@snyk/protect 1.1280.0 → 1.1281.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +1 -1
- package/dist/index.js.map +1 -1
- package/dist/lib/analytics.js +5 -5
- package/dist/lib/analytics.js.map +1 -1
- package/dist/lib/fetch-patches.js +3 -3
- package/dist/lib/fetch-patches.js.map +1 -1
- package/dist/lib/http.d.ts +3 -1
- package/dist/lib/index.js +8 -8
- package/dist/lib/index.js.map +1 -1
- package/dist/lib/snyk-file.js +1 -1
- package/dist/lib/snyk-file.js.map +1 -1
- package/dist/lib/types.d.ts +11 -11
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -4,7 +4,7 @@ exports.protect = void 0;
|
|
|
4
4
|
const lib_1 = require("./lib");
|
|
5
5
|
async function protect() {
|
|
6
6
|
const projectPath = process.cwd();
|
|
7
|
-
await lib_1.default(projectPath);
|
|
7
|
+
await (0, lib_1.default)(projectPath);
|
|
8
8
|
}
|
|
9
9
|
exports.protect = protect;
|
|
10
10
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAExB,KAAK,UAAU,OAAO;IAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,aAAU,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAExB,KAAK,UAAU,OAAO;IAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,IAAA,aAAU,EAAC,WAAW,CAAC,CAAC;AAChC,CAAC;AAHD,0BAGC"}
|
package/dist/lib/analytics.js
CHANGED
|
@@ -7,7 +7,7 @@ const os = require("os");
|
|
|
7
7
|
const fs_1 = require("fs");
|
|
8
8
|
const path = require("path");
|
|
9
9
|
function getVersion() {
|
|
10
|
-
return JSON.parse(fs_1.readFileSync(path.resolve(__dirname, '../../package.json'), 'utf-8')).version;
|
|
10
|
+
return JSON.parse((0, fs_1.readFileSync)(path.resolve(__dirname, '../../package.json'), 'utf-8')).version;
|
|
11
11
|
}
|
|
12
12
|
function getAnalyticsData(result) {
|
|
13
13
|
return {
|
|
@@ -25,12 +25,12 @@ async function sendAnalytics(result) {
|
|
|
25
25
|
return;
|
|
26
26
|
}
|
|
27
27
|
try {
|
|
28
|
-
const apiBaseUrl = snyk_api_1.getApiBaseUrl();
|
|
28
|
+
const apiBaseUrl = (0, snyk_api_1.getApiBaseUrl)();
|
|
29
29
|
const apiUrl = `${apiBaseUrl}/v1/analytics/cli`;
|
|
30
30
|
const data = {
|
|
31
31
|
data: getAnalyticsData(result),
|
|
32
32
|
};
|
|
33
|
-
await http_1.postJson(apiUrl, data);
|
|
33
|
+
await (0, http_1.postJson)(apiUrl, data);
|
|
34
34
|
}
|
|
35
35
|
catch (err) {
|
|
36
36
|
// do nothing and log nothing
|
|
@@ -40,8 +40,8 @@ exports.sendAnalytics = sendAnalytics;
|
|
|
40
40
|
function allowAnalytics() {
|
|
41
41
|
try {
|
|
42
42
|
const snykConfigFile = getSnykConfigFilePath();
|
|
43
|
-
if (fs_1.existsSync(snykConfigFile)) {
|
|
44
|
-
const config = JSON.parse(fs_1.readFileSync(snykConfigFile, 'utf-8'));
|
|
43
|
+
if ((0, fs_1.existsSync)(snykConfigFile)) {
|
|
44
|
+
const config = JSON.parse((0, fs_1.readFileSync)(snykConfigFile, 'utf-8'));
|
|
45
45
|
if (config['disable-analytics'] === '1' ||
|
|
46
46
|
config['disable-analytics'] === 1) {
|
|
47
47
|
return false;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/lib/analytics.ts"],"names":[],"mappings":";;;AACA,iCAAkC;AAClC,yCAA2C;AAC3C,yBAAyB;AACzB,2BAA8C;AAC9C,6BAA6B;AAE7B,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,KAAK,CACf,iBAAY,
|
|
1
|
+
{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/lib/analytics.ts"],"names":[],"mappings":";;;AACA,iCAAkC;AAClC,yCAA2C;AAC3C,yBAAyB;AACzB,2BAA8C;AAC9C,6BAA6B;AAE7B,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,KAAK,CACf,IAAA,iBAAY,EAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CACrE,CAAC,OAAO,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAqB;IAC7C,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,UAAU,EAAE;QACrB,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM;SACtB;KACF,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,MAAqB;IACvD,IAAI,CAAC,cAAc,EAAE,EAAE;QACrB,OAAO;KACR;IACD,IAAI;QACF,MAAM,UAAU,GAAG,IAAA,wBAAa,GAAE,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,UAAU,mBAAmB,CAAC;QAChD,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC;SAC/B,CAAC;QACF,MAAM,IAAA,eAAQ,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;KAC9B;IAAC,OAAO,GAAG,EAAE;QACZ,6BAA6B;KAC9B;AACH,CAAC;AAdD,sCAcC;AAED,SAAS,cAAc;IACrB,IAAI;QACF,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;QAC/C,IAAI,IAAA,eAAU,EAAC,cAAc,CAAC,EAAE;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,IACE,MAAM,CAAC,mBAAmB,CAAC,KAAK,GAAG;gBACnC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACjC;gBACA,OAAO,KAAK,CAAC;aACd;SACF;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE;YACtC,OAAO,KAAK,CAAC;SACd;KACF;IAAC,OAAO,GAAG,EAAE;QACZ,6BAA6B;KAC9B;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAClE,CAAC;AACJ,CAAC"}
|
|
@@ -4,9 +4,9 @@ exports.getAllPatches = exports.fetchPatches = void 0;
|
|
|
4
4
|
const http_1 = require("./http");
|
|
5
5
|
const snyk_api_1 = require("./snyk-api");
|
|
6
6
|
async function fetchPatches(vulnId, packageName, packageVersion) {
|
|
7
|
-
const apiBaseUrl = snyk_api_1.getApiBaseUrl();
|
|
7
|
+
const apiBaseUrl = (0, snyk_api_1.getApiBaseUrl)();
|
|
8
8
|
const apiUrl = `${apiBaseUrl}/v1/patches/${vulnId}?packageVersion=${packageVersion}`;
|
|
9
|
-
const { res, body } = await http_1.request(apiUrl);
|
|
9
|
+
const { res, body } = await (0, http_1.request)(apiUrl);
|
|
10
10
|
if (res.statusCode !== 200 && res.statusCode !== 201) {
|
|
11
11
|
throw new Error(JSON.parse(body).error);
|
|
12
12
|
}
|
|
@@ -20,7 +20,7 @@ async function fetchPatches(vulnId, packageName, packageVersion) {
|
|
|
20
20
|
for (const p of patchInfos) {
|
|
21
21
|
const diffs = [];
|
|
22
22
|
for (const url of p.urls) {
|
|
23
|
-
const { body: diff } = await http_1.request(url);
|
|
23
|
+
const { body: diff } = await (0, http_1.request)(url);
|
|
24
24
|
diffs.push(diff);
|
|
25
25
|
}
|
|
26
26
|
patchDiffs.push({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"fetch-patches.js","sourceRoot":"","sources":["../../src/lib/fetch-patches.ts"],"names":[],"mappings":";;;AACA,iCAAiC;AACjC,yCAA2C;AAEpC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,WAAmB,EACnB,cAAsB;IAEtB,MAAM,UAAU,GAAG,wBAAa,
|
|
1
|
+
{"version":3,"file":"fetch-patches.js","sourceRoot":"","sources":["../../src/lib/fetch-patches.ts"],"names":[],"mappings":";;;AACA,iCAAiC;AACjC,yCAA2C;AAEpC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,WAAmB,EACnB,cAAsB;IAEtB,MAAM,UAAU,GAAG,IAAA,wBAAa,GAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,UAAU,eAAe,MAAM,mBAAmB,cAAc,EAAE,CAAC;IAErF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,cAAO,EAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;QACpD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;KACzC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,EAAE;QACvC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;KACrE;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,UAAU,GAAgB,OAAO,CAAC,CAAC,4EAA4E;IAErH,MAAM,UAAU,GAAY,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE;QAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClB;QAED,UAAU,CAAC,IAAI,CAAC;YACd,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;KACJ;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAlCD,oCAkCC;AAED,qKAAqK;AACrK,iLAAiL;AAC1K,KAAK,UAAU,aAAa,CACjC,qBAA6C,EAC7C,wBAA+C;;IAE/C,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE;QACvC,MAAM,eAAe,GAAG,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,eAAe,EAAE;YACnB,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE;gBAC5C,MAAM,oBAAoB,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,cAAc,EAAE,CAAC;gBACpE,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,cAAc,CACf,CAAC;gBACF,MAAM,cAAc,GAAgB;oBAClC,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO;iBACR,CAAC;gBACF,IAAI,0BAA0B,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE;oBACxD,MAAA,0BAA0B;yBACvB,GAAG,CAAC,oBAAoB,CAAC,0CACxB,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,oCAAoC;iBAC/D;qBAAM;oBACL,0BAA0B,CAAC,GAAG,CAAC,oBAAoB,EAAE;wBACnD,cAAc;qBACf,CAAC,CAAC;iBACJ;aACF;SACF;KACF;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAhCD,sCAgCC"}
|
package/dist/lib/http.d.ts
CHANGED
|
@@ -1,7 +1,9 @@
|
|
|
1
1
|
/// <reference types="node" />
|
|
2
|
+
/// <reference types="node" />
|
|
3
|
+
/// <reference types="node" />
|
|
2
4
|
import { IncomingMessage } from 'http';
|
|
3
5
|
import { RequestOptions } from 'https';
|
|
4
|
-
export
|
|
6
|
+
export type SnykResponse = {
|
|
5
7
|
res: IncomingMessage;
|
|
6
8
|
body: any;
|
|
7
9
|
};
|
package/dist/lib/index.js
CHANGED
|
@@ -22,19 +22,19 @@ async function protect(projectFolderPath) {
|
|
|
22
22
|
const snykFilePath = path.resolve(projectFolderPath, '.snyk');
|
|
23
23
|
if (!fs.existsSync(snykFilePath)) {
|
|
24
24
|
console.log('No .snyk file found.');
|
|
25
|
-
analytics_1.sendAnalytics({
|
|
25
|
+
(0, analytics_1.sendAnalytics)({
|
|
26
26
|
type: types_1.ProtectResultType.NO_SNYK_FILE,
|
|
27
27
|
});
|
|
28
28
|
return;
|
|
29
29
|
}
|
|
30
30
|
const snykFileContents = fs.readFileSync(snykFilePath, 'utf8');
|
|
31
|
-
const snykFilePatchMetadata = snyk_file_1.extractPatchMetadata(snykFileContents);
|
|
31
|
+
const snykFilePatchMetadata = (0, snyk_file_1.extractPatchMetadata)(snykFileContents);
|
|
32
32
|
const vulnIdAndPackageNames = snykFilePatchMetadata;
|
|
33
33
|
const targetPackageNames = [
|
|
34
|
-
...new Set(snykFilePatchMetadata.map((vpn) => vpn.packageName)),
|
|
34
|
+
...new Set(snykFilePatchMetadata.map((vpn) => vpn.packageName)), // get a list of unique package names by converting to Set and then back to array
|
|
35
35
|
];
|
|
36
36
|
// find instances of the target packages by spelunking through the node_modules looking for modules with a target packageName
|
|
37
|
-
const foundPhysicalPackages = explore_node_modules_1.findPhysicalModules(projectFolderPath, targetPackageNames);
|
|
37
|
+
const foundPhysicalPackages = (0, explore_node_modules_1.findPhysicalModules)(projectFolderPath, targetPackageNames);
|
|
38
38
|
// Map of package name to versions (for the target package names).
|
|
39
39
|
// For each package name, we might have found multiple versions and we'll need to fetch patches for each version.
|
|
40
40
|
// We will use this to lookup the versions of packages to get patches for.
|
|
@@ -50,10 +50,10 @@ async function protect(projectFolderPath) {
|
|
|
50
50
|
packageNameToVersionsMap.set(p.packageName, [p.packageVersion]);
|
|
51
51
|
}
|
|
52
52
|
});
|
|
53
|
-
const packageAtVersionsToPatches = await fetch_patches_1.getAllPatches(vulnIdAndPackageNames, packageNameToVersionsMap);
|
|
53
|
+
const packageAtVersionsToPatches = await (0, fetch_patches_1.getAllPatches)(vulnIdAndPackageNames, packageNameToVersionsMap);
|
|
54
54
|
if (packageAtVersionsToPatches.size === 0) {
|
|
55
55
|
console.log('Nothing to patch.');
|
|
56
|
-
analytics_1.sendAnalytics({
|
|
56
|
+
(0, analytics_1.sendAnalytics)({
|
|
57
57
|
type: types_1.ProtectResultType.NOTHING_TO_PATCH,
|
|
58
58
|
});
|
|
59
59
|
return;
|
|
@@ -65,7 +65,7 @@ async function protect(projectFolderPath) {
|
|
|
65
65
|
vuldIdAndPatches === null || vuldIdAndPatches === void 0 ? void 0 : vuldIdAndPatches.forEach((vp) => {
|
|
66
66
|
vp.patches.forEach((patchDiffs) => {
|
|
67
67
|
patchDiffs.patchDiffs.forEach((diff) => {
|
|
68
|
-
const patchedPath = patch_1.applyPatchToFile(diff, fpp.path, vp.vulnId);
|
|
68
|
+
const patchedPath = (0, patch_1.applyPatchToFile)(diff, fpp.path, vp.vulnId);
|
|
69
69
|
console.log(`Patched: ${patchedPath}`);
|
|
70
70
|
});
|
|
71
71
|
});
|
|
@@ -77,7 +77,7 @@ async function protect(projectFolderPath) {
|
|
|
77
77
|
});
|
|
78
78
|
});
|
|
79
79
|
console.log('Applied Snyk patches.');
|
|
80
|
-
analytics_1.sendAnalytics({
|
|
80
|
+
(0, analytics_1.sendAnalytics)({
|
|
81
81
|
type: types_1.ProtectResultType.APPLIED_PATCHES,
|
|
82
82
|
patchedModules,
|
|
83
83
|
});
|
package/dist/lib/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAC7B,2CAAmD;AACnD,mCAA2C;AAC3C,iEAA6D;AAC7D,mCAKiB;AACjB,mDAAgD;AAChD,2CAA4C;AAE5C,KAAK,UAAU,OAAO,CAAC,iBAAyB;IAC9C,yBAAyB;IACzB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvB,OAAO;KACR;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1B,OAAO;KACR;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE;QAChC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,yBAAa,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAC7B,2CAAmD;AACnD,mCAA2C;AAC3C,iEAA6D;AAC7D,mCAKiB;AACjB,mDAAgD;AAChD,2CAA4C;AAE5C,KAAK,UAAU,OAAO,CAAC,iBAAyB;IAC9C,yBAAyB;IACzB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvB,OAAO;KACR;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1B,OAAO;KACR;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE;QAChC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,IAAA,yBAAa,EAAC;YACZ,IAAI,EAAE,yBAAiB,CAAC,YAAY;SACrC,CAAC,CAAC;QACH,OAAO;KACR;IAED,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,qBAAqB,GAAG,IAAA,gCAAoB,EAAC,gBAAgB,CAAC,CAAC;IACrE,MAAM,qBAAqB,GAA2B,qBAAqB,CAAC;IAC5E,MAAM,kBAAkB,GAAG;QACzB,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,iFAAiF;KACnJ,CAAC;IAEF,6HAA6H;IAC7H,MAAM,qBAAqB,GAAG,IAAA,0CAAmB,EAC/C,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;IAEF,kEAAkE;IAClE,iHAAiH;IACjH,0EAA0E;IAC1E,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7D,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE;YAC/C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7D,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA,EAAE;gBACzC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;aAClC;SACF;aAAM;YACL,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;SACjE;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,0BAA0B,GAG5B,MAAM,IAAA,6BAAa,EAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;IAEzE,IAAI,0BAA0B,CAAC,IAAI,KAAK,CAAC,EAAE;QACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,IAAA,yBAAa,EAAC;YACZ,IAAI,EAAE,yBAAiB,CAAC,gBAAgB;SACzC,CAAC,CAAC;QACH,OAAO;KACR;IAED,MAAM,cAAc,GAAoB,EAAE,CAAC;IAC3C,qBAAqB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACpC,MAAM,oBAAoB,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACxE,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,GAAG,CACrD,oBAAoB,CACrB,CAAC;QACF,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YAC/B,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBAChC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBACrC,MAAM,WAAW,GAAG,IAAA,wBAAgB,EAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;oBAChE,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;gBACzC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,cAAc,CAAC,IAAI,CAAC;gBAClB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAErC,IAAA,yBAAa,EAAC;QACZ,IAAI,EAAE,yBAAiB,CAAC,eAAe;QACvC,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,OAAO;IACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAJD,0BAIC;AAED,SAAgB,UAAU;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,WAAW,CAAC,OAAO,CAAC;AAC7B,CAAC;AALD,gCAKC;AAED,kBAAe,OAAO,CAAC"}
|
package/dist/lib/snyk-file.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"snyk-file.js","sourceRoot":"","sources":["../../src/lib/snyk-file.ts"],"names":[],"mappings":";;;AACA,mCAAkC;AAElC,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAE9C,SAAgB,oBAAoB,CAClC,kBAA0B;IAE1B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,SAAiB,CAAC;IAEtB,8CAA8C;IAC9C,MAAM,OAAO,GAAmC,kBAAkB;SAC/D,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACzD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;SAC7C,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,KAAwB,CAAC;QACxD,IAAI,cAAc,IAAI,MAAM,KAAK,EAAE,EAAE;YACnC,cAAc,GAAG,KAAK,CAAC;SACxB;aAAM,IAAI,MAAM,KAAK,EAAE,IAAI,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,EAAE,EAAE;YAC3D,cAAc,GAAG,IAAI,CAAC;SACvB;aAAM,IAAI,cAAc,EAAE;YACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;gBACvB,SAAS,GAAG,GAAG,CAAC;gBAChB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;aACf;iBAAM;gBACL,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;oBACvB,MAAM,WAAW,
|
|
1
|
+
{"version":3,"file":"snyk-file.js","sourceRoot":"","sources":["../../src/lib/snyk-file.ts"],"names":[],"mappings":";;;AACA,mCAAkC;AAElC,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAE9C,SAAgB,oBAAoB,CAClC,kBAA0B;IAE1B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,SAAiB,CAAC;IAEtB,8CAA8C;IAC9C,MAAM,OAAO,GAAmC,kBAAkB;SAC/D,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACzD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;SAC7C,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,KAAwB,CAAC;QACxD,IAAI,cAAc,IAAI,MAAM,KAAK,EAAE,EAAE;YACnC,cAAc,GAAG,KAAK,CAAC;SACxB;aAAM,IAAI,MAAM,KAAK,EAAE,IAAI,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,EAAE,EAAE;YAC3D,cAAc,GAAG,IAAI,CAAC;SACvB;aAAM,IAAI,cAAc,EAAE;YACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;gBACvB,SAAS,GAAG,GAAG,CAAC;gBAChB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;aACf;iBAAM;gBACL,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;oBACvB,MAAM,WAAW,GAAG,MAAA,MAAA,GAAG;yBACpB,SAAS,CAAC,CAAC,CAAC;yBACZ,KAAK,CAAC,GAAG,CAAC;yBACV,GAAG,EAAE,0CACJ,IAAI,EAAE,0CACN,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACzB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;wBACzC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;qBAClC;iBACF;aACF;SACF;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAET,MAAM,qBAAqB,GAA2B,EAAE,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE;YAC7B,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;SACH;aAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;YAClC,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;SACH;aAAM;YACL,qBAAqB,CAAC,IAAI,CAAC;gBACzB,MAAM,EAAE,IAAA,eAAO,EAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;aAC7B,CAAC,CAAC;SACJ;KACF;IAED,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AA3DD,oDA2DC"}
|
package/dist/lib/types.d.ts
CHANGED
|
@@ -1,25 +1,25 @@
|
|
|
1
|
-
export
|
|
1
|
+
export type PatchInfo = {
|
|
2
2
|
patchableVersions?: string;
|
|
3
3
|
urls: string[];
|
|
4
4
|
};
|
|
5
|
-
export
|
|
5
|
+
export type VulnIdAndPackageName = {
|
|
6
6
|
vulnId: string;
|
|
7
7
|
packageName: string;
|
|
8
8
|
};
|
|
9
|
-
export
|
|
9
|
+
export type FoundPhysicalPackage = {
|
|
10
10
|
packageName: string;
|
|
11
11
|
packageVersion: string;
|
|
12
12
|
path: string;
|
|
13
13
|
};
|
|
14
|
-
export
|
|
14
|
+
export type Patch = {
|
|
15
15
|
patchableVersions?: string;
|
|
16
16
|
patchDiffs: string[];
|
|
17
17
|
};
|
|
18
|
-
export
|
|
18
|
+
export type VulnPatches = {
|
|
19
19
|
vulnId: string;
|
|
20
20
|
patches: Patch[];
|
|
21
21
|
};
|
|
22
|
-
export
|
|
22
|
+
export type PatchedModule = {
|
|
23
23
|
vulnId: string;
|
|
24
24
|
packageName: string;
|
|
25
25
|
packageVersion: string;
|
|
@@ -29,7 +29,7 @@ export declare enum ProtectResultType {
|
|
|
29
29
|
NOTHING_TO_PATCH = "NOTHING_TO_PATCH",
|
|
30
30
|
APPLIED_PATCHES = "APPLIED_PATCHES"
|
|
31
31
|
}
|
|
32
|
-
export
|
|
32
|
+
export type AnalyticsPayload = {
|
|
33
33
|
command: string;
|
|
34
34
|
args: string[];
|
|
35
35
|
version: string;
|
|
@@ -38,14 +38,14 @@ export declare type AnalyticsPayload = {
|
|
|
38
38
|
protectResult: ProtectResult;
|
|
39
39
|
};
|
|
40
40
|
};
|
|
41
|
-
export
|
|
41
|
+
export type NoSnykFile = {
|
|
42
42
|
type: ProtectResultType.NO_SNYK_FILE;
|
|
43
43
|
};
|
|
44
|
-
export
|
|
44
|
+
export type NothingToPatch = {
|
|
45
45
|
type: ProtectResultType.NOTHING_TO_PATCH;
|
|
46
46
|
};
|
|
47
|
-
export
|
|
47
|
+
export type AppliedPatches = {
|
|
48
48
|
type: ProtectResultType.APPLIED_PATCHES;
|
|
49
49
|
patchedModules: PatchedModule[];
|
|
50
50
|
};
|
|
51
|
-
export
|
|
51
|
+
export type ProtectResult = NoSnykFile | NothingToPatch | AppliedPatches;
|