@prodgator/report 3.4.0 → 3.19.0

package/dist/cli.js

@@ -6931,6 +6931,7 @@ function parseAttestationsInput(value, workspace) {
   });
 }
 var SCAN_FILE_FORMATS = ["sarif", "cyclonedx", "spdx", "grype-json", "trivy-json", "other"];
+var SCAN_MODE_WARNING = 'data.mode must be "full" or "diff"; ignored';
 var MAX_SARIF_BYTES = 50 * 1024 * 1024;
 function contentTypeForScanFile(format, path) {
   if (format === "sarif") return "application/sarif+json";
@@ -6972,7 +6973,13 @@ async function resolveAttestationFiles(attestations, workspace, deps = {}) {
   const files = [];
   const warnings = [];
   const out = [];
-  for (const a of attestations) {
+  for (const input of attestations) {
+    let a = input;
+    if (a.kind === "scan" && "mode" in a.data && a.data.mode !== "full" && a.data.mode !== "diff") {
+      const { mode: _ignored, ...rest } = a.data;
+      a = { ...a, data: rest };
+      warnings.push(SCAN_MODE_WARNING);
+    }
     const file = a.file;
     if (a.kind !== "scan" && a.kind !== "sbom" || typeof file !== "string" || !file.trim()) {
       out.push(a);
@@ -7520,7 +7527,7 @@ async function run(deps = {}) {
   const argv = deps.argv ?? process.argv.slice(2);
   const log = deps.log ?? { info: (m) => console.log(m), warn: (m) => console.log(`Warning: ${m}`), error: (m) => console.error(m) };
   if (argv.includes("--version")) {
-    log.info("3.4.0");
+    log.info("3.19.0");
     return 0;
   }
   let failOnError = false;
@@ -7538,7 +7545,7 @@ async function run(deps = {}) {
     const problem = tokenProblem(token, opts.audience, ci.provider, variable, (deps.nowMs ?? Date.now)());
     if (problem) throw new CliError(problem);
     if (opts.gate) {
-      const client2 = { getToken: async () => token, fetch: deps.fetch, sleep: deps.sleep, fixedToken: true, userAgent: `prodgator-report/${"3.4.0"} (${ci.provider}; gate)` };
+      const client2 = { getToken: async () => token, fetch: deps.fetch, sleep: deps.sleep, fixedToken: true, userAgent: `prodgator-report/${"3.19.0"} (${ci.provider}; gate)` };
       return await runGate(ci, { prodgatorUrl: opts.prodgatorUrl, audience: opts.audience, timeoutMinutes: opts.gateTimeoutMinutes }, client2, {
         sleep: deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms))),
         nowMs: deps.nowMs ?? Date.now,
@@ -7561,7 +7568,7 @@ async function run(deps = {}) {
       fetch: deps.fetch,
       sleep: deps.sleep,
       fixedToken: true,
-      userAgent: `prodgator-report/${"3.4.0"} (${ci.provider})`
+      userAgent: `prodgator-report/${"3.19.0"} (${ci.provider})`
     };
     const request = buildIngestRequest({ job: { name: opts.jobName ?? ci.jobName, matrix: opts.matrix, runner: ci.runner }, name: opts.name, summary, attestations, files });
     const res = await sendReport(opts.prodgatorUrl, ci.provider, request, opts.audience, client, ci.azure);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prodgator/report",
-  "version": "3.4.0",
+  "version": "3.19.0",
   "description": "Send CI job summaries, test results, attestations and artifacts to Prodgator, authenticated with the CI system's OIDC token",
   "license": "MIT",
   "homepage": "https://docs.prodgator.io/pipelines/run-reports",