mobbdev 0.0.6 → 0.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mobbdev",
-    "version": "0.0.6",
+    "version": "0.0.7",
     "description": "Automated secure code remediation tool",
     "main": "index.js",
     "scripts": {
@@ -15,6 +15,7 @@
     "author": "",
     "license": "MIT",
     "dependencies": {
+        "colors": "1.4.0",
         "configstore": "6.0.0",
         "dotenv": "16.0.3",
         "extract-zip": "2.0.1",

package/src/snyk.mjs

@@ -1,41 +1,82 @@
 import cp from 'node:child_process';
 import { createRequire } from 'node:module';
+import readline from 'node:readline';
+import { stdout } from 'colors/lib/system/supports-colors.js';
+import open from 'open';
+import * as process from 'process';
 
 const require = createRequire(import.meta.url);
 const SNYK_PATH = require.resolve('snyk/bin/snyk');
 
-async function forkSnyk(args, stdio = 'inherit') {
+async function forkSnyk(args, display) {
     return new Promise((resolve, reject) => {
         const child = cp.fork(SNYK_PATH, args, {
-            stdio,
+            stdio: ['inherit', 'pipe', 'pipe', 'ipc'],
+            env: { FORCE_COLOR: stdout.level },
         });
         let out = '';
+        const onData = (chunk) => {
+            out += chunk;
+        };
 
-        if (stdio === 'pipe') {
-            child.stdout.on('data', (chunk) => {
-                out += chunk;
-            });
+        child.stdout.on('data', onData);
+        child.stderr.on('data', onData);
+
+        if (display) {
+            child.stdout.pipe(process.stdout);
+            child.stderr.pipe(process.stderr);
         }
 
         child.on('exit', () => {
             resolve(out);
         });
+        child.on('error', (err) => {
+            reject(err);
+        });
+    });
+}
+
+async function question(questionString) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
 
-        child.on('error', reject);
+    return new Promise((resolve) => {
+        rl.question(`${questionString} `, (answer) => {
+            rl.close();
+            resolve(answer);
+        });
     });
 }
 
 export async function getSnykReport(reportPath, repoRoot) {
-    const config = await forkSnyk(['config'], 'pipe');
+    const config = await forkSnyk(['config'], false);
 
     if (!config.includes('api: ')) {
-        await forkSnyk(['auth']);
+        await forkSnyk(['auth'], true);
     }
 
-    await forkSnyk([
-        'code',
-        'test',
-        `--sarif-file-output=${reportPath}`,
-        repoRoot,
-    ]);
+    const out = await forkSnyk(
+        ['code', 'test', `--sarif-file-output=${reportPath}`, repoRoot],
+        true
+    );
+
+    if (
+        out.includes(
+            'Snyk Code is not supported for org: enable in Settings > Snyk Code'
+        )
+    ) {
+        const answer = await question(
+            "Do you want to be taken to the relevant Snyk's online article? (Y/N)"
+        );
+
+        if (['y', 'yes', ''].includes(answer.toLowerCase())) {
+            await open(
+                'https://docs.snyk.io/scan-application-code/snyk-code/getting-started-with-snyk-code/activating-snyk-code-using-the-web-ui/step-1-enabling-the-snyk-code-option'
+            );
+        }
+
+        process.exit(0);
+    }
 }