mobbdev 0.0.177 → 0.0.178

package/dist/index.mjs

@@ -39,9 +39,6 @@ import Debug from "debug";
 import * as dotenv from "dotenv";
 import { z as z2 } from "zod";
 
-// src/features/analysis/scm/shared/src/types.ts
-import { z } from "zod";
-
 // src/features/analysis/scm/generates/client_generates.ts
 var FixQuestionInputType = /* @__PURE__ */ ((FixQuestionInputType2) => {
   FixQuestionInputType2["Number"] = "NUMBER";
@@ -98,15 +95,15 @@ var Fix_State_Enum = /* @__PURE__ */ ((Fix_State_Enum2) => {
   Fix_State_Enum2["Ready"] = "Ready";
   return Fix_State_Enum2;
 })(Fix_State_Enum || {});
-var IssueLanguage_Enum = /* @__PURE__ */ ((IssueLanguage_Enum3) => {
-  IssueLanguage_Enum3["CSharp"] = "CSharp";
-  IssueLanguage_Enum3["Cpp"] = "Cpp";
-  IssueLanguage_Enum3["Java"] = "Java";
-  IssueLanguage_Enum3["JavaScript"] = "JavaScript";
-  IssueLanguage_Enum3["Python"] = "Python";
-  IssueLanguage_Enum3["Sql"] = "SQL";
-  IssueLanguage_Enum3["Xml"] = "XML";
-  return IssueLanguage_Enum3;
+var IssueLanguage_Enum = /* @__PURE__ */ ((IssueLanguage_Enum2) => {
+  IssueLanguage_Enum2["CSharp"] = "CSharp";
+  IssueLanguage_Enum2["Cpp"] = "Cpp";
+  IssueLanguage_Enum2["Java"] = "Java";
+  IssueLanguage_Enum2["JavaScript"] = "JavaScript";
+  IssueLanguage_Enum2["Python"] = "Python";
+  IssueLanguage_Enum2["Sql"] = "SQL";
+  IssueLanguage_Enum2["Xml"] = "XML";
+  return IssueLanguage_Enum2;
 })(IssueLanguage_Enum || {});
 var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["AutoEscapeFalse"] = "AUTO_ESCAPE_FALSE";
@@ -190,14 +187,14 @@ var Project_Role_Type_Enum = /* @__PURE__ */ ((Project_Role_Type_Enum2) => {
   Project_Role_Type_Enum2["Writer"] = "writer";
   return Project_Role_Type_Enum2;
 })(Project_Role_Type_Enum || {});
-var Vulnerability_Report_Vendor_Enum = /* @__PURE__ */ ((Vulnerability_Report_Vendor_Enum4) => {
-  Vulnerability_Report_Vendor_Enum4["Checkmarx"] = "checkmarx";
-  Vulnerability_Report_Vendor_Enum4["CheckmarxXml"] = "checkmarxXml";
-  Vulnerability_Report_Vendor_Enum4["Codeql"] = "codeql";
-  Vulnerability_Report_Vendor_Enum4["Fortify"] = "fortify";
-  Vulnerability_Report_Vendor_Enum4["Snyk"] = "snyk";
-  Vulnerability_Report_Vendor_Enum4["Sonarqube"] = "sonarqube";
-  return Vulnerability_Report_Vendor_Enum4;
+var Vulnerability_Report_Vendor_Enum = /* @__PURE__ */ ((Vulnerability_Report_Vendor_Enum3) => {
+  Vulnerability_Report_Vendor_Enum3["Checkmarx"] = "checkmarx";
+  Vulnerability_Report_Vendor_Enum3["CheckmarxXml"] = "checkmarxXml";
+  Vulnerability_Report_Vendor_Enum3["Codeql"] = "codeql";
+  Vulnerability_Report_Vendor_Enum3["Fortify"] = "fortify";
+  Vulnerability_Report_Vendor_Enum3["Snyk"] = "snyk";
+  Vulnerability_Report_Vendor_Enum3["Sonarqube"] = "sonarqube";
+  return Vulnerability_Report_Vendor_Enum3;
 })(Vulnerability_Report_Vendor_Enum || {});
 var Vulnerability_Severity_Enum = /* @__PURE__ */ ((Vulnerability_Severity_Enum2) => {
   Vulnerability_Severity_Enum2["Critical"] = "critical";
@@ -313,7 +310,7 @@ var GetFixesDocument = `
     safeIssueType
     id
     vulnerabilitySeverity
-    issueLanguage
+    safeIssueLanguage
     patchAndQuestions {
       __typename
       ... on FixData {
@@ -653,6 +650,7 @@ function getSdk(client, withWrapper = defaultWrapper) {
 }
 
 // src/features/analysis/scm/shared/src/types.ts
+import { z } from "zod";
 var OrganizationScreenQueryParamsZ = z.object({
   organizationId: z.string().uuid()
 });
@@ -739,7 +737,7 @@ var ReportQueryResultZ = z.object({
     fixes: z.array(
       z.object({
         id: z.string().uuid(),
-        issueLanguage: z.nativeEnum(IssueLanguage_Enum).nullable(),
+        safeIssueLanguage: z.string(),
         safeIssueType: z.string(),
         confidence: z.number(),
         effortToApplyFix: z.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
@@ -834,7 +832,7 @@ var ReportFixesQueryZ = z.array(
     confidence: z.number(),
     gitBlameLogin: z.string().nullable(),
     effortToApplyFix: z.nativeEnum(Effort_To_Apply_Fix_Enum).nullable(),
-    issueLanguage: z.nativeEnum(IssueLanguage_Enum).nullable(),
+    safeIssueLanguage: z.string(),
     safeIssueType: z.string(),
     vulnerabilitySeverity: z.nativeEnum(Vulnerability_Severity_Enum).nullable().transform((i) => i ?? "low" /* Low */),
     fixReportId: z.string().uuid(),
@@ -904,9 +902,8 @@ var FixQueryZ = z.object({
   state: z.nativeEnum(Fix_State_Enum),
   modifiedBy: z.string().nullable(),
   gitBlameLogin: z.string().nullable(),
-  issueLanguage: z.nativeEnum(IssueLanguage_Enum).nullable(),
+  safeIssueLanguage: z.string(),
   safeIssueType: z.string(),
-  // issueType: z.nativeEnum(IssueType_Enum).nullable(),
   confidence: z.number(),
   fixReportId: z.string().uuid(),
   isExpired: z.boolean().default(false),
@@ -1146,6 +1143,13 @@ var SCANNERS = {
   Snyk: "snyk",
   Sonarqube: "sonarqube"
 };
+var scannerToVulnerability_Report_Vendor_Enum = {
+  [SCANNERS.Checkmarx]: "checkmarx" /* Checkmarx */,
+  [SCANNERS.Snyk]: "snyk" /* Snyk */,
+  [SCANNERS.Sonarqube]: "sonarqube" /* Sonarqube */,
+  [SCANNERS.Codeql]: "codeql" /* Codeql */,
+  [SCANNERS.Fortify]: "fortify" /* Fortify */
+};
 var SupportedScannersZ = z2.enum([SCANNERS.Checkmarx, SCANNERS.Snyk]);
 var envVariablesSchema = z2.object({
   WEB_APP_URL: z2.string(),
@@ -1283,16 +1287,16 @@ var CliError = class extends Error {
 // src/features/analysis/index.ts
 import chalk4 from "chalk";
 import Configstore from "configstore";
-import Debug15 from "debug";
+import Debug16 from "debug";
 import extract from "extract-zip";
 import fetch4 from "node-fetch";
 import open2 from "open";
 import semver from "semver";
 import tmp2 from "tmp";
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 
 // src/features/analysis/add_fix_comments_for_pr/add_fix_comments_for_pr.ts
-import Debug6 from "debug";
+import Debug7 from "debug";
 
 // src/features/analysis/scm/ado/constants.ts
 var DEFUALT_ADO_ORIGIN = scmCloudUrl.Ado;
@@ -1653,8 +1657,6 @@ var getCommitDescription = ({
   if (!parseIssueTypeRes.success) {
     return "";
   }
-  if (!issueType)
-    return "";
   const staticData = fixDetailsData[parseIssueTypeRes.data];
   if (!staticData) {
     return "";
@@ -6146,10 +6148,10 @@ async function getAdoRepoList({
 // src/features/analysis/scm/constants.ts
 var MOBB_ICON_IMG = "https://app.mobb.ai/gh-action/Logo_Rounded_Icon.svg";
 
-// src/features/analysis/add_fix_comments_for_pr/utils.ts
-import Debug5 from "debug";
+// src/features/analysis/add_fix_comments_for_pr/utils/utils.ts
+import Debug6 from "debug";
 import parseDiff2 from "parse-diff";
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 
 // src/features/analysis/utils/by_key.ts
 function keyBy(array, keyBy2) {
@@ -6218,9 +6220,80 @@ var scannerToFriendlyString = {
   sonarqube: "Sonarqube"
 };
 
-// src/features/analysis/add_fix_comments_for_pr/utils.ts
+// src/features/analysis/add_fix_comments_for_pr/utils/buildCommentBody.ts
+import Debug5 from "debug";
+import { z as z18 } from "zod";
 var debug5 = Debug5("mobbdev:handle-finished-analysis");
 var getCommitFixButton = (commitUrl) => `<a href="${commitUrl}"><img src=${COMMIT_FIX_SVG}></a>`;
+function buildCommentBody({
+  fix,
+  commentId,
+  commentUrl,
+  scanner,
+  fixId,
+  projectId,
+  analysisId,
+  organizationId,
+  patch
+}) {
+  const commitUrl = getCommitUrl({
+    appBaseUrl: WEB_APP_URL,
+    fixId,
+    projectId,
+    analysisId,
+    organizationId,
+    redirectUrl: commentUrl,
+    commentId
+  });
+  const fixUrl = getFixUrlWithRedirect({
+    appBaseUrl: WEB_APP_URL,
+    fixId,
+    projectId,
+    analysisId,
+    organizationId,
+    redirectUrl: commentUrl,
+    commentId
+  });
+  const issueType = getIssueTypeFriendlyString(fix.safeIssueType);
+  const title = `# ${MobbIconMarkdown} ${issueType} fix is ready`;
+  const validFixParseRes = z18.object({
+    patchAndQuestions: PatchAndQuestionsZ,
+    vulnerabilitySeverity: z18.nativeEnum(Vulnerability_Severity_Enum),
+    safeIssueLanguage: z18.nativeEnum(IssueLanguage_Enum),
+    safeIssueType: z18.nativeEnum(IssueType_Enum)
+  }).safeParse(fix);
+  if (!validFixParseRes.success) {
+    debug5(
+      `fix ${fixId} has custom issue type or language, therefore the commit description will not be added`,
+      validFixParseRes.error
+    );
+  }
+  const subTitle = validFixParseRes.success ? getCommitDescription({
+    issueType: validFixParseRes.data.safeIssueType,
+    vendor: scannerToVulnerability_Report_Vendor_Enum[scanner],
+    severity: validFixParseRes.data.vulnerabilitySeverity,
+    guidances: getGuidances({
+      questions: validFixParseRes.data.patchAndQuestions.questions.map(toQuestion),
+      issueType: validFixParseRes.data.safeIssueType,
+      issueLanguage: validFixParseRes.data.safeIssueLanguage,
+      fixExtraContext: validFixParseRes.data.patchAndQuestions.extraContext
+    })
+  }) : "";
+  const diff = `\`\`\`diff
+${patch} 
+\`\`\``;
+  const fixPageLink = `[Learn more and fine tune the fix](${fixUrl})`;
+  return `${title}
+${subTitle}
+${diff}
+${getCommitFixButton(
+    commitUrl
+  )}
+${fixPageLink}`;
+}
+
+// src/features/analysis/add_fix_comments_for_pr/utils/utils.ts
+var debug6 = Debug6("mobbdev:handle-finished-analysis");
 function calculateRanges(integers) {
   if (integers.length === 0) {
     return [];
@@ -6254,7 +6327,7 @@ function deleteAllPreviousComments({
     try {
       return scm.deleteComment({ comment_id: comment.id });
     } catch (e) {
-      debug5("delete comment failed %s", e);
+      debug6("delete comment failed %s", e);
       return Promise.resolve();
     }
   });
@@ -6270,7 +6343,7 @@ function deleteAllPreviousGeneralPrComments(params) {
     try {
       return scm.deleteGeneralPrComment({ commentId: comment.id });
     } catch (e) {
-      debug5("delete comment failed %s", e);
+      debug6("delete comment failed %s", e);
       return Promise.resolve();
     }
   });
@@ -6308,66 +6381,19 @@ Refresh the page in order to see the changes.`,
     line: startLine
   });
   const commentId = commentRes.data.id;
-  const commitUrl = getCommitUrl({
-    appBaseUrl: WEB_APP_URL,
-    fixId,
-    projectId,
-    analysisId,
-    organizationId,
-    redirectUrl: commentRes.data.html_url,
-    commentId
-  });
-  const fixUrl = getFixUrlWithRedirect({
-    appBaseUrl: WEB_APP_URL,
+  const commentBody = buildCommentBody({
+    fix,
+    commentId,
+    commentUrl: commentRes.data.html_url,
+    scanner,
     fixId,
     projectId,
     analysisId,
     organizationId,
-    redirectUrl: commentRes.data.html_url,
-    commentId
-  });
-  const issueType = getIssueTypeFriendlyString(fix.safeIssueType);
-  const title = `# ${MobbIconMarkdown} ${issueType} fix is ready`;
-  const patchAndQuestions = await PatchAndQuestionsZ.parseAsync(
-    fix.patchAndQuestions
-  );
-  const validFixParseRes = z18.object({
-    vulnerabilitySeverity: z18.nativeEnum(Vulnerability_Severity_Enum),
-    issueLanguage: z18.nativeEnum(IssueLanguage_Enum),
-    safeIssueType: z18.nativeEnum(IssueType_Enum)
-  }).safeParse(fix);
-  if (!validFixParseRes.success) {
-    debug5(
-      `fix ${fixId} does not have all the required fields to create a comment`,
-      validFixParseRes.error
-    );
-    return;
-  }
-  const validFix = validFixParseRes.data;
-  const subTitle = getCommitDescription({
-    issueType: validFix.safeIssueType,
-    vendor: scanner,
-    severity: validFix.vulnerabilitySeverity,
-    issueLanguage: validFix.issueLanguage,
-    guidances: getGuidances({
-      questions: patchAndQuestions.questions.map(toQuestion),
-      issueType: validFix.safeIssueType,
-      issueLanguage: validFix.issueLanguage,
-      fixExtraContext: patchAndQuestions.extraContext
-    })
+    patch
   });
-  const diff = `\`\`\`diff
-${patch} 
-\`\`\``;
-  const fixPageLink = `[Learn more and fine tune the fix](${fixUrl})`;
   return await scm.updatePrComment({
-    body: `${title}
-${subTitle}
-${diff}
-${getCommitFixButton(
-      commitUrl
-    )}
-${fixPageLink}`,
+    body: commentBody,
     comment_id: commentId
   });
 }
@@ -6407,7 +6433,7 @@ async function getRelevantVulenrabilitiesFromDiff(params) {
     });
     const lineAddedRanges = calculateRanges(fileNumbers);
     const fileFilter = {
-      path: z18.string().parse(file.to),
+      path: z19.string().parse(file.to),
       ranges: lineAddedRanges.map(([startLine, endLine]) => ({
         endLine,
         startLine
@@ -6448,7 +6474,7 @@ async function postAnalysisInsightComment(params) {
     fixablePrVuls,
     nonFixablePrVuls
   } = prVulenrabilities;
-  debug5({
+  debug6({
     fixablePrVuls,
     nonFixablePrVuls,
     vulnerabilitiesOutsidePr,
@@ -6503,7 +6529,7 @@ ${contactUsMarkdown}`;
 }
 
 // src/features/analysis/add_fix_comments_for_pr/add_fix_comments_for_pr.ts
-var debug6 = Debug6("mobbdev:handle-finished-analysis");
+var debug7 = Debug7("mobbdev:handle-finished-analysis");
 async function addFixCommentsForPr({
   analysisId,
   scm: _scm,
@@ -6515,7 +6541,7 @@ async function addFixCommentsForPr({
   }
   const scm = _scm;
   const getAnalysisRes = await gqlClient.getAnalysis(analysisId);
-  debug6("getAnalysis %o", getAnalysisRes);
+  debug7("getAnalysis %o", getAnalysisRes);
   const {
     vulnerabilityReport: {
       projectId,
@@ -6577,8 +6603,8 @@ async function addFixCommentsForPr({
 }
 
 // src/features/analysis/auto_pr_handler.ts
-import Debug7 from "debug";
-var debug7 = Debug7("mobbdev:handleAutoPr");
+import Debug8 from "debug";
+var debug8 = Debug8("mobbdev:handleAutoPr");
 async function handleAutoPr(params) {
   const { gqlClient, analysisId, createSpinner: createSpinner4 } = params;
   const createAutoPrSpinner = createSpinner4(
@@ -6590,7 +6616,7 @@ async function handleAutoPr(params) {
     },
     callback: async (analysisId2) => {
       const autoPrAnalysisRes = await gqlClient.autoPrAnalysis(analysisId2);
-      debug7("auto pr analysis res %o", autoPrAnalysisRes);
+      debug8("auto pr analysis res %o", autoPrAnalysisRes);
       if (autoPrAnalysisRes.autoPrAnalysis?.__typename === "AutoPrError") {
         createAutoPrSpinner.error({
           text: `\u{1F504} Automatic pull request failed - ${autoPrAnalysisRes.autoPrAnalysis.error}`
@@ -6615,12 +6641,12 @@ async function handleAutoPr(params) {
 }
 
 // src/features/analysis/git.ts
-import Debug8 from "debug";
+import Debug9 from "debug";
 import { simpleGit as simpleGit2 } from "simple-git";
-var debug8 = Debug8("mobbdev:git");
+var debug9 = Debug9("mobbdev:git");
 var GIT_NOT_INITIALIZED_ERROR_MESSAGE = "not a git repository";
 async function getGitInfo(srcDirPath) {
-  debug8("getting git info for %s", srcDirPath);
+  debug9("getting git info for %s", srcDirPath);
   const git = simpleGit2({
     baseDir: srcDirPath,
     maxConcurrentProcesses: 1,
@@ -6635,11 +6661,11 @@ async function getGitInfo(srcDirPath) {
     reference = await git.revparse(["--abbrev-ref", "HEAD"]) || "";
   } catch (e) {
     if (e instanceof Error) {
-      debug8("failed to run git %o", e);
+      debug9("failed to run git %o", e);
       if (e.message.includes(" spawn ")) {
-        debug8("git cli not installed");
+        debug9("git cli not installed");
       } else if (e.message.includes(GIT_NOT_INITIALIZED_ERROR_MESSAGE)) {
-        debug8("folder is not a git repo");
+        debug9("folder is not a git repo");
         return {
           success: false,
           hash: void 0,
@@ -6667,7 +6693,7 @@ async function getGitInfo(srcDirPath) {
 }
 
 // src/features/analysis/graphql/gql.ts
-import Debug9 from "debug";
+import Debug10 from "debug";
 import { GraphQLClient } from "graphql-request";
 import { v4 as uuidv4 } from "uuid";
 
@@ -6752,36 +6778,36 @@ function subscribe(query, variables, callback, wsClientOptions) {
 }
 
 // src/features/analysis/graphql/types.ts
-import { z as z19 } from "zod";
-var VulnerabilityReportIssueCodeNodeZ = z19.object({
-  vulnerabilityReportIssueId: z19.string(),
-  path: z19.string(),
-  startLine: z19.number(),
-  vulnerabilityReportIssue: z19.object({
-    fixId: z19.string()
+import { z as z20 } from "zod";
+var VulnerabilityReportIssueCodeNodeZ = z20.object({
+  vulnerabilityReportIssueId: z20.string(),
+  path: z20.string(),
+  startLine: z20.number(),
+  vulnerabilityReportIssue: z20.object({
+    fixId: z20.string()
   })
 });
-var GetVulByNodesMetadataZ = z19.object({
-  vulnerabilityReportIssueCodeNodes: z19.array(VulnerabilityReportIssueCodeNodeZ),
-  nonFixablePrVuls: z19.object({
-    aggregate: z19.object({
-      count: z19.number()
+var GetVulByNodesMetadataZ = z20.object({
+  vulnerabilityReportIssueCodeNodes: z20.array(VulnerabilityReportIssueCodeNodeZ),
+  nonFixablePrVuls: z20.object({
+    aggregate: z20.object({
+      count: z20.number()
     })
   }),
-  fixablePrVuls: z19.object({
-    aggregate: z19.object({
-      count: z19.number()
+  fixablePrVuls: z20.object({
+    aggregate: z20.object({
+      count: z20.number()
     })
   }),
-  totalScanVulnerabilities: z19.object({
-    aggregate: z19.object({
-      count: z19.number()
+  totalScanVulnerabilities: z20.object({
+    aggregate: z20.object({
+      count: z20.number()
     })
   })
 });
 
 // src/features/analysis/graphql/gql.ts
-var debug9 = Debug9("mobbdev:gql");
+var debug10 = Debug10("mobbdev:gql");
 var API_KEY_HEADER_NAME = "x-mobb-key";
 var REPORT_STATE_CHECK_DELAY = 5 * 1e3;
 var GQLClient = class {
@@ -6789,7 +6815,7 @@ var GQLClient = class {
     __publicField(this, "_client");
     __publicField(this, "_clientSdk");
     __publicField(this, "_auth");
-    debug9(`init with  ${args}`);
+    debug10(`init with  ${args}`);
     this._auth = args;
     this._client = new GraphQLClient(API_URL, {
       headers: args.type === "apiKey" ? { [API_KEY_HEADER_NAME]: args.apiKey || "" } : {
@@ -6797,7 +6823,7 @@ var GQLClient = class {
       },
       requestMiddleware: (request) => {
         const requestId = uuidv4();
-        debug9(
+        debug10(
           `sending API request with id: ${requestId} and with request: ${request.body}`
         );
         return {
@@ -6827,7 +6853,7 @@ var GQLClient = class {
     try {
       await this.getUserInfo();
     } catch (e) {
-      debug9("verify token failed %o", e);
+      debug10("verify token failed %o", e);
       return false;
     }
     return true;
@@ -6871,7 +6897,7 @@ var GQLClient = class {
     try {
       await this._clientSdk.CreateCommunityUser();
     } catch (e) {
-      debug9("create community user failed %o", e);
+      debug10("create community user failed %o", e);
     }
   }
   async updateScmToken(args) {
@@ -7065,11 +7091,11 @@ var GQLClient = class {
 import fs2 from "node:fs";
 import path4 from "node:path";
 import AdmZip from "adm-zip";
-import Debug10 from "debug";
+import Debug11 from "debug";
 import { globby } from "globby";
 import { isBinary } from "istextorbinary";
 import { simpleGit as simpleGit3 } from "simple-git";
-var debug10 = Debug10("mobbdev:pack");
+var debug11 = Debug11("mobbdev:pack");
 var MAX_FILE_SIZE = 1024 * 1024 * 5;
 function endsWithAny(str, suffixes) {
   return suffixes.some(function(suffix) {
@@ -7080,7 +7106,7 @@ function _get_manifest_files_suffixes() {
   return ["package.json"];
 }
 async function pack(srcDirPath, vulnFiles) {
-  debug10("pack folder %s", srcDirPath);
+  debug11("pack folder %s", srcDirPath);
   let git = void 0;
   try {
     git = simpleGit3({
@@ -7090,13 +7116,13 @@ async function pack(srcDirPath, vulnFiles) {
     });
     await git.status();
   } catch (e) {
-    debug10("failed to run git %o", e);
+    debug11("failed to run git %o", e);
     git = void 0;
     if (e instanceof Error) {
       if (e.message.includes(" spawn ")) {
-        debug10("git cli not installed");
+        debug11("git cli not installed");
       } else if (e.message.includes("not a git repository")) {
-        debug10("folder is not a git repo");
+        debug11("folder is not a git repo");
       } else {
         throw e;
       }
@@ -7111,9 +7137,9 @@ async function pack(srcDirPath, vulnFiles) {
     followSymbolicLinks: false,
     dot: true
   });
-  debug10("files found %d", filepaths.length);
+  debug11("files found %d", filepaths.length);
   const zip = new AdmZip();
-  debug10("compressing files");
+  debug11("compressing files");
   for (const filepath of filepaths) {
     const absFilepath = path4.join(srcDirPath, filepath.toString());
     vulnFiles = vulnFiles.concat(_get_manifest_files_suffixes());
@@ -7121,21 +7147,21 @@ async function pack(srcDirPath, vulnFiles) {
       absFilepath.toString().replaceAll(path4.win32.sep, path4.posix.sep),
       vulnFiles
     )) {
-      debug10("ignoring %s because it is not a vulnerability file", filepath);
+      debug11("ignoring %s because it is not a vulnerability file", filepath);
       continue;
     }
     if (fs2.lstatSync(absFilepath).size > MAX_FILE_SIZE) {
-      debug10("ignoring %s because the size is > 5MB", filepath);
+      debug11("ignoring %s because the size is > 5MB", filepath);
       continue;
     }
     const data = git ? await git.showBuffer([`HEAD:./${filepath}`]) : fs2.readFileSync(absFilepath);
     if (isBinary(null, data)) {
-      debug10("ignoring %s because is seems to be a binary file", filepath);
+      debug11("ignoring %s because is seems to be a binary file", filepath);
       continue;
     }
     zip.addFile(filepath.toString(), data);
   }
-  debug10("get zip file buffer");
+  debug11("get zip file buffer");
   return zip.toBuffer();
 }
 
@@ -7211,7 +7237,7 @@ var cxOperatingSystemSupportMessage = `Your operating system does not support ch
 
 // src/utils/child_process.ts
 import cp from "node:child_process";
-import Debug11 from "debug";
+import Debug12 from "debug";
 import * as process2 from "process";
 import supportsColor from "supports-color";
 var { stdout: stdout2 } = supportsColor;
@@ -7230,16 +7256,16 @@ function createSpwan({ args, processPath, name }, options) {
   return createChildProcess({ childProcess: child, name }, options);
 }
 function createChildProcess({ childProcess, name }, options) {
-  const debug15 = Debug11(`mobbdev:${name}`);
+  const debug16 = Debug12(`mobbdev:${name}`);
   const { display } = options;
   return new Promise((resolve, reject) => {
     let out = "";
     const onData = (chunk) => {
-      debug15(`chunk received from ${name} std ${chunk}`);
+      debug16(`chunk received from ${name} std ${chunk}`);
       out += chunk;
     };
     if (!childProcess || !childProcess?.stdout || !childProcess?.stderr) {
-      debug15(`unable to fork ${name}`);
+      debug16(`unable to fork ${name}`);
       reject(new Error(`unable to fork ${name}`));
     }
     childProcess.stdout?.on("data", onData);
@@ -7249,11 +7275,11 @@ function createChildProcess({ childProcess, name }, options) {
       childProcess.stderr?.pipe(process2.stderr);
     }
     childProcess.on("exit", (code) => {
-      debug15(`${name} exit code ${code}`);
+      debug16(`${name} exit code ${code}`);
       resolve({ message: out, code });
     });
     childProcess.on("error", (err) => {
-      debug15(`${name} error %o`, err);
+      debug16(`${name} error %o`, err);
       reject(err);
     });
   });
@@ -7261,12 +7287,12 @@ function createChildProcess({ childProcess, name }, options) {
 
 // src/features/analysis/scanners/checkmarx.ts
 import chalk2 from "chalk";
-import Debug12 from "debug";
+import Debug13 from "debug";
 import { existsSync } from "fs";
 import { createSpinner as createSpinner2 } from "nanospinner";
 import { type } from "os";
 import path5 from "path";
-var debug11 = Debug12("mobbdev:checkmarx");
+var debug12 = Debug13("mobbdev:checkmarx");
 var require2 = createRequire(import.meta.url);
 var getCheckmarxPath = () => {
   const os2 = type();
@@ -7307,14 +7333,14 @@ function validateCheckmarxInstallation() {
   existsSync(getCheckmarxPath());
 }
 async function forkCheckmarx(args, { display }) {
-  debug11("fork checkmarx with args %o %s", args.join(" "), display);
+  debug12("fork checkmarx with args %o %s", args.join(" "), display);
   return createSpwan(
     { args, processPath: getCheckmarxPath(), name: "checkmarx" },
     { display }
   );
 }
 async function getCheckmarxReport({ reportPath, repositoryRoot, branch, projectName }, { skipPrompts = false }) {
-  debug11("get checkmarx report start %s %s", reportPath, repositoryRoot);
+  debug12("get checkmarx report start %s %s", reportPath, repositoryRoot);
   const { code: loginCode } = await forkCheckmarx(VALIDATE_COMMAND, {
     display: false
   });
@@ -7382,20 +7408,20 @@ async function validateCheckamxCredentials() {
 // src/features/analysis/scanners/snyk.ts
 import { createRequire as createRequire2 } from "node:module";
 import chalk3 from "chalk";
-import Debug13 from "debug";
+import Debug14 from "debug";
 import { createSpinner as createSpinner3 } from "nanospinner";
 import open from "open";
-var debug12 = Debug13("mobbdev:snyk");
+var debug13 = Debug14("mobbdev:snyk");
 var require3 = createRequire2(import.meta.url);
 var SNYK_PATH = require3.resolve("snyk/bin/snyk");
 var SNYK_ARTICLE_URL = "https://docs.snyk.io/scan-using-snyk/snyk-code/configure-snyk-code#enable-snyk-code";
-debug12("snyk executable path %s", SNYK_PATH);
+debug13("snyk executable path %s", SNYK_PATH);
 async function forkSnyk(args, { display }) {
-  debug12("fork snyk with args %o %s", args, display);
+  debug13("fork snyk with args %o %s", args, display);
   return createFork({ args, processPath: SNYK_PATH, name: "snyk" }, { display });
 }
 async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
-  debug12("get snyk report start %s %s", reportPath, repoRoot);
+  debug13("get snyk report start %s %s", reportPath, repoRoot);
   const config4 = await forkSnyk(["config"], { display: false });
   const { message: configMessage } = config4;
   if (!configMessage.includes("api: ")) {
@@ -7409,7 +7435,7 @@ async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
     snykLoginSpinner.update({
       text: "\u{1F513} Waiting for Snyk login to complete"
     });
-    debug12("no token in the config %s", config4);
+    debug13("no token in the config %s", config4);
     await forkSnyk(["auth"], { display: true });
     snykLoginSpinner.success({ text: "\u{1F513} Login to Snyk Successful" });
   }
@@ -7419,12 +7445,12 @@ async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
     { display: true }
   );
   if (scanOutput.includes("Snyk Code is not supported for org")) {
-    debug12("snyk code is not enabled %s", scanOutput);
+    debug13("snyk code is not enabled %s", scanOutput);
     snykSpinner.error({ text: "\u{1F50D} Snyk configuration needed" });
     const answer = await snykArticlePrompt();
-    debug12("answer %s", answer);
+    debug13("answer %s", answer);
     if (answer) {
-      debug12("opening the browser");
+      debug13("opening the browser");
       await open(SNYK_ARTICLE_URL);
     }
     console.log(
@@ -7439,18 +7465,18 @@ async function getSnykReport(reportPath, repoRoot, { skipPrompts = false }) {
 }
 
 // src/features/analysis/upload-file.ts
-import Debug14 from "debug";
+import Debug15 from "debug";
 import fetch3, { File, fileFrom, FormData } from "node-fetch";
-var debug13 = Debug14("mobbdev:upload-file");
+var debug14 = Debug15("mobbdev:upload-file");
 async function uploadFile({
   file,
   url,
   uploadKey,
   uploadFields
 }) {
-  debug13("upload file start %s", url);
-  debug13("upload fields %o", uploadFields);
-  debug13("upload key %s", uploadKey);
+  debug14("upload file start %s", url);
+  debug14("upload fields %o", uploadFields);
+  debug14("upload key %s", uploadKey);
   const form = new FormData();
   Object.entries(uploadFields).forEach(([key, value]) => {
     form.append(key, value);
@@ -7459,10 +7485,10 @@ async function uploadFile({
     form.append("key", uploadKey);
   }
   if (typeof file === "string") {
-    debug13("upload file from path %s", file);
+    debug14("upload file from path %s", file);
     form.append("file", await fileFrom(file));
   } else {
-    debug13("upload file from buffer");
+    debug14("upload file from buffer");
     form.append("file", new File([file], "file"));
   }
   const response = await fetch3(url, {
@@ -7470,10 +7496,10 @@ async function uploadFile({
     body: form
   });
   if (!response.ok) {
-    debug13("error from S3 %s %s", response.body, response.status);
+    debug14("error from S3 %s %s", response.body, response.status);
     throw new Error(`Failed to upload the file: ${response.status}`);
   }
-  debug13("upload file done");
+  debug14("upload file done");
 }
 
 // src/features/analysis/index.ts
@@ -7493,9 +7519,9 @@ async function downloadRepo({
 }) {
   const { createSpinner: createSpinner4 } = Spinner2({ ci });
   const repoSpinner = createSpinner4("\u{1F4BE} Downloading Repo").start();
-  debug14("download repo %s %s %s", repoUrl, dirname);
+  debug15("download repo %s %s %s", repoUrl, dirname);
   const zipFilePath = path6.join(dirname, "repo.zip");
-  debug14("download URL: %s auth headers: %o", downloadUrl, authHeaders);
+  debug15("download URL: %s auth headers: %o", downloadUrl, authHeaders);
   const response = await fetch4(downloadUrl, {
     method: "GET",
     headers: {
@@ -7503,7 +7529,7 @@ async function downloadRepo({
     }
   });
   if (!response.ok) {
-    debug14("SCM zipball request failed %s %s", response.body, response.status);
+    debug15("SCM zipball request failed %s %s", response.body, response.status);
     repoSpinner.error({ text: "\u{1F4BE} Repo download failed" });
     throw new Error(`Can't access ${chalk4.bold(repoUrl)}`);
   }
@@ -7517,7 +7543,7 @@ async function downloadRepo({
   if (!repoRoot) {
     throw new Error("Repo root not found");
   }
-  debug14("repo root %s", repoRoot);
+  debug15("repo root %s", repoRoot);
   repoSpinner.success({ text: "\u{1F4BE} Repo downloaded successfully" });
   return path6.join(dirname, repoRoot);
 }
@@ -7531,7 +7557,7 @@ var getReportUrl = ({
   projectId,
   fixReportId
 }) => `${WEB_APP_URL}/organization/${organizationId}/project/${projectId}/report/${fixReportId}`;
-var debug14 = Debug15("mobbdev:index");
+var debug15 = Debug16("mobbdev:index");
 var packageJson = JSON.parse(
   fs3.readFileSync(path6.join(getDirName(), "../package.json"), "utf8")
 );
@@ -7541,7 +7567,7 @@ if (!semver.satisfies(process.version, packageJson.engines.node)) {
   );
 }
 var config2 = new Configstore(packageJson.name, { apiToken: "" });
-debug14("config %o", config2);
+debug15("config %o", config2);
 async function runAnalysis(params, options) {
   const tmpObj = tmp2.dirSync({
     unsafeCleanup: true
@@ -7683,7 +7709,7 @@ async function _scan(params, { skipPrompts = false } = {}) {
     organizationId: userOrganizationId,
     autoPr
   } = params;
-  debug14("start %s %s", dirname, repo);
+  debug15("start %s %s", dirname, repo);
   const { createSpinner: createSpinner4 } = Spinner2({ ci });
   skipPrompts = skipPrompts || ci;
   let gqlClient = new GQLClient({
@@ -7750,8 +7776,8 @@ async function _scan(params, { skipPrompts = false } = {}) {
     );
   }
   const { sha } = getReferenceDataRes.gitReference;
-  debug14("project id %s", projectId);
-  debug14("default branch %s", reference);
+  debug15("project id %s", projectId);
+  debug15("default branch %s", reference);
   if (command === "scan") {
     reportPath = await getReport(
       {
@@ -7789,7 +7815,7 @@ async function _scan(params, { skipPrompts = false } = {}) {
     spinner: mobbSpinner,
     submitVulnerabilityReportVariables: {
       fixReportId: reportUploadInfo.fixReportId,
-      repoUrl: z20.string().parse(repo),
+      repoUrl: z21.string().parse(repo),
       reference,
       projectId,
       vulnerabilityReportFileName: "report.json",
@@ -7870,9 +7896,9 @@ async function _scan(params, { skipPrompts = false } = {}) {
       });
       loginSpinner.spin();
       if (encryptedApiToken) {
-        debug14("encrypted API token received %s", encryptedApiToken);
+        debug15("encrypted API token received %s", encryptedApiToken);
         newApiToken = crypto.privateDecrypt(privateKey, Buffer.from(encryptedApiToken, "base64")).toString("utf-8");
-        debug14("API token decrypted");
+        debug15("API token decrypted");
         break;
       }
       await sleep(LOGIN_CHECK_DELAY);
@@ -7885,7 +7911,7 @@ async function _scan(params, { skipPrompts = false } = {}) {
     }
     gqlClient = new GQLClient({ apiKey: newApiToken, type: "apiKey" });
     if (await gqlClient.verifyToken()) {
-      debug14("set api token %s", newApiToken);
+      debug15("set api token %s", newApiToken);
       config2.set("apiToken", newApiToken);
       loginSpinner.success({ text: "\u{1F513} Login to Mobb successful!" });
     } else {
@@ -8028,9 +8054,9 @@ async function _scan(params, { skipPrompts = false } = {}) {
         }
       });
       if (command === "review") {
-        const params2 = z20.object({
-          repo: z20.string().url(),
-          githubActionToken: z20.string()
+        const params2 = z21.object({
+          repo: z21.string().url(),
+          githubActionToken: z21.string()
         }).parse({ repo, githubActionToken });
         const scm = await SCMLib.init(
           {
@@ -8052,7 +8078,7 @@ async function _scan(params, { skipPrompts = false } = {}) {
               analysisId,
               gqlClient,
               scm,
-              scanner: z20.nativeEnum(SCANNERS).parse(scanner)
+              scanner: z21.nativeEnum(SCANNERS).parse(scanner)
             });
           },
           callbackStates: ["Finished" /* Finished */]
@@ -8279,7 +8305,7 @@ var scmTokenOption = {
 // src/args/validation.ts
 import chalk6 from "chalk";
 import path8 from "path";
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 function throwRepoUrlErrorMessage({
   error,
   repoUrl,
@@ -8296,13 +8322,13 @@ Example:
   )}`;
   throw new CliError(formattedErrorMessage);
 }
-var UrlZ = z21.string({
+var UrlZ = z22.string({
   invalid_type_error: `is not a valid ${Object.values(ScmType).join("/ ")} URL`
 }).refine((data) => !!sanityRepoURL(data), {
   message: `is not a valid ${Object.values(ScmType).join(" / ")} URL`
 });
 function validateOrganizationId(organizationId) {
-  const orgIdValidation = z21.string().uuid().nullish().safeParse(organizationId);
+  const orgIdValidation = z22.string().uuid().nullish().safeParse(organizationId);
   if (!orgIdValidation.success) {
     throw new CliError(`organizationId: ${organizationId} is not a valid UUID`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "0.0.177",
+  "version": "0.0.178",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",