snyk 1.816.0 → 1.817.0

package/dist/cli/293.index.js

@@ -1776,10 +1776,10 @@ const url_1 = __webpack_require__(78835);
 const upperFirst = __webpack_require__(90039);
 const remediation_based_format_issues_1 = __webpack_require__(57995);
 const legacy_format_issue_1 = __webpack_require__(63540);
-const legacy_1 = __webpack_require__(34013);
 const common_1 = __webpack_require__(53110);
 const detect_1 = __webpack_require__(45318);
 const get_severity_value_1 = __webpack_require__(24898);
+const sarif_output_1 = __webpack_require__(5034);
 const debug = Debug('iac-output');
 function formatIacIssue(issue, isNew, path) {
     const newBadge = isNew ? ' (new)' : '';
@@ -1901,9 +1901,6 @@ function createSarifOutputForIac(iacTestResponses) {
     };
 }
 exports.createSarifOutputForIac = createSarifOutputForIac;
-function getIssueLevel(severity) {
-    return severity === legacy_1.SEVERITY.HIGH ? 'error' : 'warning';
-}
 function extractReportingDescriptor(results) {
     const tool = {};
     results.forEach(({ issue }) => {
@@ -1949,7 +1946,7 @@ function extractReportingDescriptor(results) {
                 markdown: `${issueMarkdown}${impactMarkdown}${resolveMarkdown}`.replace(/^\s+/g, ''),
             },
             defaultConfiguration: {
-                level: getIssueLevel(issue.severity),
+                level: sarif_output_1.getIssueLevel(issue.severity),
             },
             properties: {
                 tags,
@@ -2541,6 +2538,112 @@ function reachablePathsTemplate(samplePaths, extraPathsCount) {
 }
 
 
+/***/ }),
+
+/***/ 5034:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.getResults = exports.getTool = exports.getIssueLevel = exports.createSarifOutputForContainers = void 0;
+const legacy_1 = __webpack_require__(34013);
+const upperFirst = __webpack_require__(90039);
+function createSarifOutputForContainers(testResults) {
+    const sarifRes = {
+        version: '2.1.0',
+        runs: [],
+    };
+    testResults.forEach((testResult) => {
+        sarifRes.runs.push({
+            tool: getTool(testResult),
+            results: getResults(testResult),
+        });
+    });
+    return sarifRes;
+}
+exports.createSarifOutputForContainers = createSarifOutputForContainers;
+function getIssueLevel(severity) {
+    return severity === legacy_1.SEVERITY.HIGH || severity === legacy_1.SEVERITY.CRITICAL
+        ? 'error'
+        : 'warning';
+}
+exports.getIssueLevel = getIssueLevel;
+function getTool(testResult) {
+    const tool = {
+        driver: {
+            name: 'Snyk Container',
+            rules: [],
+        },
+    };
+    if (!testResult.vulnerabilities) {
+        return tool;
+    }
+    const pushedIds = {};
+    tool.driver.rules = testResult.vulnerabilities
+        .map((vuln) => {
+        if (pushedIds[vuln.id]) {
+            return;
+        }
+        const level = getIssueLevel(vuln.severity);
+        const cve = vuln['identifiers']['CVE'][0];
+        pushedIds[vuln.id] = true;
+        return {
+            id: vuln.id,
+            shortDescription: {
+                text: `${upperFirst(vuln.severity)} severity - ${vuln.title} vulnerability in ${vuln.packageName}`,
+            },
+            fullDescription: {
+                text: cve
+                    ? `(${cve}) ${vuln.name}@${vuln.version}`
+                    : `${vuln.name}@${vuln.version}`,
+            },
+            help: {
+                text: '',
+                markdown: vuln.description,
+            },
+            defaultConfiguration: {
+                level: level,
+            },
+            properties: {
+                tags: ['security', ...vuln.identifiers.CWE],
+            },
+        };
+    })
+        .filter(Boolean);
+    return tool;
+}
+exports.getTool = getTool;
+function getResults(testResult) {
+    const results = [];
+    if (!testResult.vulnerabilities) {
+        return results;
+    }
+    testResult.vulnerabilities.forEach((vuln) => {
+        results.push({
+            ruleId: vuln.id,
+            message: {
+                text: `This file introduces a vulnerable ${vuln.packageName} package with a ${vuln.severity} severity vulnerability.`,
+            },
+            locations: [
+                {
+                    physicalLocation: {
+                        artifactLocation: {
+                            uri: testResult.displayTargetFile,
+                        },
+                        region: {
+                            startLine: vuln.lineNumber || 1,
+                        },
+                    },
+                },
+            ],
+        });
+    });
+    return results;
+}
+exports.getResults = getResults;
+
+
 /***/ }),
 
 /***/ 98202: