@socketsecurity/cli-with-sentry 1.8.1 → 1.8.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +11 -0
- package/README.md +5 -5
- package/dist/cli.js +49 -71
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
- package/dist/manifest-scripts/socket-facts.plugin.scala +10 -3
- package/dist/manifest-scripts/socket-workspaces.init.gradle +12 -3
- package/dist/manifest-scripts/socket-workspaces.plugin.scala +28 -4
- package/dist/shadow-pnpm-bin2.js +69 -10
- package/dist/shadow-pnpm-bin2.js.map +1 -1
- package/dist/shadow-yarn-bin.js +8 -2
- package/dist/shadow-yarn-bin.js.map +1 -1
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/manifest/cmd-manifest-dynamic-sbom-inference.d.mts.map +1 -1
- package/dist/types/commands/manifest/discover-manifest-roots.d.mts +8 -3
- package/dist/types/commands/manifest/discover-manifest-roots.d.mts.map +1 -1
- package/dist/types/commands/manifest/enumerate-workspaces.d.mts +1 -0
- package/dist/types/commands/manifest/enumerate-workspaces.d.mts.map +1 -1
- package/dist/types/commands/manifest/generate-recursive-manifests.d.mts +2 -11
- package/dist/types/commands/manifest/generate-recursive-manifests.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/run.d.mts +2 -0
- package/dist/types/commands/manifest/scripts/run.d.mts.map +1 -1
- package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts +4 -13
- package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts.map +1 -1
- package/dist/types/shadow/common.d.mts +8 -0
- package/dist/types/shadow/common.d.mts.map +1 -1
- package/dist/types/shadow/pnpm/bin.d.mts.map +1 -1
- package/dist/types/shadow/yarn/bin.d.mts.map +1 -1
- package/package.json +3 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;
|
|
1
|
+
{"version":3,"file":"cmd-manifest-dynamic-sbom-inference.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/cmd-manifest-dynamic-sbom-inference.mts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,uCAAuC,CAAA;AAwC9C,eAAO,MAAM,+BAA+B;;;;CAI3C,CAAA;AAED,iBAAe,GAAG,CAChB,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,EAClC,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,EAAE,iBAAiB,GAChC,OAAO,CAAC,IAAI,CAAC,CAuEf"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { realpathOrResolved } from '../../utils/fs.mts';
|
|
2
2
|
import type { BuildTool } from './scripts/build-tool.mts';
|
|
3
|
+
import type { SocketFactsSbomProject } from './scripts/facts.mts';
|
|
3
4
|
import type { SocketJson } from '../../utils/socket-json.mts';
|
|
4
5
|
// A disabled ecosystem is skipped entirely by the glob scan below, so a
|
|
5
6
|
// nested socket.json re-enabling it would never even be searched for. Callers
|
|
@@ -8,9 +9,13 @@ import type { SocketJson } from '../../utils/socket-json.mts';
|
|
|
8
9
|
// check apply it instead.
|
|
9
10
|
export declare function withoutDisabledFlags(sockJson: SocketJson): SocketJson;
|
|
10
11
|
export { realpathOrResolved };
|
|
11
|
-
//
|
|
12
|
-
//
|
|
13
|
-
|
|
12
|
+
// Gradle reports a project's build file even when absent, which covers
|
|
13
|
+
// nothing. A sibling outside the build root is independently locatable.
|
|
14
|
+
export declare function addCoveredBuildFiles(covered: Set<string>, buildRoot: string, projects: readonly SocketFactsSbomProject[]): Promise<void>;
|
|
15
|
+
// `dir` must be realpath-resolved, as findBuildToolCandidates returns it.
|
|
16
|
+
export declare function isBuildRootCovered(covered: ReadonlySet<string>, tool: BuildTool, dir: string): boolean;
|
|
17
|
+
// Depth-sorted (root-most first) so the caller visits a reactor root before
|
|
18
|
+
// its own members and can skip those whose build files it already covers.
|
|
14
19
|
export declare function findBuildToolCandidates({ cwd, excludePaths, sockJson }: {
|
|
15
20
|
cwd: string;
|
|
16
21
|
excludePaths?: string[] | undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"discover-manifest-roots.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/discover-manifest-roots.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"discover-manifest-roots.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/discover-manifest-roots.mts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAIvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AA2B7D,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,0BAA0B;AAC1B,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,CAgBrE;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAA;AAE7B,uEAAuE;AACvE,wEAAwE;AACxE,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EACpB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,SAAS,sBAAsB,EAAE,GAC1C,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAC5B,IAAI,EAAE,SAAS,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAIT;AAeD,4EAA4E;AAC5E,0EAA0E;AAC1E,wBAAsB,uBAAuB,CAAC,EAC5C,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CA4CpC"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import type { BuildTool } from './scripts/build-tool.mts';
|
|
2
2
|
import type { SocketFactsSbomProject } from './scripts/facts.mts';
|
|
3
3
|
export type EnumerateWorkspacesResult = {
|
|
4
|
+
buildRoot: string;
|
|
4
5
|
projects: SocketFactsSbomProject[];
|
|
5
6
|
};
|
|
6
7
|
// Cheap subproject discovery (no dependency resolution) for
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"enumerate-workspaces.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/enumerate-workspaces.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAED,4DAA4D;AAC5D,2EAA2E;AAC3E,0EAA0E;AAC1E,aAAa;AACb,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,
|
|
1
|
+
{"version":3,"file":"enumerate-workspaces.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/enumerate-workspaces.mts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAED,4DAA4D;AAC5D,2EAA2E;AAC3E,0EAA0E;AAC1E,aAAa;AACb,wBAAsB,mBAAmB,CAAC,EACxC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAyDjD"}
|
|
@@ -18,17 +18,8 @@ export type EcosystemBuildConfig = {
|
|
|
18
18
|
// Set when this build root should be skipped entirely (never invoked).
|
|
19
19
|
skipReason: string | undefined;
|
|
20
20
|
};
|
|
21
|
-
//
|
|
22
|
-
//
|
|
23
|
-
// own projects[].subprojectDir, not by pruning the whole discovered subtree,
|
|
24
|
-
// so an unrelated nested project a reactor doesn't declare still gets its
|
|
25
|
-
// own invocation - and only a properly nested subprojectDir counts as
|
|
26
|
-
// coverage at all; one that escapes its declaring reactor's own directory
|
|
27
|
-
// still gets its own independent invocation too (see the covered.add call
|
|
28
|
-
// below). Fail-closed per ecosystem, not globally: a root whose
|
|
29
|
-
// workspace layout can't be determined aborts only that ecosystem's own
|
|
30
|
-
// remaining walk (marking its untried candidates 'aborted'), since coverage
|
|
31
|
-
// is tracked per ecosystem and an unrelated one has nothing to lose from it.
|
|
21
|
+
// A failed root aborts only its own ecosystem's remaining walk: the build
|
|
22
|
+
// files it would have covered are all its own tool's.
|
|
32
23
|
export declare function generateRecursiveManifests({ cwd, excludePaths, sbtTmpDir, sidecarAcc, verbose, withFiles }: {
|
|
33
24
|
cwd: string;
|
|
34
25
|
excludePaths?: string[] | undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"generate-recursive-manifests.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/generate-recursive-manifests.mts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,OAAO,GACP,QAAQ,GACR,WAAW,GACX,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,MAAM,EAAE,8BAA8B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAA;AA6JD,0EAA0E;AAC1E,sDAAsD;AACtD,wBAAsB,0BAA0B,CAAC,EAC/C,GAAG,EACH,YAAY,EACZ,SAAS,EACT,UAAU,EACV,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,wEAAwE;IACxE,4DAA4D;IAC5D,2EAAyE;IACzE,qEAAqE;IACrE,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,uEAAuE;IACvE,sEAAsE;IACtE,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CA6CtC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,kEAAkE;AAClE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,UAAU,GACnB,oBAAoB,CAsCtB"}
|
|
@@ -42,6 +42,8 @@ export type ManifestRunResult = {
|
|
|
42
42
|
stdout: string;
|
|
43
43
|
};
|
|
44
44
|
export type WorkspaceEnumerationResult = {
|
|
45
|
+
// Absolute; what each project's subprojectDir and manifestFiles are relative to.
|
|
46
|
+
buildRoot: string | undefined;
|
|
45
47
|
code: number;
|
|
46
48
|
projects: SocketFactsSbomProject[];
|
|
47
49
|
stderr: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,uEAAuE;IACvE,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAgGD,4EAA4E;AAC5E,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,4EAA4E;AAC5E,mEAAmE;AACnE,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,
|
|
1
|
+
{"version":3,"file":"run.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/run.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACvB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,gFAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,gFAAgF;IAChF,iFAAiF;IACjF,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,eAAe,CAAA;IACtB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,uEAAuE;IACvE,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAWD,MAAM,MAAM,0BAA0B,GAAG;IACvC,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,sBAAsB,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAgGD,4EAA4E;AAC5E,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,4EAA4E;AAC5E,mEAAmE;AACnE,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAarC"}
|
|
@@ -49,20 +49,11 @@ export declare function discoverBuildRoots({ cwd, excludePaths, fullByTool, incl
|
|
|
49
49
|
fullByTool: Map<BuildTool, string[]>;
|
|
50
50
|
includedByTool: Map<BuildTool, string[]>;
|
|
51
51
|
}): Promise<DiscoveredBuildRoots>;
|
|
52
|
-
//
|
|
53
|
-
//
|
|
54
|
-
|
|
55
|
-
// independent - only a properly nested subprojectDir counts as coverage at
|
|
56
|
-
// all; one that escapes this candidate's own directory still gets its own
|
|
57
|
-
// entry (see the set.add call below). Called per-candidate right after its
|
|
58
|
-
// own prompt, not as a bulk pass, so the build invocation never blocks
|
|
59
|
-
// candidates that don't need it. A disabled candidate is skipped (no point
|
|
60
|
-
// invoking an off build tool); otherwise this fails closed, same reasoning
|
|
61
|
-
// as generateRecursiveManifests - if enumeration fails there's no way to
|
|
62
|
-
// tell covered from independent, so the caller aborts rather than guess.
|
|
63
|
-
export declare function markWorkspaceCoverage({ candidate, coveredByEcosystem, cwd, excludePaths, rootSockJson }: {
|
|
52
|
+
// Fails closed: without the members' build files, covered and independent
|
|
53
|
+
// candidates can't be told apart.
|
|
54
|
+
export declare function markWorkspaceCoverage({ candidate, covered, cwd, excludePaths, rootSockJson }: {
|
|
64
55
|
candidate: Candidate;
|
|
65
|
-
|
|
56
|
+
covered: Set<string>;
|
|
66
57
|
cwd: string;
|
|
67
58
|
excludePaths?: string[] | undefined;
|
|
68
59
|
rootSockJson: SocketJson;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"setup-recursive-manifest-config.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/setup-recursive-manifest-config.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"setup-recursive-manifest-config.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/setup-recursive-manifest-config.mts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,6EAA6E;AAC7E,eAAe;AACf,KAAK,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAA;AAWtD,yEAAyE;AACzE,uEAAuE;AACvE,KAAK,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAA;AAwB7D,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,wCAAwC;AACxC,wBAAgB,wBAAwB,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EAChE,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,GAAG,EAAE,MAAM,GACV,CAAC,EAAE,CAWL;AAuBD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,CAAA;AAED,6EAA6E;AAC7E,wEAAwE;AACxE,+BAA+B;AAC/B,wBAAsB,cAAc,CAAC,EACnC,GAAG,EACH,YAAY,EACZ,QAAQ,EACT,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,QAAQ,EAAE,UAAU,CAAA;CACrB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAM7B;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,kEAAkE;IAClE,iEAAiE;IACjE,QAAQ,EAAE,SAAS,EAAE,CAAA;CACtB,CAAA;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,oEAAoE;AACpE,6EAA6E;AAC7E,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,YAAY,EACZ,UAAU,EACV,cAAc,EACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACpC,cAAc,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;CACzC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+BhC;AAED,0EAA0E;AAC1E,kCAAkC;AAClC,wBAAsB,qBAAqB,CAAC,EAC1C,SAAS,EACT,OAAO,EACP,GAAG,EACH,YAAY,EACZ,YAAY,EACb,EAAE;IACD,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAmC9B;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,4DAA4D;AAC5D,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,GAAG,EACH,UAAU,EACV,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,SAAS,SAAS,EAAE,CAAA;IAChC,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CA+B1C;AAkCD,4EAA4E;AAC5E,oEAAoE;AACpE,yEAAyE;AACzE,+BAA+B;AAC/B,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAmD1C;AA8BD,KAAK,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;AA0C9D,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,0DAA0D;AAC1D,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,GAAG,EACH,SAAS,EACT,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,UAAU,CAAA;CACzB,GAAG,OAAO,CACT,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAC9E,CAsEA;AA0ID,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,OAAO,EAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,GAClC,OAAO,CAAC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAuMzC"}
|
|
@@ -1,10 +1,18 @@
|
|
|
1
1
|
import type { AlertsByPurl } from '../utils/socket-package-alert.mts';
|
|
2
2
|
import type { Spinner } from '@socketsecurity/registry/lib/spinner';
|
|
3
|
+
export type DlxFlags = {
|
|
4
|
+
// Options whose value names a package to download.
|
|
5
|
+
package: ReadonlySet<string>;
|
|
6
|
+
// Other options that take the next argument as their value.
|
|
7
|
+
withValue: ReadonlySet<string>;
|
|
8
|
+
};
|
|
3
9
|
export type PackageScanOptions = {
|
|
4
10
|
acceptRisks: boolean;
|
|
11
|
+
apiToken?: string | undefined;
|
|
5
12
|
command: string | undefined;
|
|
6
13
|
cwd?: string | URL;
|
|
7
14
|
dlxCommands?: Set<string>;
|
|
15
|
+
dlxFlags?: DlxFlags | undefined;
|
|
8
16
|
installCommands: Set<string>;
|
|
9
17
|
managerName: string;
|
|
10
18
|
nothrow?: boolean;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"common.d.mts","sourceRoot":"","sources":["../../../src/shadow/common.mts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;
|
|
1
|
+
{"version":3,"file":"common.d.mts","sourceRoot":"","sources":["../../../src/shadow/common.mts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAqBnE,MAAM,MAAM,QAAQ,GAAG;IACrB,mDAAmD;IACnD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC5B,4DAA4D;IAC5D,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAC/B,CAAA;AAgGD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAClB,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACzB,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC/B,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAAA;IACrC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB,UAAU,EAAE,OAAO,CAAA;CACpB,CAAA;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA8F5B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"bin.d.mts","sourceRoot":"","sources":["../../../../src/shadow/pnpm/bin.mts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;
|
|
1
|
+
{"version":3,"file":"bin.d.mts","sourceRoot":"","sources":["../../../../src/shadow/pnpm/bin.mts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAEpD,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACZ,MAAM,oCAAoC,CAAA;AAE3C,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG;IAC7C,GAAG,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC,CAAA;CAC1D,CAAA;AAsCD,wBAA8B,aAAa,CACzC,IAAI,GAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAA0B,EAC1D,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,EACvC,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CA0K3B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"bin.d.mts","sourceRoot":"","sources":["../../../../src/shadow/yarn/bin.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;
|
|
1
|
+
{"version":3,"file":"bin.d.mts","sourceRoot":"","sources":["../../../../src/shadow/yarn/bin.mts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAEpD,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,WAAW,EACZ,MAAM,oCAAoC,CAAA;AAE3C,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG;IAC7C,GAAG,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC,CAAA;CAC1D,CAAA;AAiBD,wBAA8B,aAAa,CACzC,IAAI,GAAE,MAAM,EAAE,GAAG,SAAS,MAAM,EAA0B,EAC1D,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,EACvC,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAyF3B"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@socketsecurity/cli-with-sentry",
|
|
3
|
-
"version": "1.8.
|
|
3
|
+
"version": "1.8.3",
|
|
4
4
|
"description": "CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package",
|
|
5
5
|
"contentPolicy": {
|
|
6
6
|
"class": "dual-use"
|
|
@@ -36,7 +36,7 @@
|
|
|
36
36
|
"./translations.json": "./translations.json"
|
|
37
37
|
},
|
|
38
38
|
"dependencies": {
|
|
39
|
-
"@sentry/node": "11.
|
|
39
|
+
"@sentry/node": "11.8.0",
|
|
40
40
|
"@socketsecurity/socket-patch": "2.0.0",
|
|
41
41
|
"form-data": "4.0.6"
|
|
42
42
|
},
|
|
@@ -48,7 +48,7 @@
|
|
|
48
48
|
"@babel/preset-typescript": "7.27.1",
|
|
49
49
|
"@babel/runtime": "7.28.4",
|
|
50
50
|
"@biomejs/biome": "2.2.4",
|
|
51
|
-
"@coana-tech/cli": "15.12.
|
|
51
|
+
"@coana-tech/cli": "15.12.8",
|
|
52
52
|
"@cyclonedx/cdxgen": "12.1.2",
|
|
53
53
|
"@dotenvx/dotenvx": "1.49.0",
|
|
54
54
|
"@eslint/compat": "1.3.2",
|