@socketsecurity/cli-with-sentry 1.0.86 → 1.0.87
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/dist/cli.js +15 -15
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +5 -5
- package/dist/constants.js.map +1 -1
- package/dist/utils.js +67 -44
- package/dist/utils.js.map +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -61,7 +61,6 @@ use of the `projectIgnorePaths` to excludes files when creating a report.
|
|
|
61
61
|
|
|
62
62
|
## Environment variables
|
|
63
63
|
|
|
64
|
-
- `SOCKET_CLI_ACCEPT_RISKS` - Accept risks of a safe-npm or safe-npx run
|
|
65
64
|
- `SOCKET_CLI_API_TOKEN` - Set the Socket API token
|
|
66
65
|
- `SOCKET_CLI_CONFIG` - A JSON stringified Socket configuration object
|
|
67
66
|
- `SOCKET_CLI_GIT_USER_EMAIL` - The git config `user.email` used by Socket CLI<br>
|
|
@@ -72,8 +71,9 @@ use of the `projectIgnorePaths` to excludes files when creating a report.
|
|
|
72
71
|
*Aliases:* `GITHUB_TOKEN`<br>
|
|
73
72
|
- `SOCKET_CLI_NO_API_TOKEN` - Make the default API token `undefined`
|
|
74
73
|
- `SOCKET_CLI_NPM_PATH` - The absolute location of the npm directory
|
|
75
|
-
- `SOCKET_CLI_ORG_SLUG` - Specify the Socket organization slug
|
|
76
|
-
- `
|
|
74
|
+
- `SOCKET_CLI_ORG_SLUG` - Specify the Socket organization slug<br><br>
|
|
75
|
+
- `SOCKET_CLI_ACCEPT_RISKS` - Accept risks of a Socket wrapped npm/npx run
|
|
76
|
+
- `SOCKET_CLI_VIEW_ALL_RISKS` - View all risks of a Socket wrapped npm/npx run
|
|
77
77
|
|
|
78
78
|
## Contributing
|
|
79
79
|
|
package/dist/cli.js
CHANGED
|
@@ -4735,7 +4735,7 @@ const config$H = {
|
|
|
4735
4735
|
autoMerge: {
|
|
4736
4736
|
type: 'boolean',
|
|
4737
4737
|
default: false,
|
|
4738
|
-
description: `Enable auto-merge for pull requests that Socket opens.\
|
|
4738
|
+
description: `Enable auto-merge for pull requests that Socket opens.\nSee ${vendor.terminalLinkExports('GitHub documentation', 'https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/managing-auto-merge-for-pull-requests-in-your-repository')} for managing auto-merge for pull requests in your repository.`
|
|
4739
4739
|
},
|
|
4740
4740
|
autopilot: {
|
|
4741
4741
|
type: 'boolean',
|
|
@@ -4745,7 +4745,7 @@ const config$H = {
|
|
|
4745
4745
|
ghsa: {
|
|
4746
4746
|
type: 'string',
|
|
4747
4747
|
default: [],
|
|
4748
|
-
description: `Provide a list of ${vendor.terminalLinkExports('GHSA IDs', 'https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database#about-ghsa-ids')} to compute fixes for, as either a comma separated value or as multiple flags.\
|
|
4748
|
+
description: `Provide a list of ${vendor.terminalLinkExports('GHSA IDs', 'https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database#about-ghsa-ids')} to compute fixes for, as either a comma separated value or as multiple flags.\nUse '--ghsa all' to lookup all GHSA IDs and compute fixes for them.`,
|
|
4749
4749
|
isMultiple: true,
|
|
4750
4750
|
hidden: true
|
|
4751
4751
|
},
|
|
@@ -4774,7 +4774,7 @@ const config$H = {
|
|
|
4774
4774
|
purl: {
|
|
4775
4775
|
type: 'string',
|
|
4776
4776
|
default: [],
|
|
4777
|
-
description: `Provide a list of ${vendor.terminalLinkExports('PURLs', 'https://github.com/package-url/purl-spec?tab=readme-ov-file#purl')} to compute fixes for, as either a comma separated value or as\
|
|
4777
|
+
description: `Provide a list of ${vendor.terminalLinkExports('PURLs', 'https://github.com/package-url/purl-spec?tab=readme-ov-file#purl')} to compute fixes for, as either a comma separated value or as\nmultiple flags, instead of querying the Socket API`,
|
|
4778
4778
|
isMultiple: true,
|
|
4779
4779
|
shortFlag: 'p'
|
|
4780
4780
|
},
|
|
@@ -4782,16 +4782,16 @@ const config$H = {
|
|
|
4782
4782
|
type: 'string',
|
|
4783
4783
|
default: 'preserve',
|
|
4784
4784
|
description: `
|
|
4785
|
-
|
|
4786
|
-
|
|
4787
|
-
|
|
4788
|
-
|
|
4789
|
-
|
|
4790
|
-
|
|
4791
|
-
|
|
4792
|
-
|
|
4793
|
-
|
|
4794
|
-
|
|
4785
|
+
Define how dependency version ranges are updated in package.json (default 'preserve').
|
|
4786
|
+
Available styles:
|
|
4787
|
+
* caret - Use ^ range for compatible updates (e.g. ^1.2.3)
|
|
4788
|
+
* gt - Use > to allow any newer version (e.g. >1.2.3)
|
|
4789
|
+
* gte - Use >= to allow any newer version (e.g. >=1.2.3)
|
|
4790
|
+
* lt - Use < to allow only lower versions (e.g. <1.2.3)
|
|
4791
|
+
* lte - Use <= to allow only lower versions (e.g. <=1.2.3)
|
|
4792
|
+
* pin - Use the exact version (e.g. 1.2.3)
|
|
4793
|
+
* preserve - Retain the existing version range style as-is
|
|
4794
|
+
* tilde - Use ~ range for patch/minor updates (e.g. ~1.2.3)
|
|
4795
4795
|
`.trim()
|
|
4796
4796
|
},
|
|
4797
4797
|
test: {
|
|
@@ -14656,7 +14656,7 @@ void (async () => {
|
|
|
14656
14656
|
cause: errorMessage
|
|
14657
14657
|
}));
|
|
14658
14658
|
} else {
|
|
14659
|
-
//
|
|
14659
|
+
// Add 2 newlines in stderr to bump below any spinner.
|
|
14660
14660
|
logger.logger.error('\n');
|
|
14661
14661
|
logger.logger.fail(utils.failMsgWithBadge(errorTitle, errorMessage));
|
|
14662
14662
|
if (errorBody) {
|
|
@@ -14668,5 +14668,5 @@ void (async () => {
|
|
|
14668
14668
|
await utils.captureException(e);
|
|
14669
14669
|
}
|
|
14670
14670
|
})();
|
|
14671
|
-
//# debugId=
|
|
14671
|
+
//# debugId=75f08195-c836-4616-95b6-9e8b367baf91
|
|
14672
14672
|
//# sourceMappingURL=cli.js.map
|