@socketsecurity/cli-with-sentry 1.1.39 → 1.1.41
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/dist/cli.js +60 -24
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/ci/handle-ci.d.mts.map +1 -1
- package/dist/types/commands/fix/cmd-fix.d.mts.map +1 -1
- package/dist/types/commands/fix/coana-fix.d.mts.map +1 -1
- package/dist/types/commands/fix/handle-fix.d.mts +2 -1
- package/dist/types/commands/fix/handle-fix.d.mts.map +1 -1
- package/dist/types/commands/fix/types.d.mts +1 -0
- package/dist/types/commands/fix/types.d.mts.map +1 -1
- package/dist/types/commands/scan/cmd-scan-create.d.mts.map +1 -1
- package/dist/types/commands/scan/cmd-scan-reach.d.mts.map +1 -1
- package/dist/types/commands/scan/perform-reachability-analysis.d.mts +3 -2
- package/dist/types/commands/scan/perform-reachability-analysis.d.mts.map +1 -1
- package/dist/types/commands/scan/reachability-flags.d.mts.map +1 -1
- package/dist/types/utils/dlx.d.mts +4 -1
- package/dist/types/utils/dlx.d.mts.map +1 -1
- package/dist/utils.js +102 -102
- package/dist/utils.js.map +1 -1
- package/package.json +3 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAaA,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"handle-ci.d.mts","sourceRoot":"","sources":["../../../../src/commands/ci/handle-ci.mts"],"names":[],"mappings":"AAaA,wBAAsB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DnE"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/cmd-fix.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAG9C,eAAO,MAAM,QAAQ,QAAQ,CAAA;AAQ7B,eAAO,MAAM,MAAM;;;;CAIlB,CAAA;
|
|
1
|
+
{"version":3,"file":"cmd-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/cmd-fix.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAG9C,eAAO,MAAM,QAAQ,QAAQ,CAAA;AAQ7B,eAAO,MAAM,MAAM;;;;CAIlB,CAAA;AA2JD,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAiLf"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AAkDA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAiD9C,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAsetD"}
|
|
@@ -3,6 +3,7 @@ import type { OutputKind } from '../../types.mts';
|
|
|
3
3
|
import type { Remap } from '@socketsecurity/registry/lib/objects';
|
|
4
4
|
export type HandleFixConfig = Remap<FixConfig & {
|
|
5
5
|
applyFixes: boolean;
|
|
6
|
+
coanaVersion?: string | undefined;
|
|
6
7
|
ghsas: string[];
|
|
7
8
|
orgSlug: string;
|
|
8
9
|
outputKind: OutputKind;
|
|
@@ -13,5 +14,5 @@ export type HandleFixConfig = Remap<FixConfig & {
|
|
|
13
14
|
* Filters out invalid IDs and logs conversion results.
|
|
14
15
|
*/
|
|
15
16
|
export declare function convertIdsToGhsas(ids: string[]): Promise<string[]>;
|
|
16
|
-
export declare function handleFix({ applyFixes, autopilot, cwd, disableMajorUpdates, exclude, ghsas, include, limit, minSatisfying, minimumReleaseAge, orgSlug, outputFile, outputKind, prCheck, rangeStyle, showAffectedDirectDependencies, spinner, unknownFlags }: HandleFixConfig): Promise<void>;
|
|
17
|
+
export declare function handleFix({ applyFixes, autopilot, coanaVersion, cwd, disableMajorUpdates, exclude, ghsas, include, limit, minSatisfying, minimumReleaseAge, orgSlug, outputFile, outputKind, prCheck, rangeStyle, showAffectedDirectDependencies, spinner, unknownFlags }: HandleFixConfig): Promise<void>;
|
|
17
18
|
//# sourceMappingURL=handle-fix.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handle-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/handle-fix.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAKjE,MAAM,MAAM,eAAe,GAAG,KAAK,CACjC,SAAS,GAAG;IACV,UAAU,EAAE,OAAO,CAAA;IACnB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CACF,CAAA;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiExE;AAED,wBAAsB,SAAS,CAAC,EAC9B,UAAU,EACV,SAAS,EACT,GAAG,EACH,mBAAmB,EACnB,OAAO,EACP,KAAK,EACL,OAAO,EACP,KAAK,EACL,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,UAAU,EACV,UAAU,EACV,OAAO,EACP,UAAU,EACV,8BAA8B,EAC9B,OAAO,EACP,YAAY,EACb,EAAE,eAAe,
|
|
1
|
+
{"version":3,"file":"handle-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/handle-fix.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAKjE,MAAM,MAAM,eAAe,GAAG,KAAK,CACjC,SAAS,GAAG;IACV,UAAU,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CACF,CAAA;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiExE;AAED,wBAAsB,SAAS,CAAC,EAC9B,UAAU,EACV,SAAS,EACT,YAAY,EACZ,GAAG,EACH,mBAAmB,EACnB,OAAO,EACP,KAAK,EACL,OAAO,EACP,KAAK,EACL,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,UAAU,EACV,UAAU,EACV,OAAO,EACP,UAAU,EACV,8BAA8B,EAC9B,OAAO,EACP,YAAY,EACb,EAAE,eAAe,iBA8CjB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/types.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,mBAAmB,EAAE,OAAO,CAAA;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;IACtB,8BAA8B,EAAE,OAAO,CAAA;IACvC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA"}
|
|
1
|
+
{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/types.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,mBAAmB,EAAE,OAAO,CAAA;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;IACtB,8BAA8B,EAAE,OAAO,CAAA;IACvC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA6GhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA6GhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAyaf"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AA6B/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"cmd-scan-reach.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-reach.mts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,UAAU,CAAA;AA6B/B,eAAO,MAAM,YAAY;;;;CAIxB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAwMf"}
|
|
@@ -2,15 +2,16 @@ import type { CResult } from '../../types.mts';
|
|
|
2
2
|
import type { PURL_Type } from '../../utils/ecosystem.mts';
|
|
3
3
|
import type { Spinner } from '@socketsecurity/registry/lib/spinner';
|
|
4
4
|
export type ReachabilityOptions = {
|
|
5
|
-
reachAnalysisTimeout: number;
|
|
6
5
|
reachAnalysisMemoryLimit: number;
|
|
6
|
+
reachAnalysisTimeout: number;
|
|
7
7
|
reachConcurrency: number;
|
|
8
8
|
reachDebug: boolean;
|
|
9
|
-
reachDisableAnalytics: boolean;
|
|
10
9
|
reachDisableAnalysisSplitting: boolean;
|
|
10
|
+
reachDisableAnalytics: boolean;
|
|
11
11
|
reachEcosystems: PURL_Type[];
|
|
12
12
|
reachExcludePaths: string[];
|
|
13
13
|
reachSkipCache: boolean;
|
|
14
|
+
reachVersion: string | undefined;
|
|
14
15
|
};
|
|
15
16
|
export type ReachabilityAnalysisOptions = {
|
|
16
17
|
branchName?: string | undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,
|
|
1
|
+
{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,wBAAwB,EAAE,MAAM,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,OAAO,CAAA;IACnB,6BAA6B,EAAE,OAAO,CAAA;IACtC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,eAAe,EAAE,SAAS,EAAE,CAAA;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,cAAc,EAAE,OAAO,CAAA;IACvB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C,CAAA;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,CAAC,EAAE,2BAA2B,GAAG,SAAS,GAChD,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAkL9C"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"reachability-flags.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/reachability-flags.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,eAAO,MAAM,iBAAiB,EAAE,SA2D/B,CAAA"}
|
|
@@ -16,6 +16,9 @@ export type DlxPackageSpec = {
|
|
|
16
16
|
* Uses force/update flags to ensure the latest version within the range is fetched.
|
|
17
17
|
*/
|
|
18
18
|
export declare function spawnDlx(packageSpec: DlxPackageSpec, args: string[] | readonly string[], options?: DlxOptions | undefined, spawnExtra?: SpawnExtra | undefined): Promise<ShadowBinResult>;
|
|
19
|
+
export type CoanaDlxOptions = DlxOptions & {
|
|
20
|
+
coanaVersion?: string | undefined;
|
|
21
|
+
};
|
|
19
22
|
/**
|
|
20
23
|
* Helper to spawn coana with dlx.
|
|
21
24
|
* Automatically uses force and silent when version is not pinned exactly.
|
|
@@ -24,7 +27,7 @@ export declare function spawnDlx(packageSpec: DlxPackageSpec, args: string[] | r
|
|
|
24
27
|
* If SOCKET_CLI_COANA_LOCAL_PATH environment variable is set, uses the local
|
|
25
28
|
* Coana CLI at that path instead of downloading from npm.
|
|
26
29
|
*/
|
|
27
|
-
export declare function spawnCoanaDlx(args: string[] | readonly string[], orgSlug?: string, options?:
|
|
30
|
+
export declare function spawnCoanaDlx(args: string[] | readonly string[], orgSlug?: string, options?: CoanaDlxOptions | undefined, spawnExtra?: SpawnExtra | undefined): Promise<CResult<string>>;
|
|
28
31
|
/**
|
|
29
32
|
* Helper to spawn cdxgen with dlx.
|
|
30
33
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"dlx.d.mts","sourceRoot":"","sources":["../../../src/utils/dlx.mts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAA;AAMpE,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG;IAC1C,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAQD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,WAAW,EAAE,cAAc,EAC3B,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CA8F1B;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,
|
|
1
|
+
{"version":3,"file":"dlx.d.mts","sourceRoot":"","sources":["../../../src/utils/dlx.mts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAA;AAMpE,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG;IAC1C,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC3B,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAQD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,WAAW,EAAE,cAAc,EAC3B,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CA8F1B;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAClC,CAAA;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,EACrC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAqG1B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAU1B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,EAChC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,GAClC,OAAO,CAAC,eAAe,CAAC,CAU1B"}
|
package/dist/utils.js
CHANGED
|
@@ -3564,7 +3564,6 @@ async function spawnDlx(packageSpec, args, options, spawnExtra) {
|
|
|
3564
3564
|
return await shadowNpxBin(spawnArgs, finalShadowOptions, spawnExtra);
|
|
3565
3565
|
}
|
|
3566
3566
|
}
|
|
3567
|
-
|
|
3568
3567
|
/**
|
|
3569
3568
|
* Helper to spawn coana with dlx.
|
|
3570
3569
|
* Automatically uses force and silent when version is not pinned exactly.
|
|
@@ -3575,6 +3574,7 @@ async function spawnDlx(packageSpec, args, options, spawnExtra) {
|
|
|
3575
3574
|
*/
|
|
3576
3575
|
async function spawnCoanaDlx(args, orgSlug, options, spawnExtra) {
|
|
3577
3576
|
const {
|
|
3577
|
+
coanaVersion,
|
|
3578
3578
|
env: spawnEnv,
|
|
3579
3579
|
ipc,
|
|
3580
3580
|
...dlxOptions
|
|
@@ -3627,7 +3627,7 @@ async function spawnCoanaDlx(args, orgSlug, options, spawnExtra) {
|
|
|
3627
3627
|
// Use npm/dlx version.
|
|
3628
3628
|
const result = await spawnDlx({
|
|
3629
3629
|
name: '@coana-tech/cli',
|
|
3630
|
-
version: constants.default.ENV.INLINED_SOCKET_CLI_COANA_TECH_CLI_VERSION
|
|
3630
|
+
version: coanaVersion || constants.default.ENV.INLINED_SOCKET_CLI_COANA_TECH_CLI_VERSION
|
|
3631
3631
|
}, args, {
|
|
3632
3632
|
force: true,
|
|
3633
3633
|
silent: true,
|
|
@@ -4061,6 +4061,105 @@ async function setGitRemoteGithubRepoUrl(owner, repo, token, cwd = process.cwd()
|
|
|
4061
4061
|
return false;
|
|
4062
4062
|
}
|
|
4063
4063
|
|
|
4064
|
+
/**
|
|
4065
|
+
* Converts CVE IDs to GHSA IDs using GitHub API.
|
|
4066
|
+
* CVE to GHSA mappings are permanent, so we cache for 30 days.
|
|
4067
|
+
*/
|
|
4068
|
+
async function convertCveToGhsa(cveId) {
|
|
4069
|
+
try {
|
|
4070
|
+
const cacheKey = `cve-to-ghsa-${cveId}`;
|
|
4071
|
+
const octokit = getOctokit();
|
|
4072
|
+
const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
|
|
4073
|
+
const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
|
|
4074
|
+
cve_id: cveId,
|
|
4075
|
+
per_page: 1
|
|
4076
|
+
}), THIRTY_DAYS_MS);
|
|
4077
|
+
if (!response.data.length) {
|
|
4078
|
+
return {
|
|
4079
|
+
ok: false,
|
|
4080
|
+
message: `No GHSA found for CVE ${cveId}`
|
|
4081
|
+
};
|
|
4082
|
+
}
|
|
4083
|
+
return {
|
|
4084
|
+
ok: true,
|
|
4085
|
+
data: response.data[0].ghsa_id
|
|
4086
|
+
};
|
|
4087
|
+
} catch (e) {
|
|
4088
|
+
const errorCause = getErrorCause(e);
|
|
4089
|
+
const errorLower = errorCause.toLowerCase();
|
|
4090
|
+
// Detect GitHub API rate limit and network errors.
|
|
4091
|
+
const isRateLimitOrNetworkError = errorLower.includes('rate limit') || errorLower.includes('epipe') || errorLower.includes('econnreset') || errorLower.includes('status: 403') || errorLower.includes('status code 403');
|
|
4092
|
+
return {
|
|
4093
|
+
ok: false,
|
|
4094
|
+
message: isRateLimitOrNetworkError ? 'GitHub API rate limit exceeded while converting CVE to GHSA. Wait an hour or set SOCKET_CLI_GITHUB_TOKEN environment variable with a personal access token for higher limits.' : `Failed to convert CVE to GHSA: ${errorCause}`
|
|
4095
|
+
};
|
|
4096
|
+
}
|
|
4097
|
+
}
|
|
4098
|
+
|
|
4099
|
+
const PURL_TO_GITHUB_ECOSYSTEM_MAPPING = {
|
|
4100
|
+
__proto__: null,
|
|
4101
|
+
// GitHub Advisory Database supported ecosystems
|
|
4102
|
+
cargo: 'rust',
|
|
4103
|
+
composer: 'composer',
|
|
4104
|
+
gem: 'rubygems',
|
|
4105
|
+
go: 'go',
|
|
4106
|
+
golang: 'go',
|
|
4107
|
+
maven: 'maven',
|
|
4108
|
+
npm: 'npm',
|
|
4109
|
+
nuget: 'nuget',
|
|
4110
|
+
pypi: 'pip',
|
|
4111
|
+
swift: 'swift'
|
|
4112
|
+
};
|
|
4113
|
+
|
|
4114
|
+
/**
|
|
4115
|
+
* Converts PURL to GHSA IDs using GitHub API.
|
|
4116
|
+
*/
|
|
4117
|
+
async function convertPurlToGhsas(purl) {
|
|
4118
|
+
try {
|
|
4119
|
+
const purlObj = getPurlObject(purl, {
|
|
4120
|
+
throws: false
|
|
4121
|
+
});
|
|
4122
|
+
if (!purlObj) {
|
|
4123
|
+
return {
|
|
4124
|
+
ok: false,
|
|
4125
|
+
message: `Invalid PURL format: ${purl}`
|
|
4126
|
+
};
|
|
4127
|
+
}
|
|
4128
|
+
const {
|
|
4129
|
+
name,
|
|
4130
|
+
type: ecosystem,
|
|
4131
|
+
version
|
|
4132
|
+
} = purlObj;
|
|
4133
|
+
|
|
4134
|
+
// Map PURL ecosystem to GitHub ecosystem.
|
|
4135
|
+
const githubEcosystem = PURL_TO_GITHUB_ECOSYSTEM_MAPPING[ecosystem];
|
|
4136
|
+
if (!githubEcosystem) {
|
|
4137
|
+
return {
|
|
4138
|
+
ok: false,
|
|
4139
|
+
message: `Unsupported PURL ecosystem: ${ecosystem}`
|
|
4140
|
+
};
|
|
4141
|
+
}
|
|
4142
|
+
|
|
4143
|
+
// Search for advisories affecting this package.
|
|
4144
|
+
const cacheKey = `purl-to-ghsa-${ecosystem}-${name}-${version || constants.LATEST}`;
|
|
4145
|
+
const octokit = getOctokit();
|
|
4146
|
+
const affects = version ? `${name}@${version}` : name;
|
|
4147
|
+
const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
|
|
4148
|
+
ecosystem: githubEcosystem,
|
|
4149
|
+
affects
|
|
4150
|
+
}));
|
|
4151
|
+
return {
|
|
4152
|
+
ok: true,
|
|
4153
|
+
data: response.data.map(a => a.ghsa_id)
|
|
4154
|
+
};
|
|
4155
|
+
} catch (e) {
|
|
4156
|
+
return {
|
|
4157
|
+
ok: false,
|
|
4158
|
+
message: `Failed to convert PURL to GHSA: ${getErrorCause(e)}`
|
|
4159
|
+
};
|
|
4160
|
+
}
|
|
4161
|
+
}
|
|
4162
|
+
|
|
4064
4163
|
/**
|
|
4065
4164
|
* Command-line utilities for Socket CLI.
|
|
4066
4165
|
* Handles argument parsing, flag processing, and command formatting.
|
|
@@ -4218,105 +4317,6 @@ function isPnpmLockfileScanCommand(command) {
|
|
|
4218
4317
|
return command === 'install' || command === 'i' || command === 'update' || command === 'up';
|
|
4219
4318
|
}
|
|
4220
4319
|
|
|
4221
|
-
/**
|
|
4222
|
-
* Converts CVE IDs to GHSA IDs using GitHub API.
|
|
4223
|
-
* CVE to GHSA mappings are permanent, so we cache for 30 days.
|
|
4224
|
-
*/
|
|
4225
|
-
async function convertCveToGhsa(cveId) {
|
|
4226
|
-
try {
|
|
4227
|
-
const cacheKey = `cve-to-ghsa-${cveId}`;
|
|
4228
|
-
const octokit = getOctokit();
|
|
4229
|
-
const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
|
|
4230
|
-
const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
|
|
4231
|
-
cve_id: cveId,
|
|
4232
|
-
per_page: 1
|
|
4233
|
-
}), THIRTY_DAYS_MS);
|
|
4234
|
-
if (!response.data.length) {
|
|
4235
|
-
return {
|
|
4236
|
-
ok: false,
|
|
4237
|
-
message: `No GHSA found for CVE ${cveId}`
|
|
4238
|
-
};
|
|
4239
|
-
}
|
|
4240
|
-
return {
|
|
4241
|
-
ok: true,
|
|
4242
|
-
data: response.data[0].ghsa_id
|
|
4243
|
-
};
|
|
4244
|
-
} catch (e) {
|
|
4245
|
-
const errorCause = getErrorCause(e);
|
|
4246
|
-
const errorLower = errorCause.toLowerCase();
|
|
4247
|
-
// Detect GitHub API rate limit and network errors.
|
|
4248
|
-
const isRateLimitOrNetworkError = errorLower.includes('rate limit') || errorLower.includes('epipe') || errorLower.includes('econnreset') || errorLower.includes('status: 403') || errorLower.includes('status code 403');
|
|
4249
|
-
return {
|
|
4250
|
-
ok: false,
|
|
4251
|
-
message: isRateLimitOrNetworkError ? 'GitHub API rate limit exceeded while converting CVE to GHSA. Wait an hour or set SOCKET_CLI_GITHUB_TOKEN environment variable with a personal access token for higher limits.' : `Failed to convert CVE to GHSA: ${errorCause}`
|
|
4252
|
-
};
|
|
4253
|
-
}
|
|
4254
|
-
}
|
|
4255
|
-
|
|
4256
|
-
const PURL_TO_GITHUB_ECOSYSTEM_MAPPING = {
|
|
4257
|
-
__proto__: null,
|
|
4258
|
-
// GitHub Advisory Database supported ecosystems
|
|
4259
|
-
cargo: 'rust',
|
|
4260
|
-
composer: 'composer',
|
|
4261
|
-
gem: 'rubygems',
|
|
4262
|
-
go: 'go',
|
|
4263
|
-
golang: 'go',
|
|
4264
|
-
maven: 'maven',
|
|
4265
|
-
npm: 'npm',
|
|
4266
|
-
nuget: 'nuget',
|
|
4267
|
-
pypi: 'pip',
|
|
4268
|
-
swift: 'swift'
|
|
4269
|
-
};
|
|
4270
|
-
|
|
4271
|
-
/**
|
|
4272
|
-
* Converts PURL to GHSA IDs using GitHub API.
|
|
4273
|
-
*/
|
|
4274
|
-
async function convertPurlToGhsas(purl) {
|
|
4275
|
-
try {
|
|
4276
|
-
const purlObj = getPurlObject(purl, {
|
|
4277
|
-
throws: false
|
|
4278
|
-
});
|
|
4279
|
-
if (!purlObj) {
|
|
4280
|
-
return {
|
|
4281
|
-
ok: false,
|
|
4282
|
-
message: `Invalid PURL format: ${purl}`
|
|
4283
|
-
};
|
|
4284
|
-
}
|
|
4285
|
-
const {
|
|
4286
|
-
name,
|
|
4287
|
-
type: ecosystem,
|
|
4288
|
-
version
|
|
4289
|
-
} = purlObj;
|
|
4290
|
-
|
|
4291
|
-
// Map PURL ecosystem to GitHub ecosystem.
|
|
4292
|
-
const githubEcosystem = PURL_TO_GITHUB_ECOSYSTEM_MAPPING[ecosystem];
|
|
4293
|
-
if (!githubEcosystem) {
|
|
4294
|
-
return {
|
|
4295
|
-
ok: false,
|
|
4296
|
-
message: `Unsupported PURL ecosystem: ${ecosystem}`
|
|
4297
|
-
};
|
|
4298
|
-
}
|
|
4299
|
-
|
|
4300
|
-
// Search for advisories affecting this package.
|
|
4301
|
-
const cacheKey = `purl-to-ghsa-${ecosystem}-${name}-${version || constants.LATEST}`;
|
|
4302
|
-
const octokit = getOctokit();
|
|
4303
|
-
const affects = version ? `${name}@${version}` : name;
|
|
4304
|
-
const response = await cacheFetch(cacheKey, () => octokit.rest.securityAdvisories.listGlobalAdvisories({
|
|
4305
|
-
ecosystem: githubEcosystem,
|
|
4306
|
-
affects
|
|
4307
|
-
}));
|
|
4308
|
-
return {
|
|
4309
|
-
ok: true,
|
|
4310
|
-
data: response.data.map(a => a.ghsa_id)
|
|
4311
|
-
};
|
|
4312
|
-
} catch (e) {
|
|
4313
|
-
return {
|
|
4314
|
-
ok: false,
|
|
4315
|
-
message: `Failed to convert PURL to GHSA: ${getErrorCause(e)}`
|
|
4316
|
-
};
|
|
4317
|
-
}
|
|
4318
|
-
}
|
|
4319
|
-
|
|
4320
4320
|
const RangeStyles = ['pin', 'preserve'];
|
|
4321
4321
|
function getMajor(version) {
|
|
4322
4322
|
try {
|
|
@@ -6221,5 +6221,5 @@ exports.updateConfigValue = updateConfigValue;
|
|
|
6221
6221
|
exports.walkNestedMap = walkNestedMap;
|
|
6222
6222
|
exports.webLink = webLink;
|
|
6223
6223
|
exports.writeSocketJson = writeSocketJson;
|
|
6224
|
-
//# debugId=
|
|
6224
|
+
//# debugId=bd1d2800-cf40-4d5d-b492-87f68c540f83
|
|
6225
6225
|
//# sourceMappingURL=utils.js.map
|