@vscode/vsce 3.4.1 → 3.4.2-1

package/out/package.js

@@ -1572,8 +1572,9 @@ async function scanFilesForSecrets(files, fileExclusion, options) {
         return; // No need to scan
     }
     const onDiskFiles = files.filter(file => !isInMemoryFile(file));
+    const onDiskNoneNodeModulesFiles = onDiskFiles.filter(file => !file.localPath.includes('node_modules'));
     const inMemoryFiles = files.filter(file => isInMemoryFile(file));
-    const onDiskResult = await (0, secretLint_1.lintFiles)(onDiskFiles.map(file => file.localPath));
+    const onDiskResult = await (0, secretLint_1.lintFiles)(onDiskNoneNodeModulesFiles.map(file => file.localPath));
     const inMemoryResults = await Promise.all(inMemoryFiles.map(file => (0, secretLint_1.lintText)(typeof file.contents === 'string' ? file.contents : file.contents.toString('utf8'), file.path)));
     const secretsFound = [...inMemoryResults, onDiskResult].filter(result => !result.ok).flatMap(result => result.results);
     // secrets found

package/out/secretLint.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.prettyPrintLintResult = exports.getRuleNameFromRuleId = exports.lintText = exports.lintFiles = void 0;
 const chalk_1 = __importDefault(require("chalk"));
 const secret_lint_types_1 = require("./typings/secret-lint-types");
+const util_1 = require("./util");
 const lintConfig = {
     rules: [
         {
@@ -14,8 +15,7 @@ const lintConfig = {
                 {
                     id: "@secretlint/secretlint-rule-basicauth",
                     allowMessageIds: ["BasicAuth"]
-                },
-                {
+                }, {
                     id: "@secretlint/secretlint-rule-privatekey",
                     options: {
                         allows: [
@@ -24,6 +24,15 @@ const lintConfig = {
                             "/^(?![\\s\\S]*-----BEGIN .*PRIVATE KEY-----[A-Za-z0-9+/=\\r\\n]{50,}-----END .*PRIVATE KEY-----)[\\s\\S]*$/"
                         ]
                     }
+                }, {
+                    id: "@secretlint/secretlint-rule-npm",
+                    options: {
+                        allows: [
+                            // An npm token has the prefix npm_ followed by 36 Base62 characters (30 random + 6-character checksum), totaling 40 characters.
+                            // https://github.com/microsoft/vscode-vsce/issues/1153
+                            "/^(?!(?:npm_[0-9A-Za-z]{36})$).+$/"
+                        ]
+                    }
                 }
             ]
         }, {
@@ -47,18 +56,32 @@ async function getEngine() {
 }
 async function lintFiles(filePaths) {
     const engine = await getEngine();
-    const engineResult = await engine.executeOnFiles({
-        filePathList: filePaths
-    });
+    let engineResult;
+    try {
+        engineResult = await engine.executeOnFiles({
+            filePathList: filePaths
+        });
+    }
+    catch (error) {
+        util_1.log.error('Error occurred while scanning secrets (files):', error);
+        process.exit(1);
+    }
     return parseResult(engineResult);
 }
 exports.lintFiles = lintFiles;
 async function lintText(content, fileName) {
     const engine = await getEngine();
-    const engineResult = await engine.executeOnContent({
-        content,
-        filePath: fileName
-    });
+    let engineResult;
+    try {
+        engineResult = await engine.executeOnContent({
+            content,
+            filePath: fileName
+        });
+    }
+    catch (error) {
+        util_1.log.error('Error occurred while scanning secrets (content):', error);
+        process.exit(1);
+    }
     return parseResult(engineResult);
 }
 exports.lintText = lintText;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vscode/vsce",
-	"version": "3.4.1",
+	"version": "3.4.2-1",
 	"description": "VS Code Extensions Manager",
 	"repository": {
 		"type": "git",