@socketsecurity/cli 1.1.178 → 1.1.179
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +9 -0
- package/README.md +5 -5
- package/dist/cli.js +105 -112
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
- package/dist/manifest-scripts/socket-facts.init.gradle +5 -5
- package/dist/manifest-scripts/socket-facts.plugin.scala +4 -4
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/manifest/run-manifest-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/assemble.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/build-tool.d.mts +4 -0
- package/dist/types/commands/manifest/scripts/build-tool.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/facts.d.mts +6 -1
- package/dist/types/commands/manifest/scripts/facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/sidecar.d.mts +3 -0
- package/dist/types/commands/manifest/scripts/sidecar.d.mts.map +1 -1
- package/package.json +3 -2
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6KnC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EAMrB,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAA;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAI/D,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAClC,6EAA6E;IAC7E,qCAAqC;IACrC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;CACrD,CAAA;AAmBD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,eAAoB,GACzB,cAAc,CAiChB"}
|
|
@@ -1,3 +1,7 @@
|
|
|
1
1
|
export type BuildTool = 'gradle' | 'maven' | 'sbt';
|
|
2
|
+
// sbt happily runs in any directory, synthesizing a default project from its
|
|
3
|
+
// name, so an sbt run outside a build yields a plausible but bogus SBOM. Maven
|
|
4
|
+
// and Gradle refuse such a directory themselves.
|
|
5
|
+
export declare function looksLikeSbtBuild(projectDir: string): boolean;
|
|
2
6
|
export declare function resolveBuildToolBin(tool: BuildTool, projectDir: string, bin?: string | undefined): string;
|
|
3
7
|
//# sourceMappingURL=build-tool.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AAkBlD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CASR"}
|
|
1
|
+
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AAkBlD,6EAA6E;AAC7E,+EAA+E;AAC/E,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CASR"}
|
|
@@ -17,6 +17,8 @@ export type SocketFactsSbomMetadata = {
|
|
|
17
17
|
tool: 'gradle' | 'maven' | 'sbt';
|
|
18
18
|
toolVersion: string;
|
|
19
19
|
javaVersion?: string | undefined;
|
|
20
|
+
// Lets a facts file be traced back to the generator release that produced it.
|
|
21
|
+
socketCliVersion?: string | undefined;
|
|
20
22
|
};
|
|
21
23
|
export type SocketFactsSbomComponent = AnyPURL & {
|
|
22
24
|
id: string;
|
|
@@ -27,7 +29,6 @@ export type SocketFactsSbomComponent = AnyPURL & {
|
|
|
27
29
|
export type SocketFactsSbomProject = AnyPURL & {
|
|
28
30
|
subprojectDir: string;
|
|
29
31
|
dependencies: string[];
|
|
30
|
-
resolvedAs: string[];
|
|
31
32
|
};
|
|
32
33
|
// Resolved on-disk paths for a --with-files run, keyed by coordinate. `targets`
|
|
33
34
|
// = classpath entries (jars / module output dirs); `sources` = module source
|
|
@@ -39,7 +40,11 @@ export type ResolvedArtifactPaths = {
|
|
|
39
40
|
targetsByGav: Map<string, string[]>;
|
|
40
41
|
sourcesByCoord: Map<string, string[]>;
|
|
41
42
|
coords: Set<string>;
|
|
43
|
+
// Component ids on each project's resolved classpath (union over its
|
|
44
|
+
// configurations), keyed by projectClasspathKey.
|
|
45
|
+
classpathByProject: Map<string, string[]>;
|
|
42
46
|
};
|
|
47
|
+
export declare function projectClasspathKey(project: Pick<SocketFactsSbomProject, 'name' | 'namespace' | 'subprojectDir'>): string;
|
|
43
48
|
// Coordinate-based (not `id`-based) so it also matches foreign SBOMs like
|
|
44
49
|
// CycloneDX. Empty segments dropped.
|
|
45
50
|
export declare function mavenCoordinateKey(groupId: string | undefined, artifactId: string | undefined, type: string | undefined, classifier: string | undefined, version: string | undefined): string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;
|
|
1
|
+
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG;IAC7C,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,SAAS;AACT,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,0EAA0E;IAC1E,sEAAsE;IACtE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACnB,qEAAqE;IACrE,iDAAiD;IACjD,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAC1C,CAAA;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,CAAC,GAC5E,MAAM,CAER;AAED,0EAA0E;AAC1E,qCAAqC;AACrC,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,CAIR"}
|
|
@@ -12,6 +12,9 @@ export type SidecarComponentEntry = SocketFactsSbomComponent & {
|
|
|
12
12
|
export type SidecarProjectEntry = SocketFactsSbomProject & {
|
|
13
13
|
targets?: string[] | undefined;
|
|
14
14
|
sources?: string[] | undefined;
|
|
15
|
+
// Ids of this facts file's components[] forming the project's full
|
|
16
|
+
// transitive classpath across all its configurations.
|
|
17
|
+
classpath: string[];
|
|
15
18
|
};
|
|
16
19
|
// Frozen contract with `coana run --compute-artifacts-sidecar`; change only
|
|
17
20
|
// in sync with the coana consumer. Keyed by the absolute path of the
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;
|
|
1
|
+
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA0CD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,sDAAsD;AACtD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM,GAChB,IAAI,CAWN;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@socketsecurity/cli",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.179",
|
|
4
4
|
"description": "CLI for Socket.dev",
|
|
5
5
|
"contentPolicy": {
|
|
6
6
|
"class": "dual-use"
|
|
@@ -47,7 +47,7 @@
|
|
|
47
47
|
"@babel/preset-typescript": "7.27.1",
|
|
48
48
|
"@babel/runtime": "7.28.4",
|
|
49
49
|
"@biomejs/biome": "2.2.4",
|
|
50
|
-
"@coana-tech/cli": "15.10.
|
|
50
|
+
"@coana-tech/cli": "15.10.55",
|
|
51
51
|
"@cyclonedx/cdxgen": "12.1.2",
|
|
52
52
|
"@dotenvx/dotenvx": "1.49.0",
|
|
53
53
|
"@eslint/compat": "1.3.2",
|
|
@@ -190,6 +190,7 @@
|
|
|
190
190
|
"check:tsc:src": "tsgo",
|
|
191
191
|
"check:tsc:scripts": "tsgo --project tsconfig.scripts.json",
|
|
192
192
|
"check-ci": "pnpm check:lint",
|
|
193
|
+
"ci:setup-uv": "node scripts/ci/setup-uv.mts",
|
|
193
194
|
"coverage": "run-s coverage:*",
|
|
194
195
|
"coverage:test": "run-s test:prepare test:unit:coverage",
|
|
195
196
|
"coverage:type": "dotenvx -q run -f .env.local -- type-coverage --detail",
|