@socketsecurity/cli-with-sentry 1.6.1 → 1.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +16 -0
- package/README.md +5 -5
- package/dist/cli.js +230 -223
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
- package/dist/manifest-scripts/socket-facts.init.gradle +100 -18
- package/dist/manifest-scripts/socket-facts.plugin.scala +30 -3
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/fix/coana-fix.d.mts.map +1 -1
- package/dist/types/commands/manifest/cmd-manifest-dynamic-sbom-inference.d.mts.map +1 -1
- package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts +2 -1
- package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/convert-maven-to-facts.d.mts +2 -1
- package/dist/types/commands/manifest/convert-maven-to-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts +1 -1
- package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/generate-recursive-manifests.d.mts +1 -1
- package/dist/types/commands/manifest/generate-recursive-manifests.d.mts.map +1 -1
- package/dist/types/commands/manifest/run-manifest-facts.d.mts +3 -2
- package/dist/types/commands/manifest/run-manifest-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/assemble.d.mts +4 -1
- package/dist/types/commands/manifest/scripts/assemble.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/build-tool.d.mts +2 -0
- package/dist/types/commands/manifest/scripts/build-tool.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/facts.d.mts +18 -16
- package/dist/types/commands/manifest/scripts/facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/records.d.mts +20 -2
- package/dist/types/commands/manifest/scripts/records.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/run.d.mts +4 -0
- package/dist/types/commands/manifest/scripts/run.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/sidecar.d.mts +6 -8
- package/dist/types/commands/manifest/scripts/sidecar.d.mts.map +1 -1
- package/dist/types/commands/scan/cmd-scan-create.d.mts.map +1 -1
- package/dist/types/commands/scan/handle-create-new-scan.d.mts.map +1 -1
- package/dist/types/commands/scan/perform-reachability-analysis.d.mts.map +1 -1
- package/dist/types/utils/coana.d.mts +10 -0
- package/dist/types/utils/coana.d.mts.map +1 -1
- package/dist/utils.js +25 -1
- package/dist/utils.js.map +1 -1
- package/package.json +3 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AAqDA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AA8L9C,KAAK,cAAc,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAAA;AAoC5E,wBAAsB,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAY5E"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;
|
|
1
|
+
{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAuC9C,eAAO,MAAM,+BAA+B;;;;CAI3C,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuEf"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import type { SidecarAccumulator } from './scripts/sidecar.mts';
|
|
2
|
-
// Generates
|
|
2
|
+
// Generates `gradle.socket.facts.json` for a Gradle project via the bundled
|
|
3
|
+
// init script.
|
|
3
4
|
export declare function convertGradleToFacts({ bin, cwd, excludeConfigs, excludePaths, gradleOpts, ignoreUnresolved, includeConfigs, javaHome, sidecarAcc, verbose, withFiles }: {
|
|
4
5
|
bin: string;
|
|
5
6
|
cwd: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,
|
|
1
|
+
{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,4EAA4E;AAC5E,eAAe;AACf,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import type { SidecarAccumulator } from './scripts/sidecar.mts';
|
|
2
|
-
// Generates
|
|
2
|
+
// Generates `pom.xml.socket.facts.json` (named after the POM Maven runs on)
|
|
3
|
+
// for a Maven project via the bundled extension.
|
|
3
4
|
export declare function convertMavenToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, javaHome, mavenOpts, sidecarAcc, verbose, withFiles }: {
|
|
4
5
|
bin: string;
|
|
5
6
|
cwd: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"convert-maven-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-maven-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,
|
|
1
|
+
{"version":3,"file":"convert-maven-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-maven-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,4EAA4E;AAC5E,iDAAiD;AACjD,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import type { SidecarAccumulator } from './scripts/sidecar.mts';
|
|
2
|
-
// Generates
|
|
2
|
+
// Generates `sbt.socket.facts.json` for an sbt project via the bundled sbt plugin.
|
|
3
3
|
// sbt 0.13/early 1.x can't run on modern JDKs — pass a compatible JDK via
|
|
4
4
|
// `--sbt-opts "--java-home <path>"` or `JAVA_HOME`.
|
|
5
5
|
export declare function convertSbtToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, javaHome, sbtOpts, sidecarAcc, tmpDir, verbose, withFiles }: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"convert-sbt-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-sbt-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,
|
|
1
|
+
{"version":3,"file":"convert-sbt-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-sbt-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,mFAAmF;AACnF,4EAA0E;AAC1E,oDAAoD;AACpD,wBAAsB,iBAAiB,CAAC,EACtC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,OAAO,EACP,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB"}
|
|
@@ -18,7 +18,7 @@ export type EcosystemBuildConfig = {
|
|
|
18
18
|
// Set when this build root should be skipped entirely (never invoked).
|
|
19
19
|
skipReason: string | undefined;
|
|
20
20
|
};
|
|
21
|
-
// Generates one
|
|
21
|
+
// Generates one Socket facts file per independent gradle/sbt/maven build
|
|
22
22
|
// root under `cwd`. Coverage is tracked per ecosystem via the facts SBOM's
|
|
23
23
|
// own projects[].subprojectDir, not by pruning the whole discovered subtree,
|
|
24
24
|
// so an unrelated nested project a reactor doesn't declare still gets its
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;
|
|
1
|
+
{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAmLD,yEAAyE;AACzE,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,sEAAsE;AACtE,0EAA0E;AAC1E,0EAA0E;AAC1E,gEAAgE;AAChE,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAsB,0BAA0B,CAAC,EAC/C,GAAG,EACH,YAAY,EACZ,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,wEAAwE;IACxE,4DAA4D;IAC5D,2EAAyE;IACzE,qEAAqE;IACrE,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,uEAAuE;IACvE,sEAAsE;IACtE,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CA6CtC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,kEAAkE;AAClE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,UAAU,GACnB,oBAAoB,CAsCtB"}
|
|
@@ -11,8 +11,9 @@ export type RunManifestFactsResult = {
|
|
|
11
11
|
// `process.exitCode`, which can already be non-zero for an unrelated reason.
|
|
12
12
|
export type RunManifestFactsOutcome = RunManifestFactsResult | null | undefined;
|
|
13
13
|
// Runs the bundled build-tool resolution script for a JVM project and writes
|
|
14
|
-
//
|
|
15
|
-
// resolved artifact paths into
|
|
14
|
+
// its `<entry>.socket.facts.json` (see socketFactsFileName). `withFiles`
|
|
15
|
+
// (reachability only) additionally folds resolved artifact paths into
|
|
16
|
+
// `sidecarAcc`. A blocking resolution failure sets
|
|
16
17
|
// a non-zero exit code and returns (matching the `--pom` generator) unless
|
|
17
18
|
// `ignoreUnresolved`; a crashed build — a process failure, not an unresolved
|
|
18
19
|
// dependency — always fails.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,
|
|
1
|
+
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,yEAAyE;AACzE,sEAAsE;AACtE,mDAAmD;AACnD,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2MnC"}
|
|
@@ -8,9 +8,12 @@ export type AssembleResult = {
|
|
|
8
8
|
};
|
|
9
9
|
export type AssembleOptions = {
|
|
10
10
|
emitProjects?: boolean | undefined;
|
|
11
|
+
// Basename the facts file is written under; direct dependencies reference
|
|
12
|
+
// it. Undefined only when it cannot be named, and so will not be written.
|
|
13
|
+
factsFileName: string | undefined;
|
|
11
14
|
// Injectable for tests; an uncompiled module's output dir is dropped (module
|
|
12
15
|
// stays resolvable via its sources).
|
|
13
16
|
fileExists?: ((path: string) => boolean) | undefined;
|
|
14
17
|
};
|
|
15
|
-
export declare function assembleFacts(parsed: ParsedRecords, opts
|
|
18
|
+
export declare function assembleFacts(parsed: ParsedRecords, opts: AssembleOptions): AssembleResult;
|
|
16
19
|
//# sourceMappingURL=assemble.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,eAAe,
|
|
1
|
+
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,eAAe,EAIrB,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAA;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAI/D,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAClC,0EAA0E;IAC1E,0EAA0E;IAC1E,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,6EAA6E;IAC7E,qCAAqC;IACrC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;CACrD,CAAA;AA0BD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,eAAe,GACpB,cAAc,CAoChB"}
|
|
@@ -4,4 +4,6 @@ export type BuildTool = 'gradle' | 'maven' | 'sbt';
|
|
|
4
4
|
// and Gradle refuse such a directory themselves.
|
|
5
5
|
export declare function looksLikeSbtBuild(projectDir: string): boolean;
|
|
6
6
|
export declare function resolveBuildToolBin(tool: BuildTool, projectDir: string, bin?: string | undefined): string;
|
|
7
|
+
// Distinct for every build sharing a directory.
|
|
8
|
+
export declare function socketFactsFileName(tool: BuildTool, entryFile: string | undefined): string | undefined;
|
|
7
9
|
//# sourceMappingURL=build-tool.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"AAKA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AA2BlD,6EAA6E;AAC7E,+EAA+E;AAC/E,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CASR;AAED,gDAAgD;AAChD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAOpB"}
|
|
@@ -27,8 +27,9 @@ export type SocketFactsSbomComponent = AnyPURL & {
|
|
|
27
27
|
// A module of the scanned build itself (same GAV as a projects[] entry).
|
|
28
28
|
firstParty?: true | undefined;
|
|
29
29
|
dependencies?: string[] | undefined;
|
|
30
|
-
// Direct dependencies only: the facts file plus
|
|
31
|
-
//
|
|
30
|
+
// Direct dependencies only: the facts file plus, per subproject pulling it in
|
|
31
|
+
// directly, the Gradle script declaring it, else the subproject's build file
|
|
32
|
+
// (which need not declare it, e.g. a parent POM does, nor exist on disk).
|
|
32
33
|
manifestFiles?: SocketFactsManifestReference[] | undefined;
|
|
33
34
|
};
|
|
34
35
|
// Relative to the facts file's directory.
|
|
@@ -36,25 +37,26 @@ export type SocketFactsManifestReference = {
|
|
|
36
37
|
file: string;
|
|
37
38
|
};
|
|
38
39
|
export type SocketFactsSbomProject = AnyPURL & {
|
|
40
|
+
// The build tool's own project identity, unique within the facts file:
|
|
41
|
+
// Maven's GAV, Gradle's project path, sbt's project id.
|
|
42
|
+
id: string;
|
|
39
43
|
subprojectDir: string;
|
|
40
44
|
dependencies: string[];
|
|
45
|
+
// The module's own build files, e.g. a POM other than `<subprojectDir>/pom.xml`;
|
|
46
|
+
// for a Gradle project without one, the scripts declaring its dependencies,
|
|
47
|
+
// else its configured build file, which may not exist on disk.
|
|
48
|
+
manifestFiles?: SocketFactsManifestReference[] | undefined;
|
|
41
49
|
};
|
|
42
|
-
// Resolved on-disk paths for a --with-files run, keyed by
|
|
43
|
-
//
|
|
44
|
-
// roots.
|
|
50
|
+
// Resolved on-disk paths for a --with-files run, keyed by component or project
|
|
51
|
+
// id (a project and its own component share one). `targets` = classpath
|
|
52
|
+
// entries (jars / module output dirs); `sources` = module source roots.
|
|
45
53
|
export type ResolvedArtifactPaths = {
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
sourcesByCoord: Map<string, string[]>;
|
|
51
|
-
coords: Set<string>;
|
|
54
|
+
pathsById: Map<string, {
|
|
55
|
+
sources: string[];
|
|
56
|
+
targets: string[];
|
|
57
|
+
}>;
|
|
52
58
|
// Component ids on each project's resolved classpath (union over its
|
|
53
|
-
// configurations), keyed by
|
|
59
|
+
// configurations), keyed by project id.
|
|
54
60
|
classpathByProject: Map<string, string[]>;
|
|
55
61
|
};
|
|
56
|
-
export declare function projectClasspathKey(project: Pick<SocketFactsSbomProject, 'name' | 'namespace' | 'subprojectDir'>): string;
|
|
57
|
-
// Coordinate-based (not `id`-based) so it also matches foreign SBOMs like
|
|
58
|
-
// CycloneDX. Empty segments dropped.
|
|
59
|
-
export declare function mavenCoordinateKey(groupId: string | undefined, artifactId: string | undefined, type: string | undefined, classifier: string | undefined, version: string | undefined): string;
|
|
60
62
|
//# sourceMappingURL=facts.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,yEAAyE;IACzE,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,
|
|
1
|
+
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,yEAAyE;IACzE,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,aAAa,CAAC,EAAE,4BAA4B,EAAE,GAAG,SAAS,CAAA;CAC3D,CAAA;AAED,0CAA0C;AAC1C,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG;IAC7C,uEAAuE;IACvE,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,iFAAiF;IACjF,4EAA4E;IAC5E,+DAA+D;IAC/D,aAAa,CAAC,EAAE,4BAA4B,EAAE,GAAG,SAAS,CAAA;CAC3D,CAAA;AAED,+EAA+E;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAChE,qEAAqE;IACrE,wCAAwC;IACxC,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAC1C,CAAA"}
|
|
@@ -6,18 +6,24 @@ import type { ResolutionFailure, UnscannableConfig } from './resolution-report.m
|
|
|
6
6
|
// <tag>\t<field>\t<field>...
|
|
7
7
|
//
|
|
8
8
|
// meta tool toolVersion javaVersion
|
|
9
|
+
// buildRoot path (absolute; the facts file's directory)
|
|
10
|
+
// entry path (file-addressed builds; build-root-relative)
|
|
9
11
|
// project projectKey group name version dir
|
|
10
12
|
// projectSrc projectKey path (--with-files only)
|
|
11
13
|
// projectTgt projectKey path (--with-files only)
|
|
12
|
-
// projectBuild projectKey path
|
|
14
|
+
// projectBuild projectKey path [missing] (build-root-relative; `missing`: configured, absent on disk)
|
|
15
|
+
// declared projectKey group name path (script declaring the dependency; build-root-relative)
|
|
13
16
|
// root rootId projectKey config prod(0|1)
|
|
14
|
-
// node rootId coordId group name version ext classifier direct(0|1)
|
|
17
|
+
// node rootId coordId group name version ext classifier direct(0|1) project
|
|
15
18
|
// edge rootId parentCoordId childCoordId
|
|
16
19
|
// file rootId coordId path (--with-files only)
|
|
17
20
|
// scanned config
|
|
18
21
|
// failure coord detail config
|
|
19
22
|
// unscannable config detail
|
|
20
23
|
//
|
|
24
|
+
// `projectKey` is the tool's unique project identity (Maven: GAV; Gradle:
|
|
25
|
+
// project path; sbt: project id), emitted as the project id; a `node` whose
|
|
26
|
+
// `project` names one resolves to that build project.
|
|
21
27
|
// A `root` is one (subproject, configuration) resolution root; `coordId` is the
|
|
22
28
|
// coordinate key (`group:name:ext:classifier:version`, empty segments dropped),
|
|
23
29
|
// used opaquely as the per-root node key. Unknown tags are ignored.
|
|
@@ -32,6 +38,9 @@ export type RawNode = {
|
|
|
32
38
|
coordId: string;
|
|
33
39
|
coord: RawCoord;
|
|
34
40
|
direct: boolean;
|
|
41
|
+
// projectKey of the build project this node resolves to; empty for an
|
|
42
|
+
// external artifact.
|
|
43
|
+
project: string;
|
|
35
44
|
// --with-files only.
|
|
36
45
|
targets: string[];
|
|
37
46
|
};
|
|
@@ -53,11 +62,20 @@ export type RawProject = {
|
|
|
53
62
|
targets: string[];
|
|
54
63
|
// The project's own build files, build-root-relative.
|
|
55
64
|
buildFiles: string[];
|
|
65
|
+
// Build files the tool configures for the project but absent on disk.
|
|
66
|
+
missingBuildFiles: string[];
|
|
67
|
+
// "group:name" -> the scripts that declared that dependency on this project.
|
|
68
|
+
declaredIn: Map<string, string[]>;
|
|
56
69
|
};
|
|
57
70
|
export type ParsedRecords = {
|
|
58
71
|
tool: string;
|
|
59
72
|
toolVersion: string;
|
|
60
73
|
javaVersion: string;
|
|
74
|
+
// Absolute directory the build is rooted at; the facts file is written there.
|
|
75
|
+
buildRoot: string;
|
|
76
|
+
// The file the build was invoked on (Maven's top-level POM); empty for a
|
|
77
|
+
// directory-addressed build.
|
|
78
|
+
entry: string;
|
|
61
79
|
projects: Map<string, RawProject>;
|
|
62
80
|
roots: Map<string, RawRoot>;
|
|
63
81
|
scannedConfigs: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"records.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/records.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,kFAAgF;AAChF,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+BAA+B;AAC/B,EAAE;AACF,+CAA+C;AAC/C,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E
|
|
1
|
+
{"version":3,"file":"records.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/records.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,kFAAgF;AAChF,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+BAA+B;AAC/B,EAAE;AACF,+CAA+C;AAC/C,gGAAgG;AAChG,sGAAsG;AACtG,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E,sHAAsH;AACtH,gHAAgH;AAChH,sDAAsD;AACtD,6FAA6F;AAC7F,oDAAoD;AACpD,6EAA6E;AAC7E,uBAAuB;AACvB,sCAAsC;AACtC,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,sDAAsD;AACtD,gFAAgF;AAChF,gFAAgF;AAChF,oEAAoE;AAEpE,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,QAAQ,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,sEAAsE;IACtE,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,qBAAqB;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,sDAAsD;IACtD,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,sEAAsE;IACtE,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,6EAA6E;IAC7E,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,WAAW,EAAE,iBAAiB,EAAE,CAAA;CACjC,CAAA;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAe/C;AAMD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAsKxD"}
|
|
@@ -31,6 +31,10 @@ export type ManifestScriptOptions = {
|
|
|
31
31
|
export type ManifestRunResult = {
|
|
32
32
|
code: number;
|
|
33
33
|
facts: SocketFactsSbom;
|
|
34
|
+
// Undefined when the build did not report it.
|
|
35
|
+
buildRoot: string | undefined;
|
|
36
|
+
// Undefined when a file-addressed build did not report its entry file.
|
|
37
|
+
factsFileName: string | undefined;
|
|
34
38
|
report: ResolutionReport;
|
|
35
39
|
artifactPaths: ResolvedArtifactPaths;
|
|
36
40
|
// Captured build-tool output (empty when stdio is 'inherit').
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;
|
|
1
|
+
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,uEAAuE;IACvE,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAkGD,4EAA4E;AAC5E,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,4EAA4E;AAC5E,mEAAmE;AACnE,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAYrC"}
|
|
@@ -1,9 +1,8 @@
|
|
|
1
1
|
import type { ResolvedArtifactPaths, SocketFactsSbom, SocketFactsSbomComponent, SocketFactsSbomProject } from './facts.mts';
|
|
2
2
|
export type SidecarComponentEntry = SocketFactsSbomComponent & {
|
|
3
|
-
// Classpath entries (jars, or a sibling
|
|
4
|
-
//
|
|
5
|
-
//
|
|
6
|
-
// undefined means resolution couldn't be attempted at all (see attachPaths).
|
|
3
|
+
// Classpath entries (jars, or a sibling project's own build output dirs
|
|
4
|
+
// when this component is that project). `[]` means resolved and found
|
|
5
|
+
// nothing (e.g. a pom/BOM); undefined means paths were not resolved.
|
|
7
6
|
targets?: string[] | undefined;
|
|
8
7
|
// First-party source roots; `[]` for a genuinely external dependency (still
|
|
9
8
|
// attempted, nothing to find), not undefined.
|
|
@@ -18,7 +17,7 @@ export type SidecarProjectEntry = SocketFactsSbomProject & {
|
|
|
18
17
|
};
|
|
19
18
|
// Frozen contract with `coana run --compute-artifacts-sidecar`; change only
|
|
20
19
|
// in sync with the coana consumer. Keyed by the absolute path of the
|
|
21
|
-
//
|
|
20
|
+
// `*.socket.facts.json` file whose own projects[]/components[] these entries
|
|
22
21
|
// describe - the key IS the scope, so two independent reactors that happen to
|
|
23
22
|
// emit the same purl identity (e.g. a shared internal module name) can never
|
|
24
23
|
// collide: each is only ever looked up within its own key. No cross-reactor
|
|
@@ -41,9 +40,8 @@ export type SidecarAccumulator = Map<string, {
|
|
|
41
40
|
// Emit an entry for every SBOM component AND every first-party project: a
|
|
42
41
|
// top-level module is a project, not a dependency component, yet its source
|
|
43
42
|
// roots are where reachability starts, so the sidecar must carry them.
|
|
44
|
-
//
|
|
45
|
-
//
|
|
46
|
-
// existing last-writer-wins convention for that case.
|
|
43
|
+
// Every build writes its own facts file, so a key is accumulated once; a
|
|
44
|
+
// repeated call for the same factsFile (the same build run again) overwrites.
|
|
47
45
|
export declare function accumulateSidecar(acc: SidecarAccumulator, facts: SocketFactsSbom, artifactPaths: ResolvedArtifactPaths, factsFile: string,
|
|
48
46
|
// Off when artifact paths were not resolved; entries then omit `targets` and `sources`.
|
|
49
47
|
withPaths?: boolean): void;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA2BD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AACzE,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM;AACjB,wFAAwF;AACxF,SAAS,UAAO,GACf,IAAI,CAUN;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"cmd-scan-create.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/cmd-scan-create.mts"],"names":[],"mappings":"AAiDA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAE9C,eAAO,MAAM,QAAQ,WAAW,CAAA;AA6IhC,eAAO,MAAM,aAAa;;;;CAIzB,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CA4ff"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,SAAS,CAAA;IACnE,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,0BAA0B,EAAE,OAAO,CAAA;QACnC,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAwYD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,IAAI,CAAC,CAOf"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAGnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,oBAAoB,EAAE,OAAO,CAAA;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,wBAAwB,EAAE,MAAM,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,6BAA6B,EAAE,OAAO,CAAA;IACtC,4BAA4B,EAAE,OAAO,CAAA;IACrC,+BAA+B,EAAE,OAAO,CAAA;IACxC,4BAA4B,EAAE,OAAO,CAAA;IACrC,UAAU,EAAE,OAAO,CAAA;IACnB,4BAA4B,EAAE,OAAO,CAAA;IACrC,8BAA8B,EAAE,OAAO,CAAA;IACvC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,eAAe,EAAE,SAAS,EAAE,CAAA;IAC5B,4BAA4B,EAAE,OAAO,CAAA;IACrC,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,oBAAoB,EAAE,OAAO,CAAA;IAC7B,cAAc,EAAE,OAAO,CAAA;IACvB,6BAA6B,EAAE,OAAO,CAAA;IACtC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,6EAA6E;IAC7E,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,2EAA2E;IAC3E,wDAAwD;IACxD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C,CAAA;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CA8Q9C"}
|
|
@@ -33,6 +33,16 @@ export type CompressedScanPaths = {
|
|
|
33
33
|
* upload completes — successful or not — to remove the sibling files.
|
|
34
34
|
*/
|
|
35
35
|
export declare function compressSocketFactsForUpload(scanPaths: string[]): Promise<CompressedScanPaths>;
|
|
36
|
+
// `.socket.facts.json` or a named `<entry>.socket.facts.json`, matching
|
|
37
|
+
// depscan's case-insensitive `*.socket.facts.json`.
|
|
38
|
+
export declare function isSocketFactsFile(filepath: string): boolean;
|
|
39
|
+
// A Coana reachability report, never input to a new analysis: the bare
|
|
40
|
+
// `.socket.facts.json` (Coana's default name; producers name theirs after the
|
|
41
|
+
// build) or the path this run tells Coana to write to.
|
|
42
|
+
export declare function isReachabilityReportPath(filepath: string, options: {
|
|
43
|
+
cwd: string;
|
|
44
|
+
outputPath: string;
|
|
45
|
+
}): boolean;
|
|
36
46
|
export type ReachabilityError = {
|
|
37
47
|
componentName: string;
|
|
38
48
|
componentVersion: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,
|
|
1
|
+
{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAkD9B;AAED,wEAAwE;AACxE,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK3D;AAED,uEAAuE;AACvE,8EAA8E;AAC9E,uDAAuD;AACvD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAST;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA4CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAQR;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAoD9B"}
|
package/dist/utils.js
CHANGED
|
@@ -5127,6 +5127,8 @@ async function compressSocketFactsForUpload(scanPaths) {
|
|
|
5127
5127
|
// writing bytes — `cleanup()` would race with those writes and could
|
|
5128
5128
|
// remove a `.br` only to have it re-created after we returned.
|
|
5129
5129
|
const results = await Promise.allSettled(scanPaths.map(async p => {
|
|
5130
|
+
// depscan decodes only the bare `.socket.facts.json.br`; a named facts
|
|
5131
|
+
// file is uploaded as plain JSON.
|
|
5130
5132
|
if (path.basename(p) !== DOT_SOCKET_DOT_FACTS_JSON) {
|
|
5131
5133
|
return p;
|
|
5132
5134
|
}
|
|
@@ -5155,6 +5157,26 @@ async function compressSocketFactsForUpload(scanPaths) {
|
|
|
5155
5157
|
cleanup
|
|
5156
5158
|
};
|
|
5157
5159
|
}
|
|
5160
|
+
|
|
5161
|
+
// `.socket.facts.json` or a named `<entry>.socket.facts.json`, matching
|
|
5162
|
+
// depscan's case-insensitive `*.socket.facts.json`.
|
|
5163
|
+
function isSocketFactsFile(filepath) {
|
|
5164
|
+
return path.basename(filepath).toLowerCase().endsWith(DOT_SOCKET_DOT_FACTS_JSON);
|
|
5165
|
+
}
|
|
5166
|
+
|
|
5167
|
+
// A Coana reachability report, never input to a new analysis: the bare
|
|
5168
|
+
// `.socket.facts.json` (Coana's default name; producers name theirs after the
|
|
5169
|
+
// build) or the path this run tells Coana to write to.
|
|
5170
|
+
function isReachabilityReportPath(filepath, options) {
|
|
5171
|
+
const {
|
|
5172
|
+
cwd,
|
|
5173
|
+
outputPath
|
|
5174
|
+
} = {
|
|
5175
|
+
__proto__: null,
|
|
5176
|
+
...options
|
|
5177
|
+
};
|
|
5178
|
+
return path.basename(filepath).toLowerCase() === DOT_SOCKET_DOT_FACTS_JSON || path.resolve(cwd, filepath) === path.resolve(cwd, outputPath);
|
|
5179
|
+
}
|
|
5158
5180
|
function extractReachabilityErrors(socketFactsFile) {
|
|
5159
5181
|
const json = fs$1.readJsonSync(socketFactsFile, {
|
|
5160
5182
|
throws: false
|
|
@@ -9141,8 +9163,10 @@ exports.isConfigFromFlag = isConfigFromFlag;
|
|
|
9141
9163
|
exports.isGitHubBlockingError = isGitHubBlockingError;
|
|
9142
9164
|
exports.isHelpFlag = isHelpFlag;
|
|
9143
9165
|
exports.isPnpmLockfileScanCommand = isPnpmLockfileScanCommand;
|
|
9166
|
+
exports.isReachabilityReportPath = isReachabilityReportPath;
|
|
9144
9167
|
exports.isReportSupportedFile = isReportSupportedFile;
|
|
9145
9168
|
exports.isSensitiveConfigKey = isSensitiveConfigKey;
|
|
9169
|
+
exports.isSocketFactsFile = isSocketFactsFile;
|
|
9146
9170
|
exports.isSupportedConfigKey = isSupportedConfigKey;
|
|
9147
9171
|
exports.isValidPackageManager = isValidPackageManager;
|
|
9148
9172
|
exports.isYarnBerry = isYarnBerry;
|
|
@@ -9196,5 +9220,5 @@ exports.walkNestedMap = walkNestedMap;
|
|
|
9196
9220
|
exports.webLink = webLink;
|
|
9197
9221
|
exports.withTmpDir = withTmpDir;
|
|
9198
9222
|
exports.writeSocketJson = writeSocketJson;
|
|
9199
|
-
//# debugId=
|
|
9223
|
+
//# debugId=788830e0-d926-4fb1-9858-2d1428ea1492
|
|
9200
9224
|
//# sourceMappingURL=utils.js.map
|