@socketsecurity/cli-with-sentry 1.6.1 → 1.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +9 -0
- package/README.md +5 -5
- package/dist/cli.js +150 -170
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
- package/dist/manifest-scripts/socket-facts.init.gradle +100 -18
- package/dist/manifest-scripts/socket-facts.plugin.scala +30 -3
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/fix/coana-fix.d.mts.map +1 -1
- package/dist/types/commands/manifest/generate-recursive-manifests.d.mts +1 -1
- package/dist/types/commands/manifest/generate-recursive-manifests.d.mts.map +1 -1
- package/dist/types/commands/manifest/run-manifest-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/assemble.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/facts.d.mts +18 -16
- package/dist/types/commands/manifest/scripts/facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/records.d.mts +16 -2
- package/dist/types/commands/manifest/scripts/records.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/run.d.mts +2 -0
- package/dist/types/commands/manifest/scripts/run.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/sidecar.d.mts +6 -8
- package/dist/types/commands/manifest/scripts/sidecar.d.mts.map +1 -1
- package/dist/types/commands/scan/cmd-scan-create.d.mts.map +1 -1
- package/dist/types/commands/scan/handle-create-new-scan.d.mts.map +1 -1
- package/dist/types/utils/coana.d.mts +3 -0
- package/dist/types/utils/coana.d.mts.map +1 -1
- package/dist/utils.js +10 -1
- package/dist/utils.js.map +1 -1
- package/package.json +3 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AAqDA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AA8L9C,KAAK,cAAc,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAAA;AAoC5E,wBAAsB,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAY5E"}
|
|
@@ -18,7 +18,7 @@ export type EcosystemBuildConfig = {
|
|
|
18
18
|
// Set when this build root should be skipped entirely (never invoked).
|
|
19
19
|
skipReason: string | undefined;
|
|
20
20
|
};
|
|
21
|
-
// Generates one
|
|
21
|
+
// Generates one Socket facts file per independent gradle/sbt/maven build
|
|
22
22
|
// root under `cwd`. Coverage is tracked per ecosystem via the facts SBOM's
|
|
23
23
|
// own projects[].subprojectDir, not by pruning the whole discovered subtree,
|
|
24
24
|
// so an unrelated nested project a reactor doesn't declare still gets its
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;
|
|
1
|
+
{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAmLD,yEAAyE;AACzE,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,gEAAgE;AAChE,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAsB,0BAA0B,CAAC,EAC/C,GAAG,EACH,YAAY,EACZ,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,wEAAwE;IACxE,4DAA4D;IAC5D,2EAAyE;IACzE,qEAAqE;IACrE,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,uEAAuE;IACvE,sEAAsE;IACtE,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CA6CtC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,kEAAkE;AAClE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,UAAU,GACnB,oBAAoB,CAsCtB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,
|
|
1
|
+
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAwLnC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,eAAe,
|
|
1
|
+
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,eAAe,EAIrB,MAAM,aAAa,CAAA;AAIpB,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAA;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAI/D,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAClC,6EAA6E;IAC7E,qCAAqC;IACrC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;CACrD,CAAA;AA0BD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,eAAoB,GACzB,cAAc,CAoChB"}
|
|
@@ -27,8 +27,9 @@ export type SocketFactsSbomComponent = AnyPURL & {
|
|
|
27
27
|
// A module of the scanned build itself (same GAV as a projects[] entry).
|
|
28
28
|
firstParty?: true | undefined;
|
|
29
29
|
dependencies?: string[] | undefined;
|
|
30
|
-
// Direct dependencies only: the facts file plus
|
|
31
|
-
//
|
|
30
|
+
// Direct dependencies only: the facts file plus, per subproject pulling it in
|
|
31
|
+
// directly, the Gradle script declaring it, else the subproject's build file
|
|
32
|
+
// (which need not declare it, e.g. a parent POM does, nor exist on disk).
|
|
32
33
|
manifestFiles?: SocketFactsManifestReference[] | undefined;
|
|
33
34
|
};
|
|
34
35
|
// Relative to the facts file's directory.
|
|
@@ -36,25 +37,26 @@ export type SocketFactsManifestReference = {
|
|
|
36
37
|
file: string;
|
|
37
38
|
};
|
|
38
39
|
export type SocketFactsSbomProject = AnyPURL & {
|
|
40
|
+
// The build tool's own project identity, unique within the facts file:
|
|
41
|
+
// Maven's GAV, Gradle's project path, sbt's project id.
|
|
42
|
+
id: string;
|
|
39
43
|
subprojectDir: string;
|
|
40
44
|
dependencies: string[];
|
|
45
|
+
// The module's own build files, e.g. a POM other than `<subprojectDir>/pom.xml`;
|
|
46
|
+
// for a Gradle project without one, the scripts declaring its dependencies,
|
|
47
|
+
// else its configured build file, which may not exist on disk.
|
|
48
|
+
manifestFiles?: SocketFactsManifestReference[] | undefined;
|
|
41
49
|
};
|
|
42
|
-
// Resolved on-disk paths for a --with-files run, keyed by
|
|
43
|
-
//
|
|
44
|
-
// roots.
|
|
50
|
+
// Resolved on-disk paths for a --with-files run, keyed by component or project
|
|
51
|
+
// id (a project and its own component share one). `targets` = classpath
|
|
52
|
+
// entries (jars / module output dirs); `sources` = module source roots.
|
|
45
53
|
export type ResolvedArtifactPaths = {
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
sourcesByCoord: Map<string, string[]>;
|
|
51
|
-
coords: Set<string>;
|
|
54
|
+
pathsById: Map<string, {
|
|
55
|
+
sources: string[];
|
|
56
|
+
targets: string[];
|
|
57
|
+
}>;
|
|
52
58
|
// Component ids on each project's resolved classpath (union over its
|
|
53
|
-
// configurations), keyed by
|
|
59
|
+
// configurations), keyed by project id.
|
|
54
60
|
classpathByProject: Map<string, string[]>;
|
|
55
61
|
};
|
|
56
|
-
export declare function projectClasspathKey(project: Pick<SocketFactsSbomProject, 'name' | 'namespace' | 'subprojectDir'>): string;
|
|
57
|
-
// Coordinate-based (not `id`-based) so it also matches foreign SBOMs like
|
|
58
|
-
// CycloneDX. Empty segments dropped.
|
|
59
|
-
export declare function mavenCoordinateKey(groupId: string | undefined, artifactId: string | undefined, type: string | undefined, classifier: string | undefined, version: string | undefined): string;
|
|
60
62
|
//# sourceMappingURL=facts.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,yEAAyE;IACzE,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,
|
|
1
|
+
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,yEAAyE;IACzE,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,aAAa,CAAC,EAAE,4BAA4B,EAAE,GAAG,SAAS,CAAA;CAC3D,CAAA;AAED,0CAA0C;AAC1C,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG;IAC7C,uEAAuE;IACvE,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,iFAAiF;IACjF,4EAA4E;IAC5E,+DAA+D;IAC/D,aAAa,CAAC,EAAE,4BAA4B,EAAE,GAAG,SAAS,CAAA;CAC3D,CAAA;AAED,+EAA+E;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAChE,qEAAqE;IACrE,wCAAwC;IACxC,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAC1C,CAAA"}
|
|
@@ -6,18 +6,23 @@ import type { ResolutionFailure, UnscannableConfig } from './resolution-report.m
|
|
|
6
6
|
// <tag>\t<field>\t<field>...
|
|
7
7
|
//
|
|
8
8
|
// meta tool toolVersion javaVersion
|
|
9
|
+
// buildRoot path (absolute; the facts file's directory)
|
|
9
10
|
// project projectKey group name version dir
|
|
10
11
|
// projectSrc projectKey path (--with-files only)
|
|
11
12
|
// projectTgt projectKey path (--with-files only)
|
|
12
|
-
// projectBuild projectKey path
|
|
13
|
+
// projectBuild projectKey path [missing] (build-root-relative; `missing`: configured, absent on disk)
|
|
14
|
+
// declared projectKey group name path (script declaring the dependency; build-root-relative)
|
|
13
15
|
// root rootId projectKey config prod(0|1)
|
|
14
|
-
// node rootId coordId group name version ext classifier direct(0|1)
|
|
16
|
+
// node rootId coordId group name version ext classifier direct(0|1) project
|
|
15
17
|
// edge rootId parentCoordId childCoordId
|
|
16
18
|
// file rootId coordId path (--with-files only)
|
|
17
19
|
// scanned config
|
|
18
20
|
// failure coord detail config
|
|
19
21
|
// unscannable config detail
|
|
20
22
|
//
|
|
23
|
+
// `projectKey` is the tool's unique project identity (Maven: GAV; Gradle:
|
|
24
|
+
// project path; sbt: project id), emitted as the project id; a `node` whose
|
|
25
|
+
// `project` names one resolves to that build project.
|
|
21
26
|
// A `root` is one (subproject, configuration) resolution root; `coordId` is the
|
|
22
27
|
// coordinate key (`group:name:ext:classifier:version`, empty segments dropped),
|
|
23
28
|
// used opaquely as the per-root node key. Unknown tags are ignored.
|
|
@@ -32,6 +37,9 @@ export type RawNode = {
|
|
|
32
37
|
coordId: string;
|
|
33
38
|
coord: RawCoord;
|
|
34
39
|
direct: boolean;
|
|
40
|
+
// projectKey of the build project this node resolves to; empty for an
|
|
41
|
+
// external artifact.
|
|
42
|
+
project: string;
|
|
35
43
|
// --with-files only.
|
|
36
44
|
targets: string[];
|
|
37
45
|
};
|
|
@@ -53,11 +61,17 @@ export type RawProject = {
|
|
|
53
61
|
targets: string[];
|
|
54
62
|
// The project's own build files, build-root-relative.
|
|
55
63
|
buildFiles: string[];
|
|
64
|
+
// Build files the tool configures for the project but absent on disk.
|
|
65
|
+
missingBuildFiles: string[];
|
|
66
|
+
// "group:name" -> the scripts that declared that dependency on this project.
|
|
67
|
+
declaredIn: Map<string, string[]>;
|
|
56
68
|
};
|
|
57
69
|
export type ParsedRecords = {
|
|
58
70
|
tool: string;
|
|
59
71
|
toolVersion: string;
|
|
60
72
|
javaVersion: string;
|
|
73
|
+
// Absolute directory the build is rooted at; the facts file is written there.
|
|
74
|
+
buildRoot: string;
|
|
61
75
|
projects: Map<string, RawProject>;
|
|
62
76
|
roots: Map<string, RawRoot>;
|
|
63
77
|
scannedConfigs: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"records.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/records.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,kFAAgF;AAChF,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+BAA+B;AAC/B,EAAE;AACF,+CAA+C;AAC/C,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E
|
|
1
|
+
{"version":3,"file":"records.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/records.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,kFAAgF;AAChF,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+BAA+B;AAC/B,EAAE;AACF,+CAA+C;AAC/C,gGAAgG;AAChG,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E,sHAAsH;AACtH,gHAAgH;AAChH,sDAAsD;AACtD,6FAA6F;AAC7F,oDAAoD;AACpD,6EAA6E;AAC7E,uBAAuB;AACvB,sCAAsC;AACtC,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,sDAAsD;AACtD,gFAAgF;AAChF,gFAAgF;AAChF,oEAAoE;AAEpE,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,QAAQ,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,sEAAsE;IACtE,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,qBAAqB;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,sDAAsD;IACtD,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,sEAAsE;IACtE,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,6EAA6E;IAC7E,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,WAAW,EAAE,iBAAiB,EAAE,CAAA;CACjC,CAAA;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAe/C;AAMD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAkKxD"}
|
|
@@ -31,6 +31,8 @@ export type ManifestScriptOptions = {
|
|
|
31
31
|
export type ManifestRunResult = {
|
|
32
32
|
code: number;
|
|
33
33
|
facts: SocketFactsSbom;
|
|
34
|
+
// Undefined when the build did not report it.
|
|
35
|
+
buildRoot: string | undefined;
|
|
34
36
|
report: ResolutionReport;
|
|
35
37
|
artifactPaths: ResolvedArtifactPaths;
|
|
36
38
|
// Captured build-tool output (empty when stdio is 'inherit').
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;
|
|
1
|
+
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AA6FD,4EAA4E;AAC5E,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,4EAA4E;AAC5E,mEAAmE;AACnE,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAYrC"}
|
|
@@ -1,9 +1,8 @@
|
|
|
1
1
|
import type { ResolvedArtifactPaths, SocketFactsSbom, SocketFactsSbomComponent, SocketFactsSbomProject } from './facts.mts';
|
|
2
2
|
export type SidecarComponentEntry = SocketFactsSbomComponent & {
|
|
3
|
-
// Classpath entries (jars, or a sibling
|
|
4
|
-
//
|
|
5
|
-
//
|
|
6
|
-
// undefined means resolution couldn't be attempted at all (see attachPaths).
|
|
3
|
+
// Classpath entries (jars, or a sibling project's own build output dirs
|
|
4
|
+
// when this component is that project). `[]` means resolved and found
|
|
5
|
+
// nothing (e.g. a pom/BOM); undefined means paths were not resolved.
|
|
7
6
|
targets?: string[] | undefined;
|
|
8
7
|
// First-party source roots; `[]` for a genuinely external dependency (still
|
|
9
8
|
// attempted, nothing to find), not undefined.
|
|
@@ -18,7 +17,7 @@ export type SidecarProjectEntry = SocketFactsSbomProject & {
|
|
|
18
17
|
};
|
|
19
18
|
// Frozen contract with `coana run --compute-artifacts-sidecar`; change only
|
|
20
19
|
// in sync with the coana consumer. Keyed by the absolute path of the
|
|
21
|
-
//
|
|
20
|
+
// `*.socket.facts.json` file whose own projects[]/components[] these entries
|
|
22
21
|
// describe - the key IS the scope, so two independent reactors that happen to
|
|
23
22
|
// emit the same purl identity (e.g. a shared internal module name) can never
|
|
24
23
|
// collide: each is only ever looked up within its own key. No cross-reactor
|
|
@@ -41,9 +40,8 @@ export type SidecarAccumulator = Map<string, {
|
|
|
41
40
|
// Emit an entry for every SBOM component AND every first-party project: a
|
|
42
41
|
// top-level module is a project, not a dependency component, yet its source
|
|
43
42
|
// roots are where reachability starts, so the sidecar must carry them.
|
|
44
|
-
//
|
|
45
|
-
//
|
|
46
|
-
// existing last-writer-wins convention for that case.
|
|
43
|
+
// Every build writes its own facts file, so a key is accumulated once; a
|
|
44
|
+
// repeated call for the same factsFile (the same build run again) overwrites.
|
|
47
45
|
export declare function accumulateSidecar(acc: SidecarAccumulator, facts: SocketFactsSbom, artifactPaths: ResolvedArtifactPaths, factsFile: string,
|
|
48
46
|
// Off when artifact paths were not resolved; entries then omit `targets` and `sources`.
|
|
49
47
|
withPaths?: boolean): void;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA2BD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AACzE,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM;AACjB,wFAAwF;AACxF,SAAS,UAAO,GACf,IAAI,CAUN;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AAiDA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA6IhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA4ff"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,SAAS,CAAA;IACnE,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,0BAA0B,EAAE,OAAO,CAAA;QACnC,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AA8YD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,IAAI,CAAC,CAOf"}
|
|
@@ -33,6 +33,9 @@ export type CompressedScanPaths = {
|
|
|
33
33
|
* upload completes — successful or not — to remove the sibling files.
|
|
34
34
|
*/
|
|
35
35
|
export declare function compressSocketFactsForUpload(scanPaths: string[]): Promise<CompressedScanPaths>;
|
|
36
|
+
// `.socket.facts.json` or a named `<entry>.socket.facts.json`, matching
|
|
37
|
+
// depscan's case-insensitive `*.socket.facts.json`.
|
|
38
|
+
export declare function isSocketFactsFile(filepath: string): boolean;
|
|
36
39
|
export type ReachabilityError = {
|
|
37
40
|
componentName: string;
|
|
38
41
|
componentVersion: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,
|
|
1
|
+
{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAkD9B;AAED,wEAAwE;AACxE,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK3D;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA4CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAQR;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAoD9B"}
|
package/dist/utils.js
CHANGED
|
@@ -5127,6 +5127,8 @@ async function compressSocketFactsForUpload(scanPaths) {
|
|
|
5127
5127
|
// writing bytes — `cleanup()` would race with those writes and could
|
|
5128
5128
|
// remove a `.br` only to have it re-created after we returned.
|
|
5129
5129
|
const results = await Promise.allSettled(scanPaths.map(async p => {
|
|
5130
|
+
// depscan decodes only the bare `.socket.facts.json.br`; a named facts
|
|
5131
|
+
// file is uploaded as plain JSON.
|
|
5130
5132
|
if (path.basename(p) !== DOT_SOCKET_DOT_FACTS_JSON) {
|
|
5131
5133
|
return p;
|
|
5132
5134
|
}
|
|
@@ -5155,6 +5157,12 @@ async function compressSocketFactsForUpload(scanPaths) {
|
|
|
5155
5157
|
cleanup
|
|
5156
5158
|
};
|
|
5157
5159
|
}
|
|
5160
|
+
|
|
5161
|
+
// `.socket.facts.json` or a named `<entry>.socket.facts.json`, matching
|
|
5162
|
+
// depscan's case-insensitive `*.socket.facts.json`.
|
|
5163
|
+
function isSocketFactsFile(filepath) {
|
|
5164
|
+
return path.basename(filepath).toLowerCase().endsWith(DOT_SOCKET_DOT_FACTS_JSON);
|
|
5165
|
+
}
|
|
5158
5166
|
function extractReachabilityErrors(socketFactsFile) {
|
|
5159
5167
|
const json = fs$1.readJsonSync(socketFactsFile, {
|
|
5160
5168
|
throws: false
|
|
@@ -9143,6 +9151,7 @@ exports.isHelpFlag = isHelpFlag;
|
|
|
9143
9151
|
exports.isPnpmLockfileScanCommand = isPnpmLockfileScanCommand;
|
|
9144
9152
|
exports.isReportSupportedFile = isReportSupportedFile;
|
|
9145
9153
|
exports.isSensitiveConfigKey = isSensitiveConfigKey;
|
|
9154
|
+
exports.isSocketFactsFile = isSocketFactsFile;
|
|
9146
9155
|
exports.isSupportedConfigKey = isSupportedConfigKey;
|
|
9147
9156
|
exports.isValidPackageManager = isValidPackageManager;
|
|
9148
9157
|
exports.isYarnBerry = isYarnBerry;
|
|
@@ -9196,5 +9205,5 @@ exports.walkNestedMap = walkNestedMap;
|
|
|
9196
9205
|
exports.webLink = webLink;
|
|
9197
9206
|
exports.withTmpDir = withTmpDir;
|
|
9198
9207
|
exports.writeSocketJson = writeSocketJson;
|
|
9199
|
-
//# debugId=
|
|
9208
|
+
//# debugId=c389f805-1de2-4ce9-915d-7e65ab23f5e8
|
|
9200
9209
|
//# sourceMappingURL=utils.js.map
|