@socketsecurity/cli-with-sentry 1.1.39 → 1.1.41

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- {"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAaA,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA2DnE"}
1
+ {"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAaA,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DnE"}
@@ -1 +1 @@
1
- {"version":3,"file":"cmd-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/cmd-fix.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAG9C,eAAO,MAAM,QAAQ,QAAQ,CAAA;AAQ7B,eAAO,MAAM,MAAM;;;;CAIlB,CAAA;AAuJD,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA8Kf"}
1
+ {"version":3,"file":"cmd-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/cmd-fix.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAG9C,eAAO,MAAM,QAAQ,QAAQ,CAAA;AAQ7B,eAAO,MAAM,MAAM;;;;CAIlB,CAAA;AA2JD,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAiLf"}
@@ -1 +1 @@
1
- {"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AA2D9C,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAmetD"}
1
+ {"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AAkDA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAiD9C,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAsetD"}
@@ -3,6 +3,7 @@ import type { OutputKind } from '../../types.mts';
3
3
  import type { Remap } from '@socketsecurity/registry/lib/objects';
4
4
  export type HandleFixConfig = Remap<FixConfig & {
5
5
  applyFixes: boolean;
6
+ coanaVersion?: string | undefined;
6
7
  ghsas: string[];
7
8
  orgSlug: string;
8
9
  outputKind: OutputKind;
@@ -13,5 +14,5 @@ export type HandleFixConfig = Remap<FixConfig & {
13
14
  * Filters out invalid IDs and logs conversion results.
14
15
  */
15
16
  export declare function convertIdsToGhsas(ids: string[]): Promise<string[]>;
16
- export declare function handleFix({ applyFixes, autopilot, cwd, disableMajorUpdates, exclude, ghsas, include, limit, minSatisfying, minimumReleaseAge, orgSlug, outputFile, outputKind, prCheck, rangeStyle, showAffectedDirectDependencies, spinner, unknownFlags }: HandleFixConfig): Promise<void>;
17
+ export declare function handleFix({ applyFixes, autopilot, coanaVersion, cwd, disableMajorUpdates, exclude, ghsas, include, limit, minSatisfying, minimumReleaseAge, orgSlug, outputFile, outputKind, prCheck, rangeStyle, showAffectedDirectDependencies, spinner, unknownFlags }: HandleFixConfig): Promise<void>;
17
18
  //# sourceMappingURL=handle-fix.d.mts.map
@@ -1 +1 @@
1
- {"version":3,"file":"handle-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/handle-fix.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAKjE,MAAM,MAAM,eAAe,GAAG,KAAK,CACjC,SAAS,GAAG;IACV,UAAU,EAAE,OAAO,CAAA;IACnB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CACF,CAAA;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiExE;AAED,wBAAsB,SAAS,CAAC,EAC9B,UAAU,EACV,SAAS,EACT,GAAG,EACH,mBAAmB,EACnB,OAAO,EACP,KAAK,EACL,OAAO,EACP,KAAK,EACL,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,UAAU,EACV,UAAU,EACV,OAAO,EACP,UAAU,EACV,8BAA8B,EAC9B,OAAO,EACP,YAAY,EACb,EAAE,eAAe,iBA4CjB"}
1
+ {"version":3,"file":"handle-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/handle-fix.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAKjE,MAAM,MAAM,eAAe,GAAG,KAAK,CACjC,SAAS,GAAG;IACV,UAAU,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CACF,CAAA;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiExE;AAED,wBAAsB,SAAS,CAAC,EAC9B,UAAU,EACV,SAAS,EACT,YAAY,EACZ,GAAG,EACH,mBAAmB,EACnB,OAAO,EACP,KAAK,EACL,OAAO,EACP,KAAK,EACL,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,UAAU,EACV,UAAU,EACV,OAAO,EACP,UAAU,EACV,8BAA8B,EAC9B,OAAO,EACP,YAAY,EACb,EAAE,eAAe,iBA8CjB"}
@@ -3,6 +3,7 @@ import type { Spinner } from '@socketsecurity/registry/lib/spinner';
3
3
  export type FixConfig = {
4
4
  applyFixes: boolean;
5
5
  autopilot: boolean;
6
+ coanaVersion: string | undefined;
6
7
  cwd: string;
7
8
  disableMajorUpdates: boolean;
8
9
  exclude: string[];
@@ -1 +1 @@
1
- {"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/types.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,mBAAmB,EAAE,OAAO,CAAA;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;IACtB,8BAA8B,EAAE,OAAO,CAAA;IACvC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA"}
1
+ {"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/types.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,mBAAmB,EAAE,OAAO,CAAA;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;IACtB,8BAA8B,EAAE,OAAO,CAAA;IACvC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA"}
@@ -1 +1 @@
1
- {"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA6GhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAkaf"}
1
+ {"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA6GhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAyaf"}
@@ -1 +1 @@
1
- {"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AA6B/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAqMf"}
1
+ {"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AA6B/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAwMf"}
@@ -2,15 +2,16 @@ import type { CResult } from '../../types.mts';
2
2
  import type { PURL_Type } from '../../utils/ecosystem.mts';
3
3
  import type { Spinner } from '@socketsecurity/registry/lib/spinner';
4
4
  export type ReachabilityOptions = {
5
- reachAnalysisTimeout: number;
6
5
  reachAnalysisMemoryLimit: number;
6
+ reachAnalysisTimeout: number;
7
7
  reachConcurrency: number;
8
8
  reachDebug: boolean;
9
- reachDisableAnalytics: boolean;
10
9
  reachDisableAnalysisSplitting: boolean;
10
+ reachDisableAnalytics: boolean;
11
11
  reachEcosystems: PURL_Type[];
12
12
  reachExcludePaths: string[];
13
13
  reachSkipCache: boolean;
14
+ reachVersion: string | undefined;
14
15
  };
15
16
  export type ReachabilityAnalysisOptions = {
16
17
  branchName?: string | undefined;
@@ -1 +1 @@
1
- {"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,wBAAwB,EAAE,MAAM,CAAA;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,OAAO,CAAA;IACnB,qBAAqB,EAAE,OAAO,CAAA;IAC9B,6BAA6B,EAAE,OAAO,CAAA;IACtC,eAAe,EAAE,SAAS,EAAE,CAAA;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,cAAc,EAAE,OAAO,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C,CAAA;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,CAAC,EAAE,2BAA2B,GAAG,SAAS,GAChD,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAiL9C"}
1
+ {"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,wBAAwB,EAAE,MAAM,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,OAAO,CAAA;IACnB,6BAA6B,EAAE,OAAO,CAAA;IACtC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,eAAe,EAAE,SAAS,EAAE,CAAA;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,cAAc,EAAE,OAAO,CAAA;IACvB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C,CAAA;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,CAAC,EAAE,2BAA2B,GAAG,SAAS,GAChD,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAkL9C"}
@@ -1 +1 @@
1
- {"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,eAAO,MAAM,iBAAiB,EAAE,SAuD/B,CAAA"}
1
+ {"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,eAAO,MAAM,iBAAiB,EAAE,SA2D/B,CAAA"}
@@ -16,6 +16,9 @@ export type DlxPackageSpec = {
16
16
  * Uses force/update flags to ensure the latest version within the range is fetched.
17
17
  */
18
18
  export declare function spawnDlx(packageSpec: DlxPackageSpec, args: string[] | readonly string[], options?: DlxOptions | undefined, spawnExtra?: SpawnExtra | undefined): Promise<ShadowBinResult>;
19
+ export type CoanaDlxOptions = DlxOptions & {
20
+ coanaVersion?: string | undefined;
21
+ };
19
22
  /**
20
23
  * Helper to spawn coana with dlx.
21
24
  * Automatically uses force and silent when version is not pinned exactly.
@@ -24,7 +27,7 @@ export declare function spawnDlx(packageSpec: DlxPackageSpec, args: string[] | r
24
27
  * If SOCKET_CLI_COANA_LOCAL_PATH environment variable is set, uses the local
25
28
  * Coana CLI at that path instead of downloading from npm.
26
29
  */
27
- export declare function spawnCoanaDlx(args: string[] | readonly string[], orgSlug?: string, options?: DlxOptions | undefined, spawnExtra?: SpawnExtra | undefined): Promise<CResult<string>>;
30
+ export declare function spawnCoanaDlx(args: string[] | readonly string[], orgSlug?: string, options?: CoanaDlxOptions | undefined, spawnExtra?: SpawnExtra | undefined): Promise<CResult<string>>;
28
31
  /**
29
32
  * Helper to spawn cdxgen with dlx.
30
33
  */
@@ -1 +1 @@
1
- {"version":3,"file":"dlx.d.mts","sourceRoot":"","sources":["../../../src/utils/dlx.mts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAA;AAMpE,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG;IAC1C,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAQD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,WAAW,EAAE,cAAc,EAC3B,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CA8F1B;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAmG1B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAU1B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAU1B"}
1
+ {"version":3,"file":"dlx.d.mts","sourceRoot":"","sources":["../../../src/utils/dlx.mts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAA;AAMpE,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG;IAC1C,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAQD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,WAAW,EAAE,cAAc,EAC3B,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CA8F1B;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAClC,CAAA;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,EACrC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAqG1B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAU1B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAU1B"}
package/dist/utils.js CHANGED
@@ -3564,7 +3564,6 @@ async function spawnDlx(packageSpec, args, options, spawnExtra) {
3564
3564
  return await shadowNpxBin(spawnArgs, finalShadowOptions, spawnExtra);
3565
3565
  }
3566
3566
  }
3567
-
3568
3567
  /**
3569
3568
  * Helper to spawn coana with dlx.
3570
3569
  * Automatically uses force and silent when version is not pinned exactly.
@@ -3575,6 +3574,7 @@ async function spawnDlx(packageSpec, args, options, spawnExtra) {
3575
3574
  */
3576
3575
  async function spawnCoanaDlx(args, orgSlug, options, spawnExtra) {
3577
3576
  const {
3577
+ coanaVersion,
3578
3578
  env: spawnEnv,
3579
3579
  ipc,
3580
3580
  ...dlxOptions
@@ -3627,7 +3627,7 @@ async function spawnCoanaDlx(args, orgSlug, options, spawnExtra) {
3627
3627
  // Use npm/dlx version.
3628
3628
  const result = await spawnDlx({
3629
3629
  name: '@coana-tech/cli',
3630
- version: constants.default.ENV.INLINED_SOCKET_CLI_COANA_TECH_CLI_VERSION
3630
+ version: coanaVersion || constants.default.ENV.INLINED_SOCKET_CLI_COANA_TECH_CLI_VERSION
3631
3631
  }, args, {
3632
3632
  force: true,
3633
3633
  silent: true,
@@ -4061,6 +4061,105 @@ async function setGitRemoteGithubRepoUrl(owner, repo, token, cwd = process.cwd()
4061
4061
  return false;
4062
4062
  }
4063
4063
 
4064
+ /**
4065
+ * Converts CVE IDs to GHSA IDs using GitHub API.
4066
+ * CVE to GHSA mappings are permanent, so we cache for 30 days.
4067
+ */
4068
+ async function convertCveToGhsa(cveId) {
4069
+ try {
4070
+ const cacheKey = `cve-to-ghsa-${cveId}`;
4071
+ const octokit = getOctokit();
4072
+ const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
4073
+ const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
4074
+ cve_id: cveId,
4075
+ per_page: 1
4076
+ }), THIRTY_DAYS_MS);
4077
+ if (!response.data.length) {
4078
+ return {
4079
+ ok: false,
4080
+ message: `No GHSA found for CVE ${cveId}`
4081
+ };
4082
+ }
4083
+ return {
4084
+ ok: true,
4085
+ data: response.data[0].ghsa_id
4086
+ };
4087
+ } catch (e) {
4088
+ const errorCause = getErrorCause(e);
4089
+ const errorLower = errorCause.toLowerCase();
4090
+ // Detect GitHub API rate limit and network errors.
4091
+ const isRateLimitOrNetworkError = errorLower.includes('rate limit') || errorLower.includes('epipe') || errorLower.includes('econnreset') || errorLower.includes('status: 403') || errorLower.includes('status code 403');
4092
+ return {
4093
+ ok: false,
4094
+ message: isRateLimitOrNetworkError ? 'GitHub API rate limit exceeded while converting CVE to GHSA. Wait an hour or set SOCKET_CLI_GITHUB_TOKEN environment variable with a personal access token for higher limits.' : `Failed to convert CVE to GHSA: ${errorCause}`
4095
+ };
4096
+ }
4097
+ }
4098
+
4099
+ const PURL_TO_GITHUB_ECOSYSTEM_MAPPING = {
4100
+ __proto__: null,
4101
+ // GitHub Advisory Database supported ecosystems
4102
+ cargo: 'rust',
4103
+ composer: 'composer',
4104
+ gem: 'rubygems',
4105
+ go: 'go',
4106
+ golang: 'go',
4107
+ maven: 'maven',
4108
+ npm: 'npm',
4109
+ nuget: 'nuget',
4110
+ pypi: 'pip',
4111
+ swift: 'swift'
4112
+ };
4113
+
4114
+ /**
4115
+ * Converts PURL to GHSA IDs using GitHub API.
4116
+ */
4117
+ async function convertPurlToGhsas(purl) {
4118
+ try {
4119
+ const purlObj = getPurlObject(purl, {
4120
+ throws: false
4121
+ });
4122
+ if (!purlObj) {
4123
+ return {
4124
+ ok: false,
4125
+ message: `Invalid PURL format: ${purl}`
4126
+ };
4127
+ }
4128
+ const {
4129
+ name,
4130
+ type: ecosystem,
4131
+ version
4132
+ } = purlObj;
4133
+
4134
+ // Map PURL ecosystem to GitHub ecosystem.
4135
+ const githubEcosystem = PURL_TO_GITHUB_ECOSYSTEM_MAPPING[ecosystem];
4136
+ if (!githubEcosystem) {
4137
+ return {
4138
+ ok: false,
4139
+ message: `Unsupported PURL ecosystem: ${ecosystem}`
4140
+ };
4141
+ }
4142
+
4143
+ // Search for advisories affecting this package.
4144
+ const cacheKey = `purl-to-ghsa-${ecosystem}-${name}-${version || constants.LATEST}`;
4145
+ const octokit = getOctokit();
4146
+ const affects = version ? `${name}@${version}` : name;
4147
+ const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
4148
+ ecosystem: githubEcosystem,
4149
+ affects
4150
+ }));
4151
+ return {
4152
+ ok: true,
4153
+ data: response.data.map(a => a.ghsa_id)
4154
+ };
4155
+ } catch (e) {
4156
+ return {
4157
+ ok: false,
4158
+ message: `Failed to convert PURL to GHSA: ${getErrorCause(e)}`
4159
+ };
4160
+ }
4161
+ }
4162
+
4064
4163
  /**
4065
4164
  * Command-line utilities for Socket CLI.
4066
4165
  * Handles argument parsing, flag processing, and command formatting.
@@ -4218,105 +4317,6 @@ function isPnpmLockfileScanCommand(command) {
4218
4317
  return command === 'install' || command === 'i' || command === 'update' || command === 'up';
4219
4318
  }
4220
4319
 
4221
- /**
4222
- * Converts CVE IDs to GHSA IDs using GitHub API.
4223
- * CVE to GHSA mappings are permanent, so we cache for 30 days.
4224
- */
4225
- async function convertCveToGhsa(cveId) {
4226
- try {
4227
- const cacheKey = `cve-to-ghsa-${cveId}`;
4228
- const octokit = getOctokit();
4229
- const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
4230
- const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
4231
- cve_id: cveId,
4232
- per_page: 1
4233
- }), THIRTY_DAYS_MS);
4234
- if (!response.data.length) {
4235
- return {
4236
- ok: false,
4237
- message: `No GHSA found for CVE ${cveId}`
4238
- };
4239
- }
4240
- return {
4241
- ok: true,
4242
- data: response.data[0].ghsa_id
4243
- };
4244
- } catch (e) {
4245
- const errorCause = getErrorCause(e);
4246
- const errorLower = errorCause.toLowerCase();
4247
- // Detect GitHub API rate limit and network errors.
4248
- const isRateLimitOrNetworkError = errorLower.includes('rate limit') || errorLower.includes('epipe') || errorLower.includes('econnreset') || errorLower.includes('status: 403') || errorLower.includes('status code 403');
4249
- return {
4250
- ok: false,
4251
- message: isRateLimitOrNetworkError ? 'GitHub API rate limit exceeded while converting CVE to GHSA. Wait an hour or set SOCKET_CLI_GITHUB_TOKEN environment variable with a personal access token for higher limits.' : `Failed to convert CVE to GHSA: ${errorCause}`
4252
- };
4253
- }
4254
- }
4255
-
4256
- const PURL_TO_GITHUB_ECOSYSTEM_MAPPING = {
4257
- __proto__: null,
4258
- // GitHub Advisory Database supported ecosystems
4259
- cargo: 'rust',
4260
- composer: 'composer',
4261
- gem: 'rubygems',
4262
- go: 'go',
4263
- golang: 'go',
4264
- maven: 'maven',
4265
- npm: 'npm',
4266
- nuget: 'nuget',
4267
- pypi: 'pip',
4268
- swift: 'swift'
4269
- };
4270
-
4271
- /**
4272
- * Converts PURL to GHSA IDs using GitHub API.
4273
- */
4274
- async function convertPurlToGhsas(purl) {
4275
- try {
4276
- const purlObj = getPurlObject(purl, {
4277
- throws: false
4278
- });
4279
- if (!purlObj) {
4280
- return {
4281
- ok: false,
4282
- message: `Invalid PURL format: ${purl}`
4283
- };
4284
- }
4285
- const {
4286
- name,
4287
- type: ecosystem,
4288
- version
4289
- } = purlObj;
4290
-
4291
- // Map PURL ecosystem to GitHub ecosystem.
4292
- const githubEcosystem = PURL_TO_GITHUB_ECOSYSTEM_MAPPING[ecosystem];
4293
- if (!githubEcosystem) {
4294
- return {
4295
- ok: false,
4296
- message: `Unsupported PURL ecosystem: ${ecosystem}`
4297
- };
4298
- }
4299
-
4300
- // Search for advisories affecting this package.
4301
- const cacheKey = `purl-to-ghsa-${ecosystem}-${name}-${version || constants.LATEST}`;
4302
- const octokit = getOctokit();
4303
- const affects = version ? `${name}@${version}` : name;
4304
- const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
4305
- ecosystem: githubEcosystem,
4306
- affects
4307
- }));
4308
- return {
4309
- ok: true,
4310
- data: response.data.map(a => a.ghsa_id)
4311
- };
4312
- } catch (e) {
4313
- return {
4314
- ok: false,
4315
- message: `Failed to convert PURL to GHSA: ${getErrorCause(e)}`
4316
- };
4317
- }
4318
- }
4319
-
4320
4320
  const RangeStyles = ['pin', 'preserve'];
4321
4321
  function getMajor(version) {
4322
4322
  try {
@@ -6221,5 +6221,5 @@ exports.updateConfigValue = updateConfigValue;
6221
6221
  exports.walkNestedMap = walkNestedMap;
6222
6222
  exports.webLink = webLink;
6223
6223
  exports.writeSocketJson = writeSocketJson;
6224
- //# debugId=652cf0d7-6cf6-49b1-86ba-204b62a4be68
6224
+ //# debugId=bd1d2800-cf40-4d5d-b492-87f68c540f83
6225
6225
  //# sourceMappingURL=utils.js.map