mobbdev 1.0.4 → 1.0.7

package/dist/index.mjs

@@ -196,6 +196,7 @@ var Vulnerability_Report_Vendor_Enum = /* @__PURE__ */ ((Vulnerability_Report_Ve
   Vulnerability_Report_Vendor_Enum3["CheckmarxXml"] = "checkmarxXml";
   Vulnerability_Report_Vendor_Enum3["Codeql"] = "codeql";
   Vulnerability_Report_Vendor_Enum3["Fortify"] = "fortify";
+  Vulnerability_Report_Vendor_Enum3["Semgrep"] = "semgrep";
   Vulnerability_Report_Vendor_Enum3["Snyk"] = "snyk";
   Vulnerability_Report_Vendor_Enum3["Sonarqube"] = "sonarqube";
   return Vulnerability_Report_Vendor_Enum3;
@@ -802,7 +803,8 @@ var ScmSubmitFixRequestsZ = z3.array(
       submitFixRequest: z3.object({
         createdByUser: z3.object({
           email: z3.string()
-        })
+        }),
+        targetBranchName: z3.string().default("")
       }),
       prUrl: z3.string().nullable(),
       commitUrl: z3.string().nullable(),
@@ -1132,7 +1134,9 @@ var FixScreenQueryResultZ = z3.object({
     })
   ),
   fixesWithSameIssueType: z3.object({
-    fix: z3.array(z3.object({ id: z3.string().uuid() }))
+    fix: z3.array(
+      z3.object({ id: z3.string().uuid(), state: z3.nativeEnum(Fix_State_Enum) })
+    )
   })
 });
 var FixReportByProjectZ = z3.object({
@@ -1275,14 +1279,16 @@ var SCANNERS = {
   Codeql: "codeql",
   Fortify: "fortify",
   Snyk: "snyk",
-  Sonarqube: "sonarqube"
+  Sonarqube: "sonarqube",
+  Semgrep: "semgrep"
 };
 var scannerToVulnerability_Report_Vendor_Enum = {
   [SCANNERS.Checkmarx]: "checkmarx" /* Checkmarx */,
   [SCANNERS.Snyk]: "snyk" /* Snyk */,
   [SCANNERS.Sonarqube]: "sonarqube" /* Sonarqube */,
   [SCANNERS.Codeql]: "codeql" /* Codeql */,
-  [SCANNERS.Fortify]: "fortify" /* Fortify */
+  [SCANNERS.Fortify]: "fortify" /* Fortify */,
+  [SCANNERS.Semgrep]: "semgrep" /* Semgrep */
 };
 var SupportedScannersZ = z4.enum([SCANNERS.Checkmarx, SCANNERS.Snyk]);
 var envVariablesSchema = z4.object({
@@ -2007,7 +2013,7 @@ var insecureRandomness = {
     description: () => "See [the official documentation](https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.randomnumbergenerator?view=net-8.0#applies-to) for more details.",
     guidance: () => ""
   },
-  net_version_gt_6: {
+  isNetVersionGreaterThan6: {
     content: () => "We are able to offer a more concise solution if the .NET version is greater then .NET 6",
     description: () => "",
     guidance: () => ""
@@ -2430,7 +2436,7 @@ var overlyBroadCatch2 = {
 
 // src/features/analysis/scm/shared/src/storedQuestionData/java/privacyViolation.ts
 var privacyViolation = {
-  remediation_option: {
+  remediationOption: {
     content: () => "Preferred fix solution",
     description: () => `
       - Completely Remove the log message
@@ -6429,7 +6435,8 @@ var scannerToFriendlyString = {
   codeql: "CodeQL",
   fortify: "Fortify",
   snyk: "Snyk",
-  sonarqube: "Sonarqube"
+  sonarqube: "Sonarqube",
+  semgrep: "Semgrep"
 };
 
 // src/features/analysis/add_fix_comments_for_pr/utils/buildCommentBody.ts
@@ -6915,6 +6922,9 @@ import WebSocket from "ws";
 var SUBSCRIPTION_TIMEOUT_MS = 30 * 60 * 1e3;
 function createWSClient(options) {
   return createClient({
+    //this is needed to prevent AWS from killing the connection
+    //currently our load balancer has a 29s idle timeout
+    keepAlive: 1e4,
     url: options.url,
     webSocketImpl: options.websocket || WebSocket,
     connectionParams: () => {
@@ -7385,7 +7395,8 @@ var scannerChoices = [
   { name: "Checkmarx", value: SCANNERS.Checkmarx },
   { name: "Codeql", value: SCANNERS.Codeql },
   { name: "Fortify", value: SCANNERS.Fortify },
-  { name: "Sonarqube", value: SCANNERS.Sonarqube }
+  { name: "Sonarqube", value: SCANNERS.Sonarqube },
+  { name: "Semgrep", value: SCANNERS.Semgrep }
 ];
 async function choseScanner() {
   const { scanner } = await inquirer.prompt({
@@ -8622,7 +8633,7 @@ function analyzeBuilder(yargs2) {
     demandOption: true,
     type: "string",
     describe: chalk8.bold(
-      "Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL, Sonarqube)"
+      "Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL, Sonarqube, Semgrep)"
     )
   }).option("repo", repoOption).option("p", {
     alias: "src-path",
@@ -8670,7 +8681,7 @@ function reviewBuilder(yargs2) {
     demandOption: true,
     type: "string",
     describe: chalk9.bold(
-      "Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL, Sonarqube)"
+      "Select the vulnerability report to analyze (Checkmarx, Snyk, Fortify, CodeQL, Sonarqube, Semgrep)"
     )
   }).option("repo", { ...repoOption, demandOption: true }).option("scanner", { ...scannerOptions, demandOption: true }).option("ref", { ...refOption, demandOption: true }).option("ch", {
     alias: "commit-hash",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.4",
+  "version": "1.0.7",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",