snyk 1.1063.0 → 1.1065.0

package/dist/cli/263.index.js

@@ -17342,7 +17342,7 @@ function getAllDeps(lockfilePath) {
             throw new Error(`Error while parsing ${LOCKFILE_NAME}:\n${error.message}`);
         }
         const graph = parser.toDepGraph();
-        return legacy_1.graphToDepTree(graph, "cocoapods");
+        return (0, legacy_1.graphToDepTree)(graph, "cocoapods");
     });
 }
 function cocoapodsVersion(root) {
@@ -17387,11 +17387,13 @@ exports.OutOfSyncError = OutOfSyncError;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.execute = void 0;
 const childProcess = __webpack_require__(63129);
+const shescape_1 = __webpack_require__(79114);
 function execute(command, args = [], options) {
     const spawnOptions = { shell: true };
     if (options && options.cwd) {
         spawnOptions.cwd = options.cwd;
     }
+    args = (0, shescape_1.quoteAll)(args, spawnOptions);
     return new Promise((resolve, reject) => {
         let stdout = '';
         let stderr = '';
@@ -19227,6 +19229,7 @@ exports.init = init;
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.inspect = exports.scan = void 0;
 var scan_1 = __webpack_require__(3113);
 Object.defineProperty(exports, "scan", ({ enumerable: true, get: function () { return scan_1.scan; } }));
 var inspect_1 = __webpack_require__(12442);
@@ -19248,7 +19251,7 @@ const PLUGIN_NAME = 'snyk-hex-plugin';
 async function inspect(root, targetFile, options = {}) {
     const { debug, dev, allProjects, 'project-name': projectName } = options;
     const [scanResult, pluginVersion] = await Promise.all([
-        scan_1.scan({ debug, dev, allProjects, projectName, path: root, targetFile }),
+        (0, scan_1.scan)({ debug, dev, allProjects, projectName, path: root, targetFile }),
         getPluginVersion(),
     ]);
     const scannedProjects = scanResult.scanResults.map(({ identity, facts: [{ data: depGraph }], name }) => ({
@@ -19291,14 +19294,14 @@ const debug_1 = __webpack_require__(39410);
 const copy_elixir_code_to_temp_dir_1 = __webpack_require__(88395);
 const MANIFEST_FILE_NAME = 'mix.exs';
 async function scan(options) {
-    debug_1.init(options.debug);
+    (0, debug_1.init)(options.debug);
     const targetFile = path.parse(path.resolve(options.path, options.targetFile || MANIFEST_FILE_NAME));
     if (targetFile.base !== MANIFEST_FILE_NAME) {
         throw new Error("target file must be 'mix.exs'.");
     }
     await verifyMixInstalled();
     const mixResult = await getMixResult(targetFile.dir);
-    const depGraphMap = mix_parser_1.buildDepGraphs(mixResult, !!options.dev, true, options.allProjects);
+    const depGraphMap = (0, mix_parser_1.buildDepGraphs)(mixResult, !!options.dev, true, options.allProjects);
     const scanResults = Object.entries(depGraphMap).map(([name, depGraph], index) => {
         const isRoot = index === 0;
         const relativePathToManifest = getRelativePathToManifest(options, targetFile, isRoot, name);
@@ -19324,28 +19327,28 @@ exports.scan = scan;
 async function verifyMixInstalled() {
     try {
         const mixVersion = await subProcess.execute('mix', ['-v']);
-        debug_1.debug(`mix version: `, mixVersion);
+        (0, debug_1.debug)(`mix version: `, mixVersion);
     }
     catch (_a) {
         throw new Error('mix is not installed. please make sure Elixir is installed and try again.');
     }
 }
 async function getMixResult(root) {
-    const elixirTmpDir = copy_elixir_code_to_temp_dir_1.copyElixirCodeToTempDir();
+    const elixirTmpDir = (0, copy_elixir_code_to_temp_dir_1.copyElixirCodeToTempDir)();
     const cwd = elixirTmpDir.name;
     let filePath;
     try {
         const output = await subProcess.execute('mix', ['read.mix', root], { cwd });
-        debug_1.debug(`read.mix output: ${output}`);
+        (0, debug_1.debug)(`read.mix output: ${output}`);
         const fileName = output.trim().split('\n').pop();
-        debug_1.debug(`fileName: ${fileName}`);
+        (0, debug_1.debug)(`fileName: ${fileName}`);
         filePath = path.resolve(cwd, fileName);
         const result = (await fs.promises.readFile(filePath, 'utf8'));
         return JSON.parse(result);
     }
     catch (err) {
         const errorMessage = `Error parsing manifest file on ${root}`;
-        debug_1.debug(errorMessage, err);
+        (0, debug_1.debug)(errorMessage, err);
         throw new Error(errorMessage);
     }
     finally {
@@ -19353,7 +19356,7 @@ async function getMixResult(root) {
             elixirTmpDir.removeCallback();
         }
         catch (err) {
-            debug_1.debug(`can't remove ${elixirTmpDir.name}`, err);
+            (0, debug_1.debug)(`can't remove ${elixirTmpDir.name}`, err);
         }
     }
 }
@@ -19383,28 +19386,31 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.execute = void 0;
 const childProcess = __webpack_require__(63129);
 const debug_1 = __webpack_require__(39410);
+const shescape_1 = __webpack_require__(79114);
 function execute(command, args, options) {
-    debug_1.debug(`running "${command} ${args.join(' ')}"`);
+    (0, debug_1.debug)(`running "${command} ${args.join(' ')}"`);
     const spawnOptions = { shell: true };
     if (options && options.cwd) {
         spawnOptions.cwd = options.cwd;
     }
+    args = (0, shescape_1.quoteAll)(args, spawnOptions);
     return new Promise((resolve, reject) => {
+        var _a, _b;
         let stdout = '';
         let stderr = '';
         const proc = childProcess.spawn(command, args, spawnOptions);
-        proc.stdout.on('data', (data) => {
+        (_a = proc.stdout) === null || _a === void 0 ? void 0 : _a.on('data', (data) => {
             stdout = stdout + data;
         });
-        proc.stderr.on('data', (data) => {
+        (_b = proc.stderr) === null || _b === void 0 ? void 0 : _b.on('data', (data) => {
             stderr = stderr + data;
         });
         proc.on('close', (code) => {
             if (code !== 0) {
-                debug_1.debug(`Error running "${command} ${args.join(' ')}", exit code: ${code}`);
+                (0, debug_1.debug)(`Error running "${command} ${args.join(' ')}", exit code: ${code}`);
                 return reject(stdout || stderr);
             }
-            debug_1.debug(`Sub process stderr:`, stderr);
+            (0, debug_1.debug)(`Sub process stderr:`, stderr);
             resolve(stdout || stderr);
         });
     });
@@ -141694,11 +141700,11 @@ class Docker {
         return await dockerPull.pull(registry, repo, tag, opt);
     }
     async pullCli(targetImage, options) {
-        const opts = ["pull", targetImage];
+        const args = ["pull", targetImage];
         if (options === null || options === void 0 ? void 0 : options.platform) {
-            opts.push(`--platform=${options.platform}`);
+            args.push(`--platform=${options.platform}`);
         }
-        return subProcess.execute("docker", opts);
+        return subProcess.execute("docker", args);
     }
     async save(targetImage, destination) {
         const request = {
@@ -144679,11 +144685,13 @@ exports.streamToJson = streamToJson;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.execute = void 0;
 const childProcess = __webpack_require__(63129);
+const shescape_1 = __webpack_require__(79114);
 function execute(command, args, options) {
     const spawnOptions = { shell: true };
     if (options && options.cwd) {
         spawnOptions.cwd = options.cwd;
     }
+    args = (0, shescape_1.quoteAll)(args, spawnOptions);
     return new Promise((resolve, reject) => {
         let stdout = "";
         let stderr = "";
@@ -165294,11 +165302,15 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.execute = void 0;
 const childProcess = __webpack_require__(63129);
 const index_1 = __webpack_require__(29615);
+const shescape_1 = __webpack_require__(79114);
 function execute(command, args, options) {
     const spawnOptions = { shell: true };
     if (options && options.cwd) {
         spawnOptions.cwd = options.cwd;
     }
+    if (args) {
+        args = (0, shescape_1.quoteAll)(args, spawnOptions);
+    }
     return new Promise((resolve, reject) => {
         let stdout = '';
         let stderr = '';
@@ -192933,6 +192945,7 @@ exports.getPoetryDependencies = getPoetryDependencies;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.executeSync = exports.execute = void 0;
 const child_process_1 = __webpack_require__(63129);
+const shescape_1 = __webpack_require__(79114);
 function makeSpawnOptions(options) {
     const spawnOptions = { shell: true };
     if (options && options.cwd) {
@@ -192945,6 +192958,7 @@ function makeSpawnOptions(options) {
 }
 function execute(command, args, options) {
     const spawnOptions = makeSpawnOptions(options);
+    args = (0, shescape_1.quoteAll)(args, spawnOptions);
     return new Promise((resolve, reject) => {
         let stdout = '';
         let stderr = '';
@@ -192966,6 +192980,7 @@ function execute(command, args, options) {
 exports.execute = execute;
 function executeSync(command, args, options) {
     const spawnOptions = makeSpawnOptions(options);
+    args = (0, shescape_1.quoteAll)(args, spawnOptions);
     return (0, child_process_1.spawnSync)(command, args, spawnOptions);
 }
 exports.executeSync = executeSync;
@@ -196566,7 +196581,7 @@ function buildHintMessage(options) {
 }
 function buildArgs(sbtArgs, isCoursierProject, isOutputGraph) {
     // force plain output so we don't have to parse colour codes
-    let args = ['"-Dsbt.log.noformat=true"'];
+    let args = ['-Dsbt.log.noformat=true'];
     if (sbtArgs) {
         args = args.concat(sbtArgs);
     }
@@ -196788,11 +196803,11 @@ function parseSbtPluginResults(sbtOutput, packageName, packageVersion) {
     return depTree;
 }
 exports.parseSbtPluginResults = parseSbtPluginResults;
+const PRODUCTION_SCOPES = ['compile', 'runtime', 'provided'];
 function parseSbtPluginProjectResultToDepTree(projectKey, sbtProjectOutput) {
     const pkgs = Object.keys(sbtProjectOutput.modules)
         .filter((module) => {
-        // filtering for the `compile` configuration only, otherwise, there can be multiple graph roots
-        return sbtProjectOutput.modules[module].configurations.includes('compile');
+        return sbtProjectOutput.modules[module].configurations.some((c) => PRODUCTION_SCOPES.includes(c));
     });
     const getDependenciesFor = (name) => {
         if (!sbtProjectOutput.dependencies[name]) {
@@ -196803,7 +196818,7 @@ function parseSbtPluginProjectResultToDepTree(projectKey, sbtProjectOutput) {
         }
         const dependencies = {};
         for (const subDepName of sbtProjectOutput.dependencies[name]) {
-            if (pkgs.indexOf(subDepName) > -1) { // dependency is in compile configuration
+            if (pkgs.indexOf(subDepName) > -1) { // dependency is in production configuration
                 dependencies[subDepName] = getDependenciesFor(subDepName);
             }
         }
@@ -196900,6 +196915,7 @@ exports.execute = void 0;
 const childProcess = __webpack_require__(63129);
 const treeKill = __webpack_require__(28);
 const debugModule = __webpack_require__(15158);
+const shescape_1 = __webpack_require__(79114);
 // To enable debugging output, run the CLI as `DEBUG=snyk-sbt-plugin snyk ...`
 const debugLogging = debugModule('snyk-sbt-plugin');
 // Disabled by default, to set run the CLI as `PROC_TIMEOUT=100000 snyk ...`
@@ -196910,6 +196926,7 @@ const execute = (command, args, options) => {
     if (options && options.cwd) {
         spawnOptions.cwd = options.cwd;
     }
+    args = (0, shescape_1.quoteAll)(args, spawnOptions);
     return new Promise((resolve, reject) => {
         const out = {
             stdout: '',