snyk 1.1271.0 → 1.1273.0

package/dist/cli/245.index.js

@@ -189564,16 +189564,31 @@ function stripUndefinedLabels(parserResult) {
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.phpFilesToScannedProjects = void 0;
-const lockFileParser = __webpack_require__(59794);
 const dep_graph_1 = __webpack_require__(71479);
 const path = __webpack_require__(71017);
+const composer_lockfile_parser_1 = __webpack_require__(59794);
+const errors_1 = __webpack_require__(18920);
 const PACKAGE_MANAGER_TYPE = "composer";
 async function phpFilesToScannedProjects(filePathToContent) {
     const scanResults = [];
     const filePairs = findManifestLockPairsInSameDirectory(filePathToContent);
     const shouldIncludeDevDependencies = false;
     for (const pathPair of filePairs) {
-        const parserResult = await lockFileParser.buildDepTree(filePathToContent[pathPair.lock], filePathToContent[pathPair.manifest], pathPair.manifest, {}, shouldIncludeDevDependencies);
+        let parserResult;
+        try {
+            parserResult = (0, composer_lockfile_parser_1.buildDepTree)(filePathToContent[pathPair.lock], filePathToContent[pathPair.manifest], pathPair.manifest, {}, shouldIncludeDevDependencies);
+        }
+        catch (e) {
+            // This will skip parsing all files that error due to being malformed.
+            // If we do not do this, the entire scan will fail.
+            // Ideally, we'd like to log this, but logging does not exist in this library.
+            if (e instanceof errors_1.InvalidUserInputError) {
+                continue;
+            }
+            else {
+                throw e;
+            }
+        }
         const depGraph = await dep_graph_1.legacy.depTreeToGraph(parserResult, PACKAGE_MANAGER_TYPE);
         const depGraphFact = {
             type: "depGraph",
@@ -207441,7 +207456,7 @@ function buildArgs(root, targetFile, initGradlePath, options, gradleVersion) {
     }
     // Gradle 7 introduced configuration caching which we don't support yet
     // If it is enabled in a gradle.properties file, it can be disabled on the command line with --no-configuration-cache
-    if (gradleVersion.match(/Gradle 7/))
+    if (gradleVersion.match(/Gradle 7/) || gradleVersion.match(/Gradle 8/))
         args.push('--no-configuration-cache');
     // There might be a legacy --configuration option in 'args'.
     // It has been superseded by --configuration-matching option for Snyk CLI (see buildArgs),