18n.__('clearHeader'), summary: i18n.__('clearContent') }
     ]
   },
-  commonHelpLinks()
+  commonHelpLinks()[0],
+  commonHelpLinks()[1]
 ])
 
 const mainDefinition = [{ name: 'command', defaultOption: true }]

package/src/commands/audit/auditConfig.js

@@ -0,0 +1,19 @@
+const { getCommandLineArgsCustom } = require('../../utils/parsedCLIOptions')
+const constants = require('../../cliConstants')
+const paramHandler = require('../../utils/paramsUtil/paramHandler')
+
+const getAuditConfig = async (contrastConf, command, argv) => {
+  const auditParameters = await getCommandLineArgsCustom(
+    contrastConf,
+    command,
+    argv,
+    constants.commandLineDefinitions.auditOptionDefinitions
+  )
+  const paramsAuth = paramHandler.getAuth(auditParameters)
+  const javaAgreement = paramHandler.getAgreement()
+  return { ...paramsAuth, ...auditParameters, ...javaAgreement }
+}
+
+module.exports = {
+  getAuditConfig
+}