@socketsecurity/cli-with-sentry 1.6.2 → 1.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +17 -0
- package/README.md +5 -5
- package/dist/cli.js +350 -268
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
- package/dist/manifest-scripts/socket-facts.init.gradle +2 -65
- package/dist/manifest-scripts/socket-facts.plugin.scala +75 -41
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/fix/coana-fix.d.mts.map +1 -1
- package/dist/types/commands/fix/generated-socket-facts.d.mts +4 -2
- package/dist/types/commands/fix/generated-socket-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/cmd-manifest-dynamic-sbom-inference.d.mts.map +1 -1
- package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts +2 -1
- package/dist/types/commands/manifest/convert-gradle-to-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/convert-maven-to-facts.d.mts +2 -1
- package/dist/types/commands/manifest/convert-maven-to-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts +1 -1
- package/dist/types/commands/manifest/convert-sbt-to-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/run-manifest-facts.d.mts +3 -2
- package/dist/types/commands/manifest/run-manifest-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/assemble.d.mts +0 -1
- package/dist/types/commands/manifest/scripts/assemble.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/build-tool.d.mts +2 -0
- package/dist/types/commands/manifest/scripts/build-tool.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/facts.d.mts +15 -9
- package/dist/types/commands/manifest/scripts/facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/records.d.mts +6 -7
- package/dist/types/commands/manifest/scripts/records.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/run.d.mts +2 -0
- package/dist/types/commands/manifest/scripts/run.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/sidecar.d.mts +3 -1
- package/dist/types/commands/manifest/scripts/sidecar.d.mts.map +1 -1
- package/dist/types/commands/scan/handle-create-new-scan.d.mts.map +1 -1
- package/dist/types/commands/scan/perform-reachability-analysis.d.mts.map +1 -1
- package/dist/types/utils/coana.d.mts +7 -0
- package/dist/types/utils/coana.d.mts.map +1 -1
- package/dist/utils.js +16 -1
- package/dist/utils.js.map +1 -1
- package/external/blessed/vendor/tng.js +1 -1
- package/external/blessed-contrib/lib/widget/charts/bar.js +2 -2
- package/external/blessed-contrib/lib/widget/charts/line.js +2 -2
- package/external/blessed-contrib/lib/widget/table.js +3 -3
- package/package.json +2 -2
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"coana-fix.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/coana-fix.mts"],"names":[],"mappings":"AA4DA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AA8L9C,KAAK,cAAc,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAAA;AAoC5E,wBAAsB,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAY5E"}
|
|
@@ -5,10 +5,12 @@ export type GeneratedSocketFacts = {
|
|
|
5
5
|
remove: () => Promise<void>;
|
|
6
6
|
restore: () => Promise<void>;
|
|
7
7
|
};
|
|
8
|
-
// Backed up so each fix attempt sees the pre-fix build after `git clean
|
|
9
|
-
|
|
8
|
+
// Backed up so each fix attempt sees the pre-fix build after `git clean`, and
|
|
9
|
+
// facts files already present are left as they were found.
|
|
10
|
+
export declare function generateSocketFactsForFix({ cwd, excludePaths, findFactsPaths, tmpDir }: {
|
|
10
11
|
cwd: string;
|
|
11
12
|
excludePaths: string[];
|
|
13
|
+
findFactsPaths: () => Promise<string[]>;
|
|
12
14
|
tmpDir: string;
|
|
13
15
|
}): Promise<GeneratedSocketFacts>;
|
|
14
16
|
//# sourceMappingURL=generated-socket-facts.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"generated-socket-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/generated-socket-facts.mts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;
|
|
1
|
+
{"version":3,"file":"generated-socket-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/fix/generated-socket-facts.mts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAqBD,8EAA8E;AAC9E,2DAA2D;AAC3D,wBAAsB,yBAAyB,CAAC,EAC9C,GAAG,EACH,YAAY,EACZ,cAAc,EACd,MAAM,EACP,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACvC,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAyChC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;
|
|
1
|
+
{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAuC9C,eAAO,MAAM,+BAA+B;;;;CAI3C,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuEf"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import type { SidecarAccumulator } from './scripts/sidecar.mts';
|
|
2
|
-
// Generates
|
|
2
|
+
// Generates `gradle.socket.facts.json` for a Gradle project via the bundled
|
|
3
|
+
// init script.
|
|
3
4
|
export declare function convertGradleToFacts({ bin, cwd, excludeConfigs, excludePaths, gradleOpts, ignoreUnresolved, includeConfigs, javaHome, sidecarAcc, verbose, withFiles }: {
|
|
4
5
|
bin: string;
|
|
5
6
|
cwd: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,
|
|
1
|
+
{"version":3,"file":"convert-gradle-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-gradle-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,4EAA4E;AAC5E,eAAe;AACf,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import type { SidecarAccumulator } from './scripts/sidecar.mts';
|
|
2
|
-
// Generates
|
|
2
|
+
// Generates `pom.xml.socket.facts.json` (named after the POM Maven runs on)
|
|
3
|
+
// for a Maven project via the bundled extension.
|
|
3
4
|
export declare function convertMavenToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, javaHome, mavenOpts, sidecarAcc, verbose, withFiles }: {
|
|
4
5
|
bin: string;
|
|
5
6
|
cwd: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"convert-maven-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-maven-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,
|
|
1
|
+
{"version":3,"file":"convert-maven-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-maven-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,4EAA4E;AAC5E,iDAAiD;AACjD,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import type { SidecarAccumulator } from './scripts/sidecar.mts';
|
|
2
|
-
// Generates
|
|
2
|
+
// Generates `sbt.socket.facts.json` for an sbt project via the bundled sbt plugin.
|
|
3
3
|
// sbt 0.13/early 1.x can't run on modern JDKs — pass a compatible JDK via
|
|
4
4
|
// `--sbt-opts "--java-home <path>"` or `JAVA_HOME`.
|
|
5
5
|
export declare function convertSbtToFacts({ bin, cwd, excludeConfigs, excludePaths, ignoreUnresolved, includeConfigs, javaHome, sbtOpts, sidecarAcc, tmpDir, verbose, withFiles }: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"convert-sbt-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-sbt-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,
|
|
1
|
+
{"version":3,"file":"convert-sbt-to-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/convert-sbt-to-facts.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,mFAAmF;AACnF,4EAA0E;AAC1E,oDAAoD;AACpD,wBAAsB,iBAAiB,CAAC,EACtC,GAAG,EACH,GAAG,EACH,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,OAAO,EACP,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB"}
|
|
@@ -11,8 +11,9 @@ export type RunManifestFactsResult = {
|
|
|
11
11
|
// `process.exitCode`, which can already be non-zero for an unrelated reason.
|
|
12
12
|
export type RunManifestFactsOutcome = RunManifestFactsResult | null | undefined;
|
|
13
13
|
// Runs the bundled build-tool resolution script for a JVM project and writes
|
|
14
|
-
//
|
|
15
|
-
// resolved artifact paths into
|
|
14
|
+
// its `<entry>.socket.facts.json` (see socketFactsFileName). `withFiles`
|
|
15
|
+
// (reachability only) additionally folds resolved artifact paths into
|
|
16
|
+
// `sidecarAcc`. A blocking resolution failure sets
|
|
16
17
|
// a non-zero exit code and returns (matching the `--pom` generator) unless
|
|
17
18
|
// `ignoreUnresolved`; a crashed build — a process failure, not an unresolved
|
|
18
19
|
// dependency — always fails.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,
|
|
1
|
+
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,yEAAyE;AACzE,sEAAsE;AACtE,mDAAmD;AACnD,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2MnC"}
|
|
@@ -7,7 +7,6 @@ export type AssembleResult = {
|
|
|
7
7
|
artifactPaths: ResolvedArtifactPaths;
|
|
8
8
|
};
|
|
9
9
|
export type AssembleOptions = {
|
|
10
|
-
emitProjects?: boolean | undefined;
|
|
11
10
|
// Injectable for tests; an uncompiled module's output dir is dropped (module
|
|
12
11
|
// stays resolvable via its sources).
|
|
13
12
|
fileExists?: ((path: string) => boolean) | undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,
|
|
1
|
+
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EAKrB,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAA;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAI/D,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,6EAA6E;IAC7E,qCAAqC;IACrC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;CACrD,CAAA;AA8BD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,eAAoB,GACzB,cAAc,CAmChB"}
|
|
@@ -4,4 +4,6 @@ export type BuildTool = 'gradle' | 'maven' | 'sbt';
|
|
|
4
4
|
// and Gradle refuse such a directory themselves.
|
|
5
5
|
export declare function looksLikeSbtBuild(projectDir: string): boolean;
|
|
6
6
|
export declare function resolveBuildToolBin(tool: BuildTool, projectDir: string, bin?: string | undefined): string;
|
|
7
|
+
// Distinct for every build sharing a directory.
|
|
8
|
+
export declare function socketFactsFileName(tool: BuildTool, entryFile: string | undefined): string | undefined;
|
|
7
9
|
//# sourceMappingURL=build-tool.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"AAKA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AA2BlD,6EAA6E;AAC7E,+EAA+E;AAC/E,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CASR;AAED,gDAAgD;AAChD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAOpB"}
|
|
@@ -11,6 +11,7 @@ export type SocketFactsSbom = {
|
|
|
11
11
|
metadata?: SocketFactsSbomMetadata | undefined;
|
|
12
12
|
projects?: SocketFactsSbomProject[] | undefined;
|
|
13
13
|
components: SocketFactsSbomComponent[];
|
|
14
|
+
dependencies?: SocketFactsSbomDependency[] | undefined;
|
|
14
15
|
};
|
|
15
16
|
export type SocketFactsSbomMetadata = {
|
|
16
17
|
format: 'socket-facts-sbom';
|
|
@@ -26,26 +27,29 @@ export type SocketFactsSbomComponent = AnyPURL & {
|
|
|
26
27
|
dev?: boolean | undefined;
|
|
27
28
|
// A module of the scanned build itself (same GAV as a projects[] entry).
|
|
28
29
|
firstParty?: true | undefined;
|
|
29
|
-
dependencies?: string[] | undefined;
|
|
30
|
-
// Direct dependencies only: the facts file plus, per subproject pulling it in
|
|
31
|
-
// directly, the Gradle script declaring it, else the subproject's build file
|
|
32
|
-
// (which need not declare it, e.g. a parent POM does, nor exist on disk).
|
|
33
|
-
manifestFiles?: SocketFactsManifestReference[] | undefined;
|
|
34
30
|
};
|
|
35
31
|
// Relative to the facts file's directory.
|
|
36
32
|
export type SocketFactsManifestReference = {
|
|
37
33
|
file: string;
|
|
38
34
|
};
|
|
35
|
+
// A component with one exact subtree, shared by every position whose subtree
|
|
36
|
+
// is identical.
|
|
37
|
+
export type SocketFactsSbomDependency = {
|
|
38
|
+
// Index into components[].
|
|
39
|
+
component: number;
|
|
40
|
+
// Indices into dependencies[].
|
|
41
|
+
children?: number[] | undefined;
|
|
42
|
+
};
|
|
39
43
|
export type SocketFactsSbomProject = AnyPURL & {
|
|
40
44
|
// The build tool's own project identity, unique within the facts file:
|
|
41
45
|
// Maven's GAV, Gradle's project path, sbt's project id.
|
|
42
46
|
id: string;
|
|
43
47
|
subprojectDir: string;
|
|
44
|
-
|
|
45
|
-
//
|
|
46
|
-
// for a Gradle project without one, the scripts declaring its dependencies,
|
|
47
|
-
// else its configured build file, which may not exist on disk.
|
|
48
|
+
// The build files the tool reports for the project, e.g. a POM other than
|
|
49
|
+
// `<subprojectDir>/pom.xml`, or a Gradle build file absent on disk.
|
|
48
50
|
manifestFiles?: SocketFactsManifestReference[] | undefined;
|
|
51
|
+
// Indices into dependencies[]: this subproject's direct dependencies.
|
|
52
|
+
children: number[];
|
|
49
53
|
};
|
|
50
54
|
// Resolved on-disk paths for a --with-files run, keyed by component or project
|
|
51
55
|
// id (a project and its own component share one). `targets` = classpath
|
|
@@ -58,5 +62,7 @@ export type ResolvedArtifactPaths = {
|
|
|
58
62
|
// Component ids on each project's resolved classpath (union over its
|
|
59
63
|
// configurations), keyed by project id.
|
|
60
64
|
classpathByProject: Map<string, string[]>;
|
|
65
|
+
// Component ids of each project's direct dependencies, keyed by project id.
|
|
66
|
+
directDependenciesByProject: Map<string, string[]>;
|
|
61
67
|
};
|
|
62
68
|
//# sourceMappingURL=facts.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;
|
|
1
|
+
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;IACtC,YAAY,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAA;CACvD,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,yEAAyE;IACzE,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,0CAA0C;AAC1C,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,6EAA6E;AAC7E,gBAAgB;AAChB,MAAM,MAAM,yBAAyB,GAAG;IACtC,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG;IAC7C,uEAAuE;IACvE,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,oEAAoE;IACpE,aAAa,CAAC,EAAE,4BAA4B,EAAE,GAAG,SAAS,CAAA;IAC1D,sEAAsE;IACtE,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB,CAAA;AAED,+EAA+E;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAChE,qEAAqE;IACrE,wCAAwC;IACxC,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACzC,4EAA4E;IAC5E,2BAA2B,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACnD,CAAA"}
|
|
@@ -7,11 +7,11 @@ import type { ResolutionFailure, UnscannableConfig } from './resolution-report.m
|
|
|
7
7
|
//
|
|
8
8
|
// meta tool toolVersion javaVersion
|
|
9
9
|
// buildRoot path (absolute; the facts file's directory)
|
|
10
|
+
// entry path (file-addressed builds; build-root-relative)
|
|
10
11
|
// project projectKey group name version dir
|
|
11
12
|
// projectSrc projectKey path (--with-files only)
|
|
12
13
|
// projectTgt projectKey path (--with-files only)
|
|
13
|
-
// projectBuild projectKey path
|
|
14
|
-
// declared projectKey group name path (script declaring the dependency; build-root-relative)
|
|
14
|
+
// projectBuild projectKey path (build-root-relative; may be absent on disk)
|
|
15
15
|
// root rootId projectKey config prod(0|1)
|
|
16
16
|
// node rootId coordId group name version ext classifier direct(0|1) project
|
|
17
17
|
// edge rootId parentCoordId childCoordId
|
|
@@ -59,12 +59,8 @@ export type RawProject = {
|
|
|
59
59
|
dir: string;
|
|
60
60
|
sources: string[];
|
|
61
61
|
targets: string[];
|
|
62
|
-
// The project's
|
|
62
|
+
// The project's build files, build-root-relative.
|
|
63
63
|
buildFiles: string[];
|
|
64
|
-
// Build files the tool configures for the project but absent on disk.
|
|
65
|
-
missingBuildFiles: string[];
|
|
66
|
-
// "group:name" -> the scripts that declared that dependency on this project.
|
|
67
|
-
declaredIn: Map<string, string[]>;
|
|
68
64
|
};
|
|
69
65
|
export type ParsedRecords = {
|
|
70
66
|
tool: string;
|
|
@@ -72,6 +68,9 @@ export type ParsedRecords = {
|
|
|
72
68
|
javaVersion: string;
|
|
73
69
|
// Absolute directory the build is rooted at; the facts file is written there.
|
|
74
70
|
buildRoot: string;
|
|
71
|
+
// The file the build was invoked on (Maven's top-level POM); empty for a
|
|
72
|
+
// directory-addressed build.
|
|
73
|
+
entry: string;
|
|
75
74
|
projects: Map<string, RawProject>;
|
|
76
75
|
roots: Map<string, RawRoot>;
|
|
77
76
|
scannedConfigs: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"records.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/records.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,kFAAgF;AAChF,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+BAA+B;AAC/B,EAAE;AACF,+CAA+C;AAC/C,gGAAgG;AAChG,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E,
|
|
1
|
+
{"version":3,"file":"records.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/records.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAEhC,kFAAgF;AAChF,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+BAA+B;AAC/B,EAAE;AACF,+CAA+C;AAC/C,gGAAgG;AAChG,sGAAsG;AACtG,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E,oGAAoG;AACpG,sDAAsD;AACtD,6FAA6F;AAC7F,oDAAoD;AACpD,6EAA6E;AAC7E,uBAAuB;AACvB,sCAAsC;AACtC,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,sDAAsD;AACtD,gFAAgF;AAChF,gFAAgF;AAChF,oEAAoE;AAEpE,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,QAAQ,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,sEAAsE;IACtE,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,qBAAqB;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,WAAW,EAAE,iBAAiB,EAAE,CAAA;CACjC,CAAA;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAe/C;AAMD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CA4JxD"}
|
|
@@ -33,6 +33,8 @@ export type ManifestRunResult = {
|
|
|
33
33
|
facts: SocketFactsSbom;
|
|
34
34
|
// Undefined when the build did not report it.
|
|
35
35
|
buildRoot: string | undefined;
|
|
36
|
+
// Undefined when a file-addressed build did not report its entry file.
|
|
37
|
+
factsFileName: string | undefined;
|
|
36
38
|
report: ResolutionReport;
|
|
37
39
|
artifactPaths: ResolvedArtifactPaths;
|
|
38
40
|
// Captured build-tool output (empty when stdio is 'inherit').
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;
|
|
1
|
+
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,uEAAuE;IACvE,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAgGD,4EAA4E;AAC5E,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,4EAA4E;AAC5E,mEAAmE;AACnE,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAYrC"}
|
|
@@ -8,9 +8,11 @@ export type SidecarComponentEntry = SocketFactsSbomComponent & {
|
|
|
8
8
|
// attempted, nothing to find), not undefined.
|
|
9
9
|
sources?: string[] | undefined;
|
|
10
10
|
};
|
|
11
|
-
export type SidecarProjectEntry = SocketFactsSbomProject & {
|
|
11
|
+
export type SidecarProjectEntry = Omit<SocketFactsSbomProject, 'children'> & {
|
|
12
12
|
targets?: string[] | undefined;
|
|
13
13
|
sources?: string[] | undefined;
|
|
14
|
+
// Ids of this facts file's components[] the project depends on directly.
|
|
15
|
+
dependencies: string[];
|
|
14
16
|
// Ids of this facts file's components[] forming the project's full
|
|
15
17
|
// transitive classpath across all its configurations.
|
|
16
18
|
classpath: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;
|
|
1
|
+
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,sBAAsB,EAAE,UAAU,CAAC,GAAG;IAC3E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,yEAAyE;IACzE,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA2BD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AACzE,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM;AACjB,wFAAwF;AACxF,SAAS,UAAO,GACf,IAAI,CAeN;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"handle-create-new-scan.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/handle-create-new-scan.mts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sCAAsC,CAAA;AAsCjE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,OAAO,CAAA;IACtB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,SAAS,CAAA;IACnE,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CACV,mBAAmB,GAAG;QACpB,0BAA0B,EAAE,OAAO,CAAA;QACnC,uBAAuB,EAAE,OAAO,CAAA;KACjC,CACF,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AAwYD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,IAAI,CAAC,CAOf"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"perform-reachability-analysis.d.mts","sourceRoot":"","sources":["../../../../src/commands/scan/perform-reachability-analysis.mts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAGnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,oBAAoB,EAAE,OAAO,CAAA;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,wBAAwB,EAAE,MAAM,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,6BAA6B,EAAE,OAAO,CAAA;IACtC,4BAA4B,EAAE,OAAO,CAAA;IACrC,+BAA+B,EAAE,OAAO,CAAA;IACxC,4BAA4B,EAAE,OAAO,CAAA;IACrC,UAAU,EAAE,OAAO,CAAA;IACnB,4BAA4B,EAAE,OAAO,CAAA;IACrC,8BAA8B,EAAE,OAAO,CAAA;IACvC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,eAAe,EAAE,SAAS,EAAE,CAAA;IAC5B,4BAA4B,EAAE,OAAO,CAAA;IACrC,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,oBAAoB,EAAE,OAAO,CAAA;IAC7B,cAAc,EAAE,OAAO,CAAA;IACvB,6BAA6B,EAAE,OAAO,CAAA;IACtC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,6EAA6E;IAC7E,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,2EAA2E;IAC3E,wDAAwD;IACxD,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5C,CAAA;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CA8Q9C"}
|
|
@@ -36,6 +36,13 @@ export declare function compressSocketFactsForUpload(scanPaths: string[]): Promi
|
|
|
36
36
|
// `.socket.facts.json` or a named `<entry>.socket.facts.json`, matching
|
|
37
37
|
// depscan's case-insensitive `*.socket.facts.json`.
|
|
38
38
|
export declare function isSocketFactsFile(filepath: string): boolean;
|
|
39
|
+
// A Coana reachability report, never input to a new analysis: the bare
|
|
40
|
+
// `.socket.facts.json` (Coana's default name; producers name theirs after the
|
|
41
|
+
// build) or the path this run tells Coana to write to.
|
|
42
|
+
export declare function isReachabilityReportPath(filepath: string, options: {
|
|
43
|
+
cwd: string;
|
|
44
|
+
outputPath: string;
|
|
45
|
+
}): boolean;
|
|
39
46
|
export type ReachabilityError = {
|
|
40
47
|
componentName: string;
|
|
41
48
|
componentVersion: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAkD9B;AAED,wEAAwE;AACxE,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK3D;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA4CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAQR;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAoD9B"}
|
|
1
|
+
{"version":3,"file":"coana.d.mts","sourceRoot":"","sources":["../../../src/utils/coana.mts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAkD9B;AAED,wEAAwE;AACxE,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK3D;AAED,uEAAuE;AACvE,8EAA8E;AAC9E,uDAAuD;AACvD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAST;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CA4CrB;AAED,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAQR;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EAAE,EACnB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAoD9B"}
|
package/dist/utils.js
CHANGED
|
@@ -5163,6 +5163,20 @@ async function compressSocketFactsForUpload(scanPaths) {
|
|
|
5163
5163
|
function isSocketFactsFile(filepath) {
|
|
5164
5164
|
return path.basename(filepath).toLowerCase().endsWith(DOT_SOCKET_DOT_FACTS_JSON);
|
|
5165
5165
|
}
|
|
5166
|
+
|
|
5167
|
+
// A Coana reachability report, never input to a new analysis: the bare
|
|
5168
|
+
// `.socket.facts.json` (Coana's default name; producers name theirs after the
|
|
5169
|
+
// build) or the path this run tells Coana to write to.
|
|
5170
|
+
function isReachabilityReportPath(filepath, options) {
|
|
5171
|
+
const {
|
|
5172
|
+
cwd,
|
|
5173
|
+
outputPath
|
|
5174
|
+
} = {
|
|
5175
|
+
__proto__: null,
|
|
5176
|
+
...options
|
|
5177
|
+
};
|
|
5178
|
+
return path.basename(filepath).toLowerCase() === DOT_SOCKET_DOT_FACTS_JSON || path.resolve(cwd, filepath) === path.resolve(cwd, outputPath);
|
|
5179
|
+
}
|
|
5166
5180
|
function extractReachabilityErrors(socketFactsFile) {
|
|
5167
5181
|
const json = fs$1.readJsonSync(socketFactsFile, {
|
|
5168
5182
|
throws: false
|
|
@@ -9149,6 +9163,7 @@ exports.isConfigFromFlag = isConfigFromFlag;
|
|
|
9149
9163
|
exports.isGitHubBlockingError = isGitHubBlockingError;
|
|
9150
9164
|
exports.isHelpFlag = isHelpFlag;
|
|
9151
9165
|
exports.isPnpmLockfileScanCommand = isPnpmLockfileScanCommand;
|
|
9166
|
+
exports.isReachabilityReportPath = isReachabilityReportPath;
|
|
9152
9167
|
exports.isReportSupportedFile = isReportSupportedFile;
|
|
9153
9168
|
exports.isSensitiveConfigKey = isSensitiveConfigKey;
|
|
9154
9169
|
exports.isSocketFactsFile = isSocketFactsFile;
|
|
@@ -9205,5 +9220,5 @@ exports.walkNestedMap = walkNestedMap;
|
|
|
9205
9220
|
exports.webLink = webLink;
|
|
9206
9221
|
exports.withTmpDir = withTmpDir;
|
|
9207
9222
|
exports.writeSocketJson = writeSocketJson;
|
|
9208
|
-
//# debugId=
|
|
9223
|
+
//# debugId=788830e0-d926-4fb1-9858-2d1428ea1492
|
|
9209
9224
|
//# sourceMappingURL=utils.js.map
|