mobbdev 1.0.80 → 1.0.82

package/dist/index.mjs

@@ -426,6 +426,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["WeakEncryption"] = "WEAK_ENCRYPTION";
   IssueType_Enum2["WeakXmlSchemaUnboundedOccurrences"] = "WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES";
   IssueType_Enum2["WebsocketMissingOriginCheck"] = "WEBSOCKET_MISSING_ORIGIN_CHECK";
+  IssueType_Enum2["WildcardImports"] = "WILDCARD_IMPORTS";
   IssueType_Enum2["Xss"] = "XSS";
   IssueType_Enum2["Xxe"] = "XXE";
   IssueType_Enum2["ZipSlip"] = "ZIP_SLIP";
@@ -890,11 +891,12 @@ var GitReferenceDocument = `
 }
     `;
 var AutoPrAnalysisDocument = `
-    mutation autoPrAnalysis($analysisId: String!, $commitDirectly: Boolean, $prId: Int) {
+    mutation autoPrAnalysis($analysisId: String!, $commitDirectly: Boolean, $prId: Int, $prStrategy: PRStrategy) {
   autoPrAnalysis(
     analysisId: $analysisId
     sameBranchCommit: $commitDirectly
     prId: $prId
+    prStrategy: $prStrategy
   ) {
     __typename
     ... on AutoPrSuccess {
@@ -1398,6 +1400,7 @@ var issueTypeMap = {
   ["RETURN_SHOULD_NOT_BE_INVARIANT" /* ReturnShouldNotBeInvariant */]: "Return Should Not Be Invariant",
   ["SYSTEM_EXIT_SHOULD_RERAISE" /* SystemExitShouldReraise */]: "SystemExit Should Reraise",
   ["NO_RETURN_IN_FINALLY" /* NoReturnInFinally */]: "No Return in Finally Block",
+  ["WILDCARD_IMPORTS" /* WildcardImports */]: "Wildcard Imports should not be used",
   ["AVOID_IDENTITY_COMPARISON_CACHED_TYPES" /* AvoidIdentityComparisonCachedTypes */]: "Avoid Identity Comparison of Cached Types",
   ["AVOID_BUILTIN_SHADOWING" /* AvoidBuiltinShadowing */]: "Avoid Builtin Shadowing",
   ["IMPROPER_STRING_FORMATTING" /* ImproperStringFormatting */]: "Improper String Formatting"
@@ -2131,7 +2134,8 @@ var fixDetailsData = {
   ["NO_RETURN_IN_FINALLY" /* NoReturnInFinally */]: void 0,
   ["AVOID_IDENTITY_COMPARISON_CACHED_TYPES" /* AvoidIdentityComparisonCachedTypes */]: void 0,
   ["AVOID_BUILTIN_SHADOWING" /* AvoidBuiltinShadowing */]: void 0,
-  ["IMPROPER_STRING_FORMATTING" /* ImproperStringFormatting */]: void 0
+  ["IMPROPER_STRING_FORMATTING" /* ImproperStringFormatting */]: void 0,
+  ["WILDCARD_IMPORTS" /* WildcardImports */]: void 0
 };
 
 // src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
@@ -7559,6 +7563,13 @@ var autoPrOption = {
   type: "boolean",
   default: false
 };
+var createOnePrOption = {
+  describe: chalk2.bold(
+    "Create a single unified PR for all fixes (requires --auto-pr)"
+  ),
+  type: "boolean",
+  default: false
+};
 var commitDirectlyOption = {
   describe: chalk2.bold(
     "Commit directly to the scanned branch instead of creating a pull request"
@@ -8239,7 +8250,14 @@ ${contextString}` : description;
 import Debug9 from "debug";
 var debug9 = Debug9("mobbdev:handleAutoPr");
 async function handleAutoPr(params) {
-  const { gqlClient, analysisId, commitDirectly, prId, createSpinner: createSpinner5 } = params;
+  const {
+    gqlClient,
+    analysisId,
+    commitDirectly,
+    prId,
+    createSpinner: createSpinner5,
+    createOnePr
+  } = params;
   const createAutoPrSpinner = createSpinner5(
     "\u{1F504} Waiting for the analysis to finish before initiating automatic pull request creation"
   ).start();
@@ -8248,11 +8266,12 @@ async function handleAutoPr(params) {
       analysisId
     },
     callback: async (analysisId2) => {
-      const autoPrAnalysisRes = await gqlClient.autoPrAnalysis(
-        analysisId2,
+      const autoPrAnalysisRes = await gqlClient.autoPrAnalysis({
+        analysisId: analysisId2,
         commitDirectly,
-        prId
-      );
+        prId,
+        prStrategy: createOnePr ? "CONDENSE" /* Condense */ : "SPREAD" /* Spread */
+      });
       debug9("auto pr analysis res %o", autoPrAnalysisRes);
       if (autoPrAnalysisRes.autoPrAnalysis?.__typename === "AutoPrError") {
         createAutoPrSpinner.error({
@@ -8801,11 +8820,17 @@ var GQLClient = class {
     }
     return res.analysis;
   }
-  async autoPrAnalysis(analysisId, commitDirectly, prId) {
+  async autoPrAnalysis({
+    analysisId,
+    commitDirectly,
+    prId,
+    prStrategy
+  }) {
     return this._clientSdk.autoPrAnalysis({
       analysisId,
       commitDirectly,
-      prId
+      prId,
+      prStrategy
     });
   }
   async getFixes(fixIds) {
@@ -9483,6 +9508,7 @@ async function _scan(params, { skipPrompts = false } = {}) {
     command,
     organizationId: userOrganizationId,
     autoPr,
+    createOnePr,
     commitDirectly,
     pullRequest
   } = params;
@@ -9626,7 +9652,8 @@ async function _scan(params, { skipPrompts = false } = {}) {
       analysisId: reportUploadInfo.fixReportId,
       commitDirectly,
       prId: pullRequest,
-      createSpinner: createSpinner5
+      createSpinner: createSpinner5,
+      createOnePr
     });
   }
   await askToOpenAnalysis();
@@ -9789,7 +9816,8 @@ async function _scan(params, { skipPrompts = false } = {}) {
         analysisId: reportUploadInfo.fixReportId,
         commitDirectly,
         prId: pullRequest,
-        createSpinner: createSpinner5
+        createSpinner: createSpinner5,
+        createOnePr
       });
     }
     await askToOpenAnalysis();
@@ -10189,7 +10217,7 @@ function analyzeBuilder(yargs2) {
     alias: "commit-hash",
     describe: chalk8.bold("Hash of the commit"),
     type: "string"
-  }).option("mobb-project-name", mobbProjectNameOption).option("y", yesOption).option("ci", ciOption).option("org", organizationIdOptions).option("api-key", apiKeyOption).option("commit-hash", commitHashOption).option("auto-pr", autoPrOption).option("commit-directly", commitDirectlyOption).option("pull-request", {
+  }).option("mobb-project-name", mobbProjectNameOption).option("y", yesOption).option("ci", ciOption).option("org", organizationIdOptions).option("api-key", apiKeyOption).option("commit-hash", commitHashOption).option("auto-pr", autoPrOption).option("create-one-pr", createOnePrOption).option("commit-directly", commitDirectlyOption).option("pull-request", {
     alias: ["pr", "pr-number", "pr-id"],
     describe: chalk8.bold("Number of the pull request"),
     type: "number",
@@ -10200,6 +10228,7 @@ function analyzeBuilder(yargs2) {
   ).help();
 }
 function validateAnalyzeOptions(argv) {
+  console.log("argv", argv);
   if (!fs7.existsSync(argv.f)) {
     throw new CliError(`
 Can't access ${chalk8.bold(argv.f)}`);
@@ -10219,7 +10248,17 @@ Can't access ${chalk8.bold(argv.f)}`);
       "--commit-directly flag requires --auto-pr to be provided as well"
     );
   }
-  if (argv.pullRequest && !argv["commit-directly"]) {
+  if (argv["create-one-pr"] && !argv["auto-pr"]) {
+    throw new CliError(
+      "--create-one-pr flag requires --auto-pr to be provided as well"
+    );
+  }
+  if (argv["create-one-pr"] && argv.commitDirectly) {
+    throw new CliError(
+      "--create-one-pr and --commit-directly cannot be provided at the same time"
+    );
+  }
+  if (argv.pullRequest && !argv.commitDirectly) {
     throw new CliError(
       "--pull-request flag requires --commit-directly to be provided as well"
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.80",
+  "version": "1.0.82",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",