snyk 1.869.0 → 1.870.0

package/dist/cli/245.index.js

@@ -150523,11 +150523,12 @@ const path_1 = __webpack_require__(85622);
 const common_1 = __webpack_require__(51469);
 const debug_1 = __webpack_require__(36583);
 const extract_1 = __webpack_require__(18293);
+const minimatch = __webpack_require__(91171);
 exports.readdir = fs_1.promises.readdir, exports.lstat = fs_1.promises.lstat;
-async function find(src) {
+async function find(src, excludePatterns = []) {
     const fileResults = [];
     const archiveResults = [];
-    await traverse(src, async (path, stats) => {
+    const handler = async (path, stats) => {
         if (!common_1.isSupportedSize(stats.size)) {
             return;
         }
@@ -150536,12 +150537,20 @@ async function find(src) {
             return;
         }
         fileResults.push(path);
-    });
+    };
+    const isExcluded = (path) => {
+        path = common_1.isWindowsOS() ? path.split(path_1.sep).join(path_1.posix.sep) : path;
+        return !!excludePatterns.find((pattern) => minimatch(path, pattern));
+    };
+    await traverse(src, handler, isExcluded);
     return [fileResults, archiveResults];
 }
 exports.find = find;
-async function traverse(src, handle) {
+async function traverse(src, handle, isExcluded) {
     try {
+        if (isExcluded(src)) {
+            return;
+        }
         const stats = await exports.lstat(src);
         if (stats.isSymbolicLink()) {
             return;
@@ -150554,7 +150563,7 @@ async function traverse(src, handle) {
             const entries = await exports.readdir(src);
             for (const entry of entries) {
                 const absolute = path_1.join(src, entry);
-                await traverse(absolute, handle);
+                await traverse(absolute, handle, isExcluded);
             }
         }
     }
@@ -150673,7 +150682,7 @@ Object.defineProperty(exports, "scan", ({ enumerable: true, get: function () { r
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.scan = void 0;
+exports.getExcludedPatterns = exports.scan = exports.toRelativePaths = void 0;
 const fs = __webpack_require__(35747);
 const path = __webpack_require__(85622);
 const path_1 = __webpack_require__(85622);
@@ -150685,6 +150694,17 @@ const git_1 = __webpack_require__(68361);
 const extract_1 = __webpack_require__(18293);
 const fs_1 = __webpack_require__(93689);
 const common_1 = __webpack_require__(51469);
+const dotSnyk = __webpack_require__(24221);
+const invariants_1 = __webpack_require__(92141);
+function toRelativePaths(basedir, signatures, extractionWorkspace) {
+    signatures.forEach((s) => {
+        const src = extractionWorkspace && s.path.includes(extractionWorkspace)
+            ? extractionWorkspace
+            : basedir;
+        s.path = path.relative(src, s.path);
+    });
+}
+exports.toRelativePaths = toRelativePaths;
 async function scan(options) {
     try {
         debug_1.debug.enabled = !!(options === null || options === void 0 ? void 0 : options.debug);
@@ -150700,13 +150720,15 @@ async function scan(options) {
             throw `'${options.path}' does not exist.`;
         }
         const start = Date.now();
-        const [filePaths, archivePaths] = await find_1.find(options.path);
-        let extractionWorkspace = null;
+        const projectRoot = options.path;
+        const excludedPatterns = getExcludedPatterns(projectRoot, options['policy-path']);
+        const [filePaths, archivePaths] = await find_1.find(projectRoot, excludedPatterns);
+        let extractionWorkspace = undefined;
         if (0 < extractionDepthLimit && 0 < archivePaths.length) {
             const temporaryDir = await fs_1.createTemporaryDir();
             extractionWorkspace = path_1.join(temporaryDir, common_1.DECOMPRESSING_WORKSPACE_DIR);
             await extract_1.extract(archivePaths, temporaryDir, extractionDepthLimit);
-            const [newFilePaths, newArchivePaths] = await find_1.find(extractionWorkspace);
+            const [newFilePaths, newArchivePaths] = await find_1.find(extractionWorkspace, excludedPatterns);
             filePaths.push(...newFilePaths, ...newArchivePaths);
         }
         else {
@@ -150714,12 +150736,7 @@ async function scan(options) {
         }
         debug_1.debug('%d files found \n', filePaths.length);
         const signatures = await signatures_1.computeSignaturesConcurrently(filePaths);
-        signatures.forEach((s) => {
-            const src = extractionWorkspace && s.path.includes(extractionWorkspace)
-                ? extractionWorkspace
-                : options.path;
-            s.path = path.relative(src, s.path);
-        });
+        toRelativePaths(projectRoot, signatures, extractionWorkspace);
         const end = Date.now();
         const totalMilliseconds = end - start;
         const totalFileSignatures = signatures.length;
@@ -150739,7 +150756,7 @@ async function scan(options) {
         const target = await git_1.getTarget();
         debug_1.debug('target %o \n', target);
         const gitInfo = hosted_git_info_1.fromUrl(target.remoteUrl);
-        const name = options.projectName || (gitInfo === null || gitInfo === void 0 ? void 0 : gitInfo.project) || path.basename(options.path);
+        const name = options.projectName || (gitInfo === null || gitInfo === void 0 ? void 0 : gitInfo.project) || path.basename(projectRoot);
         debug_1.debug('name %o \n', name);
         const scanResults = [
             {
@@ -150761,6 +150778,18 @@ async function scan(options) {
     }
 }
 exports.scan = scan;
+function getExcludedPatterns(projectRoot, policyFilePath = path_1.join(projectRoot, invariants_1.DEFAULT_SNYK_POLICY_FILE)) {
+    var _a;
+    if (!dotSnyk.exists(policyFilePath)) {
+        return [];
+    }
+    const config = dotSnyk.parse(policyFilePath);
+    return [
+        policyFilePath,
+        ...dotSnyk.toAbsolutePaths(projectRoot, (_a = config === null || config === void 0 ? void 0 : config.exclude) === null || _a === void 0 ? void 0 : _a.unmanaged),
+    ];
+}
+exports.getExcludedPatterns = getExcludedPatterns;
 //# sourceMappingURL=scan.js.map
 
 /***/ }),
@@ -150803,6 +150832,60 @@ exports.isBinary = isBinary;
 
 /***/ }),
 
+/***/ 24221:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.toAbsolutePaths = exports.parse = exports.exists = void 0;
+const fs_1 = __webpack_require__(35747);
+const yaml_1 = __webpack_require__(6792);
+const path_1 = __webpack_require__(85622);
+/**
+ * Checks if the snyk policy file exists in the provided path
+ * @param {string} policyPath - the path of the policy file.
+ * @returns {[boolean, Object]} - snyk policy file is present or not and the error in case of failure
+ */
+function exists(policyPath) {
+    return fs_1.existsSync(policyPath);
+}
+exports.exists = exists;
+/**
+ * Parses the snyk policy file content
+ * @param {string} policyPath - the path of the policy file.
+ * @returns {Object} - the content of the policy file
+ */
+function parse(policyPath) {
+    return yaml_1.parse(fs_1.readFileSync(policyPath, 'utf-8'));
+}
+exports.parse = parse;
+/**
+ * Resolves an array of paths relative to the basedir
+ * @param {string} basedir - the basedir used for resolving the paths
+ * @param {Array} paths - the paths to be resolved
+ * @returns {Array} - the resolved paths
+ */
+function toAbsolutePaths(basedir, paths = []) {
+    return paths.map((p) => path_1.resolve(basedir, p));
+}
+exports.toAbsolutePaths = toAbsolutePaths;
+//# sourceMappingURL=index.js.map
+
+/***/ }),
+
+/***/ 92141:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.DEFAULT_SNYK_POLICY_FILE = void 0;
+exports.DEFAULT_SNYK_POLICY_FILE = '.snyk';
+//# sourceMappingURL=invariants.js.map
+
+/***/ }),
+
 /***/ 68268:
 /***/ ((__unused_webpack_module, exports) => {