snyk 1.846.0 → 1.850.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/SECURITY.md CHANGED
@@ -6,7 +6,7 @@ If you believe you have found a security vulnerability on Snyk, we encourage you
6
6
 
7
7
  Submit your report to security@snyk.io (one issue per report) and respond to the report with any updates. Please do not contact employees directly or through other channels about a report.
8
8
 
9
- Report security bugs in third-party modules to the person or team maintaining the module. You can also report a vulnerability through our [Snyk Vulnerability Disclosure](https://docs.google.com/a/snyk.io/forms/d/e/1FAIpQLSemwgWZ0JgK1ZULKhy9DZCQ5KulbLEldvmokAuRtt-_nrqNlA/viewform) program.
9
+ Report security bugs in third-party modules to the person or team maintaining the module. You can also report a vulnerability through our [Snyk Vulnerability Disclosure](https://snyk.io/vulnerability-disclosure/) program.
10
10
 
11
11
  ### Responsible Disclosure Policy
12
12
 
@@ -18,4 +18,4 @@ We ask that:
18
18
  - You do not exploit a security issue you discover for any reason. (This includes demonstrating additional risk, such as attempted compromise of sensitive company data or probing for additional issues).
19
19
  - You do not violate any other applicable laws or regulations.
20
20
 
21
- Find out more about our [security policy](https://snyk.io/docs/security) and [Bug Bounty program](https://snyk.io/docs/security#snyk-s-vulnerability-disclosure-program)
21
+ Find out more about our [Bug Bounty program](https://docs.snyk.io/more-info/disclosing-vulnerabilities/disclose-a-vulnerability-in-snyk-services)
@@ -5280,7 +5280,8 @@ const output_format_1 = __webpack_require__(75802);
5280
5280
  const errors_1 = __webpack_require__(55191);
5281
5281
  const json_1 = __webpack_require__(27019);
5282
5282
  const analytics = __webpack_require__(82744);
5283
- const debug = debugLib('snyk-code-test');
5283
+ debugLib.enable('snyk-code');
5284
+ const debug = debugLib('snyk-code');
5284
5285
  exports.codePlugin = {
5285
5286
  // We currently don't use scan/display. we will need to consolidate ecosystem plugins
5286
5287
  // to accept flows that act differently in the `testDependencies` step, as we have here
@@ -5340,7 +5341,8 @@ exports.codePlugin = {
5340
5341
  else {
5341
5342
  err = new Error(error);
5342
5343
  }
5343
- debug(chalk_1.default.bold.red(error.statusText || error.message));
5344
+ debug(chalk_1.default.bold.red(`statusCode:${error.code ||
5345
+ error.statusCode}, message: ${error.statusText || error.message}`));
5344
5346
  throw err;
5345
5347
  }
5346
5348
  },
@@ -5351,8 +5353,10 @@ function isCodeClientError(error) {
5351
5353
  error.hasOwnProperty('apiName'));
5352
5354
  }
5353
5355
  function isUnauthorizedError(error) {
5354
- return ((error.statusCode >= 400 && error.statusCode < 500) ||
5355
- (error.code >= 400 && error.code < 500));
5356
+ return (error.statusCode === 401 ||
5357
+ error.statusCode === 403 ||
5358
+ error.code === 403 ||
5359
+ error.code === 401);
5356
5360
  }
5357
5361
  function hasIssues(readableResult, sarifResult) {
5358
5362
  const err = new Error(readableResult);