github-issue-tower-defence-management 1.148.8 → 1.148.9

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [1.148.9](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/compare/v1.148.8...v1.148.9) (2026-08-10)
+
+
+### Bug Fixes
+
+* **command-runner:** keep command stdout past one mebibyte so security scans are not silently emptied ([#1485](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/issues/1485)) ([6a78747](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/commit/6a787479c690e9727d153a5ee6195ebf9d10cb3f))
+
 ## [1.148.8](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/compare/v1.148.7...v1.148.8) (2026-08-09)
 
 

package/bin/adapter/repositories/NodeLocalCommandRunner.js

@@ -4,10 +4,12 @@ exports.NodeLocalCommandRunner = void 0;
 const child_process_1 = require("child_process");
 const util_1 = require("util");
 const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
+const MAX_COMMAND_OUTPUT_BYTES = 1024 * 1024 * 256;
 class NodeLocalCommandRunner {
     async runCommand(program, args, options) {
         const execOptions = {
             encoding: 'utf8',
+            maxBuffer: MAX_COMMAND_OUTPUT_BYTES,
         };
         if (options?.env) {
             execOptions.env = { ...process.env, ...options.env };
@@ -26,6 +28,9 @@ class NodeLocalCommandRunner {
                 'stdout' in error &&
                 'stderr' in error &&
                 'code' in error) {
+                if (typeof error.code !== 'number') {
+                    console.error(`${program} did not exit with a numeric status: ${String(error.code)}`);
+                }
                 return {
                     stdout: String(error.stdout),
                     stderr: String(error.stderr),

package/bin/adapter/repositories/NodeLocalCommandRunner.js.map

@@ -1 +1 @@
-{"version":3,"file":"NodeLocalCommandRunner.js","sourceRoot":"","sources":["../../../src/adapter/repositories/NodeLocalCommandRunner.ts"],"names":[],"mappings":";;;AAIA,iDAAyC;AACzC,+BAAiC;AAEjC,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAE1C,MAAa,sBAAsB;IACjC,KAAK,CAAC,UAAU,CACd,OAAe,EACf,IAAc,EACd,OAAmC;QAMnC,MAAM,WAAW,GAAwC;YACvD,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;YACjB,WAAW,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5C,OAAO,EACP,IAAI,EACJ,WAAW,CACZ,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK;gBACL,OAAO,KAAK,KAAK,QAAQ;gBACzB,QAAQ,IAAI,KAAK;gBACjB,QAAQ,IAAI,KAAK;gBACjB,MAAM,IAAI,KAAK,EACf,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,QAAQ,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAC1D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA5CD,wDA4CC"}
+{"version":3,"file":"NodeLocalCommandRunner.js","sourceRoot":"","sources":["../../../src/adapter/repositories/NodeLocalCommandRunner.ts"],"names":[],"mappings":";;;AAIA,iDAAyC;AACzC,+BAAiC;AAEjC,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAE1C,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;AAEnD,MAAa,sBAAsB;IACjC,KAAK,CAAC,UAAU,CACd,OAAe,EACf,IAAc,EACd,OAAmC;QAMnC,MAAM,WAAW,GAAwC;YACvD,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,wBAAwB;SACpC,CAAC;QACF,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;YACjB,WAAW,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5C,OAAO,EACP,IAAI,EACJ,WAAW,CACZ,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK;gBACL,OAAO,KAAK,KAAK,QAAQ;gBACzB,QAAQ,IAAI,KAAK;gBACjB,QAAQ,IAAI,KAAK;gBACjB,MAAM,IAAI,KAAK,EACf,CAAC;gBACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACnC,OAAO,CAAC,KAAK,CACX,GAAG,OAAO,wCAAwC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,QAAQ,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAC1D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAlDD,wDAkDC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "github-issue-tower-defence-management",
-  "version": "1.148.8",
+  "version": "1.148.9",
   "description": "",
   "main": "bin/index.js",
   "scripts": {

package/src/adapter/repositories/NodeLocalCommandRunner.largeOutput.test.ts

@@ -0,0 +1,16 @@
+import { NodeLocalCommandRunner } from './NodeLocalCommandRunner';
+
+describe('NodeLocalCommandRunner large output', () => {
+  it('should keep the whole stdout when a command writes more than one mebibyte', async () => {
+    const runner = new NodeLocalCommandRunner();
+    const outputByteLength = 3 * 1024 * 1024;
+
+    const result = await runner.runCommand(process.execPath, [
+      '-e',
+      `process.stdout.write('x'.repeat(${outputByteLength}))`,
+    ]);
+
+    expect(result.exitCode).toBe(0);
+    expect(result.stdout.length).toBe(outputByteLength);
+  }, 30000);
+});

package/src/adapter/repositories/NodeLocalCommandRunner.test.ts

@@ -34,6 +34,7 @@ describe('NodeLocalCommandRunner', () => {
       });
       expect(mockExecFileAsync).toHaveBeenCalledWith('echo', ['"test"'], {
         encoding: 'utf8',
+        maxBuffer: 1024 * 1024 * 256,
       });
     });
 
@@ -71,6 +72,25 @@ describe('NodeLocalCommandRunner', () => {
       });
     });
 
+    it('should report the reason when the command did not exit with a numeric status', async () => {
+      const consoleErrorSpy = jest
+        .spyOn(console, 'error')
+        .mockImplementation(() => undefined);
+      const error = Object.assign(new Error('Command failed'), {
+        code: 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER',
+        stdout: 'truncated output',
+        stderr: '',
+      });
+      mockExecFileAsync.mockRejectedValue(error);
+
+      await runner.runCommand('osv-scanner', []);
+
+      expect(consoleErrorSpy).toHaveBeenCalledWith(
+        'osv-scanner did not exit with a numeric status: ERR_CHILD_PROCESS_STDIO_MAXBUFFER',
+      );
+      consoleErrorSpy.mockRestore();
+    });
+
     it('should throw error if error format is unexpected', async () => {
       mockExecFileAsync.mockRejectedValue(new Error('Unexpected error'));
 

package/src/adapter/repositories/NodeLocalCommandRunner.ts

@@ -7,6 +7,8 @@ import { promisify } from 'util';
 
 const execFileAsync = promisify(execFile);
 
+const MAX_COMMAND_OUTPUT_BYTES = 1024 * 1024 * 256;
+
 export class NodeLocalCommandRunner implements LocalCommandRunner {
   async runCommand(
     program: string,
@@ -19,6 +21,7 @@ export class NodeLocalCommandRunner implements LocalCommandRunner {
   }> {
     const execOptions: Parameters<typeof execFileAsync>[2] = {
       encoding: 'utf8',
+      maxBuffer: MAX_COMMAND_OUTPUT_BYTES,
     };
     if (options?.env) {
       execOptions.env = { ...process.env, ...options.env };
@@ -42,6 +45,11 @@ export class NodeLocalCommandRunner implements LocalCommandRunner {
         'stderr' in error &&
         'code' in error
       ) {
+        if (typeof error.code !== 'number') {
+          console.error(
+            `${program} did not exit with a numeric status: ${String(error.code)}`,
+          );
+        }
         return {
           stdout: String(error.stdout),
           stderr: String(error.stderr),

package/types/adapter/repositories/NodeLocalCommandRunner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NodeLocalCommandRunner.d.ts","sourceRoot":"","sources":["../../../src/adapter/repositories/NodeLocalCommandRunner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,6DAA6D,CAAC;AAMrE,qBAAa,sBAAuB,YAAW,kBAAkB;IACzD,UAAU,CACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CAmCH"}
+{"version":3,"file":"NodeLocalCommandRunner.d.ts","sourceRoot":"","sources":["../../../src/adapter/repositories/NodeLocalCommandRunner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,6DAA6D,CAAC;AAQrE,qBAAa,sBAAuB,YAAW,kBAAkB;IACzD,UAAU,CACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CAyCH"}