mobbdev 0.0.136 → 0.0.139
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/dist/index.mjs +9 -6
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
# Bugsy
|
|
2
2
|
|
|
3
|
-
Bugsy is a command-line interface (CLI) tool that provides automatic security vulnerability remediation for your code. It is the community edition version of [Mobb](https://
|
|
3
|
+
Bugsy is a command-line interface (CLI) tool that provides automatic security vulnerability remediation for your code. It is the community edition version of [Mobb](https://mobb.ai), the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identify and fix security vulnerabilities in their code.
|
|
4
4
|
|
|
5
5
|
<img width="1888" alt="Bugsy" src="./img/bugsy2.png">
|
|
6
6
|
|
|
7
|
-
## What is [Mobb](https://
|
|
7
|
+
## What is [Mobb](https://mobb.ai)?
|
|
8
8
|
|
|
9
|
-
[Mobb](https://
|
|
9
|
+
[Mobb](https://mobb.ai) is the first vendor-agnostic automatic security vulnerability remediation tool. It ingests SAST results from Checkmarx, CodeQL (GitHub Advanced Security), OpenText Fortify, and Snyk and produces code fixes for developers to review and commit to their code.
|
|
10
10
|
|
|
11
11
|
## What does Bugsy do?
|
|
12
12
|
|
package/dist/index.mjs
CHANGED
|
@@ -50,7 +50,8 @@ var SCANNERS = {
|
|
|
50
50
|
Checkmarx: "checkmarx",
|
|
51
51
|
Codeql: "codeql",
|
|
52
52
|
Fortify: "fortify",
|
|
53
|
-
Snyk: "snyk"
|
|
53
|
+
Snyk: "snyk",
|
|
54
|
+
Sonarqube: "sonarqube"
|
|
54
55
|
};
|
|
55
56
|
var SupportedScannersZ = z.enum([SCANNERS.Checkmarx, SCANNERS.Snyk]);
|
|
56
57
|
var envVariablesSchema = z.object({
|
|
@@ -3781,7 +3782,7 @@ function getFromArraySafe(array) {
|
|
|
3781
3782
|
}
|
|
3782
3783
|
|
|
3783
3784
|
// src/features/analysis/add_fix_comments_for_pr/constants.ts
|
|
3784
|
-
var contactUsMarkdown = `For specific requests [contact us](https://mobb.ai/contact) and we'll do the most to answer your need quickly.`;
|
|
3785
|
+
var contactUsMarkdown = `For specific requests [contact us](https://content.mobb.ai/contact) and we'll do the most to answer your need quickly.`;
|
|
3785
3786
|
var MobbIconMarkdown = ``;
|
|
3786
3787
|
var noVulnerabilitiesFoundTitle = `# ${MobbIconMarkdown} No security issues were found \u2705`;
|
|
3787
3788
|
var COMMIT_FIX_SVG = `https://app.mobb.ai/gh-action/commit-button.svg`;
|
|
@@ -3789,7 +3790,8 @@ var scannerToFriendlyString = {
|
|
|
3789
3790
|
checkmarx: "Checkmarx",
|
|
3790
3791
|
codeql: "CodeQL",
|
|
3791
3792
|
fortify: "Fortify",
|
|
3792
|
-
snyk: "Snyk"
|
|
3793
|
+
snyk: "Snyk",
|
|
3794
|
+
sonarqube: "Sonarqube"
|
|
3793
3795
|
};
|
|
3794
3796
|
|
|
3795
3797
|
// src/features/analysis/add_fix_comments_for_pr/utils.ts
|
|
@@ -4616,7 +4618,8 @@ var scannerChoices = [
|
|
|
4616
4618
|
{ name: "Snyk", value: SCANNERS.Snyk },
|
|
4617
4619
|
{ name: "Checkmarx", value: SCANNERS.Checkmarx },
|
|
4618
4620
|
{ name: "Codeql", value: SCANNERS.Codeql },
|
|
4619
|
-
{ name: "Fortify", value: SCANNERS.Fortify }
|
|
4621
|
+
{ name: "Fortify", value: SCANNERS.Fortify },
|
|
4622
|
+
{ name: "Sonarqube", value: SCANNERS.Sonarqube }
|
|
4620
4623
|
];
|
|
4621
4624
|
async function choseScanner() {
|
|
4622
4625
|
const { scanner } = await inquirer.prompt({
|
|
@@ -5721,7 +5724,7 @@ function analyzeBuilder(yargs2) {
|
|
|
5721
5724
|
demandOption: true,
|
|
5722
5725
|
type: "string",
|
|
5723
5726
|
describe: chalk7.bold(
|
|
5724
|
-
"Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL)"
|
|
5727
|
+
"Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL, Sonarqube)"
|
|
5725
5728
|
)
|
|
5726
5729
|
}).option("repo", repoOption).option("p", {
|
|
5727
5730
|
alias: "src-path",
|
|
@@ -5768,7 +5771,7 @@ function reviewBuilder(yargs2) {
|
|
|
5768
5771
|
demandOption: true,
|
|
5769
5772
|
type: "string",
|
|
5770
5773
|
describe: chalk8.bold(
|
|
5771
|
-
"Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL)"
|
|
5774
|
+
"Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL, Sonarqube)"
|
|
5772
5775
|
)
|
|
5773
5776
|
}).option("repo", { ...repoOption, demandOption: true }).option("scanner", { ...scannerOptions, demandOption: true }).option("ref", { ...refOption, demandOption: true }).option("ch", {
|
|
5774
5777
|
alias: "commit-hash",
|