mobbdev 0.0.59 → 0.0.60

package/dist/index.mjs

@@ -230,17 +230,11 @@ var DIGEST_VULNERABILITY_REPORT = gql`
     $vulnerabilityReportFileName: String!
     $fixReportId: String!
     $projectId: String!
-    $repoUrl: String!
-    $reference: String!
-    $sha: String
   ) {
     digestVulnerabilityReport(
       fixReportId: $fixReportId
       vulnerabilityReportFileName: $vulnerabilityReportFileName
       projectId: $projectId
-      repoUrl: $repoUrl
-      reference: $reference
-      sha: $sha
     ) {
       __typename
       ... on VulnerabilityReport {
@@ -262,29 +256,22 @@ var DIGEST_VULNERABILITY_REPORT = gql`
     }
   }
 `;
-var INITIALIZE_VULNERABILITY_REPORT = gql`
-  mutation InitializeVulnerabilityReport($fixReportId: String!) {
-    initializeVulnerabilityReport(fixReportId: $fixReportId) {
-      __typename
-    }
-  }
-`;
 var SUBMIT_VULNERABILITY_REPORT = gql`
   mutation SubmitVulnerabilityReport(
-    $vulnerabilityReportFileName: String!
     $fixReportId: String!
     $repoUrl: String!
     $reference: String!
     $projectId: String!
     $sha: String
+    $vulnerabilityReportFileName: String
   ) {
     submitVulnerabilityReport(
       fixReportId: $fixReportId
       repoUrl: $repoUrl
       reference: $reference
       sha: $sha
-      vulnerabilityReportFileName: $vulnerabilityReportFileName
       projectId: $projectId
+      vulnerabilityReportFileName: $vulnerabilityReportFileName
     ) {
       __typename
     }
@@ -526,43 +513,31 @@ var GQLClient = class {
   }
   async digestVulnerabilityReport({
     fixReportId,
-    projectId,
-    repoUrl,
-    reference,
-    sha
+    projectId
   }) {
     const res = await this._client.request(
       DIGEST_VULNERABILITY_REPORT,
       {
         fixReportId,
         vulnerabilityReportFileName: "report.json",
-        projectId,
-        repoUrl,
-        reference,
-        sha
+        projectId
       }
     );
     return DigestVulnerabilityReportZ.parse(res).digestVulnerabilityReport;
   }
-  async initializeVulnerabilityReport({
-    fixReportId
-  }) {
-    await this._client.request(INITIALIZE_VULNERABILITY_REPORT, {
-      fixReportId
-    });
-  }
   async submitVulnerabilityReport({
     fixReportId,
     repoUrl,
     reference,
     projectId,
-    sha
+    sha,
+    vulnerabilityReportFileName
   }) {
     await this._client.request(SUBMIT_VULNERABILITY_REPORT, {
       fixReportId,
       repoUrl,
       reference,
-      vulnerabilityReportFileName: "report.json",
+      vulnerabilityReportFileName,
       projectId,
       sha: sha || ""
     });
@@ -2267,7 +2242,9 @@ async function _scan({
       fixReportId: reportUploadInfo.fixReportId,
       repoUrl: repo,
       reference,
-      projectId
+      projectId,
+      vulnerabilityReportFileName: "report.json",
+      sha
     });
   } catch (e) {
     mobbSpinner.error({ text: "\u{1F575}\uFE0F\u200D\u2642\uFE0F Mobb analysis failed" });
@@ -2430,14 +2407,11 @@ async function _scan({
     });
     const digestSpinner = createSpinner4("\u{1F575}\uFE0F\u200D\u2642\uFE0F Digesting report").start();
     let vulnFiles = [];
+    const gitInfo = await getGitInfo(srcPath);
     try {
-      const gitInfo = await getGitInfo(srcPath);
       const { vulnerabilityReportId } = await gqlClient.digestVulnerabilityReport({
         fixReportId: reportUploadInfo.fixReportId,
-        projectId,
-        repoUrl: repo || gitInfo.repoUrl,
-        reference: gitInfo.reference,
-        sha: commitHash || gitInfo.hash
+        projectId
       });
       const finalState = await gqlClient.waitFixReportInit(
         reportUploadInfo.fixReportId,
@@ -2474,8 +2448,12 @@ async function _scan({
     uploadRepoSpinner.success({ text: "\u{1F4C1} Uploading Repo successful!" });
     const mobbSpinner2 = createSpinner4("\u{1F575}\uFE0F\u200D\u2642\uFE0F Initiating Mobb analysis").start();
     try {
-      await gqlClient.initializeVulnerabilityReport({
-        fixReportId: reportUploadInfo.fixReportId
+      await gqlClient.submitVulnerabilityReport({
+        fixReportId: reportUploadInfo.fixReportId,
+        projectId,
+        repoUrl: repo || gitInfo.repoUrl,
+        reference: gitInfo.reference,
+        sha: commitHash || gitInfo.hash
       });
     } catch (e) {
       mobbSpinner2.error({ text: "\u{1F575}\uFE0F\u200D\u2642\uFE0F Mobb analysis failed" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "0.0.59",
+  "version": "0.0.60",
   "description": "Automated secure code remediation tool",
   "repository": "https://github.com/mobb-dev/bugsy",
   "main": "dist/index.js",