packtory 0.0.30 → 0.0.31
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bundle-emitter/registry/package-metadata-fetcher.d.ts.map +1 -1
- package/bundle-emitter/registry/package-metadata-fetcher.js +2 -0
- package/bundle-emitter/registry/package-metadata-fetcher.js.map +1 -1
- package/bundle-emitter/registry/validate-tarball-host.js +25 -0
- package/bundle-emitter/registry/validate-tarball-host.js.map +1 -0
- package/config/additional-files.js +2 -2
- package/config/additional-files.js.map +1 -1
- package/config/base-validations.js +9 -0
- package/config/base-validations.js.map +1 -1
- package/dependency-scanner/source-file-references.d.ts.map +1 -1
- package/dependency-scanner/source-file-references.js +37 -2
- package/dependency-scanner/source-file-references.js.map +1 -1
- package/npm-oidc-id-token-resolver.js +26 -4
- package/npm-oidc-id-token-resolver.js.map +1 -1
- package/package.json +2 -2
- package/sbom.cdx.json +10 -10
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"package-metadata-fetcher.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;
|
|
1
|
+
{"version":3,"file":"package-metadata-fetcher.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AAgBzE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B"}
|
|
@@ -3,6 +3,7 @@ import { retryWithFallbackAuth } from "./metadata-auth-retry.js";
|
|
|
3
3
|
import { toRegistryPackagePath } from "./registry-package-path.js";
|
|
4
4
|
import { resolveMetadataAuthOptions, resolveStageListingAuthOptions } from "./registry-auth-config.js";
|
|
5
5
|
import { parseAbbreviatedPackageResponse, parseFullPackageResponse } from "./registry-response-schemas.js";
|
|
6
|
+
import { assertTarballHostMatchesRegistry } from "./validate-tarball-host.js";
|
|
6
7
|
const notFoundStatusCode = 404;
|
|
7
8
|
const forbiddenStatusCode = 403;
|
|
8
9
|
const abbreviatedResponseAcceptHeader = 'application/vnd.npm.install-v1+json';
|
|
@@ -129,6 +130,7 @@ export async function fetchStagedPackageVersions(npmFetch, packageName, registry
|
|
|
129
130
|
return fetchPage(0, []);
|
|
130
131
|
}
|
|
131
132
|
export async function fetchPackageTarball(npmFetch, tarballUrl, registrySettings) {
|
|
133
|
+
assertTarballHostMatchesRegistry(tarballUrl, registrySettings);
|
|
132
134
|
const auth = resolveMetadataAuthOptions(registrySettings);
|
|
133
135
|
const response = await retryWithFallbackAuth(registrySettings, auth, async (options) => {
|
|
134
136
|
return npmFetch(tarballUrl, options);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"package-metadata-fetcher.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EACH,+BAA+B,EAC/B,wBAAwB,EAG3B,MAAM,gCAAgC,CAAC;
|
|
1
|
+
{"version":3,"file":"package-metadata-fetcher.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EACH,+BAA+B,EAC/B,wBAAwB,EAG3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAE9E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,+BAA+B,GAAG,qCAAqC,CAAC;AAa9E,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,mBAAmB,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,yBAAyB,SAAS,4BAA4B,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAiB;IACrD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC,CAAC;QACF,KAAK;KACR,CAAC;AACN,CAAC;AAOD,MAAM,iCAAiC,GAAuD;IAC1F,oBAAoB,EAAE,+BAA+B;IACrD,OAAO,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE;CACvD,CAAC;AAEF,MAAM,0BAA0B,GAAgD;IAC5E,oBAAoB,EAAE,wBAAwB;IAC9C,OAAO,EAAE,SAAS;CACrB,CAAC;AAWF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,KAAK,UAAU,4BAA4B,CACvC,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC,EAClC,OAAiD;IAEjD,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACnF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE;gBAC3D,GAAG,OAAO;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,OAAO,EAAoB,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAChC,eAA2C,EAC3C,WAAmB;IAEnB,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACX,YAAY,aAAa,kBAAkB,WAAW,yCAAyC,CAClG,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,iCAAiC,CACpC,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,0BAA0B,CAC7B,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,oBAAoB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvF,OAAO,KAAK,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;QACpC,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU;QAC1C,WAAW,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC;KACrG,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,IAAI,GAAG,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;IAE9D,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,QAA2B;QAC9D,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;YACrC,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,8BAA8B,CAC3C,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAC3E,CAAC;QACF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAChC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,IAAI,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,YAAY,CAAC;QACxB,CAAC;QAED,OAAO,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAA0B,EAC1B,UAAkB,EAClB,gBAAkC;IAElC,gCAAgC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnF,OAAO,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC7B,CAAC"}
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
import { npmRegistryUrl } from "./registry-auth-config.js";
|
|
2
|
+
function resolveConfiguredHost(registrySettings) {
|
|
3
|
+
return new URL(registrySettings.registryUrl ?? npmRegistryUrl).host;
|
|
4
|
+
}
|
|
5
|
+
function parseTarballHost(tarballUrl) {
|
|
6
|
+
try {
|
|
7
|
+
return new URL(tarballUrl).host;
|
|
8
|
+
}
|
|
9
|
+
catch {
|
|
10
|
+
throw new TypeError(`Registry returned an invalid tarball URL: "${tarballUrl}"`);
|
|
11
|
+
}
|
|
12
|
+
}
|
|
13
|
+
function buildMismatchMessage(tarballHost, configuredHost) {
|
|
14
|
+
return (`Refusing to download tarball from "${tarballHost}" because it differs from the configured registry host ` +
|
|
15
|
+
`"${configuredHost}". A tampered registry response could redirect the request and exfiltrate ` +
|
|
16
|
+
'publish credentials.');
|
|
17
|
+
}
|
|
18
|
+
export function assertTarballHostMatchesRegistry(tarballUrl, registrySettings) {
|
|
19
|
+
const tarballHost = parseTarballHost(tarballUrl);
|
|
20
|
+
const configuredHost = resolveConfiguredHost(registrySettings);
|
|
21
|
+
if (tarballHost !== configuredHost) {
|
|
22
|
+
throw new Error(buildMismatchMessage(tarballHost, configuredHost));
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
//# sourceMappingURL=validate-tarball-host.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"validate-tarball-host.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/validate-tarball-host.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,SAAS,qBAAqB,CAAC,gBAA4C;IACvE,OAAO,IAAI,GAAG,CAAC,gBAAgB,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IACxC,IAAI,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,SAAS,CAAC,8CAA8C,UAAU,GAAG,CAAC,CAAC;IACrF,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB,EAAE,cAAsB;IACrE,OAAO,CACH,sCAAsC,WAAW,yDAAyD;QAC1G,IAAI,cAAc,4EAA4E;QAC9F,sBAAsB,CACzB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC5C,UAAkB,EAClB,gBAA4C;IAE5C,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAE/D,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IACvE,CAAC;AACL,CAAC"}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { z } from 'zod/mini';
|
|
2
|
-
import { nonEmptyStringSchema } from "./base-validations.js";
|
|
2
|
+
import { bundleRelativePathSchema, nonEmptyStringSchema } from "./base-validations.js";
|
|
3
3
|
export const additionalFileDescriptionSchema = z.readonly(z.strictObject({
|
|
4
4
|
sourceFilePath: nonEmptyStringSchema,
|
|
5
|
-
targetFilePath:
|
|
5
|
+
targetFilePath: bundleRelativePathSchema
|
|
6
6
|
}));
|
|
7
7
|
//# sourceMappingURL=additional-files.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"additional-files.js","sourceRoot":"","sources":["../../../../source/config/additional-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"additional-files.js","sourceRoot":"","sources":["../../../../source/config/additional-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAEvF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,QAAQ,CACrD,CAAC,CAAC,YAAY,CAAC;IACX,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,wBAAwB;CAC3C,CAAC,CACL,CAAC"}
|
|
@@ -1,3 +1,12 @@
|
|
|
1
|
+
import path from 'node:path';
|
|
1
2
|
import { z } from 'zod/mini';
|
|
2
3
|
export const nonEmptyStringSchema = z.string().check(z.minLength(1));
|
|
4
|
+
function isBundleRelativePath(value) {
|
|
5
|
+
if (path.posix.isAbsolute(value) || path.win32.isAbsolute(value)) {
|
|
6
|
+
return false;
|
|
7
|
+
}
|
|
8
|
+
const segments = value.split(/[/\\]/u);
|
|
9
|
+
return !segments.includes('..');
|
|
10
|
+
}
|
|
11
|
+
export const bundleRelativePathSchema = z.string().check(z.minLength(1), z.refine(isBundleRelativePath));
|
|
3
12
|
//# sourceMappingURL=base-validations.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"base-validations.js","sourceRoot":"","sources":["../../../../source/config/base-validations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC"}
|
|
1
|
+
{"version":3,"file":"base-validations.js","sourceRoot":"","sources":["../../../../source/config/base-validations.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAErE,SAAS,oBAAoB,CAAC,KAAa;IACvC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"source-file-references.d.ts","sourceRoot":"","sources":["../../../../source/dependency-scanner/source-file-references.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"source-file-references.d.ts","sourceRoot":"","sources":["../../../../source/dependency-scanner/source-file-references.ts"],"names":[],"mappings":"AAGA,OAAO,EAKH,KAAK,UAAU,EACf,KAAK,aAAa,EACrB,MAAM,UAAU"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import path from 'node:path';
|
|
2
2
|
import { isBuiltin } from 'node:module';
|
|
3
|
-
import {
|
|
3
|
+
import { oneLine } from 'common-tags';
|
|
4
|
+
import { SyntaxKind, ts } from 'ts-morph';
|
|
4
5
|
import { findPackageOwnedAssetFilePath } from "./package-owned-asset-file-path.js";
|
|
5
6
|
export const moduleReferenceKind = {
|
|
6
7
|
externalPackage: 'external-package',
|
|
@@ -110,9 +111,43 @@ function resolveModuleReferenceForImport(importValue, containingSourceFile, pack
|
|
|
110
111
|
? resolveWasmReference(importValue, containingSourceFile, packageJsonPath)
|
|
111
112
|
: undefined;
|
|
112
113
|
}
|
|
114
|
+
function invalidImportMetaResolveUsage(sourceFile) {
|
|
115
|
+
return new Error(oneLine `Invalid import.meta.resolve() usage in file "${sourceFile.getFilePath()}":
|
|
116
|
+
only a single static string literal argument is supported`);
|
|
117
|
+
}
|
|
118
|
+
function isImportMetaResolveCallee(callee) {
|
|
119
|
+
const metaProperty = callee.getExpression().asKind(SyntaxKind.MetaProperty);
|
|
120
|
+
return metaProperty?.getKeywordToken() === SyntaxKind.ImportKeyword && callee.getNameNode().getText() === 'resolve';
|
|
121
|
+
}
|
|
122
|
+
function collectImportMetaResolveLiteral(callExpression, sourceFile) {
|
|
123
|
+
const callee = callExpression.getExpression().asKind(SyntaxKind.PropertyAccessExpression);
|
|
124
|
+
if (callee === undefined || !isImportMetaResolveCallee(callee)) {
|
|
125
|
+
return undefined;
|
|
126
|
+
}
|
|
127
|
+
const [first, second] = callExpression.getArguments();
|
|
128
|
+
if (first === undefined || second !== undefined) {
|
|
129
|
+
throw invalidImportMetaResolveUsage(sourceFile);
|
|
130
|
+
}
|
|
131
|
+
const literal = first.asKind(SyntaxKind.StringLiteral);
|
|
132
|
+
if (literal === undefined) {
|
|
133
|
+
throw invalidImportMetaResolveUsage(sourceFile);
|
|
134
|
+
}
|
|
135
|
+
return literal;
|
|
136
|
+
}
|
|
137
|
+
function getImportMetaResolveLiterals(sourceFile) {
|
|
138
|
+
const literals = [];
|
|
139
|
+
for (const callExpression of sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression)) {
|
|
140
|
+
const literal = collectImportMetaResolveLiteral(callExpression, sourceFile);
|
|
141
|
+
if (literal !== undefined) {
|
|
142
|
+
literals.push(literal);
|
|
143
|
+
}
|
|
144
|
+
}
|
|
145
|
+
return literals;
|
|
146
|
+
}
|
|
113
147
|
export function getReferencedModules(sourceFile, packageJsonPath) {
|
|
114
148
|
const referencedModules = [];
|
|
115
|
-
|
|
149
|
+
const allLiterals = [...sourceFile.getImportStringLiterals(), ...getImportMetaResolveLiterals(sourceFile)];
|
|
150
|
+
for (const literal of allLiterals) {
|
|
116
151
|
const importValue = literal.getLiteralValue();
|
|
117
152
|
const referencedModule = resolveModuleReferenceForImport(importValue, sourceFile, packageJsonPath);
|
|
118
153
|
if (referencedModule !== undefined) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"source-file-references.js","sourceRoot":"","sources":["../../../../source/dependency-scanner/source-file-references.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,EAAE,
|
|
1
|
+
{"version":3,"file":"source-file-references.js","sourceRoot":"","sources":["../../../../source/dependency-scanner/source-file-references.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACH,UAAU,EACV,EAAE,EAKL,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAC/B,eAAe,EAAE,kBAAkB;IACnC,iBAAiB,EAAE,oBAAoB;IACvC,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,YAAY;CACjB,CAAC;AA4BX,SAAS,gBAAgB;IACrB,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,2BAA2B;IAChC,OAAO,GAAG,IAAI,CAAC,GAAG,eAAe,IAAI,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,6BAA6B,CAAC,SAAiB;IACpD,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACtC,OAAO,SAAS,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,SAAiB;IAC/C,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,gCAAgC,CAAC,gBAAwB;IAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,UAAU,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,oCAAoC,CACzC,WAAmB,EACnB,gBAAwB,EACxB,oBAA0C;IAE1C,IAAI,oBAAoB,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,OAAO,gCAAgC,CAAC,gBAAgB,CAAC,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,wBAAwB,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,OAAO,CAAC;AAC1D,CAAC;AAED,SAAS,sBAAsB,CAAC,gBAAwB,EAAE,eAAuB;IAC7E,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,iBAAiB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAC5B,WAAmB,EACnB,oBAA0C;IAE1C,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC;IAClD,OAAO,EAAE,CAAC,iBAAiB,CACvB,WAAW,EACX,oBAAoB,CAAC,WAAW,EAAE,EAClC,OAAO,CAAC,kBAAkB,EAAE,EAC5B,OAAO,CAAC,uBAAuB,EAAE,CACpC,CAAC,cAAc,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACvC,OAAsB,EACtB,oBAA0C;IAE1C,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAEhG,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,cAAc,CAAC,gBAAgB,CAAC;QACzD,OAAO,OAAO,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,oBAAoB,CACzB,WAAmB,EACnB,oBAA0C,EAC1C,eAAuB;IAEvB,IAAI,6BAA6B,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,CAAC;QACzF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;QAClG,OAAO,oBAAoB,CAAC,UAAU,CAAC,aAAa,CAAC;YACjD,CAAC,CAAC,sBAAsB,CAAC,aAAa,EAAE,eAAe,CAAC;YACxD,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAED,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,CAAC;IACzF,MAAM,gBAAgB,GAAG,6BAA6B,CAClD,WAAW,EACX,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC,EAChD,CAAC,aAAa,EAAE,EAAE;QACd,OAAO,oBAAoB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC,CACJ,CAAC;IACF,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACH,IAAI,EAAE,mBAAmB,CAAC,eAAe;QACzC,WAAW,EAAE,wBAAwB,CAAC,WAAW,CAAC;KACrD,CAAC;AACN,CAAC;AAED,SAAS,+BAA+B,CACpC,WAAmB,EACnB,oBAA0C,EAC1C,eAAuB;IAEvB,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAClF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,6BAA6B,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/E,OAAO;gBACH,IAAI,EAAE,mBAAmB,CAAC,eAAe;gBACzC,WAAW,EAAE,oCAAoC,CAC7C,WAAW,EACX,cAAc,CAAC,gBAAgB,EAC/B,oBAAoB,CACvB;aACJ,CAAC;QACN,CAAC;QAED,OAAO,sBAAsB,CAAC,cAAc,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,oBAAoB,EAAE,eAAe,CAAC;QAC1E,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAgC;IACnE,OAAO,IAAI,KAAK,CACZ,OAAO,CAAA,gDAAgD,UAAU,CAAC,WAAW,EAAE;sEACjB,CACjE,CAAC;AACN,CAAC;AAED,SAAS,yBAAyB,CAAC,MAA0C;IACzE,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5E,OAAO,YAAY,EAAE,eAAe,EAAE,KAAK,UAAU,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,KAAK,SAAS,CAAC;AACxH,CAAC;AAED,SAAS,+BAA+B,CACpC,cAAwC,EACxC,UAAgC;IAEhC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC1F,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAgC;IAClE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,cAAc,IAAI,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACtF,MAAM,OAAO,GAAG,+BAA+B,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAChC,UAAgC,EAChC,eAAuB;IAEvB,MAAM,iBAAiB,GAAsB,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,CAAC,GAAG,UAAU,CAAC,uBAAuB,EAAE,EAAE,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC,CAAC;IAE3G,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,gBAAgB,GAAG,+BAA+B,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAEnG,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACjC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,cAAc,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACvG,CAAC;IACL,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC7B,CAAC"}
|
|
@@ -7,13 +7,36 @@ function githubActionsAudience() {
|
|
|
7
7
|
function defaultOidcIdTokenEnvVariableName() {
|
|
8
8
|
return 'NPM_ID_TOKEN';
|
|
9
9
|
}
|
|
10
|
+
const trustedOidcRequestSuffix = '.actions.githubusercontent.com';
|
|
11
|
+
function parseOidcRequestUrl(value) {
|
|
12
|
+
try {
|
|
13
|
+
return new URL(value);
|
|
14
|
+
}
|
|
15
|
+
catch {
|
|
16
|
+
throw new Error(`ACTIONS_ID_TOKEN_REQUEST_URL is not a valid URL: "${value}"`);
|
|
17
|
+
}
|
|
18
|
+
}
|
|
19
|
+
function buildOidcHostnameMismatchMessage(actualHostname) {
|
|
20
|
+
return (`ACTIONS_ID_TOKEN_REQUEST_URL hostname must end with "${trustedOidcRequestSuffix}", ` +
|
|
21
|
+
`got "${actualHostname}". A non-GitHub host would receive the GitHub-issued OIDC bearer.`);
|
|
22
|
+
}
|
|
23
|
+
function assertTrustedOidcRequestUrl(value) {
|
|
24
|
+
const parsed = parseOidcRequestUrl(value);
|
|
25
|
+
if (parsed.protocol !== 'https:') {
|
|
26
|
+
throw new Error(`ACTIONS_ID_TOKEN_REQUEST_URL must use https, got: "${value}"`);
|
|
27
|
+
}
|
|
28
|
+
if (!parsed.hostname.endsWith(trustedOidcRequestSuffix)) {
|
|
29
|
+
throw new Error(buildOidcHostnameMismatchMessage(parsed.hostname));
|
|
30
|
+
}
|
|
31
|
+
return parsed;
|
|
32
|
+
}
|
|
10
33
|
function getGitHubActionsRequestConfig(getEnvironmentVariable) {
|
|
11
34
|
const requestUrl = getEnvironmentVariable('ACTIONS_ID_TOKEN_REQUEST_URL');
|
|
12
35
|
const requestToken = getEnvironmentVariable('ACTIONS_ID_TOKEN_REQUEST_TOKEN');
|
|
13
36
|
if (requestUrl === undefined || requestToken === undefined) {
|
|
14
37
|
throw new Error('GitHub Actions OIDC requires ACTIONS_ID_TOKEN_REQUEST_URL and ACTIONS_ID_TOKEN_REQUEST_TOKEN');
|
|
15
38
|
}
|
|
16
|
-
return { requestUrl, requestToken };
|
|
39
|
+
return { requestUrl: assertTrustedOidcRequestUrl(requestUrl), requestToken };
|
|
17
40
|
}
|
|
18
41
|
function parseGitHubActionsIdTokenResponse(body) {
|
|
19
42
|
if (!isRecord(body)) {
|
|
@@ -34,9 +57,8 @@ export function createNpmOidcIdTokenResolver(dependencies) {
|
|
|
34
57
|
const { fetch: fetchImplementation, getEnvironmentVariable } = dependencies;
|
|
35
58
|
async function fetchGitHubActionsIdToken() {
|
|
36
59
|
const { requestUrl, requestToken } = getGitHubActionsRequestConfig(getEnvironmentVariable);
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
const response = await fetchImplementation(url, {
|
|
60
|
+
requestUrl.searchParams.set('audience', githubActionsAudience());
|
|
61
|
+
const response = await fetchImplementation(requestUrl, {
|
|
40
62
|
headers: { Authorization: `Bearer ${requestToken}` }
|
|
41
63
|
});
|
|
42
64
|
if (!response.ok) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"npm-oidc-id-token-resolver.js","sourceRoot":"","sources":["../../../source/npm-oidc-id-token-resolver.ts"],"names":[],"mappings":"AASA,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,qBAAqB;IAC1B,OAAO,wBAAwB,CAAC;AACpC,CAAC;AAED,SAAS,iCAAiC;IACtC,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,SAAS,6BAA6B,CAAC,sBAAoE;IAIvG,MAAM,UAAU,GAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,sBAAsB,CAAC,gCAAgC,CAAC,CAAC;IAE9E,IAAI,UAAU,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IACpH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"npm-oidc-id-token-resolver.js","sourceRoot":"","sources":["../../../source/npm-oidc-id-token-resolver.ts"],"names":[],"mappings":"AASA,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,qBAAqB;IAC1B,OAAO,wBAAwB,CAAC;AACpC,CAAC;AAED,SAAS,iCAAiC;IACtC,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAElE,SAAS,mBAAmB,CAAC,KAAa;IACtC,IAAI,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,GAAG,CAAC,CAAC;IACnF,CAAC;AACL,CAAC;AAED,SAAS,gCAAgC,CAAC,cAAsB;IAC5D,OAAO,CACH,wDAAwD,wBAAwB,KAAK;QACrF,QAAQ,cAAc,mEAAmE,CAC5F,CAAC;AACN,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,6BAA6B,CAAC,sBAAoE;IAIvG,MAAM,UAAU,GAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,sBAAsB,CAAC,gCAAgC,CAAC,CAAC;IAE9E,IAAI,UAAU,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IACpH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,2BAA2B,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,iCAAiC,CAAC,IAAa;IACpD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAC9B,IAAwB,EACxB,sBAAoE;IAEpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IACzC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;IAChF,OAAO,QAAQ,KAAK,gBAAgB,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,mBAAmB,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,4BAA4B,CACxC,YAA0D;IAE1D,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,GAAG,YAAY,CAAC;IAE5E,KAAK,UAAU,yBAAyB;QACpC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAAC;QAC3F,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE;YACnD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,EAAE,EAAE;SACvD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wDAAwD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,iCAAiC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,IAAI,yBAAyB,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC1D,OAAO,yBAAyB,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,iCAAiC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,YAAY,cAAc,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC"}
|
package/package.json
CHANGED
|
@@ -25,7 +25,7 @@
|
|
|
25
25
|
"true-myth": "9.4.0",
|
|
26
26
|
"ts-morph": "27.0.2",
|
|
27
27
|
"ts-pattern": "5.9.0",
|
|
28
|
-
"type-fest": "5.
|
|
28
|
+
"type-fest": "5.7.0",
|
|
29
29
|
"unix-permissions": "6.0.1",
|
|
30
30
|
"zod": "4.4.3"
|
|
31
31
|
},
|
|
@@ -116,5 +116,5 @@
|
|
|
116
116
|
"./tar/tarball-builder.js"
|
|
117
117
|
],
|
|
118
118
|
"type": "module",
|
|
119
|
-
"version": "0.0.
|
|
119
|
+
"version": "0.0.31"
|
|
120
120
|
}
|
package/sbom.cdx.json
CHANGED
|
@@ -9,16 +9,16 @@
|
|
|
9
9
|
{
|
|
10
10
|
"type": "application",
|
|
11
11
|
"name": "packtory",
|
|
12
|
-
"version": "0.0.
|
|
12
|
+
"version": "0.0.30"
|
|
13
13
|
}
|
|
14
14
|
]
|
|
15
15
|
},
|
|
16
16
|
"component": {
|
|
17
17
|
"type": "library",
|
|
18
18
|
"name": "packtory",
|
|
19
|
-
"version": "0.0.
|
|
20
|
-
"bom-ref": "pkg:npm/packtory@0.0.
|
|
21
|
-
"purl": "pkg:npm/packtory@0.0.
|
|
19
|
+
"version": "0.0.31",
|
|
20
|
+
"bom-ref": "pkg:npm/packtory@0.0.31",
|
|
21
|
+
"purl": "pkg:npm/packtory@0.0.31"
|
|
22
22
|
}
|
|
23
23
|
},
|
|
24
24
|
"components": [
|
|
@@ -298,15 +298,15 @@
|
|
|
298
298
|
{
|
|
299
299
|
"type": "library",
|
|
300
300
|
"name": "type-fest",
|
|
301
|
-
"version": "5.
|
|
302
|
-
"bom-ref": "pkg:npm/type-fest@5.
|
|
301
|
+
"version": "5.7.0",
|
|
302
|
+
"bom-ref": "pkg:npm/type-fest@5.7.0",
|
|
303
303
|
"scope": "required",
|
|
304
304
|
"licenses": [
|
|
305
305
|
{
|
|
306
306
|
"expression": "(MIT OR CC0-1.0)"
|
|
307
307
|
}
|
|
308
308
|
],
|
|
309
|
-
"purl": "pkg:npm/type-fest@5.
|
|
309
|
+
"purl": "pkg:npm/type-fest@5.7.0"
|
|
310
310
|
},
|
|
311
311
|
{
|
|
312
312
|
"type": "library",
|
|
@@ -379,7 +379,7 @@
|
|
|
379
379
|
"ref": "pkg:npm/npm-registry-fetch@20.0.0"
|
|
380
380
|
},
|
|
381
381
|
{
|
|
382
|
-
"ref": "pkg:npm/packtory@0.0.
|
|
382
|
+
"ref": "pkg:npm/packtory@0.0.31",
|
|
383
383
|
"dependsOn": [
|
|
384
384
|
"pkg:npm/@arethetypeswrong/core@0.18.3",
|
|
385
385
|
"pkg:npm/@cyclonedx/cyclonedx-library@10.0.0",
|
|
@@ -402,7 +402,7 @@
|
|
|
402
402
|
"pkg:npm/true-myth@9.4.0",
|
|
403
403
|
"pkg:npm/ts-morph@27.0.2",
|
|
404
404
|
"pkg:npm/ts-pattern@5.9.0",
|
|
405
|
-
"pkg:npm/type-fest@5.
|
|
405
|
+
"pkg:npm/type-fest@5.7.0",
|
|
406
406
|
"pkg:npm/unix-permissions@6.0.1",
|
|
407
407
|
"pkg:npm/zod@4.4.3"
|
|
408
408
|
]
|
|
@@ -429,7 +429,7 @@
|
|
|
429
429
|
"ref": "pkg:npm/ts-pattern@5.9.0"
|
|
430
430
|
},
|
|
431
431
|
{
|
|
432
|
-
"ref": "pkg:npm/type-fest@5.
|
|
432
|
+
"ref": "pkg:npm/type-fest@5.7.0"
|
|
433
433
|
},
|
|
434
434
|
{
|
|
435
435
|
"ref": "pkg:npm/unix-permissions@6.0.1"
|