codesentry 0.1.4 → 0.1.6

package/dist/index.js

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 
 // src/cli.ts
+import { readFileSync as readFileSync2 } from "fs";
+import { createRequire as createRequire4 } from "module";
 import { Command } from "commander";
 import figlet from "figlet";
 import gradient from "gradient-string";
@@ -272,16 +274,26 @@ import { availableParallelism } from "os";
 
 // src/scanner/file-finder.ts
 import { readdir } from "fs/promises";
-import { join, sep } from "path";
+import { join } from "path";
 var SCANNABLE_EXTENSIONS = [".js", ".ts", ".jsx", ".tsx"];
 var IGNORED_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".next"]);
-var isInsideIgnoredDir = (relativePath) => {
-  return relativePath.split(sep).some((segment) => IGNORED_DIRS.has(segment));
+var isScannable = (fileName) => SCANNABLE_EXTENSIONS.some((ext) => fileName.endsWith(ext));
+var walk = async (currentDir) => {
+  const entries = await readdir(currentDir, { withFileTypes: true });
+  const files = [];
+  for (const entry of entries) {
+    if (entry.isDirectory()) {
+      if (IGNORED_DIRS.has(entry.name)) continue;
+      files.push(...await walk(join(currentDir, entry.name)));
+    } else if (entry.isFile() && isScannable(entry.name)) {
+      files.push(join(currentDir, entry.name));
+    }
+  }
+  return files;
 };
 var findFiles = async (targetDir) => {
   try {
-    const entries = await readdir(targetDir, { recursive: true, withFileTypes: true });
-    return entries.filter((entry) => entry.isFile()).map((entry) => join(entry.parentPath, entry.name)).filter((filePath) => !isInsideIgnoredDir(filePath)).filter((filePath) => SCANNABLE_EXTENSIONS.some((ext) => filePath.endsWith(ext)));
+    return await walk(targetDir);
   } catch (error) {
     throw new Error(`N\xE3o foi poss\xEDvel listar os arquivos em "${targetDir}".`, { cause: error });
   }
@@ -451,9 +463,10 @@ var runBundledSemgrep = async (targetDir, runtime = resolveBundledSemgrepRuntime
     "."
   ];
   let stdout;
+  const SYSTEM_PATH_FALLBACK = process.platform === "win32" ? "C:\\Windows\\System32;C:\\Windows" : "/usr/local/bin:/usr/bin:/bin";
   const env = {
     ...process.env,
-    PATH: `${dirname2(runtime.semgrep)}${delimiter}${process.env.PATH ?? ""}`
+    PATH: `${dirname2(runtime.semgrep)}${delimiter}${process.env.PATH ?? ""}${delimiter}${SYSTEM_PATH_FALLBACK}`
   };
   try {
     ({ stdout } = await execute(runtime.semgrep, args, { cwd: targetDir, maxBuffer: 20 * 1024 * 1024, env }));
@@ -573,9 +586,9 @@ var isSourceNode2 = (value) => {
 var walkChildren = (node, depth, results) => {
   for (const value of Object.values(node)) {
     if (Array.isArray(value)) {
-      value.filter(isSourceNode2).forEach((child) => walk(child, depth, results));
+      value.filter(isSourceNode2).forEach((child) => walk2(child, depth, results));
     } else if (isSourceNode2(value)) {
-      walk(value, depth, results);
+      walk2(value, depth, results);
     }
   }
 };
@@ -586,7 +599,7 @@ var checkDepth = (newDepth, line, results) => {
 };
 var walkIfChild = (value, depth, results) => {
   if (isSourceNode2(value)) {
-    walk(value, depth, results);
+    walk2(value, depth, results);
   }
 };
 var walkIfAlternate = (alternate, depth, results) => {
@@ -597,7 +610,7 @@ var walkIfAlternate = (alternate, depth, results) => {
     walkIfChain(alternate, depth, results);
     return;
   }
-  walk(alternate, depth + 1, results);
+  walk2(alternate, depth + 1, results);
 };
 var walkIfChain = (node, depth, results) => {
   const chainDepth = depth + 1;
@@ -617,13 +630,13 @@ var walkNestingBlock = (node, depth, results) => {
 var selectWalker = (node) => {
   return FUNCTION_TYPES.has(node.type) ? walkFunction : node.type === "IfStatement" ? walkIfChain : NESTING_TYPES.has(node.type) ? walkNestingBlock : walkChildren;
 };
-var walk = (node, depth, results) => {
+var walk2 = (node, depth, results) => {
   selectWalker(node)(node, depth, results);
 };
 var findDeepNesting = (filePath, content) => {
   const results = [];
   const sourceFile = parseSourceFile(filePath, content);
-  walk(sourceFile, 0, results);
+  walk2(sourceFile, 0, results);
   return results;
 };
 var deepNestingRule = {
@@ -892,9 +905,9 @@ var appendOverLimitContext = (context, state) => {
 };
 var walkChild = (value, parent, context, state) => {
   if (Array.isArray(value)) {
-    value.filter(isSourceNode3).forEach((child) => walk2(child, parent, context, state));
+    value.filter(isSourceNode3).forEach((child) => walk3(child, parent, context, state));
   } else if (isSourceNode3(value)) {
-    walk2(value, parent, context, state);
+    walk3(value, parent, context, state);
   }
 };
 var walkChildren2 = (node, context, state) => {
@@ -912,7 +925,7 @@ var incrementStatementCount = (node, context, state) => {
     context.count += 1;
   }
 };
-var walk2 = (node, parent, context, state) => {
+var walk3 = (node, parent, context, state) => {
   if (FUNCTION_TYPES2.has(node.type)) {
     walkFunction2(node, parent, state);
     return;
@@ -2495,9 +2508,15 @@ var registerSecurityCommands = (program) => {
   registerSensitiveDataInLogsCommand(program);
   registerPublicEnvVarSecretCommand(program);
 };
+var require5 = createRequire4(import.meta.url);
+var readPackageVersion = () => {
+  const packageJsonPath = require5.resolve("../package.json");
+  const { version } = JSON.parse(readFileSync2(packageJsonPath, "utf-8"));
+  return version;
+};
 var createCli = () => {
   printBanner();
-  const program = new Command().name("codesentry").description("CLI de verifica\xE7\xE3o de vulnerabilidades e qualidade de c\xF3digo").version("0.1.0").helpCommand(false);
+  const program = new Command().name("codesentry").description("CLI de verifica\xE7\xE3o de vulnerabilidades e qualidade de c\xF3digo").version(readPackageVersion()).helpCommand(false);
   registerInitCommand(program);
   registerAnalysisCommands(program);
   registerQualityCommands(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codesentry",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "workspaces": [
     "packages/semgrep-rules"
   ],
@@ -48,7 +48,6 @@
     "@clack/prompts": "^1.7.0",
     "chalk": "^6.0.0",
     "cli-table3": "^0.6.5",
-    "codesentry-semgrep-rules": "0.1.4",
     "commander": "^15.0.0",
     "eslint": "^10.10.0",
     "eslint-plugin-no-unsanitized": "^4.1.5",
@@ -59,8 +58,8 @@
     "p-limit": "^7.3.2"
   },
   "optionalDependencies": {
-    "codesentry-semgrep-linux-x64": "0.1.4",
-    "codesentry-semgrep-win32-x64": "0.1.4"
+    "codesentry-semgrep-linux-x64": "0.1.6",
+    "codesentry-semgrep-win32-x64": "0.1.6"
   },
   "devDependencies": {
     "@types/node": "^26.4.1",