@datadog/datadog-ci 2.40.1 → 2.40.3

package/dist/commands/sarif/__tests__/upload.test.js

@@ -0,0 +1,228 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const os_1 = __importDefault(require("os"));
+const advanced_1 = require("clipanion/lib/advanced");
+const renderer_1 = require("../renderer");
+const upload_1 = require("../upload");
+const makeCli = () => {
+    const cli = new advanced_1.Cli();
+    cli.register(upload_1.UploadSarifReportCommand);
+    return cli;
+};
+const createMockContext = () => {
+    let data = '';
+    return {
+        stdout: {
+            toString: () => data,
+            write: (input) => {
+                data += input;
+            },
+        },
+        stderr: {
+            toString: () => data,
+            write: (input) => {
+                data += input;
+            },
+        },
+    };
+};
+describe('upload', () => {
+    describe('getApiHelper', () => {
+        test('should throw an error if API key is undefined', () => {
+            process.env = {};
+            const write = jest.fn();
+            const command = new upload_1.UploadSarifReportCommand();
+            command.context = { stdout: { write } };
+            expect(command['getApiHelper'].bind(command)).toThrow('API key is missing');
+            expect(write.mock.calls[0][0]).toContain('DATADOG_API_KEY');
+        });
+    });
+    describe('getMatchingSarifReports', () => {
+        test('should read all sarif reports and reject invalid ones', () => __awaiter(void 0, void 0, void 0, function* () {
+            const context = createMockContext();
+            const command = new upload_1.UploadSarifReportCommand();
+            const [firstFile, secondFile] = yield command['getMatchingSarifReports'].call({
+                basePaths: ['./src/commands/sarif/__tests__/fixtures'],
+                config: {},
+                context,
+                service: 'service',
+            }, {});
+            expect(firstFile).toMatchObject({
+                service: 'service',
+                reportPath: './src/commands/sarif/__tests__/fixtures/valid-no-results.sarif',
+            });
+            expect(secondFile).toMatchObject({
+                service: 'service',
+                reportPath: './src/commands/sarif/__tests__/fixtures/valid-results.sarif',
+            });
+            const getInvalidJsonUnexpectedTokenErrorMessage = () => {
+                try {
+                    JSON.parse('this is an invalid sarif report');
+                }
+                catch (e) {
+                    // This error message is different in Node.js >=20
+                    return e.message;
+                }
+                throw Error('unreachable');
+            };
+            const output = context.stdout.toString();
+            expect(output).toContain((0, renderer_1.renderInvalidFile)('./src/commands/sarif/__tests__/fixtures/empty.sarif', 'Unexpected end of JSON input'));
+            expect(output).toContain((0, renderer_1.renderInvalidFile)('./src/commands/sarif/__tests__/fixtures/invalid.sarif', getInvalidJsonUnexpectedTokenErrorMessage()));
+            expect(output).toContain((0, renderer_1.renderInvalidFile)('./src/commands/sarif/__tests__/fixtures/invalid-result.sarif', "/runs/0/results/0: must have required property 'message'"));
+        }));
+        test('should allow single files', () => __awaiter(void 0, void 0, void 0, function* () {
+            const context = createMockContext();
+            const command = new upload_1.UploadSarifReportCommand();
+            const files = yield command['getMatchingSarifReports'].call({
+                basePaths: ['./src/commands/sarif/__tests__/fixtures/valid-results.sarif'],
+                config: {},
+                context,
+                service: 'service',
+            }, {});
+            expect(files.length).toEqual(1);
+            expect(files[0]).toMatchObject({
+                service: 'service',
+                reportPath: './src/commands/sarif/__tests__/fixtures/valid-results.sarif',
+            });
+        }));
+        test('should not fail for invalid single files', () => __awaiter(void 0, void 0, void 0, function* () {
+            const context = createMockContext();
+            const command = new upload_1.UploadSarifReportCommand();
+            const files = yield command['getMatchingSarifReports'].call({
+                basePaths: ['./src/commands/sarif/__tests__/fixtures/does-not-exist.sarif'],
+                config: {},
+                context,
+                service: 'service',
+            }, {});
+            expect(files.length).toEqual(0);
+        }));
+        test('should allow folder and single unit paths', () => __awaiter(void 0, void 0, void 0, function* () {
+            const context = createMockContext();
+            const command = new upload_1.UploadSarifReportCommand();
+            const [firstFile, secondFile, thirdFile] = yield command['getMatchingSarifReports'].call({
+                basePaths: [
+                    './src/commands/sarif/__tests__/fixtures',
+                    './src/commands/sarif/__tests__/fixtures/subfolder/valid-results.sarif',
+                ],
+                config: {},
+                context,
+                service: 'service',
+            }, {});
+            expect(firstFile).toMatchObject({
+                service: 'service',
+                reportPath: './src/commands/sarif/__tests__/fixtures/valid-no-results.sarif',
+            });
+            expect(secondFile).toMatchObject({
+                service: 'service',
+                reportPath: './src/commands/sarif/__tests__/fixtures/valid-results.sarif',
+            });
+            expect(thirdFile).toMatchObject({
+                service: 'service',
+                reportPath: './src/commands/sarif/__tests__/fixtures/subfolder/valid-results.sarif',
+            });
+        }));
+        test('should not have repeated files', () => __awaiter(void 0, void 0, void 0, function* () {
+            const context = createMockContext();
+            const command = new upload_1.UploadSarifReportCommand();
+            const files = yield command['getMatchingSarifReports'].call({
+                basePaths: [
+                    './src/commands/sarif/__tests__/fixtures',
+                    './src/commands/junit/__tests__/fixtures/valid-results.sarif',
+                ],
+                config: {},
+                context,
+                service: 'service',
+            }, {});
+            expect(files.length).toEqual(2);
+        }));
+    });
+});
+describe('execute', () => {
+    const runCLI = (paths) => __awaiter(void 0, void 0, void 0, function* () {
+        const cli = makeCli();
+        const context = createMockContext();
+        process.env = { DATADOG_API_KEY: 'PLACEHOLDER' };
+        const code = yield cli.run(['sarif', 'upload', '--service', 'test-service', '--env', 'ci', '--dry-run', ...paths], context);
+        return { context, code };
+    });
+    test('relative path with double dots', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { context, code } = yield runCLI(['./src/commands/sarif/__tests__/doesnotexist/../fixtures/subfolder']);
+        const output = context.stdout.toString().split(os_1.default.EOL);
+        expect(code).toBe(0);
+        checkConsoleOutput(output, {
+            basePaths: ['src/commands/sarif/__tests__/fixtures/subfolder'],
+            concurrency: 20,
+            service: 'test-service',
+            env: 'ci',
+        });
+    }));
+    test('multiple paths', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { context, code } = yield runCLI([
+            './src/commands/sarif/__tests__/fixtures/subfolder/',
+            './src/commands/sarif/__tests__/fixtures/another_subfolder/',
+        ]);
+        const output = context.stdout.toString().split(os_1.default.EOL);
+        expect(code).toBe(0);
+        checkConsoleOutput(output, {
+            basePaths: [
+                'src/commands/sarif/__tests__/fixtures/subfolder/',
+                'src/commands/sarif/__tests__/fixtures/another_subfolder/',
+            ],
+            concurrency: 20,
+            service: 'test-service',
+            env: 'ci',
+        });
+    }));
+    test('absolute path', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { context, code } = yield runCLI([process.cwd() + '/src/commands/sarif/__tests__/fixtures/subfolder']);
+        const output = context.stdout.toString().split(os_1.default.EOL);
+        expect(code).toBe(0);
+        checkConsoleOutput(output, {
+            basePaths: [`${process.cwd()}/src/commands/sarif/__tests__/fixtures/subfolder`],
+            concurrency: 20,
+            service: 'test-service',
+            env: 'ci',
+        });
+    }));
+    test('single file', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { context, code } = yield runCLI([process.cwd() + '/src/commands/sarif/__tests__/fixtures/valid-results.sarif']);
+        const output = context.stdout.toString().split(os_1.default.EOL);
+        const path = `${process.cwd()}/src/commands/sarif/__tests__/fixtures/valid-results.sarif`;
+        expect(code).toBe(0);
+        expect(output[0]).toContain('DRY-RUN MODE ENABLED. WILL NOT UPLOAD SARIF REPORT');
+        expect(output[1]).toContain('Starting upload with concurrency 20.');
+        expect(output[2]).toContain(`Will upload SARIF report file ${path}`);
+        expect(output[3]).toContain('Only one upload per commit, env, service and tool');
+        expect(output[4]).toContain(`Preparing upload for`);
+        expect(output[4]).toContain(`env:ci service:test-service`);
+    }));
+    test('not found file', () => __awaiter(void 0, void 0, void 0, function* () {
+        const { context, code } = yield runCLI([process.cwd() + '/src/commands/sarif/__tests__/fixtures/not-found.sarif']);
+        const output = context.stdout.toString().split(os_1.default.EOL);
+        const path = `${process.cwd()}/src/commands/sarif/__tests__/fixtures/not-found.sarif`;
+        expect(code).toBe(1);
+        expect(output[0]).toContain(`Cannot find valid SARIF report files to upload in ${path} for service test-service`);
+        expect(output[1]).toContain('Check the files exist and are valid.');
+    }));
+});
+const checkConsoleOutput = (output, expected) => {
+    expect(output[0]).toContain('DRY-RUN MODE ENABLED. WILL NOT UPLOAD SARIF REPORT');
+    expect(output[1]).toContain(`Starting upload with concurrency ${expected.concurrency}.`);
+    expect(output[2]).toContain(`Will look for SARIF report files in ${expected.basePaths.join(', ')}`);
+    expect(output[3]).toContain('Only one upload per commit, env, service and tool');
+    expect(output[4]).toContain(`Preparing upload for`);
+    expect(output[4]).toContain(`env:${expected.env} service:${expected.service}`);
+};
+//# sourceMappingURL=upload.test.js.map

package/dist/commands/sarif/__tests__/upload.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.test.js","sourceRoot":"","sources":["../../../../src/commands/sarif/__tests__/upload.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,4CAAmB;AAEnB,qDAA0C;AAE1C,0CAA6C;AAC7C,sCAAkD;AAElD,MAAM,OAAO,GAAG,GAAG,EAAE;IACnB,MAAM,GAAG,GAAG,IAAI,cAAG,EAAE,CAAA;IACrB,GAAG,CAAC,QAAQ,CAAC,iCAAwB,CAAC,CAAA;IAEtC,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,GAAG,EAAE;IAC7B,IAAI,IAAI,GAAG,EAAE,CAAA;IAEb,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;YACpB,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE;gBACvB,IAAI,IAAI,KAAK,CAAA;YACf,CAAC;SACF;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;YACpB,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE;gBACvB,IAAI,IAAI,KAAK,CAAA;YACf,CAAC;SACF;KACF,CAAA;AACH,CAAC,CAAA;AAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACzD,OAAO,CAAC,GAAG,GAAG,EAAE,CAAA;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAA;YACvB,MAAM,OAAO,GAAG,IAAI,iCAAwB,EAAE,CAAA;YAC9C,OAAO,CAAC,OAAO,GAAG,EAAC,MAAM,EAAE,EAAC,KAAK,EAAC,EAAQ,CAAA;YAE1C,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;YAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,IAAI,CAAC,uDAAuD,EAAE,GAAS,EAAE;YACvE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,iCAAwB,EAAE,CAAA;YAC9C,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAC3E;gBACE,SAAS,EAAE,CAAC,yCAAyC,CAAC;gBACtD,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,OAAO,EAAE,SAAS;aACnB,EACD,EAAE,CACH,CAAA;YAED,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;gBAC9B,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,gEAAgE;aAC7E,CAAC,CAAA;YACF,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC;gBAC/B,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,6DAA6D;aAC1E,CAAC,CAAA;YAEF,MAAM,yCAAyC,GAAG,GAAG,EAAE;gBACrD,IAAI;oBACF,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;iBAC9C;gBAAC,OAAO,CAAC,EAAE;oBACV,kDAAkD;oBAClD,OAAQ,CAAiB,CAAC,OAAO,CAAA;iBAClC;gBAED,MAAM,KAAK,CAAC,aAAa,CAAC,CAAA;YAC5B,CAAC,CAAA;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAA;YACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CACtB,IAAA,4BAAiB,EAAC,qDAAqD,EAAE,8BAA8B,CAAC,CACzG,CAAA;YACD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CACtB,IAAA,4BAAiB,EACf,uDAAuD,EACvD,yCAAyC,EAAE,CAC5C,CACF,CAAA;YACD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CACtB,IAAA,4BAAiB,EACf,8DAA8D,EAC9D,0DAA0D,CAC3D,CACF,CAAA;QACH,CAAC,CAAA,CAAC,CAAA;QACF,IAAI,CAAC,2BAA2B,EAAE,GAAS,EAAE;YAC3C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,iCAAwB,EAAE,CAAA;YAC9C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CACzD;gBACE,SAAS,EAAE,CAAC,6DAA6D,CAAC;gBAC1E,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,OAAO,EAAE,SAAS;aACnB,EACD,EAAE,CACH,CAAA;YAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAE/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC7B,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,6DAA6D;aAC1E,CAAC,CAAA;QACJ,CAAC,CAAA,CAAC,CAAA;QACF,IAAI,CAAC,0CAA0C,EAAE,GAAS,EAAE;YAC1D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,iCAAwB,EAAE,CAAA;YAC9C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CACzD;gBACE,SAAS,EAAE,CAAC,8DAA8D,CAAC;gBAC3E,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,OAAO,EAAE,SAAS;aACnB,EACD,EAAE,CACH,CAAA;YAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC,CAAA,CAAC,CAAA;QACF,IAAI,CAAC,2CAA2C,EAAE,GAAS,EAAE;YAC3D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,iCAAwB,EAAE,CAAA;YAC9C,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CACtF;gBACE,SAAS,EAAE;oBACT,yCAAyC;oBACzC,uEAAuE;iBACxE;gBACD,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,OAAO,EAAE,SAAS;aACnB,EACD,EAAE,CACH,CAAA;YACD,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;gBAC9B,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,gEAAgE;aAC7E,CAAC,CAAA;YACF,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC;gBAC/B,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,6DAA6D;aAC1E,CAAC,CAAA;YACF,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;gBAC9B,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,uEAAuE;aACpF,CAAC,CAAA;QACJ,CAAC,CAAA,CAAC,CAAA;QACF,IAAI,CAAC,gCAAgC,EAAE,GAAS,EAAE;YAChD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,iCAAwB,EAAE,CAAA;YAC9C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CACzD;gBACE,SAAS,EAAE;oBACT,yCAAyC;oBACzC,6DAA6D;iBAC9D;gBACD,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,OAAO,EAAE,SAAS;aACnB,EACD,EAAE,CACH,CAAA;YAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC,CAAA,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,MAAM,MAAM,GAAG,CAAO,KAAe,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;QACrB,MAAM,OAAO,GAAG,iBAAiB,EAAS,CAAA;QAC1C,OAAO,CAAC,GAAG,GAAG,EAAC,eAAe,EAAE,aAAa,EAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CACxB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,EACtF,OAAO,CACR,CAAA;QAED,OAAO,EAAC,OAAO,EAAE,IAAI,EAAC,CAAA;IACxB,CAAC,CAAA,CAAA;IACD,IAAI,CAAC,gCAAgC,EAAE,GAAS,EAAE;QAChD,MAAM,EAAC,OAAO,EAAE,IAAI,EAAC,GAAG,MAAM,MAAM,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAA;QAC3G,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,YAAE,CAAC,GAAG,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,kBAAkB,CAAC,MAAM,EAAE;YACzB,SAAS,EAAE,CAAC,iDAAiD,CAAC;YAC9D,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,cAAc;YACvB,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IACF,IAAI,CAAC,gBAAgB,EAAE,GAAS,EAAE;QAChC,MAAM,EAAC,OAAO,EAAE,IAAI,EAAC,GAAG,MAAM,MAAM,CAAC;YACnC,oDAAoD;YACpD,4DAA4D;SAC7D,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,YAAE,CAAC,GAAG,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,kBAAkB,CAAC,MAAM,EAAE;YACzB,SAAS,EAAE;gBACT,kDAAkD;gBAClD,0DAA0D;aAC3D;YACD,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,cAAc;YACvB,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,eAAe,EAAE,GAAS,EAAE;QAC/B,MAAM,EAAC,OAAO,EAAE,IAAI,EAAC,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,kDAAkD,CAAC,CAAC,CAAA;QAC1G,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,YAAE,CAAC,GAAG,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,kBAAkB,CAAC,MAAM,EAAE;YACzB,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,kDAAkD,CAAC;YAC/E,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,cAAc;YACvB,GAAG,EAAE,IAAI;SACV,CAAC,CAAA;IACJ,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,aAAa,EAAE,GAAS,EAAE;QAC7B,MAAM,EAAC,OAAO,EAAE,IAAI,EAAC,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,4DAA4D,CAAC,CAAC,CAAA;QACpH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,YAAE,CAAC,GAAG,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,4DAA4D,CAAA;QACzF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oDAAoD,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAA;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mDAAmD,CAAC,CAAA;QAChF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAA;IAC5D,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,gBAAgB,EAAE,GAAS,EAAE;QAChC,MAAM,EAAC,OAAO,EAAE,IAAI,EAAC,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,wDAAwD,CAAC,CAAC,CAAA;QAChH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,YAAE,CAAC,GAAG,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,wDAAwD,CAAA;QACrF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,qDAAqD,IAAI,2BAA2B,CAAC,CAAA;QACjH,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAA;IACrE,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AASF,MAAM,kBAAkB,GAAG,CAAC,MAAgB,EAAE,QAAwB,EAAE,EAAE;IACxE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oDAAoD,CAAC,CAAA;IACjF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oCAAoC,QAAQ,CAAC,WAAW,GAAG,CAAC,CAAA;IACxF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,uCAAuC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mDAAmD,CAAC,CAAA;IAChF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;IACnD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,QAAQ,CAAC,GAAG,YAAY,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;AAChF,CAAC,CAAA"}

package/dist/commands/sbom/__tests__/payload.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/sbom/__tests__/payload.test.js

@@ -0,0 +1,262 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const tags_1 = require("../../../helpers/tags");
+const payload_1 = require("../payload");
+const types_1 = require("../types");
+describe('generation of payload', () => {
+    beforeEach(() => {
+        jest.spyOn(console, 'debug').mockImplementation();
+        jest.spyOn(console, 'log').mockImplementation();
+    });
+    test('should correctly work with a CycloneDX 1.4 file', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/sbom.1.4.ok.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload).not.toBeNull();
+        expect(payload === null || payload === void 0 ? void 0 : payload.id).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.sha).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.author_name).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.author_email).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.branch).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.repository.url).toContain('github.com');
+        expect(payload === null || payload === void 0 ? void 0 : payload.repository.url).toContain('DataDog/datadog-ci');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toBe(62);
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies[0].name).toBe('stack-cors');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies[0].version).toBe('1.3.0');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies[0].licenses.length).toBe(0);
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies[0].language).toBe(types_1.DependencyLanguage.PHP);
+    }));
+    test('should succeed when called on a valid SBOM file for CycloneDX 1.5', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/sbom.1.5.ok.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload).not.toBeNull();
+        expect(payload === null || payload === void 0 ? void 0 : payload.id).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.sha).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.author_name).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.author_email).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.commit.branch).toStrictEqual(expect.any(String));
+        expect(payload === null || payload === void 0 ? void 0 : payload.repository.url).toContain('github.com');
+        expect(payload === null || payload === void 0 ? void 0 : payload.repository.url).toContain('DataDog/datadog-ci');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toBe(147);
+        const dependenciesWithoutLicense = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.licenses.length === 0);
+        expect(dependenciesWithoutLicense === null || dependenciesWithoutLicense === void 0 ? void 0 : dependenciesWithoutLicense.length).toBe(147);
+    }));
+    test('SBOM for rust with multiple licenses', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/sbom-rust.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(305);
+        const dependenciesWithoutLicense = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.licenses.length === 0);
+        expect(dependenciesWithoutLicense === null || dependenciesWithoutLicense === void 0 ? void 0 : dependenciesWithoutLicense.length).toStrictEqual(305);
+        // all languages are detected
+        const dependenciesWithoutLanguage = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => !d.language);
+        expect(dependenciesWithoutLanguage === null || dependenciesWithoutLanguage === void 0 ? void 0 : dependenciesWithoutLanguage.length).toStrictEqual(0);
+    }));
+    test('SBOM generated for Ruby from a Gemfile lock', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/sbom-ruby.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(64);
+        const dependenciesWithoutLicense = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.licenses.length === 0);
+        expect(dependenciesWithoutLicense === null || dependenciesWithoutLicense === void 0 ? void 0 : dependenciesWithoutLicense.length).toStrictEqual(64);
+        // all languages are detected
+        const dependenciesWithoutLanguage = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => !d.language);
+        expect(dependenciesWithoutLanguage === null || dependenciesWithoutLanguage === void 0 ? void 0 : dependenciesWithoutLanguage.length).toStrictEqual(0);
+    }));
+    test('SBOM generated for Java and Go', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/sbom-java-go.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(89);
+        const dependenciesWithoutLicense = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.licenses.length === 0);
+        expect(dependenciesWithoutLicense === null || dependenciesWithoutLicense === void 0 ? void 0 : dependenciesWithoutLicense.length).toStrictEqual(89);
+        // all languages are detected
+        const dependenciesWithoutLanguage = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => !d.language);
+        expect(dependenciesWithoutLanguage === null || dependenciesWithoutLanguage === void 0 ? void 0 : dependenciesWithoutLanguage.length).toStrictEqual(0);
+        const dependenciesWithJava = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.language === types_1.DependencyLanguage.JVM);
+        expect(dependenciesWithJava === null || dependenciesWithJava === void 0 ? void 0 : dependenciesWithJava.length).toStrictEqual(55);
+        const dependenciesWithGo = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.language === types_1.DependencyLanguage.GO);
+        expect(dependenciesWithGo === null || dependenciesWithGo === void 0 ? void 0 : dependenciesWithGo.length).toStrictEqual(34);
+    }));
+    test('SBOM generated for Python', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/sbom-python.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(19);
+        const dependenciesWithoutLicense = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.licenses.length === 0);
+        expect(dependenciesWithoutLicense === null || dependenciesWithoutLicense === void 0 ? void 0 : dependenciesWithoutLicense.length).toStrictEqual(19);
+        // all languages are detected
+        const dependenciesWithoutLanguage = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => !d.language);
+        expect(dependenciesWithoutLanguage === null || dependenciesWithoutLanguage === void 0 ? void 0 : dependenciesWithoutLanguage.length).toStrictEqual(0);
+        const dependenciesWithPython = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.language === types_1.DependencyLanguage.PYTHON);
+        expect(dependenciesWithPython === null || dependenciesWithPython === void 0 ? void 0 : dependenciesWithPython.length).toStrictEqual(19);
+    }));
+    test('SBOM generated from Trivy 4.9 with group', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/trivy-4.9.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(433);
+        const dependencies = payload === null || payload === void 0 ? void 0 : payload.dependencies;
+        const dependenciesWithoutLicense = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.licenses.length === 0);
+        expect(dependenciesWithoutLicense === null || dependenciesWithoutLicense === void 0 ? void 0 : dependenciesWithoutLicense.length).toStrictEqual(433);
+        // all languages are detected
+        const dependenciesWithoutLanguage = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => !d.language);
+        expect(dependenciesWithoutLanguage === null || dependenciesWithoutLanguage === void 0 ? void 0 : dependenciesWithoutLanguage.length).toStrictEqual(0);
+        const dependenciesWithNode = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.language === types_1.DependencyLanguage.NPM);
+        expect(dependenciesWithNode === null || dependenciesWithNode === void 0 ? void 0 : dependenciesWithNode.length).toStrictEqual(433);
+        expect(dependencies === null || dependencies === void 0 ? void 0 : dependencies.filter((d) => d.group !== undefined).length).toBeGreaterThan(0);
+        expect(dependencies && dependencies[10].group).toStrictEqual('@aws-sdk');
+    }));
+    test('SBOM generated from cyclonedx-npm', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/cyclonedx-npm.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(63);
+        const dependenciesWithoutLicense = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.licenses.length === 0);
+        expect(dependenciesWithoutLicense === null || dependenciesWithoutLicense === void 0 ? void 0 : dependenciesWithoutLicense.length).toStrictEqual(63);
+        // all languages are detected
+        const dependenciesWithoutLanguage = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => !d.language);
+        expect(dependenciesWithoutLanguage === null || dependenciesWithoutLanguage === void 0 ? void 0 : dependenciesWithoutLanguage.length).toStrictEqual(0);
+        const dependenciesWithNode = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => d.language === types_1.DependencyLanguage.NPM);
+        expect(dependenciesWithNode === null || dependenciesWithNode === void 0 ? void 0 : dependenciesWithNode.length).toStrictEqual(63);
+    }));
+    test('SBOM generated from osv-scanner with files', () => __awaiter(void 0, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/osv-scanner-files.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(22);
+        const dependencies = payload.dependencies;
+        // all languages are detected
+        const dependenciesWithoutLocation = payload === null || payload === void 0 ? void 0 : payload.dependencies.filter((d) => !d.locations);
+        expect(dependenciesWithoutLocation === null || dependenciesWithoutLocation === void 0 ? void 0 : dependenciesWithoutLocation.length).toStrictEqual(0);
+        // Check that we can have multiple locations
+        expect((_a = dependencies[0].locations) === null || _a === void 0 ? void 0 : _a.length).toStrictEqual(1);
+        expect((_b = dependencies[1].locations) === null || _b === void 0 ? void 0 : _b.length).toStrictEqual(1);
+        // check location correctness
+        expect(dependencies[0]).not.toBeNull();
+        expect(dependencies[0].locations[0].block.start.line).toStrictEqual(62);
+        expect(dependencies[0].locations[0].block.start.col).toStrictEqual(9);
+        expect(dependencies[0].locations[0].block.end.line).toStrictEqual(67);
+        expect(dependencies[0].locations[0].block.end.col).toStrictEqual(22);
+        expect(dependencies[0].locations[0].block.file_name).toStrictEqual('/Users/julien.delange/tmp/tutorials/pom.xml');
+        // check that we do not have duplicate locations. The org.assertj:assertj-core in our test file has 2 locations
+        // but 1 unique locations only (lots of duplicates). We make sure we only surface the non-duplicates ones.
+        const dependencyAssertJCore = dependencies[0];
+        expect(dependencyAssertJCore.name).toStrictEqual('org.assertj:assertj-core');
+        expect((_c = dependencyAssertJCore.locations) === null || _c === void 0 ? void 0 : _c.length).toStrictEqual(1);
+        // check that for a location, the end line is greater or equal to start line
+        // if start and end lines are equal, the end col must be smaller than start col
+        const checkLocation = (location) => {
+            if (!location) {
+                return;
+            }
+            expect(location.end.line).toBeGreaterThanOrEqual(location.start.line);
+            if (location.start.line === location.end.line) {
+                // eslint-disable-next-line jest/no-conditional-expect
+                expect(location.end.col).toBeGreaterThanOrEqual(location.start.col);
+            }
+        };
+        // Check that all locations are valid
+        for (const d of dependencies) {
+            expect(d.locations).not.toBeNull();
+            // just to avoid eslint warnings
+            if (!d.locations) {
+                continue;
+            }
+            for (const l of d.locations) {
+                checkLocation(l.block);
+                checkLocation(l.name);
+                checkLocation(l.namespace);
+                checkLocation(l.version);
+            }
+        }
+    }));
+    test('SBOM generated from osv-scanner with missing versions', () => __awaiter(void 0, void 0, void 0, function* () {
+        const sbomFile = './src/commands/sbom/__tests__/fixtures/sbom-missing-version.json';
+        const sbomContent = JSON.parse(fs_1.default.readFileSync(sbomFile).toString('utf8'));
+        const config = {
+            apiKey: undefined,
+            env: undefined,
+            envVarTags: undefined,
+        };
+        const tags = yield (0, tags_1.getSpanTags)(config, []);
+        const payload = (0, payload_1.generatePayload)(sbomContent, tags, 'service', 'env');
+        expect(payload === null || payload === void 0 ? void 0 : payload.dependencies.length).toStrictEqual(2);
+        const dependencies = payload.dependencies;
+        // Check that we can have multiple locations
+        expect(dependencies[0].name).toEqual('markupsafe');
+        expect(dependencies[0].version).toBeUndefined();
+        expect(dependencies[1].name).toEqual('jinja2');
+        expect(dependencies[1].version).toEqual('3.1.5');
+    }));
+});
+//# sourceMappingURL=payload.test.js.map

package/dist/commands/sbom/__tests__/payload.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.test.js","sourceRoot":"","sources":["../../../../src/commands/sbom/__tests__/payload.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,4CAAmB;AAGnB,gDAAiD;AAEjD,wCAA0C;AAC1C,oCAAqD;AAErD,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,EAAE,CAAA;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,iDAAiD,EAAE,GAAS,EAAE;QACjE,MAAM,QAAQ,GAAG,yDAAyD,CAAA;QAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QACpE,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9B,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAErD,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7D,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QACrE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QACvD,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;QAC/D,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC7C,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxD,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,0BAAkB,CAAC,GAAG,CAAC,CAAA;IACxE,CAAC,CAAA,CAAC,CAAA;IACF,IAAI,CAAC,mEAAmE,EAAE,GAAS,EAAE;QACnF,MAAM,QAAQ,GAAG,yDAAyD,CAAA;QAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QACpE,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9B,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAErD,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7D,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QACrE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QACvD,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;QAC/D,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAE9C,MAAM,0BAA0B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC/F,MAAM,CAAC,0BAA0B,aAA1B,0BAA0B,uBAA1B,0BAA0B,CAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtD,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,sCAAsC,EAAE,GAAS,EAAE;QACtD,MAAM,QAAQ,GAAG,uDAAuD,CAAA;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACvD,MAAM,0BAA0B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC/F,MAAM,CAAC,0BAA0B,aAA1B,0BAA0B,uBAA1B,0BAA0B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAE7D,6BAA6B;QAC7B,MAAM,2BAA2B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACpF,MAAM,CAAC,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,6CAA6C,EAAE,GAAS,EAAE;QAC7D,MAAM,QAAQ,GAAG,uDAAuD,CAAA;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,0BAA0B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC/F,MAAM,CAAC,0BAA0B,aAA1B,0BAA0B,uBAA1B,0BAA0B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QAE5D,6BAA6B;QAC7B,MAAM,2BAA2B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACpF,MAAM,CAAC,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,gCAAgC,EAAE,GAAS,EAAE;QAChD,MAAM,QAAQ,GAAG,0DAA0D,CAAA;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,0BAA0B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC/F,MAAM,CAAC,0BAA0B,aAA1B,0BAA0B,uBAA1B,0BAA0B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QAE5D,6BAA6B;QAC7B,MAAM,2BAA2B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACpF,MAAM,CAAC,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,oBAAoB,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0BAAkB,CAAC,GAAG,CAAC,CAAA;QACvG,MAAM,CAAC,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,kBAAkB,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0BAAkB,CAAC,EAAE,CAAC,CAAA;QACpG,MAAM,CAAC,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IACtD,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,2BAA2B,EAAE,GAAS,EAAE;QAC3C,MAAM,QAAQ,GAAG,yDAAyD,CAAA;QAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,0BAA0B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC/F,MAAM,CAAC,0BAA0B,aAA1B,0BAA0B,uBAA1B,0BAA0B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QAE5D,6BAA6B;QAC7B,MAAM,2BAA2B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACpF,MAAM,CAAC,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,sBAAsB,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0BAAkB,CAAC,MAAM,CAAC,CAAA;QAC5G,MAAM,CAAC,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IAC1D,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,0CAA0C,EAAE,GAAS,EAAE;QAC1D,MAAM,QAAQ,GAAG,uDAAuD,CAAA;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACvD,MAAM,YAAY,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAA;QAC1C,MAAM,0BAA0B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC/F,MAAM,CAAC,0BAA0B,aAA1B,0BAA0B,uBAA1B,0BAA0B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAE7D,6BAA6B;QAC7B,MAAM,2BAA2B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACpF,MAAM,CAAC,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,oBAAoB,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0BAAkB,CAAC,GAAG,CAAC,CAAA;QACvG,MAAM,CAAC,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACvD,MAAM,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,YAAY,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC1E,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,mCAAmC,EAAE,GAAS,EAAE;QACnD,MAAM,QAAQ,GAAG,2DAA2D,CAAA;QAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QAEtD,MAAM,0BAA0B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAA;QAC/F,MAAM,CAAC,0BAA0B,aAA1B,0BAA0B,uBAA1B,0BAA0B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QAE5D,6BAA6B;QAC7B,MAAM,2BAA2B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACpF,MAAM,CAAC,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,oBAAoB,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,0BAAkB,CAAC,GAAG,CAAC,CAAA;QACvG,MAAM,CAAC,oBAAoB,aAApB,oBAAoB,uBAApB,oBAAoB,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IACxD,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,4CAA4C,EAAE,GAAS,EAAE;;QAC5D,MAAM,QAAQ,GAAG,+DAA+D,CAAA;QAChF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,YAAY,GAAG,OAAQ,CAAC,YAAY,CAAA;QAE1C,6BAA6B;QAC7B,MAAM,2BAA2B,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACrF,MAAM,CAAC,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAE5D,4CAA4C;QAC5C,MAAM,CAAC,MAAA,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,0CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAC1D,MAAM,CAAC,MAAA,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,0CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAE1D,6BAA6B;QAC7B,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QACtC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACzE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QACvE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACtE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,6CAA6C,CAAC,CAAA;QAEnH,+GAA+G;QAC/G,0GAA0G;QAC1G,MAAM,qBAAqB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAA;QAC5E,MAAM,CAAC,MAAA,qBAAqB,CAAC,SAAS,0CAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAEhE,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,aAAa,GAAG,CAAC,QAA8B,EAAQ,EAAE;YAC7D,IAAI,CAAC,QAAQ,EAAE;gBACb,OAAM;aACP;YACD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACrE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC7C,sDAAsD;gBACtD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;aACpE;QACH,CAAC,CAAA;QAED,qCAAqC;QACrC,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE;YAC5B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YAClC,gCAAgC;YAChC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE;gBAChB,SAAQ;aACT;YACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE;gBAC3B,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACtB,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;gBACrB,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;gBAC1B,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;aACzB;SACF;IACH,CAAC,CAAA,CAAC,CAAA;IAEF,IAAI,CAAC,uDAAuD,EAAE,GAAS,EAAE;QACvE,MAAM,QAAQ,GAAG,kEAAkE,CAAA;QACnF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,SAAS;SACtB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEpE,MAAM,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QACrD,MAAM,YAAY,GAAG,OAAQ,CAAC,YAAY,CAAA;QAE1C,4CAA4C;QAC5C,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAClD,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;QAC/C,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC,CAAA,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/commands/sbom/__tests__/validation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/sbom/__tests__/validation.test.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const validation_1 = require("../validation");
+const validator = (0, validation_1.getValidator)();
+describe('validation of sbom file', () => {
+    test('should succeed when called on a valid CycloneDX 1.4 SBOM file', () => {
+        expect((0, validation_1.validateSbomFileAgainstSchema)('./src/commands/sbom/__tests__/fixtures/sbom.1.4.ok.json', validator, false)).toBeTruthy();
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/sbom.1.5.ok.json', false)).toBeTruthy();
+    });
+    test('should succeed when called on a valid CycloneDX 1.5 SBOM file', () => {
+        expect((0, validation_1.validateSbomFileAgainstSchema)('./src/commands/sbom/__tests__/fixtures/sbom.1.5.ok.json', validator, false)).toBeTruthy();
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/sbom.1.5.ok.json', false)).toBeTruthy();
+    });
+    test('should fail on files that do not exist', () => {
+        expect((0, validation_1.validateSbomFileAgainstSchema)('./src/commands/sbom/__tests__/fixtures/sbom.1.4.do.not.exists', validator, false)).toBeFalsy();
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/sbom.1.4.do.not.exists', false)).toBeFalsy();
+    });
+    test('should fail on files that do not satisfy the schema', () => {
+        // type and name of the "component" have been removed from the valid file.
+        expect((0, validation_1.validateSbomFileAgainstSchema)('./src/commands/sbom/__tests__/fixtures/sbom.1.4.invalid.json', validator, false)).toBeFalsy();
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/sbom.1.4.invalid.json', false)).toBeTruthy();
+    });
+    test('should validate SBOM file from trivy 4.9', () => {
+        // type and name of the "component" have been removed from the valid file.
+        expect((0, validation_1.validateSbomFileAgainstSchema)('./src/commands/sbom/__tests__/fixtures/trivy-4.9.json', validator, true)).toBeTruthy();
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/trivy-4.9.json', true)).toBeTruthy();
+    });
+    test('should validate SBOM file osv scanner - version 1.5', () => {
+        // type and name of the "component" have been removed from the valid file.
+        expect((0, validation_1.validateSbomFileAgainstSchema)('./src/commands/sbom/__tests__/fixtures/osv-scanner-files.json', validator, true)).toBeTruthy();
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/osv-scanner-files.json', true)).toBeTruthy();
+    });
+    test('SBOM with no components is not valid', () => {
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/sbom-no-components.json', true)).toBeFalsy();
+    });
+    test('does not validate random data', () => {
+        expect((0, validation_1.validateSbomFileAgainstSchema)('./src/commands/sbom/__tests__/fixtures/random-data', validator, true)).toBeFalsy();
+        expect((0, validation_1.validateFileAgainstToolRequirements)('./src/commands/sbom/__tests__/fixtures/random-data', true)).toBeFalsy();
+    });
+});
+//# sourceMappingURL=validation.test.js.map

package/dist/commands/sbom/__tests__/validation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../../../src/commands/sbom/__tests__/validation.test.ts"],"names":[],"mappings":";;AAAA,8CAA8G;AAE9G,MAAM,SAAS,GAAG,IAAA,yBAAY,GAAE,CAAA;AAEhC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,MAAM,CACJ,IAAA,0CAA6B,EAAC,yDAAyD,EAAE,SAAS,EAAE,KAAK,CAAC,CAC3G,CAAC,UAAU,EAAE,CAAA;QACd,MAAM,CACJ,IAAA,gDAAmC,EAAC,yDAAyD,EAAE,KAAK,CAAC,CACtG,CAAC,UAAU,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,MAAM,CACJ,IAAA,0CAA6B,EAAC,yDAAyD,EAAE,SAAS,EAAE,KAAK,CAAC,CAC3G,CAAC,UAAU,EAAE,CAAA;QACd,MAAM,CACJ,IAAA,gDAAmC,EAAC,yDAAyD,EAAE,KAAK,CAAC,CACtG,CAAC,UAAU,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAClD,MAAM,CACJ,IAAA,0CAA6B,EAAC,+DAA+D,EAAE,SAAS,EAAE,KAAK,CAAC,CACjH,CAAC,SAAS,EAAE,CAAA;QACb,MAAM,CACJ,IAAA,gDAAmC,EAAC,+DAA+D,EAAE,KAAK,CAAC,CAC5G,CAAC,SAAS,EAAE,CAAA;IACf,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,0EAA0E;QAC1E,MAAM,CACJ,IAAA,0CAA6B,EAAC,8DAA8D,EAAE,SAAS,EAAE,KAAK,CAAC,CAChH,CAAC,SAAS,EAAE,CAAA;QACb,MAAM,CACJ,IAAA,gDAAmC,EAAC,8DAA8D,EAAE,KAAK,CAAC,CAC3G,CAAC,UAAU,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACpD,0EAA0E;QAC1E,MAAM,CACJ,IAAA,0CAA6B,EAAC,uDAAuD,EAAE,SAAS,EAAE,IAAI,CAAC,CACxG,CAAC,UAAU,EAAE,CAAA;QACd,MAAM,CACJ,IAAA,gDAAmC,EAAC,uDAAuD,EAAE,IAAI,CAAC,CACnG,CAAC,UAAU,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,0EAA0E;QAC1E,MAAM,CACJ,IAAA,0CAA6B,EAAC,+DAA+D,EAAE,SAAS,EAAE,IAAI,CAAC,CAChH,CAAC,UAAU,EAAE,CAAA;QACd,MAAM,CACJ,IAAA,gDAAmC,EAAC,+DAA+D,EAAE,IAAI,CAAC,CAC3G,CAAC,UAAU,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,CACJ,IAAA,gDAAmC,EAAC,gEAAgE,EAAE,IAAI,CAAC,CAC5G,CAAC,SAAS,EAAE,CAAA;IACf,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,CACJ,IAAA,0CAA6B,EAAC,oDAAoD,EAAE,SAAS,EAAE,IAAI,CAAC,CACrG,CAAC,SAAS,EAAE,CAAA;QACb,MAAM,CAAC,IAAA,gDAAmC,EAAC,oDAAoD,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IACrH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/commands/sourcemaps/__tests__/upload.test.d.ts

@@ -0,0 +1 @@
+export {};