@eurekadevsecops/radar 1.0.1 → 1.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/package.json +1 -1
  2. package/scanners/gitleaks/run.sh +1 -1
  3. package/src/util/sarif/summarize.js +1 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@eurekadevsecops/radar",
3
- "version": "1.0.1",
3
+ "version": "1.0.2",
4
4
  "description": "Radar is an open-source orchestrator of security scanners.",
5
5
  "homepage": "https://www.eurekadevsecops.com/radar",
6
6
  "keywords": [
package/scanners/gitleaks/run.sh CHANGED
@@ -4,4 +4,4 @@
4
4
  # $3 - Path to the output folder where scan results should be stored
5
5
 
6
6
  set -e
7
- docker run --rm -v $1:/app -v $2:/input -v $3:/output zricethezav/gitleaks dir -f sarif -r /output/gitleaks.sarif /app 2>&1
7
+ docker run --rm -v $1:/app -v $2:/input -v $3:/output zricethezav/gitleaks dir --exit-code 0 -f sarif -r /output/gitleaks.sarif /app 2>&1
package/src/util/sarif/summarize.js CHANGED
@@ -26,7 +26,7 @@ module.exports = (sarif, dir) => {
26
26
 
27
27
  for (const rule of run.tool.driver.rules) {
28
28
  if (rule.id === result.ruleId) {
29
- const level = rule.defaultConfiguration.level
29
+ const level = rule?.defaultConfiguration?.level ?? 'error'
30
30
  if (level === 'error' || level === 'warning' || level === 'note') {
31
31
  finding.level = level
32
32
  summary[`${finding.level}s`].push(finding)