snyk 1.1122.0 → 1.1123.0

package/dist/cli/95.index.js

@@ -132618,6 +132618,7 @@ exports.isSupportedSize = exports.DECOMPRESSING_IGNORE_DIR = exports.DECOMPRESSI
 const os = __webpack_require__(12087);
 const process_1 = __webpack_require__(61765);
 exports.isWin = process_1.platform === 'win32';
+// Current implementation supports up to 2GB per file
 exports.MAX_SUPPORTED_FILE_SIZE = 2 * 1024 * 1024 * 1024 - 1;
 exports.HASHING_CONCURRENCY_LEVEL = os.cpus().length;
 exports.DECOMPRESSING_CONCURRENCY_LEVEL = os.cpus().length * 8;
@@ -132742,20 +132743,14 @@ function displayIssues(depGraph, issues, issuesData) {
     const issuesCount = issues.length == 1 ? '1 issue' : `${issues.length} issues`;
     const hasIssues = issues.length > 0;
     if (hasIssues) {
-        result.push(chalk.whiteBright('Issues:'));
-        for (const { pkgName: name, pkgVersion: version, issueId: vulnId, } of issues) {
-            const { title, severity } = issuesData[vulnId];
-            const color = common_1.getColorBySeverity(severity);
-            const severityAndTitle = color(`\n ✗ [${common_1.capitalize(severity)}] ${title}`);
-            const dependencyName = computeDependencyName(name, version);
-            const vulnDetailsUrl = `https://security.snyk.io/vuln/${vulnId}`;
-            const introducedThrough = common_1.leftPad(`Introduced through: ${dependencyName}`);
-            const urlText = common_1.leftPad(`URL: ${vulnDetailsUrl}`);
-            result.push(severityAndTitle);
-            result.push(introducedThrough);
-            result.push(urlText);
+        const vulnerabilityIssues = issues.filter((issue) => issue.type === 'vulnerability');
+        if (vulnerabilityIssues.length > 0) {
+            prepareResults(result, vulnerabilityIssues, issuesData, 'Issues:');
+        }
+        const licenseIssues = issues.filter((issue) => issue.type === 'license');
+        if (licenseIssues.length > 0) {
+            prepareResults(result, licenseIssues, issuesData, 'License issues:');
         }
-        result.push('');
     }
     const issuesFound = hasIssues
         ? chalk.redBright(issuesCount)
@@ -132767,6 +132762,22 @@ function displayIssues(depGraph, issues, issuesData) {
     return result;
 }
 exports.displayIssues = displayIssues;
+function prepareResults(result, issues, issuesData, typeTitle) {
+    result.push(chalk.bold(typeTitle));
+    for (const { pkgName: name, pkgVersion: version, issueId: vulnId, } of issues) {
+        const { title, severity } = issuesData[vulnId];
+        const color = common_1.getColorBySeverity(severity);
+        const severityAndTitle = color.bold(`\n ✗ [${common_1.capitalize(severity)}] ${title}`);
+        const dependencyName = computeDependencyName(name, version);
+        const vulnDetailsUrl = `https://security.snyk.io/vuln/${vulnId}`;
+        const introducedThrough = common_1.leftPad(`Introduced through: ${dependencyName}`, 3);
+        const urlText = common_1.leftPad(`URL: ${vulnDetailsUrl}`, 3);
+        result.push(severityAndTitle);
+        result.push(introducedThrough);
+        result.push(urlText);
+    }
+    result.push('');
+}
 function displayErrors(errors) {
     const result = [];
     if (errors.length) {
@@ -132813,6 +132824,9 @@ async function display(scanResults, testResults, errors, options) {
             result = result.concat(display_1.displaySignatures(scanResults));
         }
         for (const testResult of testResults) {
+            testResult.issues.forEach((issue) => (issue.type = issue.issueId.startsWith('snyk:lic:unmanaged:')
+                ? 'license'
+                : 'vulnerability'));
             const depGraph = dep_graph_1.createFromJSON(testResult.depGraphData);
             const [dependencies, issues] = display_1.selectDisplayStrategy(options, depGraph, testResult);
             if (testResult.depGraphData.pkgs.length > 1) {