mobbdev 0.0.121 → 0.0.124

package/dist/index.mjs

@@ -1691,10 +1691,10 @@ var getIssueType = (issueType) => {
       return "Regular Expression Injection";
     case "INCOMPLETE_URL_SANITIZATION" /* IncompleteUrlSanitization */:
       return "Incomplete URL Sanitization";
-    case "LOG_FORGING" /* LogForging */:
-      return "Log Forging";
     case "LOCALE_DEPENDENT_COMPARISON" /* LocaleDependentComparison */:
       return "Locale Dependent Comparison";
+    case "LOG_FORGING" /* LogForging */:
+      return "Log Forging";
     case "MISSING_CHECK_AGAINST_NULL" /* MissingCheckAgainstNull */:
       return "Missing Check against Null";
     case "PASSWORD_IN_COMMENT" /* PasswordInComment */:
@@ -1713,6 +1713,8 @@ var getIssueType = (issueType) => {
       return "Weak XML Schema: Unbounded Occurrences";
     case "SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */:
       return "System Information Leak";
+    case "SYSTEM_INFORMATION_LEAK_EXTERNAL" /* SystemInformationLeakExternal */:
+      return "External System Information Leak";
     case "HTTP_RESPONSE_SPLITTING" /* HttpResponseSplitting */:
       return "HTTP response splitting";
     case "HTTP_ONLY_COOKIE" /* HttpOnlyCookie */:
@@ -1721,8 +1723,70 @@ var getIssueType = (issueType) => {
       return "Insecure Cookie";
     case "TRUST_BOUNDARY_VIOLATION" /* TrustBoundaryViolation */:
       return "Trust Boundary Violation";
+    case "NULL_DEREFERENCE" /* NullDereference */:
+      return "Null Dereference";
+    case "UNSAFE_DESERIALIZATION" /* UnsafeDeserialization */:
+      return "Unsafe deserialization";
+    case "INSECURE_BINDER_CONFIGURATION" /* InsecureBinderConfiguration */:
+      return "Insecure Binder Configuration";
+    case "UNSAFE_TARGET_BLANK" /* UnsafeTargetBlank */:
+      return "Unsafe use of target blank";
+    case "IFRAME_WITHOUT_SANDBOX" /* IframeWithoutSandbox */:
+      return "Client use of iframe without sandbox";
+    case "JQUERY_DEPRECATED_SYMBOLS" /* JqueryDeprecatedSymbols */:
+      return "jQuery deprecated symbols";
+    case "MISSING_ANTIFORGERY_VALIDATION" /* MissingAntiforgeryValidation */:
+      return "Missing Anti-Forgery Validation";
+    case "GRAPHQL_DEPTH_LIMIT" /* GraphqlDepthLimit */:
+      return "GraphQL Depth Limit";
+    case "UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */:
+      return "Unchecked Loop Condition";
+    case "IMPROPER_RESOURCE_SHUTDOWN_OR_RELEASE" /* ImproperResourceShutdownOrRelease */:
+      return "Improper Resource Shutdown or Release";
+    case "IMPROPER_EXCEPTION_HANDLING" /* ImproperExceptionHandling */:
+      return "Improper Exception Handling";
+    case "DEFAULT_RIGHTS_IN_OBJ_DEFINITION" /* DefaultRightsInObjDefinition */:
+      return "Default Definer Rights in Package or Object Definition";
+    case "HTML_COMMENT_IN_JSP" /* HtmlCommentInJsp */:
+      return "HTML Comment in JSP";
+    case "ERROR_CONDTION_WITHOUT_ACTION" /* ErrorCondtionWithoutAction */:
+      return "Error Condition Without Action";
+    case "DEPRECATED_FUNCTION" /* DeprecatedFunction */:
+      return "Deprecated Function";
+    case "HARDCODED_SECRETS" /* HardcodedSecrets */:
+      return "Hardcoded Secrets";
+    case "PROTOTYPE_POLLUTION" /* PrototypePollution */:
+      return "Prototype Pollution";
+    case "RACE_CONDITION_FORMAT_FLAW" /* RaceConditionFormatFlaw */:
+      return "Race Condition Format Flaw";
+    case "NON_FINAL_PUBLIC_STATIC_FIELD" /* NonFinalPublicStaticField */:
+      return "Non-final Public Static Field";
+    case "MISSING_HSTS_HEADER" /* MissingHstsHeader */:
+      return "Missing HSTS Header";
+    case "DEAD_CODE_UNUSED_FIELD" /* DeadCodeUnusedField */:
+      return "Dead Code: Unused Field";
+    case "HEADER_MANIPULATION" /* HeaderManipulation */:
+      return "Header Manipulation";
     case "MISSING_EQUALS_OR_HASHCODE" /* MissingEqualsOrHashcode */:
       return "Missing equals or hashcode method";
+    case "WCF_MISCONFIGURATION_INSUFFICIENT_LOGGING" /* WcfMisconfigurationInsufficientLogging */:
+      return "WCF Misconfiguration: Insufficient Logging";
+    case "WCF_MISCONFIGURATION_THROTTLING_NOT_ENABLED" /* WcfMisconfigurationThrottlingNotEnabled */:
+      return "WCF Misconfiguration: Throttling Not Enabled";
+    case "USELESS_REGEXP_CHAR_ESCAPE" /* UselessRegexpCharEscape */:
+      return "Useless regular-expression character escape";
+    case "INCOMPLETE_HOSTNAME_REGEX" /* IncompleteHostnameRegex */:
+      return "Incomplete Hostname Regex";
+    case "OVERLY_LARGE_RANGE" /* OverlyLargeRange */:
+      return "Regex: Overly Large Range";
+    case "INSUFFICIENT_LOGGING" /* InsufficientLogging */:
+      return "Insufficient Logging of Sensitive Operations";
+    case "PRIVACY_VIOLATION" /* PrivacyViolation */:
+      return "Privacy Violation";
+    case "INCOMPLETE_URL_SCHEME_CHECK" /* IncompleteUrlSchemeCheck */:
+      return "Incomplete URL Scheme Check";
+    case "VALUE_SHADOWING" /* ValueShadowing */:
+      return "Value Shadowing";
     default: {
       return issueType ? issueType.replaceAll("_", " ") : "Other";
     }
@@ -4996,7 +5060,12 @@ async function _scan(params, { skipPrompts = false } = {}) {
     throw new Error("userInfo is null");
   }
   const scmConfigs = getFromArraySafe(userInfo.scmConfigs);
-  const tokenInfo = getScmConfig({
+  const tokenInfo = githubActionToken ? {
+    accessToken: githubActionToken,
+    scmLibType: "GITHUB" /* GITHUB */,
+    scmOrg: void 0,
+    id: ""
+  } : getScmConfig({
     url: repo,
     scmConfigs,
     includeOrgTokens: false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "0.0.121",
+  "version": "0.0.124",
   "description": "Automated secure code remediation tool",
   "repository": "https://github.com/mobb-dev/bugsy",
   "main": "dist/index.js",
@@ -43,7 +43,7 @@
     "dotenv": "16.4.5",
     "extract-zip": "2.0.1",
     "globby": "13.2.2",
-    "graphql": "16.8.2",
+    "graphql": "16.9.0",
     "graphql-request": "5.0.0",
     "graphql-tag": "2.12.6",
     "graphql-ws": "5.16.0",
@@ -83,7 +83,7 @@
     "@types/semver": "7.5.8",
     "@types/tar": "6.1.13",
     "@types/tmp": "0.2.6",
-    "@types/uuid": "9.0.8",
+    "@types/uuid": "10.0.0",
     "@types/ws": "8.5.3",
     "@types/yargs": "17.0.32",
     "@typescript-eslint/eslint-plugin": "5.44.0",