@contrast/contrast 2.0.2-beta.3 → 2.0.2-beta.4

package/src/constants/constants.js

@@ -1,71 +0,0 @@
-// Language identifiers
-const NODE = 'NODE'
-const DOTNET = 'DOTNET'
-const JAVA = 'JAVA'
-const RUBY = 'RUBY'
-const PYTHON = 'PYTHON'
-const GO = 'GO'
-const PHP = 'PHP'
-const JAVASCRIPT = 'JAVASCRIPT'
-// Severity
-const LOW = 'LOW'
-const MEDIUM = 'MEDIUM'
-const HIGH = 'HIGH'
-const CRITICAL = 'CRITICAL'
-// App
-const APP_NAME = 'contrast'
-const APP_VERSION = '2.0.2-beta.3'
-const TIMEOUT = 120000
-const HIGH_COLOUR = '#ff9900'
-const CRITICAL_COLOUR = '#e35858'
-const MEDIUM_COLOUR = '#f1c232'
-const LOW_COLOUR = '#b7b7b7'
-const NOTE_COLOUR = '#999999'
-const CRITICAL_PRIORITY = 1
-const HIGH_PRIORITY = 2
-const MEDIUM_PRIORITY = 3
-const LOW_PRIORITY = 4
-const NOTE_PRIORITY = 5
-
-const AUTH_UI_URL = 'https://cli-auth.contrastsecurity.com'
-const AUTH_CALLBACK_URL = 'https://cli-auth-api.contrastsecurity.com'
-const SARIF_FILE = 'SARIF'
-const SBOM_CYCLONE_DX_FILE = 'CYCLONEDX'
-const SBOM_SPDX_FILE = 'SPDX'
-const CE_URL = 'https://ce.contrastsecurity.com'
-
-//configuration
-const SAAS = 'SAAS'
-const EOP = 'EOP'
-const MODE_REPO = 'REPO'
-
-module.exports = {
-  supportedLanguages: { NODE, DOTNET, JAVA, RUBY, PYTHON, GO, PHP, JAVASCRIPT },
-  supportedLanguagesScan: { JAVASCRIPT, DOTNET, JAVA },
-  LOW,
-  MEDIUM,
-  HIGH,
-  CRITICAL,
-  APP_VERSION,
-  APP_NAME,
-  TIMEOUT,
-  AUTH_UI_URL,
-  AUTH_CALLBACK_URL,
-  SARIF_FILE,
-  HIGH_COLOUR,
-  CRITICAL_COLOUR,
-  MEDIUM_COLOUR,
-  LOW_COLOUR,
-  NOTE_COLOUR,
-  CE_URL,
-  CRITICAL_PRIORITY,
-  HIGH_PRIORITY,
-  MEDIUM_PRIORITY,
-  LOW_PRIORITY,
-  NOTE_PRIORITY,
-  SBOM_CYCLONE_DX_FILE,
-  SBOM_SPDX_FILE,
-  SAAS,
-  EOP,
-  MODE_REPO
-}

package/src/constants/lambda.js

@@ -1,85 +0,0 @@
-const lambda = {
-  failedToStartScan: 'Failed to start scan',
-  failedToParseArn: 'Failed to parse ARN',
-  failedToGetScan: 'Failed to get scan',
-  missingLambdaConfig: 'Missing Lambda Configuration',
-  missingLambdaArn: 'Missing Lambda ARN',
-  validationFailed: 'Request validation failed',
-  missingFunctionName:
-    'Required parameter --function-name is missing.\nRun command with --help to see usage',
-  failedToGetResults: 'Failed to get results',
-  missingResults: 'Missing vulnerabilities',
-  awsError: 'AWS error',
-  missingFlagArguments:
-    'The following flags are missing an arguments:\n{{flags}}',
-  notSupportedFlags:
-    'The following flags are not supported:\n{{flags}}\nRun command with --help to see usage',
-  layerNotFound:
-    'The layer {{layerArn}} could not be found. The scan will continue without it',
-
-  // ====== general ===== //
-  noVulnerabilitiesFound: '👏 No vulnerabilities found',
-  scanCompleted: '----- Scan completed {{time}}s -----',
-  sendingScanRequest:
-    '{{icon}} Sending Lambda Function scan request to Contrast',
-  scanRequestedSuccessfully: '{{icon}} Scan requested successfully',
-  fetchingConfiguration:
-    '{{icon}} Fetching configuration and policies for Lambda Function {{functionName}}',
-  fetchedConfiguration: '{{icon}} Fetched configuration from AWS',
-
-  // ====== scan polling ===== //
-  scanStarted: 'Scan Started',
-  scanFailed: 'Scan Failed',
-  scanTimedOut: 'Scan timed out',
-
-  // ====== lambda utils ===== //
-  loadingFunctionList: 'Loading lambda function list',
-  functionsFound: '{{count}} functions found',
-  noFunctionsFound: 'No functions found',
-  failedToLoadFunctions: 'Failed to load lambda functions',
-  availableForScan: '{{icon}} {{count}} available for scan',
-  runtimeCount: '----- {{runtime}} ({{count}}) -----',
-
-  // ====== print vulnerabilities ===== //
-  gatherResults: 'Gathering results...',
-  doneGatherResults: 'Done gathering results',
-  whatHappenedTitle: 'What happened:',
-  whatHappenedItem: '{{policy}} have:\n{{comments}}\n',
-  recommendation: 'Recommendation:',
-  vulnerableDependency: 'Vulnerable dependency',
-  dependenciesCount: {
-    one: '1 Dependency',
-    other: '%s Dependencies'
-  },
-  foundVulnerabilities: {
-    one: 'Found 1 vulnerability',
-    other: 'Found %s vulnerabilities'
-  },
-  vulnerableDependencyDescriptions:
-    '{packageName} (v{version}) has {NUM} known {NUM, plural,one{CVE}other{CVEs}}\n {cves}',
-
-  // ====== errorCodes ===== //
-  something_went_wrong: 'Something went wrong',
-  not_found_404: '404 error - Not found',
-  internal_error: 'Internal error',
-  inactive_account:
-    'Scanning a function of an inactive account is not supported',
-  not_supported_runtime:
-    'Scanning resource of runtime "{{runtime}}" is not supported.\nSupported runtimes: {{supportedRuntimes}}',
-  not_supported_lambda: 'This function cannot be scanned',
-  not_supported_onboard_account:
-    'Scanning a function of onboard account is not supported',
-  scan_lock:
-    'Other scan is still running. Please wait until the previous scan finishes',
-
-  // ====== statuses ===== //
-  unsupported: 'unsupported',
-  excluded: 'excluded',
-  canceled: 'canceled',
-  failed: 'failed',
-  dismissed: 'dismissed'
-}
-
-module.exports = {
-  lambda
-}

package/src/constants/locales.js

@@ -1,365 +0,0 @@
-const { lambda } = require('./lambda')
-const chalk = require('chalk')
-const { APP_VERSION } = require('./constants')
-
-const en_locales = () => {
-  return {
-    snapshotFailureHeader: 'FAIL',
-    snapshotFailureMessage: 'Library analysis failed',
-    vulnerabilitiesFailureMessage: 'Unable to retrieve library vulnerabilities',
-    dependenciesNote:
-      'Please Note: We currently only support projects with one .csproj AND *.package.lock.json',
-    libraryAnalysisError:
-      'Please ensure the language parameter is set in accordance to the language specified on the project path.\nContrast CLI must be run in the same directory as the project manifest file OR the project_path parameter must be used to identify the directory containing the project manifest file.\n\nFor further information please read our usage guide, which can be accessed with the following command:\n\ncontrast-cli --help',
-    genericErrorMessage:
-      'An error has occur please check your command again. For more information use the --help commands.',
-    unauthenticatedErrorHeader: '401 error - Unauthenticated',
-    unauthenticatedErrorMessage:
-      'Please check the following keys are correct:\n--organization-id, --api-key or --authorization',
-    badRequestErrorHeader: '400 error - Bad Request',
-    badRequestErrorMessage: 'Please check your parameters and try again',
-    badRequestCatalogueErrorMessage:
-      'The application name already exists, please use a unique name',
-    forbiddenRequestErrorHeader: '403 error - Forbidden',
-    forbiddenRequestErrorMessage:
-      'You do not have permission to access this server.',
-    proxyErrorHeader: '407 error - Proxy Authentication Required',
-    proxyErrorMessage:
-      'Please provide valid authentication credentials for the proxy server.',
-    javaParseProjectFile: 'Failed to parse mvn output because: ',
-    languageAnalysisHasNoLockFile:
-      "Identified project language as '%s' but no project lock file was found.",
-    languageAnalysisHasNoPackageJsonFile:
-      'Identified project language as javascript but no package.json file was found.',
-    languageAnalysisHasMultipleLockFiles:
-      "Identified project language as '%s' but multiple project lock files were found.",
-    languageAnalysisProjectFileError:
-      "Identified project language as '%s' but no project file was found.",
-    languageAnalysisProjectRootFileNameFailure:
-      'Failed to get information about the file or directory @ %s because: ',
-    languageAnalysisNoLanguage:
-      'We cannot detect a project, use -f <path> to specify a file or folder to analyze.',
-    languageAnalysisNoLanguageHelpLine: `${chalk.bold(
-      'contrast audit --help'
-    )} for more information.`,
-    NodeParseNPM: 'Failed to parse NODE package-lock.json file because: ',
-    phpParseComposerLock:
-      "Failed to parse PHP composer.lock file @ '%s' because: ",
-    NodeParseYarn: 'Failed to parse yarn.lock version %s because: ',
-    NodeParseYarn2: "Failed to parse Node yarn.lock version 2 @ '%s' because: ",
-    nodeReadYarnLockFileError:
-      'Failed to read the yarn.lock file @ "%s" because: ',
-    constantsOptional: '(optional)',
-    constantsRequired: '(required)',
-    constantsRequiredEnterprise: '(required for Contrast Enterprise)',
-    constantsApiKey: 'An agent API key as provided by Contrast UI',
-    constantsAuthorization:
-      'An authorization header as provided by Contrast UI',
-    constantsOrganizationId:
-      'The ID of your organization as provided by Contrast UI',
-    constantsApplicationId:
-      'The ID of the application as provided by Contrast UI',
-    constantsHostId: 'host name e.g. https://app.contrastsecurity.com',
-    constantsApplicationName:
-      'The name of the application as provided by Contrast UI',
-    failOptionErrorMessage:
-      ' FAIL - CVEs have been detected that match at least the cve_severity option specified.',
-    failOptionMessage:
-      ' Use with contrast scan or contrast audit. Detects failures based on the severity level specified with the --severity command. For example, "contrast scan --fail --severity high". Returns all failures if no severity level is specified.',
-    constantsFilePath: `Specify a directory or the file where dependencies are declared. (By default, CodeSec will search for project files in the current directory.)`,
-    constantsAppGroups:
-      'Assign your application to one or more pre-existing groups when on boarding an application. Group lists should be comma separated.',
-    constantsProxyServer:
-      'Allows for connection via a proxy server. If authentication is required please provide the username and password with the protocol, host and port. For instance: "https://username:password@<host>:<port>".',
-    constantsGradleMultiProject:
-      'Specify the sub project within your gradle application.',
-    constantsDoNotWaitForScan:
-      'Fire and forget. Do not wait for the result of the scan.',
-    constantsProjectName:
-      'Contrast project name. If not specified, Contrast uses the file / folder name to identify the project or creates a new project.',
-    constantsProjectId:
-      'The ID associated with a scan project. Replace <ProjectID> with the ID for the scan project. To find the ID, select a scan project in Contrast and locate the last number in the URL.',
-    failThresholdOptionErrorMessage: 'More than 0 vulnerabilities found',
-    failSeverityOptionErrorMessage:
-      ' FAIL - Results detected vulnerabilities over accepted severity level',
-    constantsSeverity:
-      'Use with "contrast scan --fail --severity high" or "contrast audit --fail --severity high". Set the severity level to detect vulnerabilities or dependencies. Severity levels are critical, high, medium, low or note.',
-    constantsHeader: `Contrast CLI @ v${APP_VERSION}`,
-    configHeader2: 'Config options',
-    clearHeader: '-c, --clear',
-    clearContent: 'Removes stored credentials',
-    constantsPrerequisitesContentScanLanguages:
-      'Java, Javascript and .NET supported',
-    constantsContrastContent:
-      'Use the ‘contrast’ command for fast and accurate security analysis of your applications, APIs, serverless functions, and libraries.',
-    constantsContrastCategories:
-      '\n Code: Java, .NET, .NET Core, JavaScript\n Serverless: AWS Lambda - Java, Python\n Libraries: Java, .NET, Node, Ruby, Python, Go, PHP\n',
-    constantsPrerequisitesHeader: 'Pre-requisites',
-    constantsAuthUsageHeader: 'Usage',
-    constantsAuthUsageContents: 'contrast auth',
-    constantsAuthHeaderContents:
-      'Authorize with external identity provider to perform scans on code',
-    configHeader: 'Config',
-    constantsConfigUsageContents: 'view / clear the configuration',
-    constantsPrerequisitesContent:
-      'To scan a Java project you will need a .jar or .war file for analysis\n' +
-      'To scan a Javascript project you will need a single .js or a .zip of  multiple .js files\n' +
-      'To scan a .NET c# webforms project you will need a .exe or a .zip file for analysis\n',
-    constantsUsage: 'Usage',
-    constantsUsageCommandExample: 'contrast [command] [options]',
-    constantsUsageCommandInfo:
-      'The file argument is optional. If no file is given, Contrast will search for a .jar, .war, .exe or .zip file in the working directory.\n',
-    constantsUsageCommandInfo24Hours:
-      'Submitted files are encrypted during upload and deleted in 24 hours.',
-    constantsHowToRunDev3:
-      'Allowable languages are java (.jar and .war) and javascript (.js or .zip), if the language is not autodetected please use --language to specify',
-    constantsOptions: 'Options',
-    constantsProxyKey: 'Path to the Certificate Key',
-    constantsProxyCert: 'Path to the Cert file',
-    constantsProxyCaCert: 'Path to the CaCert file',
-    goReadProjectFile: 'Failed to read the project file @ "%s" because: "%s"',
-    mavenDependencyTreeNonZero:
-      'Building maven dependency tree failed with a non 0 exit code',
-    gradleWrapperUnavailable:
-      'Gradle wrapper not found in root of project. Please ensure gradlew or gradlew.bat is in root of the project.',
-    gradleDependencyTreeNonZero:
-      "Building gradle dependency tree failed with a non 0 exit code. \n Please check you have the correct version of Java installed to compile your project? \n If running against a muti module project ensure you are using the '--sub-project' flag",
-    constantsMetadata:
-      'Define a set of key=value pairs (which conforms to RFC 2253) for specifying user-defined metadata associated with the application.',
-    constantsTags:
-      'Apply labels to an application. Labels must be formatted as a comma-delimited list. Example - label1,label2,label3',
-    constantsCode:
-      'Add the application code this application should use in the Contrast UI',
-    constantsMavenSettingsPath: 'Path to maven settings',
-    constantsCertSelfSigned:
-      'For EOP users with a local Teamserver install, this will bypass the SSL certificate and recognise a self signed certificate.',
-    constantsSave: 'Saves the Scan Results SARIF to file.',
-    scanLabel:
-      "adds a label to the scan - defaults to 'Started by CLI tool at current date'",
-    constantsIgnoreDev:
-      'Excludes developer dependencies from the results. All dependencies are included by default.',
-    constantsCommands: 'Commands',
-    constantsScanOptions: 'Scan Options',
-    constantsAdvancedOptions: 'Advanced',
-    foundExistingProjectScan: 'Found existing project...',
-    projectCreatedScan: 'Project created',
-    uploadingScan: 'Uploading file to scan.',
-    uploadingScanSuccessful: 'Uploaded file successfully.',
-    uploadingScanFail: 'Unable to upload the file.',
-    waitingTimedOut: 'Timed out.',
-    responseMessage: 'Response: %s',
-    searchingDirectoryScan: 'Searched 3 directory levels & found: ',
-    noFileFoundScan:
-      "We couldn't find a suitable file in your directories (we go 3 deep)",
-    specifyFileScanError:
-      'Java Scan requires a .war or .jar file. Javascript Scan requires a .js or .zip file.\nTo start a Scan enter "contrast scan -f <path-to-file>"',
-    specifyFileAuditNotFound: 'No files found for library analysis',
-    populateProjectIdMessage: 'project ID is %s',
-    genericServiceError: 'returned with status code %s',
-    permissionsError:
-      'You do not have the correct permissions here. \n Contact support@contrastsecurity.com to get this fixed.',
-    scanErrorFileMessage:
-      'We only accept the following file types: \nJava - .jar, .war \nJavaScript - .js or .zip files',
-    helpAuthSummary:
-      'Authenticate Contrast using your Github or Google account OR include credentials if you are an existing licensed Contrast user.',
-    helpAuditSummary:
-      'Searches for a suitable file in the working directory to perform a security audit of dependencies and returns the results. \n[audit --help for options] Java, .NET, Node, Ruby, Python, Go, PHP are supported. ',
-    helpScanSummary:
-      'Searches for a .jar, .war, .js, or .zip file in the working directory, uploads files for analysis, and returns the results. \n[scan --help for options] Java, .NET, .NET Core, JavaScript are supported. ',
-    helpLambdaSummary:
-      'Performs a static security scan on an AWS lambda function. [lambda --help for options] AWS Lambda - Java & Python are supported. ',
-    helpVersionSummary: 'Displays version of Contrast CLI',
-    helpConfigSummary: 'Displays stored credentials',
-    helpSummary: 'Displays usage guide',
-    authName: 'auth',
-    auditName: 'audit',
-    scanName: 'scan',
-    lambdaName: 'lambda',
-    versionName: 'version',
-    configName: 'config',
-    helpName: 'help',
-    learnName: 'learn',
-    helpLearnSummary: 'Launches Contrast’s Secure Code Learning Hub.',
-    fingerprintName:
-      'assess repo to see how many languages it can detect. For use in pipeline only.',
-    depthOption:
-      'can set how deep in the file system the cli looks for language files',
-    scanOptionsLanguageSummary: 'Valid values are JAVA, JAVASCRIPT and DOTNET',
-    scanOptionsTimeoutSummary:
-      'Time in seconds to wait for scan to complete. Default value is 300 seconds.',
-    scanOptionsFileNameSummary:
-      'Path of the file you want to scan. If no file is specified, Contrast searches for a .jar, .war, .exe or .zip file in the working directory.',
-    scanOptionsVerboseSummary: ' Returns extended information to the terminal.',
-    auditOptionsTrackSummary:
-      ' Send your dependency audit to Contrast to see results in the UI and start automating security checks. For instance when running local SCA checks you may not need or want to track the results.',
-    auditOptionsBranchSummary:
-      ' Set the branch name to associate the library results to.',
-    auditOptionsLegacySummary:
-      ' Creates an application in Contrast (a legacy workflow) - displays a dependency tree for your piece of code, utilizes metatdata.' +
-      '\n' +
-      '.NET is only supported using --legacy\n',
-    auditOptionsRepoSummary: ' Run in repo mode.',
-    authSuccessMessage: 'Authentication successful',
-    runAuthSuccessMessage:
-      chalk.bold('CodeSec by Contrast') +
-      '\nScan, secure and ship your code in minutes for FREE. \n' +
-      chalk.bold('\nRun\n') +
-      chalk.bold('\ncontrast scan') +
-      " to run Contrast's industry leading SAST scanner. \nSupports Java, JavaScript and .Net \n" +
-      chalk.bold('\ncontrast audit') +
-      ' to find vulnerabilities in your open source dependencies.' +
-      '\nSupports Java, .NET, Node, Ruby, Python, Go and PHP.' +
-      '\n\nOur CLI runs native build tools to generate a complete dependency tree.' +
-      '\nIf you are running on untrusted code, consider running in a sandbox.\n' +
-      chalk.bold('\ncontrast lambda') +
-      ' to secure your AWS serverless functions. \nSupports Java and Python \n' +
-      chalk.bold('\ncontrast help') +
-      ' to learn more about the capabilities.',
-    authWaitingMessage: 'Waiting for auth...',
-    authTimedOutMessage: 'Auth Timed out, try again',
-    foundScanFile: 'Found: %s',
-    foundDetailedVulnerabilities:
-      chalk.bold('%s') + ' | ' + chalk.bold('%s') + ' | %s | %s | %s ',
-    searchingScanFileDirectory: 'Searching for file to scan from %s...',
-    searchingAuditFileDirectory:
-      'Searching for package manager files from %s...',
-    scanHeader: `Contrast Scan CLI`,
-    authHeader: 'Auth',
-    lambdaHeader: 'Contrast Lambda CLI',
-    lambdaSummary:
-      'Performs static security scan on an AWS Lambda Function.\nProduces CVE (Vulnerable Dependencies) and Least Privilege violations/remediation results.',
-    lambdaUsage: 'contrast lambda --function-name <function> [options]',
-    lambdaPrerequisitesContentLambdaLanguages:
-      'Supported runtimes: Java & Python',
-    lambdaPrerequisitesContentLambdaDescriptionTitle: 'AWS Requirements\n',
-    lambdaPrerequisitesContentLambdaDescription:
-      'Make sure you have the AWS credentials configured on your local environment. \nYou need the following AWS permissions configured on your IAM user:\n   - Lambda: GetFunction, GetLayerVersion, ListFunctions\n   - IAM: GetRolePolicy, GetPolicy, GetPolicyVersion, ListRolePolicies, ListAttachedRolePolicies',
-    lambdaFunctionNameOption: '-f, --function-name',
-    lambdaListFunctionsOption: '-l, --list-functions',
-    lambdaEndpointOption: '-e, --endpoint-url',
-    lambdaRegionOption: '-r, --region',
-    lambdaProfileOption: '-p, --profile',
-    lambdaJsonOption: '-j, --json-output',
-    lambdaVerboseOption: '-v, --verbose',
-    lambdaHelpOption: '-h, --help',
-    lambdaFunctionNameSummery: 'Name of AWS lambda function to scan.',
-    lambdaListFunctionsSummery: 'List all available lambda functions to scan.',
-    lambdaEndpointSummery: 'AWS Endpoint override, works like in AWS CLI.',
-    lambdaRegionSummery:
-      'Region override, default to AWS_DEAFAULT_REGION env var, works like in AWS CLI.',
-    lambdaProfileSummery:
-      'AWS configuration profile override, works like in AWS CLI.',
-    lambdaJsonSummery:
-      'Return response in JSON (versus default human readable format).',
-    lambdaVerbosSummery: 'Returns extended information to the terminal.',
-    configNotFound:
-      'Configuration details not found. Try authenticating by using ‘contrast auth’.',
-    redirectAuth:
-      '\nOpening the authentication page in your web browser.\nSign in and complete the steps.\nReturn here to start using Contrast.\n\nIf your browser has trouble loading, try this:\n%s \n',
-    fileNotExist: 'File specified does not exist, please check and try again.',
-    scanFileIsEmpty: 'File specified is empty. Please choose another.',
-    fileHasWhiteSpacesError:
-      'File cannot have spaces, please rename or choose another file to Scan.',
-    connectionError:
-      'An error has occurred when trying to get the Project Id please check your internet connection or provide the Project Id manually',
-    internalServerErrorHeader: '500 error - Internal server error',
-    resourceLockedErrorHeader: '423 error - Resource is locked',
-    auditHeader: 'Contrast Audit CLI',
-    auditHeaderMessage:
-      "Use 'contrast audit' to analyze a project’s dependencies for vulnerabilities.",
-    constantsAuditPrerequisitesContentSupportedLanguages:
-      'Supported languages and their requirements are:',
-    constantsAuditPrerequisitesJavaContentMessage: `
-    ${chalk.bold('Java:')} pom.xml ${chalk.bold(
-      'and'
-    )} Maven build platform including the dependency plugin. 
-    ${chalk.bold('Or')} build.gradle ${chalk.bold(
-      'and'
-    )} gradle dependencies or ./gradlew dependencies must be supported
-    If you are running on untrusted code, consider running in a sandbox.`,
-    constantsAuditPrerequisitesContentDotNetMessage: `
-    ${chalk.bold(
-      '.NET framework and .NET core:'
-    )} MSBuild 15.0 or greater and a packages.lock.json file.
-    Note: If the packages.lock.json file is unavailable it can be generated by setting RestorePackagesWithLockFile to true within each *.csproj file and running dotnet build. Only supported with the --legacy flag, an older workflow\n`,
-    constantsAuditPrerequisitesContentNodeMessage: `${chalk.bold(
-      'Node:'
-    )} package.json and a lock file (either .package-lock.json or .yarn.lock.)\n`,
-    constantsAuditPrerequisitesContentRubyMessage: `${chalk.bold(
-      'Ruby:'
-    )} gemfile and gemfile.lock\n`,
-    constantsAuditPrerequisitesContentPythonMessage: `${chalk.bold(
-      'Python:'
-    )} pipfile and pipfile.lock\n`,
-    constantsAuditPrerequisitesContentGoMessage: `${chalk.bold(
-      'Go:'
-    )} go.mod\n`,
-    constantsAuditPrerequisitesContentPHPMessage: `${chalk.bold(
-      'PHP:'
-    )} composer.json and composer.lock\n`,
-    constantsAuditOptions: 'Audit Options',
-    auditOptionsSaveDescription:
-      'Generate and save an SBOM (Software Bill of Materials)\n',
-    auditOptionsSaveOptionsDescription:
-      'Valid options are: --save spdx and --save cyclonedx (CycloneDX is the default format.)',
-    exceededFreeTier: `It looks like you are really loving CodeSec! \nYou have reached the monthly scan limit on the FREE tier. \nPlease contact sales@contrastsecurity.com to upgrade.`,
-    scanNotCompleted:
-      'Scan not completed. Check for framework and language support here: %s',
-    auditNotCompleted: 'audit not completed.  Please try again',
-    scanNoVulnerabilitiesFound: '🎉 No vulnerabilities found.',
-    scanNoVulnerabilitiesFoundSecureCode: '👍 Your code looks secure.',
-    scanNoVulnerabilitiesFoundGoodWork: '   Keep up the good work.',
-    scanNoFiletypeSpecifiedForSave:
-      'Please specify file type to save results to, accepted value is SARIF',
-    auditSBOMSaveSuccess:
-      '\n Software Bill of Materials (SBOM) saved successfully',
-    auditBadFiletypeSpecifiedForSave: `\n ${chalk.yellow.bold(
-      'Bad file type specified for --save option. Use audit --help to see valid --save options.'
-    )}`,
-    auditServicesMessageForTS:
-      'View your vulnerable library list or full dependency tree in Contrast:',
-    auditReportFailureMessage: 'Unable to generate library report',
-    auditSCAAnalysisBegins: 'Contrast SCA audit started',
-    auditSCAAnalysisComplete: 'Contrast audit complete',
-    commonHelpHeader: 'Need More Help? NEW users',
-    commonHelpEnterpriseHeader: 'Existing Contrast Licensed user?',
-    commonHelpCheckOutHeader: chalk.hex('#9DC184')('Check out:'),
-    commonHelpCheckOutText: ' https://support.contrastsecurity.com',
-    commonHelpLearnMoreHeader: chalk.hex('#9DC184')('Learn more at:'),
-    commonHelpLearnMoreEnterpriseHeader: chalk.hex('#9DC184')('Read our docs:'),
-    commonHelpLearnMoreText: ' https://www.contrastsecurity.com/developer ',
-    commonHelpLearnMoreEnterpriseText:
-      ' https://docs.contrastsecurity.com/en/run-contrast-cli.html ',
-    commonHelpJoinDiscussionHeader: chalk.hex('#9DC184')(
-      'Join the discussion:'
-    ),
-    commonHelpJoinDiscussionText:
-      ' https://www.contrastsecurity.com/developer/community',
-    commonHelpLearnHeader:
-      chalk.hex('#ffe599')('\r  Want to UP your game?') +
-      " type 'contrast learn'",
-    commonHelpLearnText: `\n💰 Advance your security knowledge and become an ${chalk.hex(
-      '#ffd966'
-    )('All-star coder')} ⭐  with ${chalk.bold(
-      'Contrast Secure Code Learning Hub.'
-    )} 😺`,
-    authCommand: {
-      credentialsAccepted: {
-        title: '✔ Credentials successfully saved',
-        body: `\n${chalk.bold('Contrast CLI')}`,
-        extra: 'Scan, secure and ship your code in minutes.'
-      },
-      credentialsMissing: {
-        title: 'Credentials missing',
-        body: 'You have not entered the right parameters or enough information',
-        extra:
-          'Please check and try again e.g. contrast auth --api-key yourApiKey--organization-id yourOrg --authorization yourAuth --host https://yourHost\nOr contrast help for full list of commands'
-      }
-    },
-    ...lambda
-  }
-}
-
-module.exports = {
-  en_locales
-}

package/src/index.ts

@@ -1,142 +0,0 @@
-#!/usr/bin/env node
-
-import commandLineArgs from 'command-line-args'
-import { processAudit } from './commands/audit/processAudit'
-import { processAuth } from './commands/auth/auth'
-import { processConfig } from './commands/config/config'
-import { processScan } from './commands/scan/processScan'
-import constants from './cliConstants'
-import { APP_NAME, APP_VERSION } from './constants/constants'
-import { processLambda } from './lambda/lambda'
-import { localConfig } from './utils/getConfig'
-import {
-  findLatestCLIVersion,
-  isCorrectNodeVersion
-} from './common/versionChecker'
-import { findCommandOnError } from './common/errorHandling'
-import { sendTelemetryConfigAsConfObj } from './telemetry/telemetry'
-import { processLearn } from './commands/learn/processLearn'
-import { processFingerprint } from './commands/github/processFingerprint'
-const {
-  commandLineDefinitions: { mainUsageGuide, mainDefinition }
-} = constants
-
-const config = localConfig(APP_NAME, APP_VERSION)
-
-const getMainOption = () => {
-  const mainOptions = commandLineArgs(mainDefinition, {
-    stopAtFirstUnknown: true,
-    camelCase: true,
-    caseInsensitive: true
-  })
-  const argv = mainOptions._unknown || []
-
-  return {
-    mainOptions,
-    argv
-  }
-}
-
-const start = async () => {
-  try {
-    if (await isCorrectNodeVersion(process.version)) {
-      const { mainOptions, argv: argvMain } = getMainOption()
-      const command =
-        mainOptions.command != undefined
-          ? mainOptions.command.toLowerCase()
-          : ''
-      if (
-        command === 'version' ||
-        argvMain.includes('--v') ||
-        argvMain.includes('--version')
-      ) {
-        console.log(APP_VERSION)
-        await findLatestCLIVersion(config)
-        return
-      }
-
-      // @ts-ignore
-      config.set('numOfRuns', config.get('numOfRuns') + 1)
-
-      // @ts-ignore
-      if (config.get('numOfRuns') >= 10) {
-        await findLatestCLIVersion(config)
-        config.set('numOfRuns', 0)
-      }
-
-      if (command === 'config') {
-        return processConfig(argvMain, config)
-      }
-
-      if (command === 'auth') {
-        return await processAuth(argvMain, config)
-      }
-
-      if (command === 'lambda') {
-        return await processLambda(argvMain)
-      }
-
-      if (command === 'scan') {
-        return await processScan(config, argvMain)
-      }
-
-      if (command === 'audit') {
-        return await processAudit(config, argvMain)
-      }
-
-      if (command === 'fingerprint') {
-        return await processFingerprint(config, argvMain)
-      }
-
-      if (command === 'learn') {
-        return processLearn()
-      }
-
-      if (
-        command === 'help' ||
-        argvMain.includes('--help') ||
-        Object.keys(mainOptions).length === 0
-      ) {
-        console.log(mainUsageGuide)
-      } else if (mainOptions._unknown !== undefined) {
-        const foundCommand = findCommandOnError(mainOptions._unknown)
-
-        foundCommand
-          ? console.log(
-              `Unknown Command: Did you mean "${foundCommand}"? \nUse "${foundCommand} --help" for the full list of options`
-            )
-          : console.log(`\nUnknown Command: ${command} \n`)
-        console.log(mainUsageGuide)
-        await sendTelemetryConfigAsConfObj(
-          config,
-          command,
-          argvMain,
-          'FAILURE',
-          'undefined'
-        )
-      } else {
-        console.log(`\nUnknown Command: ${command}\n`)
-        console.log(mainUsageGuide)
-        await sendTelemetryConfigAsConfObj(
-          config,
-          command,
-          argvMain,
-          'FAILURE',
-          'undefined'
-        )
-      }
-      process.exit(9)
-    } else {
-      console.log(
-        'Contrast supports Node versions >=16.13.2 <17. Please use one of those versions.'
-      )
-      process.exit(9)
-    }
-  } catch (err: any) {
-    console.log()
-    console.log(err.message.toString())
-    process.exit(1)
-  }
-}
-
-start()