snyk 1.1109.0 → 1.1111.0

package/dist/cli/917.index.js

@@ -2279,6 +2279,8 @@ const keys = [
     'detectionDepth',
     'cloud-context',
     'snyk-cloud-environment',
+    'custom-rules',
+    'experimental',
     // PolicyOptions
     'ignore-policy',
     'policy-path',
@@ -2385,6 +2387,8 @@ async function prepareTestConfig(paths, options) {
     const cloudContext = index_1.getFlag(options, 'cloud-context');
     const snykCloudEnvironment = index_1.getFlag(options, 'snyk-cloud-environment');
     const insecure = options.insecure;
+    const customRules = options['custom-rules'];
+    const experimental = options.experimental;
     return {
         paths,
         iacCachePath,
@@ -2403,6 +2407,8 @@ async function prepareTestConfig(paths, options) {
         snykCloudEnvironment,
         insecure,
         org,
+        customRules,
+        experimental,
     };
 }
 
@@ -3247,6 +3253,7 @@ function formatSnykIacTestScanVulnerability(vulnerability) {
         impact: vulnerability.rule.description,
         resolve,
         documentation: vulnerability.rule.documentation,
+        isGeneratedByCustomRule: vulnerability.rule.isGeneratedByCustomRule,
         remediation: {
             [constants_1.iacRemediationTypes[vulnerability.resource.kind]]: resolve,
         },
@@ -3385,8 +3392,6 @@ function formatInfo(issue) {
     return `${issueDesc}${!issueDesc.endsWith('.') ? '.' : ''} ${issueImpact}`;
 }
 function formatProperties(result, options) {
-    var _a;
-    const remediationKey = constants_1.iacRemediationTypes === null || constants_1.iacRemediationTypes === void 0 ? void 0 : constants_1.iacRemediationTypes[result.projectType];
     const properties = [
         ['Info', formatInfo(result.issue)],
         [
@@ -3403,12 +3408,7 @@ function formatProperties(result, options) {
                 ? `:${result.issue.lineNumber}`
                 : ''}`,
         ],
-        [
-            'Resolve',
-            remediationKey && ((_a = result.issue.remediation) === null || _a === void 0 ? void 0 : _a[remediationKey])
-                ? result.issue.remediation[remediationKey]
-                : result.issue.resolve,
-        ],
+        ['Resolve', getRemediationText(result)],
     ];
     const propKeyColWidth = Math.max(...properties.map(([key]) => key.length));
     const propValColWidth = utils_1.maxLineWidth - utils_1.contentPadding.length - propKeyColWidth - 2;
@@ -3426,6 +3426,14 @@ function formatProperties(result, options) {
 function isValidLineNumber(lineNumber) {
     return (typeof lineNumber === 'number' && lineNumber > 0 && lineNumber % 1 === 0);
 }
+function getRemediationText(result) {
+    var _a;
+    const remediationKey = constants_1.iacRemediationTypes === null || constants_1.iacRemediationTypes === void 0 ? void 0 : constants_1.iacRemediationTypes[result.projectType];
+    if (result.issue.remediation) {
+        return (_a = result.issue.remediation[remediationKey]) !== null && _a !== void 0 ? _a : result.issue.remediation;
+    }
+    return result.issue.resolve;
+}
 
 
 /***/ }),
@@ -4564,6 +4572,9 @@ function getErrorUserMessage(code, error) {
         code == types_1.IaCErrorCodes.ResourcesResolverError) {
         return `${error}. Please run the command again with the \`-d\` flag for more information.`;
     }
+    if (code == types_1.IaCErrorCodes.FeatureFlagNotEnabled) {
+        return error;
+    }
     return snykIacTestErrorsUserMessages[errorName];
 }
 exports.getErrorUserMessage = getErrorUserMessage;
@@ -4753,7 +4764,7 @@ function vulnerabilitiesToIacIssues(vulnerabilities) {
             },
             lineNumber: v.resource.line || -1,
             documentation: v.rule.documentation,
-            isGeneratedByCustomRule: false,
+            isGeneratedByCustomRule: !!v.rule.isGeneratedByCustomRule,
             path: v.resource.path || [],
             compliance: [],
             description: v.rule.description,
@@ -4851,12 +4862,12 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getChecksum = exports.formatPolicyEngineFileName = exports.policyEngineVersion = void 0;
 const os = __webpack_require__(12087);
 const policyEngineChecksums = `
-0e505b9284ff31465a50656006a9fbbca943988e3dc1a2860ee0ab3e6b2573bc  snyk-iac-test_0.39.0_Windows_arm64.exe
-566d8587057312ecbe8298ad0acf712904689e332652c43c6bd0a499d677a44c  snyk-iac-test_0.39.0_Darwin_arm64
-7258a935fc08634a47f0c111400664cb9ff176f1cda67131891421f78bce115c  snyk-iac-test_0.39.0_Linux_arm64
-b172acbb0a84f40a9917f196e1f7b4d1aa21feddc1b2f1670ed6ef9dc71fb2e4  snyk-iac-test_0.39.0_Linux_x86_64
-c3f38885ba20087ecf20587dd83ebc4f9df27438cd9d9281700cd670877f3144  snyk-iac-test_0.39.0_Windows_x86_64.exe
-e1286f48b4bd297c05a52d256ddc4487d7c10a0e48298a177c43f3825ef83944  snyk-iac-test_0.39.0_Darwin_x86_64
+2cc88f4f928d47ec914d6ab40c773ce3efef18a879db1c702df0500e250666fa  snyk-iac-test_0.40.3_Darwin_arm64
+987a9bb850739c727dff6f47f0daa673489ca2bf0ae87ca253c7a4c66ce81285  snyk-iac-test_0.40.3_Darwin_x86_64
+ff9e2dfaca90f0efe270cffc843a25252dec266d8ba3307babf70af4d28509e6  snyk-iac-test_0.40.3_Linux_arm64
+0b516c5a25aa23950646b314d182236106ea984322837aa17e928dd9f24a0103  snyk-iac-test_0.40.3_Linux_x86_64
+505f9371d0a5cc874ae979127b8d5690bd4ddc6c38046dcb43d091ce67c4978e  snyk-iac-test_0.40.3_Windows_arm64.exe
+62dbb08941b6d520ba68a1ab1aa804b1797133dc4f91560a4762e9510d14292b  snyk-iac-test_0.40.3_Windows_x86_64.exe
 `;
 exports.policyEngineVersion = getPolicyEngineVersion();
 function formatPolicyEngineFileName(releaseVersion) {
@@ -5628,6 +5639,14 @@ function processFlags(options, rulesBundlePath, outputPath, policyPath) {
     if (options.org) {
         flags.push('-org', options.org);
     }
+    if (options.customRules) {
+        if (options.experimental) {
+            flags.push('-custom-rules');
+        }
+        else {
+            debug('--custom-rules specified without --experimental. ignoring --custom-rules.');
+        }
+    }
     return flags;
 }
 async function createTemporaryFiles(options) {