@eurekadevsecops/radar 1.3.0 → 1.3.2

package/README.md

@@ -10,6 +10,11 @@
 
 radarctl is a command-line interface for Radar, an open-source orchestrator of security scanners. Radar is part of the Eureka DevSecOps platform.
 
+## Requirements
+
+- Node.js version 22.17.0 or higher
+- Docker
+
 ## Installation
 
 Install the Radar CLI on the command-line using [NPM](https://npmjs.com):

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eurekadevsecops/radar",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Radar is an open-source orchestrator of security scanners.",
   "homepage": "https://www.eurekadevsecops.com/radar",
   "keywords": [

package/src/commands/scan.js

@@ -136,9 +136,15 @@ module.exports = {
     const isTelemetryEnabled = telemetry.enabled()
     if (isTelemetryEnabled) {
       // TODO: Should pass scanID to the server; not read it from the server.
-      const response = await telemetry.send(`scans/started`, {}, { scanners: scanners.map((s) => s.name) })
-      const data = await response.json()
-      scanID = data.scan_id
+      try {
+        const res = await telemetry.send(`scans/started`, {}, { scanners: scanners.map((s) => s.name) })
+        if (!res.ok) throw new Error(`[${res.status}] ${res.statusText}: ${await res.text()}`)
+        const data = await res.json()
+        scanID = data.scan_id
+      }
+      catch (error) {
+        log(`WARNING: Telemetry will be skipped for this scan run: ${error.message}\n`)
+      }
     }
 
     // Run scanners.
@@ -151,7 +157,7 @@ module.exports = {
     catch (error) {
       log(`\n${error}`)
       if (!args.QUIET) log('Scan NOT completed!')
-      if (telemetry.enabled()) telemetry.send(`scans/:scanID/failed`, { scanID })
+      if (telemetry.enabled()) await telemetry.send(`scans/:scanID/failed`, { scanID })
       fs.rmSync(tmpdir, { recursive: true, force: true }) // Clean up.
       return 0x10 // exit code
     }
@@ -168,8 +174,8 @@ module.exports = {
 
     // Send telemetry.
     if (isTelemetryEnabled && scanID) {
-      telemetry.send(`scans/:scanID/completed`, { scanID }, summary)
-      telemetry.sendSensitive(`scans/:scanID/results`, { scanID }, { findings: results.sarif, log: results.log })
+      await telemetry.send(`scans/:scanID/completed`, { scanID }, summary)
+      await telemetry.sendSensitive(`scans/:scanID/results`, { scanID }, { findings: results.sarif, log: results.log })
     }
 
     // Display summarized findings.

package/src/telemetry/index.js

@@ -1,7 +1,7 @@
 const package = require('../../package.json')
 const { DateTime } = require("luxon")
 
-const EWA_URL = process.env.EWA_URL ?? 'https://app.eurekadevsecops.com'
+const EWA_URL = process.env.EWA_URL ?? 'https://bff.eurekadevsecops.com/'
 const VDBE_URL = process.env.VDBE_URL ?? 'https://vulns.eurekadevsecops.com'
 
 const USER_AGENT = `Radar/${package.version} (${package.pkgname}@${package.version}; ${process?.platform}-${process?.arch}; ${process?.release?.name}-${process?.version})`
@@ -22,6 +22,11 @@ const send = async (path, params, body, token) => {
     },
     body: toBody(path, body)
   })
+  .then(async (res) => {
+    // TODO: Display this on stdout only if --debug option is selected on the cmd line.
+    // if (!res.ok) console.log(`POST ${toURL(path, params)} [${res.status}] ${res.statusText}: ${await res.text()}`)
+    return res
+  })
 }
 
 const sendSensitive = async (path, params, body) => {