snyk-cpp-plugin 2.16.6 → 2.17.1

package/dist/display/index.js

@@ -42,7 +42,7 @@ async function display(scanResults, testResults, errors, options) {
         error_1.exitWith(error_1.ExitCode.VulnerabilitiesFound, output, testResults);
     }
     if (!hasDependencies) {
-        error_1.exitWith(error_1.ExitCode.NoSupportedFiles, `${output}\nCould not detect supported target files in ${options === null || options === void 0 ? void 0 : options.path}`);
+        error_1.exitWith(error_1.ExitCode.NoSupportedFiles, `${output}\nCould not detect supported target files in ${options === null || options === void 0 ? void 0 : options.path}\nPlease see our documentation for supported languages and target files: ${chalk.underline('https://snyk.co/udVgQ')} and make sure you are in the right directory.`);
     }
     return output;
 }

package/dist/display/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/display/index.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAC/B,oCAAiC;AACjC,+CAAiD;AAEjD,uCAImB;AACnB,0CAAoD;AAE7C,KAAK,UAAU,OAAO,CAC3B,WAAyB,EACzB,WAAyB,EACzB,MAAgB,EAChB,OAAiB;IAEjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;QACrB,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,uBAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KAC5D;IAED,IAAI,MAAM,GAAa,EAAE,CAAC;IAE1B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,IAAI;QACF,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SAChC;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,EAAE;YAClB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;SACxD;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YACpC,MAAM,QAAQ,GAAG,0BAAc,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,+BAAqB,CAClD,OAAO,EACP,QAAQ,EACR,UAAU,CACX,CAAC;YAEF,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC3C,eAAe,GAAG,IAAI,CAAC;aACxB;YAED,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;gBAChC,kBAAkB,GAAG,IAAI,CAAC;aAC3B;YAED,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;SAC9C;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,iCAAiC,KAAK,EAAE,CAAC,CAAC;QACjE,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;KACvD;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,kBAAkB,EAAE;QACtB,gBAAQ,CAAC,gBAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;KAC9D;IAED,IAAI,CAAC,eAAe,EAAE;QACpB,gBAAQ,CACN,gBAAQ,CAAC,gBAAgB,EACzB,GAAG,MAAM,gDAAgD,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE,CACzE,CAAC;KACH;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AA9DD,0BA8DC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/display/index.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAC/B,oCAAiC;AACjC,+CAAiD;AAEjD,uCAImB;AACnB,0CAAoD;AAE7C,KAAK,UAAU,OAAO,CAC3B,WAAyB,EACzB,WAAyB,EACzB,MAAgB,EAChB,OAAiB;IAEjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;QACrB,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,uBAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KAC5D;IAED,IAAI,MAAM,GAAa,EAAE,CAAC;IAE1B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,IAAI;QACF,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SAChC;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,EAAE;YAClB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;SACxD;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YACpC,MAAM,QAAQ,GAAG,0BAAc,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,+BAAqB,CAClD,OAAO,EACP,QAAQ,EACR,UAAU,CACX,CAAC;YAEF,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC3C,eAAe,GAAG,IAAI,CAAC;aACxB;YAED,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;gBAChC,kBAAkB,GAAG,IAAI,CAAC;aAC3B;YAED,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;SAC9C;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,iCAAiC,KAAK,EAAE,CAAC,CAAC;QACjE,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;KACvD;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,kBAAkB,EAAE;QACtB,gBAAQ,CAAC,gBAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;KAC9D;IAED,IAAI,CAAC,eAAe,EAAE;QACpB,gBAAQ,CACN,gBAAQ,CAAC,gBAAgB,EACzB,GAAG,MAAM,gDACP,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IACX,4EAA4E,KAAK,CAAC,SAAS,CACzF,uBAAuB,CACxB,gDAAgD,CAClD,CAAC;KACH;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAlED,0BAkEC"}

package/dist/find.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="node" />
 import { promises } from 'fs';
-import { FilePath } from './types';
+import { FilePath, Path } from './types';
+import { Glob } from './utils/dotsnyk/types';
 export declare const readdir: typeof promises.readdir, lstat: typeof promises.lstat;
-export declare function find(src: string): Promise<[FilePath[], FilePath[]]>;
+export declare function find(src: Path, excludePatterns?: readonly Glob[]): Promise<[FilePath[], FilePath[]]>;

package/dist/find.js

@@ -6,11 +6,12 @@ const path_1 = require("path");
 const common_1 = require("./common");
 const debug_1 = require("./debug");
 const extract_1 = require("./extract");
+const minimatch = require("minimatch");
 exports.readdir = fs_1.promises.readdir, exports.lstat = fs_1.promises.lstat;
-async function find(src) {
+async function find(src, excludePatterns = []) {
     const fileResults = [];
     const archiveResults = [];
-    await traverse(src, async (path, stats) => {
+    const handler = async (path, stats) => {
         if (!common_1.isSupportedSize(stats.size)) {
             return;
         }
@@ -19,12 +20,20 @@ async function find(src) {
             return;
         }
         fileResults.push(path);
-    });
+    };
+    const isExcluded = (path) => {
+        path = common_1.isWindowsOS() ? path.split(path_1.sep).join(path_1.posix.sep) : path;
+        return !!excludePatterns.find((pattern) => minimatch(path, pattern));
+    };
+    await traverse(src, handler, isExcluded);
     return [fileResults, archiveResults];
 }
 exports.find = find;
-async function traverse(src, handle) {
+async function traverse(src, handle, isExcluded) {
     try {
+        if (isExcluded(src)) {
+            return;
+        }
         const stats = await exports.lstat(src);
         if (stats.isSymbolicLink()) {
             return;
@@ -37,7 +46,7 @@ async function traverse(src, handle) {
             const entries = await exports.readdir(src);
             for (const entry of entries) {
                 const absolute = path_1.join(src, entry);
-                await traverse(absolute, handle);
+                await traverse(absolute, handle, isExcluded);
             }
         }
     }

package/dist/find.js.map

@@ -1 +1 @@
-{"version":3,"file":"find.js","sourceRoot":"","sources":["../lib/find.ts"],"names":[],"mappings":";;;AAAA,2BAAqC;AACrC,+BAA4B;AAC5B,qCAA2C;AAC3C,mCAAgC;AAEhC,uCAAsC;AAEvB,eAAO,GAAY,aAAQ,UAAlB,aAAK,GAAK,aAAQ,OAAC;AAMpC,KAAK,UAAU,IAAI,CAAC,GAAW;IACpC,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,MAAM,cAAc,GAAe,EAAE,CAAC;IAEtC,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,IAAc,EAAE,KAAY,EAAE,EAAE;QACzD,IAAI,CAAC,wBAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YAChC,OAAO;SACR;QAED,IAAI,mBAAS,CAAC,IAAI,CAAC,EAAE;YACnB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO;SACR;QAED,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AACvC,CAAC;AAlBD,oBAkBC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAmB;IACtD,IAAI;QACF,MAAM,KAAK,GAAG,MAAM,aAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE;YAC1B,OAAO;SACR;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO;SACR;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,eAAO,CAAC,GAAG,CAAC,CAAC;YAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;gBAC3B,MAAM,QAAQ,GAAG,WAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAElC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;aAClC;SACF;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,sBAAsB,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;KAC/D;AACH,CAAC"}
+{"version":3,"file":"find.js","sourceRoot":"","sources":["../lib/find.ts"],"names":[],"mappings":";;;AAAA,2BAAqC;AACrC,+BAAwC;AACxC,qCAAwD;AACxD,mCAAgC;AAEhC,uCAAsC;AACtC,uCAAuC;AAGxB,eAAO,GAAY,aAAQ,UAAlB,aAAK,GAAK,aAAQ,OAAC;AAMpC,KAAK,UAAU,IAAI,CACxB,GAAS,EACT,kBAAmC,EAAE;IAErC,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,MAAM,cAAc,GAAe,EAAE,CAAC;IAEtC,MAAM,OAAO,GAAG,KAAK,EAAE,IAAc,EAAE,KAAY,EAAE,EAAE;QACrD,IAAI,CAAC,wBAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YAChC,OAAO;SACR;QAED,IAAI,mBAAS,CAAC,IAAI,CAAC,EAAE;YACnB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO;SACR;QAED,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAoB,CAAC,IAAI,EAAE,EAAE;QAC3C,IAAI,GAAG,oBAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAG,CAAC,CAAC,IAAI,CAAC,YAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAEzC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AACvC,CAAC;AA5BD,oBA4BC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAS,EACT,MAAmB,EACnB,UAA2B;IAE3B,IAAI;QACF,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE;YACnB,OAAO;SACR;QAED,MAAM,KAAK,GAAG,MAAM,aAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE;YAC1B,OAAO;SACR;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO;SACR;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,eAAO,CAAC,GAAG,CAAC,CAAC;YAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;gBAC3B,MAAM,QAAQ,GAAG,WAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAElC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;aAC9C;SACF;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,sBAAsB,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;KAC/D;AACH,CAAC"}

package/dist/scan.d.ts

@@ -1,2 +1,5 @@
-import { Options, PluginResponse } from './types';
+import { Options, Path, PluginResponse, SignatureResult } from './types';
+import { Glob } from './utils/dotsnyk/types';
+export declare function toRelativePaths(basedir: Path, signatures: readonly SignatureResult[], extractionWorkspace?: Path): void;
 export declare function scan(options: Options): Promise<PluginResponse>;
+export declare function getExcludedPatterns(projectRoot: Path, policyFilePath?: string): Glob[];

package/dist/scan.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.scan = void 0;
+exports.getExcludedPatterns = exports.scan = exports.toRelativePaths = void 0;
 const fs = require("fs");
 const path = require("path");
 const path_1 = require("path");
@@ -12,6 +12,17 @@ const git_1 = require("./git");
 const extract_1 = require("./extract");
 const fs_1 = require("./utils/fs");
 const common_1 = require("./common");
+const dotSnyk = require("./utils/dotsnyk");
+const invariants_1 = require("./utils/dotsnyk/invariants");
+function toRelativePaths(basedir, signatures, extractionWorkspace) {
+    signatures.forEach((s) => {
+        const src = extractionWorkspace && s.path.includes(extractionWorkspace)
+            ? extractionWorkspace
+            : basedir;
+        s.path = path.relative(src, s.path);
+    });
+}
+exports.toRelativePaths = toRelativePaths;
 async function scan(options) {
     try {
         debug_1.debug.enabled = !!(options === null || options === void 0 ? void 0 : options.debug);
@@ -27,13 +38,15 @@ async function scan(options) {
             throw `'${options.path}' does not exist.`;
         }
         const start = Date.now();
-        const [filePaths, archivePaths] = await find_1.find(options.path);
-        let extractionWorkspace = null;
+        const projectRoot = options.path;
+        const excludedPatterns = getExcludedPatterns(projectRoot, options['policy-path']);
+        const [filePaths, archivePaths] = await find_1.find(projectRoot, excludedPatterns);
+        let extractionWorkspace = undefined;
         if (0 < extractionDepthLimit && 0 < archivePaths.length) {
             const temporaryDir = await fs_1.createTemporaryDir();
             extractionWorkspace = path_1.join(temporaryDir, common_1.DECOMPRESSING_WORKSPACE_DIR);
             await extract_1.extract(archivePaths, temporaryDir, extractionDepthLimit);
-            const [newFilePaths, newArchivePaths] = await find_1.find(extractionWorkspace);
+            const [newFilePaths, newArchivePaths] = await find_1.find(extractionWorkspace, excludedPatterns);
             filePaths.push(...newFilePaths, ...newArchivePaths);
         }
         else {
@@ -41,12 +54,7 @@ async function scan(options) {
         }
         debug_1.debug('%d files found \n', filePaths.length);
         const signatures = await signatures_1.computeSignaturesConcurrently(filePaths);
-        signatures.forEach((s) => {
-            const src = extractionWorkspace && s.path.includes(extractionWorkspace)
-                ? extractionWorkspace
-                : options.path;
-            s.path = path.relative(src, s.path);
-        });
+        toRelativePaths(projectRoot, signatures, extractionWorkspace);
         const end = Date.now();
         const totalMilliseconds = end - start;
         const totalFileSignatures = signatures.length;
@@ -66,7 +74,7 @@ async function scan(options) {
         const target = await git_1.getTarget();
         debug_1.debug('target %o \n', target);
         const gitInfo = hosted_git_info_1.fromUrl(target.remoteUrl);
-        const name = options.projectName || (gitInfo === null || gitInfo === void 0 ? void 0 : gitInfo.project) || path.basename(options.path);
+        const name = options.projectName || (gitInfo === null || gitInfo === void 0 ? void 0 : gitInfo.project) || path.basename(projectRoot);
         debug_1.debug('name %o \n', name);
         const scanResults = [
             {
@@ -88,4 +96,16 @@ async function scan(options) {
     }
 }
 exports.scan = scan;
+function getExcludedPatterns(projectRoot, policyFilePath = path_1.join(projectRoot, invariants_1.DEFAULT_SNYK_POLICY_FILE)) {
+    var _a;
+    if (!dotSnyk.exists(policyFilePath)) {
+        return [];
+    }
+    const config = dotSnyk.parse(policyFilePath);
+    return [
+        policyFilePath,
+        ...dotSnyk.toAbsolutePaths(projectRoot, (_a = config === null || config === void 0 ? void 0 : config.exclude) === null || _a === void 0 ? void 0 : _a.unmanaged),
+    ];
+}
+exports.getExcludedPatterns = getExcludedPatterns;
 //# sourceMappingURL=scan.js.map

package/dist/scan.js.map

@@ -1 +1 @@
-{"version":3,"file":"scan.js","sourceRoot":"","sources":["../lib/scan.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAC7B,+BAA4B;AAW5B,mCAAgC;AAChC,iCAA8B;AAC9B,qDAA0C;AAC1C,6CAA6D;AAC7D,+BAAkC;AAClC,uCAAoC;AACpC,mCAAgD;AAChD,qCAAuD;AAEhD,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,IAAI;QACF,aAAK,CAAC,OAAO,GAAG,CAAC,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAA,CAAC;QACjC,aAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,oBAAoB,GAAG,CAAC,EAAE;YAC5B,MAAM,oEAAoE,CAAC;SAC5E;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACjB,MAAM,oCAAoC,CAAC;SAC5C;QAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAChC,MAAM,IAAI,OAAO,CAAC,IAAI,mBAAmB,CAAC;SAC3C;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,mBAAmB,GAAoB,IAAI,CAAC;QAEhD,IAAI,CAAC,GAAG,oBAAoB,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE;YACvD,MAAM,YAAY,GAAG,MAAM,uBAAkB,EAAE,CAAC;YAChD,mBAAmB,GAAG,WAAI,CAAC,YAAY,EAAE,oCAA2B,CAAC,CAAC;YAEtE,MAAM,iBAAO,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;YAChE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,MAAM,WAAI,CAAC,mBAAmB,CAAC,CAAC;YAExE,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,CAAC,CAAC;SACrD;aAAM;YACL,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;SACjC;QAED,aAAK,CAAC,mBAAmB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAsB,MAAM,0CAA6B,CACvE,SAAS,CACV,CAAC;QAEF,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACvB,MAAM,GAAG,GACP,mBAAmB,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBACzD,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YAEnB,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,iBAAiB,GAAG,GAAG,GAAG,KAAK,CAAC;QACtC,MAAM,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9C,MAAM,2CAA2C,GAAG,IAAI,CAAC,KAAK,CAC5D,iBAAiB,GAAG,IAAI,CACzB,CAAC;QAEF,aAAK,CAAC,yBAAyB,mBAAmB,KAAK,CAAC,CAAC;QACzD,aAAK,CACH,uDAAuD,2CAA2C,MAAM,CACzG,CAAC;QAEF,MAAM,KAAK,GAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtE,MAAM,SAAS,GAAgB;YAC7B;gBACE,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE;oBACJ,mBAAmB;oBACnB,2CAA2C;iBAC5C;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAS,EAAE,CAAC;QACjC,aAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,yBAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,aAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAiB;YAChC;gBACE,KAAK;gBACL,QAAQ,EAAE;oBACR,IAAI,EAAE,KAAK;iBACZ;gBACD,IAAI;gBACJ,MAAM;gBACN,SAAS;aACV;SACF,CAAC;QAEF,OAAO;YACL,WAAW;SACZ,CAAC;KACH;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;KAC3D;AACH,CAAC;AAnGD,oBAmGC"}
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../lib/scan.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAC7B,+BAA4B;AAY5B,mCAAgC;AAChC,iCAA8B;AAC9B,qDAA0C;AAC1C,6CAA6D;AAC7D,+BAAkC;AAClC,uCAAoC;AACpC,mCAAgD;AAChD,qCAAuD;AACvD,2CAA2C;AAE3C,2DAAsE;AAEtE,SAAgB,eAAe,CAC7B,OAAa,EACb,UAAsC,EACtC,mBAA0B;IAE1B,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,GAAG,GACP,mBAAmB,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACzD,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC;QAEd,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAbD,0CAaC;AAEM,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,IAAI;QACF,aAAK,CAAC,OAAO,GAAG,CAAC,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAA,CAAC;QACjC,aAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,oBAAoB,GAAG,CAAC,EAAE;YAC5B,MAAM,oEAAoE,CAAC;SAC5E;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACjB,MAAM,oCAAoC,CAAC;SAC5C;QAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAChC,MAAM,IAAI,OAAO,CAAC,IAAI,mBAAmB,CAAC;SAC3C;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,WAAW,GAAS,OAAO,CAAC,IAAI,CAAC;QAEvC,MAAM,gBAAgB,GAAW,mBAAmB,CAClD,WAAW,EACX,OAAO,CAAC,aAAa,CAAC,CACvB,CAAC;QACF,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,WAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAE5E,IAAI,mBAAmB,GAAyB,SAAS,CAAC;QAE1D,IAAI,CAAC,GAAG,oBAAoB,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE;YACvD,MAAM,YAAY,GAAG,MAAM,uBAAkB,EAAE,CAAC;YAChD,mBAAmB,GAAG,WAAI,CAAC,YAAY,EAAE,oCAA2B,CAAC,CAAC;YAEtE,MAAM,iBAAO,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;YAChE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,MAAM,WAAI,CAChD,mBAAmB,EACnB,gBAAgB,CACjB,CAAC;YAEF,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,CAAC,CAAC;SACrD;aAAM;YACL,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;SACjC;QAED,aAAK,CAAC,mBAAmB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAsB,MAAM,0CAA6B,CACvE,SAAS,CACV,CAAC;QAEF,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAE9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,iBAAiB,GAAG,GAAG,GAAG,KAAK,CAAC;QACtC,MAAM,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9C,MAAM,2CAA2C,GAAG,IAAI,CAAC,KAAK,CAC5D,iBAAiB,GAAG,IAAI,CACzB,CAAC;QAEF,aAAK,CAAC,yBAAyB,mBAAmB,KAAK,CAAC,CAAC;QACzD,aAAK,CACH,uDAAuD,2CAA2C,MAAM,CACzG,CAAC;QAEF,MAAM,KAAK,GAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtE,MAAM,SAAS,GAAgB;YAC7B;gBACE,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE;oBACJ,mBAAmB;oBACnB,2CAA2C;iBAC5C;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAS,EAAE,CAAC;QACjC,aAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,yBAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxE,aAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAiB;YAChC;gBACE,KAAK;gBACL,QAAQ,EAAE;oBACR,IAAI,EAAE,KAAK;iBACZ;gBACD,IAAI;gBACJ,MAAM;gBACN,SAAS;aACV;SACF,CAAC;QAEF,OAAO;YACL,WAAW;SACZ,CAAC;KACH;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;KAC3D;AACH,CAAC;AAtGD,oBAsGC;AAED,SAAgB,mBAAmB,CACjC,WAAiB,EACjB,iBAAyB,WAAI,CAAC,WAAW,EAAE,qCAAwB,CAAC;;IAEpE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;QACnC,OAAO,EAAE,CAAC;KACX;IAED,MAAM,MAAM,GAAkB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE5D,OAAO;QACL,cAAc;QACd,GAAG,OAAO,CAAC,eAAe,CAAC,WAAW,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,0CAAE,SAAS,CAAC;KACpE,CAAC;AACJ,CAAC;AAdD,kDAcC"}

package/dist/types.d.ts

@@ -44,6 +44,7 @@ export interface Options {
     'print-deps'?: boolean;
     'print-dep-paths'?: boolean;
     'max-depth'?: number;
+    'policy-path'?: string;
 }
 export interface Issue {
     pkgName: string;
@@ -83,4 +84,8 @@ export interface FullFileHash {
     data: string;
 }
 export declare type FileContent = Buffer;
-export declare type FilePath = string;
+export declare type Path = string;
+export declare type FilePath = Path;
+export interface Predicate<T> {
+    (_: T): boolean;
+}

package/dist/utils/dotsnyk/index.d.ts

@@ -0,0 +1,21 @@
+import { Config } from './types';
+import { Path } from '../../types';
+/**
+ * Checks if the snyk policy file exists in the provided path
+ * @param {string} policyPath - the path of the policy file.
+ * @returns {[boolean, Object]} - snyk policy file is present or not and the error in case of failure
+ */
+export declare function exists(policyPath: string): boolean;
+/**
+ * Parses the snyk policy file content
+ * @param {string} policyPath - the path of the policy file.
+ * @returns {Object} - the content of the policy file
+ */
+export declare function parse(policyPath: string): Config;
+/**
+ * Resolves an array of paths relative to the basedir
+ * @param {string} basedir - the basedir used for resolving the paths
+ * @param {Array} paths - the paths to be resolved
+ * @returns {Array} - the resolved paths
+ */
+export declare function toAbsolutePaths(basedir: string, paths?: readonly string[]): Path[];

package/dist/utils/dotsnyk/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toAbsolutePaths = exports.parse = exports.exists = void 0;
+const fs_1 = require("fs");
+const yaml_1 = require("yaml");
+const path_1 = require("path");
+/**
+ * Checks if the snyk policy file exists in the provided path
+ * @param {string} policyPath - the path of the policy file.
+ * @returns {[boolean, Object]} - snyk policy file is present or not and the error in case of failure
+ */
+function exists(policyPath) {
+    return fs_1.existsSync(policyPath);
+}
+exports.exists = exists;
+/**
+ * Parses the snyk policy file content
+ * @param {string} policyPath - the path of the policy file.
+ * @returns {Object} - the content of the policy file
+ */
+function parse(policyPath) {
+    return yaml_1.parse(fs_1.readFileSync(policyPath, 'utf-8'));
+}
+exports.parse = parse;
+/**
+ * Resolves an array of paths relative to the basedir
+ * @param {string} basedir - the basedir used for resolving the paths
+ * @param {Array} paths - the paths to be resolved
+ * @returns {Array} - the resolved paths
+ */
+function toAbsolutePaths(basedir, paths = []) {
+    return paths.map((p) => path_1.resolve(basedir, p));
+}
+exports.toAbsolutePaths = toAbsolutePaths;
+//# sourceMappingURL=index.js.map

package/dist/utils/dotsnyk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/utils/dotsnyk/index.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAC9C,+BAA0C;AAG1C,+BAA+B;AAE/B;;;;GAIG;AACH,SAAgB,MAAM,CAAC,UAAkB;IACvC,OAAO,eAAU,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAFD,wBAEC;AAED;;;;GAIG;AACH,SAAgB,KAAK,CAAC,UAAkB;IACtC,OAAO,YAAS,CAAC,iBAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC;AAFD,sBAEC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAC7B,OAAe,EACf,QAA2B,EAAE;IAE7B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AALD,0CAKC"}

package/dist/utils/dotsnyk/invariants.d.ts

@@ -0,0 +1 @@
+export declare const DEFAULT_SNYK_POLICY_FILE = ".snyk";

package/dist/utils/dotsnyk/invariants.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SNYK_POLICY_FILE = void 0;
+exports.DEFAULT_SNYK_POLICY_FILE = '.snyk';
+//# sourceMappingURL=invariants.js.map

package/dist/utils/dotsnyk/invariants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariants.js","sourceRoot":"","sources":["../../../lib/utils/dotsnyk/invariants.ts"],"names":[],"mappings":";;;AAAa,QAAA,wBAAwB,GAAG,OAAO,CAAC"}

package/dist/utils/dotsnyk/types.d.ts

@@ -0,0 +1,6 @@
+export declare type Glob = string;
+export declare type Config = {
+    exclude?: {
+        unmanaged?: Glob[];
+    };
+};

package/dist/utils/dotsnyk/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/utils/dotsnyk/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../lib/utils/dotsnyk/types.ts"],"names":[],"mappings":""}

package/dist/utils/error.js

@@ -10,6 +10,7 @@ var ExitCode;
 function exitWith(exitCode, message, testResults = []) {
     const err = new Error();
     err.message = message;
+    err.userMessage = message;
     err.code = exitCode.valueOf();
     if (0 < testResults.length) {
         const jsonData = testResults.length === 1 ? testResults[0] : testResults;

package/dist/utils/error.js.map

@@ -1 +1 @@
-{"version":3,"file":"error.js","sourceRoot":"","sources":["../../lib/utils/error.ts"],"names":[],"mappings":";;;AAEA,IAAY,QAIX;AAJD,WAAY,QAAQ;IAClB,0CAA8B,CAAA;IAC9B,yCAAS,CAAA;IACT,+DAAoB,CAAA;AACtB,CAAC,EAJW,QAAQ,GAAR,gBAAQ,KAAR,gBAAQ,QAInB;AAED,SAAgB,QAAQ,CACtB,QAAkB,EAClB,OAAe,EACf,cAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,KAAK,EAAS,CAAC;IAC/B,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACzE,GAAG,CAAC,sBAAsB,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;KACvD;IAED,MAAM,GAAG,CAAC;AACZ,CAAC;AAfD,4BAeC"}
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../lib/utils/error.ts"],"names":[],"mappings":";;;AAEA,IAAY,QAIX;AAJD,WAAY,QAAQ;IAClB,0CAA8B,CAAA;IAC9B,yCAAS,CAAA;IACT,+DAAoB,CAAA;AACtB,CAAC,EAJW,QAAQ,GAAR,gBAAQ,KAAR,gBAAQ,QAInB;AAED,SAAgB,QAAQ,CACtB,QAAkB,EAClB,OAAe,EACf,cAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,KAAK,EAAS,CAAC;IAC/B,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;IAC1B,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACzE,GAAG,CAAC,sBAAsB,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;KACvD;IAED,MAAM,GAAG,CAAC;AACZ,CAAC;AAhBD,4BAgBC"}

package/package.json

@@ -30,6 +30,7 @@
   },
   "dependencies": {
     "@snyk/dep-graph": "^1.19.3",
+    "@types/minimatch": "^3.0.5",
     "@types/uuid": "^8.3.4",
     "adm-zip": "^0.5.9",
     "chalk": "^4.1.0",
@@ -38,7 +39,7 @@
     "p-map": "^4.0.0",
     "tar": "^6.1.11",
     "tslib": "^2.0.0",
-    "uuid": "^8.3.2"
+    "yaml": "^1.10.2"
   },
   "devDependencies": {
     "@types/debug": "^4.1.5",
@@ -57,5 +58,5 @@
     "tsc-watch": "^4.2.9",
     "typescript": "^3.9.7"
   },
-  "version": "2.16.6"
+  "version": "2.17.1"
 }