snyk 1.1289.0 → 1.1290.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/855.index.js +1 -0
- package/dist/cli/855.index.js.map +1 -1
- package/help/cli-commands/README.md +1 -1
- package/help/cli-commands/sbom-test.md +54 -0
- package/help/cli-commands/sbom.md +4 -0
- package/package.json +1 -1
- package/src/generated/sha256sums.txt +8 -8
- package/src/generated/version +1 -1
- package/wrapper_dist/generated/sha256sums.txt +8 -8
- package/wrapper_dist/generated/version +1 -1
package/dist/cli/855.index.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"855.index.js","mappings":";;;;;;;;;;AACA,6CAAqC;AAErC,SAAwB,IAAI,CAAC,GAAG,IAAgB;IAC9C,MAAM,IAAI,GAAG,qBAAO,EAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;mBAaK,IAAI;;CAEtB,CAAC,CAAC;AACH,CAAC;AAlBD,0BAkBC;;;;;;;;;;ACnBD,MAAM,KAAK,GAAG;IACZ,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,SAAwB,OAAO,CAAC,IAAgB;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAiB,CAAC;IAC1C,IAAI,IAAI,GAAG,IAAI,CAAC;IAEhB,IACE,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC7C;QACA,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;KACzB;IAED,IAAI,IAAI,KAAK,KAAK,EAAE;QAClB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;SAChE;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAa,CAAC;QACrC,IAAI,MAAM,EAAE;YACV,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;SACnD;KACF;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAvBD,6BAuBC","sources":["webpack://snyk/./src/cli/commands/woof.ts","webpack://snyk/./src/cli/commands/woof/getWoof.ts"],"sourcesContent":["import { MethodArgs } from '../args';\nimport getWoof from './woof/getWoof';\n\nexport default function woof(...args: MethodArgs) {\n const woof = getWoof(args);\n console.log(`\n | |\n /| |\\\\\n | | | |\n | |/-------\\\\| |\n \\\\ /\n | \\\\ / |\n | \\\\o/ \\\\o/ |\n | | | |\n \\\\/ | | \\\\/\n | | | |\n \\\\ ( ) /\n \\\\_/ \\\\_/ /-----\\\\\n \\\\U/ --( ${woof} )\n \\\\-----/\n`);\n}\n","import { MethodArgs, ArgsOptions } from '../../args';\n\nconst woofs = {\n en: 'Woof!',\n he: ' בה! ',\n ru: ' Гав!',\n es: 'Guau!',\n cs: ' Haf!',\n uk: ' Гав!',\n de: 'Wuff!',\n cat: 'Meow?',\n};\n\nexport default function getWoof(args: MethodArgs): string {\n const options = args.pop() as ArgsOptions;\n let lang = 'en';\n\n if (\n typeof options.language === 'string' &&\n Object.keys(woofs).includes(options.language)\n ) {\n lang = options.language;\n }\n\n if (lang === 'cat') {\n for (const option in options) {\n console.debug(`${option}:::`, options[option], `:::${option}`);\n }\n\n const envVal = options.env as string;\n if (envVal) {\n console.debug(envVal + '=' + process.env[envVal]);\n }\n }\n\n return woofs[lang];\n}\n"],"names":[],"sourceRoot":""}
|
|
1
|
+
{"version":3,"file":"855.index.js","mappings":";;;;;;;;;;AACA,6CAAqC;AAErC,SAAwB,IAAI,CAAC,GAAG,IAAgB;IAC9C,MAAM,IAAI,GAAG,qBAAO,EAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;mBAaK,IAAI;;CAEtB,CAAC,CAAC;AACH,CAAC;AAlBD,0BAkBC;;;;;;;;;;ACnBD,MAAM,KAAK,GAAG;IACZ,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,OAAO;IACX,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,SAAwB,OAAO,CAAC,IAAgB;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAiB,CAAC;IAC1C,IAAI,IAAI,GAAG,IAAI,CAAC;IAEhB,IACE,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC7C;QACA,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;KACzB;IAED,IAAI,IAAI,KAAK,KAAK,EAAE;QAClB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;SAChE;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAa,CAAC;QACrC,IAAI,MAAM,EAAE;YACV,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;SACnD;KACF;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAvBD,6BAuBC","sources":["webpack://snyk/./src/cli/commands/woof.ts","webpack://snyk/./src/cli/commands/woof/getWoof.ts"],"sourcesContent":["import { MethodArgs } from '../args';\nimport getWoof from './woof/getWoof';\n\nexport default function woof(...args: MethodArgs): void {\n const woof = getWoof(args);\n console.log(`\n | |\n /| |\\\\\n | | | |\n | |/-------\\\\| |\n \\\\ /\n | \\\\ / |\n | \\\\o/ \\\\o/ |\n | | | |\n \\\\/ | | \\\\/\n | | | |\n \\\\ ( ) /\n \\\\_/ \\\\_/ /-----\\\\\n \\\\U/ --( ${woof} )\n \\\\-----/\n`);\n}\n","import { MethodArgs, ArgsOptions } from '../../args';\n\nconst woofs = {\n en: 'Woof!',\n he: ' בה! ',\n ru: ' Гав!',\n es: 'Guau!',\n cs: ' Haf!',\n uk: ' Гав!',\n de: 'Wuff!',\n ro: ' Ham!',\n cat: 'Meow?',\n};\n\nexport default function getWoof(args: MethodArgs): string {\n const options = args.pop() as ArgsOptions;\n let lang = 'en';\n\n if (\n typeof options.language === 'string' &&\n Object.keys(woofs).includes(options.language)\n ) {\n lang = options.language;\n }\n\n if (lang === 'cat') {\n for (const option in options) {\n console.debug(`${option}:::`, options[option], `:::${option}`);\n }\n\n const envVal = options.env as string;\n if (envVal) {\n console.debug(envVal + '=' + process.env[envVal]);\n }\n }\n\n return woofs[lang];\n}\n"],"names":[],"sourceRoot":""}
|
|
@@ -46,7 +46,7 @@ The `snyk code test` command finds security issues using Static Code Analysis.
|
|
|
46
46
|
|
|
47
47
|
### [`snyk sbom`](sbom.md)
|
|
48
48
|
|
|
49
|
-
|
|
49
|
+
Generate or test an SBOM document in ecosystems supported by Snyk.
|
|
50
50
|
|
|
51
51
|
### [`snyk log4shell`](log4shell.md)
|
|
52
52
|
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
# SBOM test
|
|
2
|
+
|
|
3
|
+
**Feature availability:** This feature is available to customers on Snyk Enterprise plans.
|
|
4
|
+
|
|
5
|
+
## Usage
|
|
6
|
+
|
|
7
|
+
`snyk sbom test --experimental --file=<FILE_PATH> [<options>]`
|
|
8
|
+
|
|
9
|
+
## Description
|
|
10
|
+
|
|
11
|
+
The `snyk sbom test` command checks SBOM files for vulnerabilities in open-source packages.
|
|
12
|
+
|
|
13
|
+
## Exit codes
|
|
14
|
+
|
|
15
|
+
Possible exit codes and their meaning:
|
|
16
|
+
|
|
17
|
+
**0**: success (scan completed), no vulnerabilities found\
|
|
18
|
+
**1**: action_needed (scan completed), vulnerabilities found\
|
|
19
|
+
**2**: failure, try to re-run the command
|
|
20
|
+
|
|
21
|
+
## Configure the Snyk CLI
|
|
22
|
+
|
|
23
|
+
You can use environment variables to configure the Snyk CLI and set variables for connecting with the Snyk API. See [Configure the Snyk CLI](https://docs.snyk.io/snyk-cli/configure-the-snyk-cli)
|
|
24
|
+
|
|
25
|
+
## Debug
|
|
26
|
+
|
|
27
|
+
Use the `-d` or `--debug` option to output the debug logs.
|
|
28
|
+
|
|
29
|
+
## Options
|
|
30
|
+
|
|
31
|
+
### `--experimental`
|
|
32
|
+
|
|
33
|
+
Required. Use experimental command features. This option is currently required as the command is in its experimental phase.
|
|
34
|
+
|
|
35
|
+
### `--file=<FILE_PATH>`
|
|
36
|
+
|
|
37
|
+
Required. Specify the file path of the SBOM document.
|
|
38
|
+
|
|
39
|
+
The `snyk sbom test` command accepts the following file formats:
|
|
40
|
+
|
|
41
|
+
- **CycloneDX:** JSON version 1.4, 1.5 and 2.0
|
|
42
|
+
- **SPDX:** JSON version 2.3 and 2.3.1
|
|
43
|
+
|
|
44
|
+
Packages and components within the provided SBOM file must be identified by a PackageURL (purl).
|
|
45
|
+
|
|
46
|
+
Supported purl types are: `apk`, `deb`, `cargo`, `cocoapods`, `composer`, `gem`, `generic`, `golang`, `hex`, `maven`, `npm`, `nuget`, `pypi`, `rpm`, `swift`.
|
|
47
|
+
|
|
48
|
+
Example: `$ snyk sbom test --experimental --file=bom.cdx.json`
|
|
49
|
+
|
|
50
|
+
### `--json`
|
|
51
|
+
|
|
52
|
+
Print results on the console as a JSON data structure.
|
|
53
|
+
|
|
54
|
+
Example: `$ snyk sbom test --experimental --file=bom.cdx.json --json`
|
package/package.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
1
|
+
89a6cbf1eff2983a97ddf65a8c0e0ff2f02ed61c7e41ab04e9da40a746ab3344 snyk-alpine
|
|
2
|
+
4ba97f243cd84457dfeda4e39ad0115b57f75b0bf3e76f912f4202bd87a5d6f6 snyk-fix.tgz
|
|
3
|
+
50172431a80d699a3aa504a5017f64bee8bf5bb586cfa531207c5350155d2f0d snyk-linux-arm64
|
|
4
|
+
380a7b4246db2c6ff922fd7457445032c085cf5e54613ddf9b736e467ca3d8e7 snyk-linux
|
|
5
|
+
1a5fd52e6db8961c7249382c6eac85a51c2c8a189827896bf1ef2c17714bcee4 snyk-macos-arm64
|
|
6
|
+
444d34ea96f6f0819208050d77cc0ae99836e59af7534fa48e0233737654325a snyk-macos
|
|
7
|
+
3ebe801b354ca4a27df0d3ed9335281576abc34159d4720d8c0fd60439f251ea snyk-protect.tgz
|
|
8
|
+
e727dcc390b9b4601ec5682be7aae1c4bbb40d109396912f4f7f4f9cf1164a61 snyk-win.exe
|
package/src/generated/version
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.1290.0
|
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
1
|
+
89a6cbf1eff2983a97ddf65a8c0e0ff2f02ed61c7e41ab04e9da40a746ab3344 snyk-alpine
|
|
2
|
+
4ba97f243cd84457dfeda4e39ad0115b57f75b0bf3e76f912f4202bd87a5d6f6 snyk-fix.tgz
|
|
3
|
+
50172431a80d699a3aa504a5017f64bee8bf5bb586cfa531207c5350155d2f0d snyk-linux-arm64
|
|
4
|
+
380a7b4246db2c6ff922fd7457445032c085cf5e54613ddf9b736e467ca3d8e7 snyk-linux
|
|
5
|
+
1a5fd52e6db8961c7249382c6eac85a51c2c8a189827896bf1ef2c17714bcee4 snyk-macos-arm64
|
|
6
|
+
444d34ea96f6f0819208050d77cc0ae99836e59af7534fa48e0233737654325a snyk-macos
|
|
7
|
+
3ebe801b354ca4a27df0d3ed9335281576abc34159d4720d8c0fd60439f251ea snyk-protect.tgz
|
|
8
|
+
e727dcc390b9b4601ec5682be7aae1c4bbb40d109396912f4f7f4f9cf1164a61 snyk-win.exe
|
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.1290.0
|