@socketsecurity/cli-with-sentry 1.1.158 → 1.1.160
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +5 -0
- package/README.md +5 -5
- package/dist/cli.js +143 -100
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/scan/cmd-scan-reach.d.mts.map +1 -1
- package/dist/types/commands/scan/handle-create-new-scan.d.mts.map +1 -1
- package/dist/types/commands/scan/handle-scan-reach.d.mts +1 -1
- package/dist/types/commands/scan/handle-scan-reach.d.mts.map +1 -1
- package/dist/types/commands/scan/reachability-flags.d.mts +4 -0
- package/dist/types/commands/scan/reachability-flags.d.mts.map +1 -1
- package/dist/types/commands/scan/run-dynamic-sbom-inference.d.mts +18 -0
- package/dist/types/commands/scan/run-dynamic-sbom-inference.d.mts.map +1 -0
- package/package.json +3 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AAyC/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAoOf"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,wBAAsB,mBAAmB,CAAC,EACxC,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACb,UAAU,EACV,GAAG,EACH,aAAa,EACb,WAAW,EACX,OAAO,EACP,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,WAAW,EACX,OAAO,EACP,GAAG,EACH,SAAS,EACV,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmV3C"}
|
|
@@ -9,5 +9,5 @@ export type HandleScanReachConfig = {
|
|
|
9
9
|
reachabilityOptions: ReachabilityOptions;
|
|
10
10
|
targets: string[];
|
|
11
11
|
};
|
|
12
|
-
export declare function handleScanReach(
|
|
12
|
+
export declare function handleScanReach(config: HandleScanReachConfig): Promise<void>;
|
|
13
13
|
//# sourceMappingURL=handle-scan-reach.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handle-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-scan-reach.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"handle-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-scan-reach.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAGjD,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAwID,wBAAsB,eAAe,CACnC,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf"}
|
|
@@ -1,4 +1,8 @@
|
|
|
1
1
|
import type { MeowFlags } from '../../flags.mts';
|
|
2
|
+
// Shared prefix so each command can append how it obtains the per-build-root
|
|
3
|
+
// SBOMs, which differs: `scan create` piggybacks on --auto-manifest, while
|
|
4
|
+
// `scan reach` runs the build tools itself.
|
|
5
|
+
export declare const DYNAMIC_SBOM_INFERENCE_DESCRIPTION = "For Gradle, sbt, and Maven: splits reachability analysis per project/module using a Socket facts SBOM (generated directly by each package manager) per build root, instead of one synthetic root.";
|
|
2
6
|
export declare const reachabilityFlags: MeowFlags;
|
|
3
7
|
export declare const excludePathsFlag: MeowFlags;
|
|
4
8
|
//# sourceMappingURL=reachability-flags.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,eAAO,MAAM,iBAAiB,EAAE,
|
|
1
|
+
{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,6EAA6E;AAC7E,2EAA2E;AAC3E,4CAA4C;AAC5C,eAAO,MAAM,kCAAkC,sMACsJ,CAAA;AAErM,eAAO,MAAM,iBAAiB,EAAE,SA4H/B,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,SAO9B,CAAA"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import type { ResolvedPathsSidecar } from '../manifest/scripts/sidecar.mts';
|
|
2
|
+
export type DynamicSbomInferenceResult = {
|
|
3
|
+
factsPaths: string[];
|
|
4
|
+
resolvedPathsSidecar: ResolvedPathsSidecar | undefined;
|
|
5
|
+
};
|
|
6
|
+
// Recursively discovers and generates Socket facts for every independent
|
|
7
|
+
// gradle/sbt/maven build root under `cwd`, returning the generated facts
|
|
8
|
+
// paths plus the resolved-paths sidecar that reachability forwards to Coana.
|
|
9
|
+
export declare function runDynamicSbomInference({ cwd, excludePaths, sbtTmpDir, withFiles }: {
|
|
10
|
+
cwd: string;
|
|
11
|
+
excludePaths: string[];
|
|
12
|
+
// sbt provisions its Scala toolchain under this directory and withFiles'
|
|
13
|
+
// artifactPaths point into it, so it must outlive whoever consumes them.
|
|
14
|
+
// Only meaningful alongside `withFiles`.
|
|
15
|
+
sbtTmpDir: string | undefined;
|
|
16
|
+
withFiles: boolean;
|
|
17
|
+
}): Promise<DynamicSbomInferenceResult>;
|
|
18
|
+
//# sourceMappingURL=run-dynamic-sbom-inference.d.mts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"run-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/run-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,iCAAiC,CAAA;AAExC,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,oBAAoB,EAAE,oBAAoB,GAAG,SAAS,CAAA;CACvD,CAAA;AAED,yEAAyE;AACzE,yEAAyE;AACzE,6EAA6E;AAC7E,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,YAAY,EACZ,SAAS,EACT,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,yEAAyE;IACzE,yEAAyE;IACzE,yCAAyC;IACzC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;CACnB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAyCtC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@socketsecurity/cli-with-sentry",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.160",
|
|
4
4
|
"description": "CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package",
|
|
5
5
|
"contentPolicy": {
|
|
6
6
|
"class": "dual-use"
|
|
@@ -36,7 +36,7 @@
|
|
|
36
36
|
"./translations.json": "./translations.json"
|
|
37
37
|
},
|
|
38
38
|
"dependencies": {
|
|
39
|
-
"@sentry/node": "10.
|
|
39
|
+
"@sentry/node": "10.71.0",
|
|
40
40
|
"@socketsecurity/socket-patch": "2.0.0",
|
|
41
41
|
"form-data": "4.0.6"
|
|
42
42
|
},
|
|
@@ -48,7 +48,7 @@
|
|
|
48
48
|
"@babel/preset-typescript": "7.27.1",
|
|
49
49
|
"@babel/runtime": "7.28.4",
|
|
50
50
|
"@biomejs/biome": "2.2.4",
|
|
51
|
-
"@coana-tech/cli": "15.10.
|
|
51
|
+
"@coana-tech/cli": "15.10.24",
|
|
52
52
|
"@cyclonedx/cdxgen": "12.1.2",
|
|
53
53
|
"@dotenvx/dotenvx": "1.49.0",
|
|
54
54
|
"@eslint/compat": "1.3.2",
|