snyk 1.928.0 → 1.929.0

package/dist/cli/917.index.js

@@ -229,6 +229,175 @@ function shouldFail(vulnerableResults, failOn) {
 }
 
 
+/***/ }),
+
+/***/ 79304:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.getPackageJsonPathsContainingSnykDependency = exports.checkPackageJsonForSnykDependency = exports.packageJsonFileExistsInDirectory = exports.getProtectUpgradeWarningForPaths = void 0;
+const os_1 = __webpack_require__(12087);
+const theme = __webpack_require__(86988);
+const fs = __webpack_require__(35747);
+const path = __webpack_require__(85622);
+const createDebug = __webpack_require__(15158);
+const debug = createDebug('snyk-protect-update-notification');
+function getProtectUpgradeWarningForPaths(packageJsonPaths) {
+    try {
+        if ((packageJsonPaths === null || packageJsonPaths === void 0 ? void 0 : packageJsonPaths.length) > 0) {
+            let message = theme.color.status.warn(`${theme.icon.WARNING} WARNING: It looks like you have the \`snyk\` dependency in the \`package.json\` file(s) at the following path(s):` +
+                os_1.EOL);
+            packageJsonPaths.forEach((p) => {
+                message += theme.color.status.warn(`  - ${p}` + os_1.EOL);
+            });
+            const githubReadmeUrlShort = 'https://snyk.co/ud1cR'; // https://github.com/snyk/snyk/tree/master/packages/snyk-protect#migrating-from-snyk-protect-to-snykprotect
+            message += theme.color.status.warn(`For more information and migration instructions, see ${githubReadmeUrlShort}` +
+                os_1.EOL);
+            return message;
+        }
+        else {
+            return '';
+        }
+    }
+    catch (e) {
+        debug('Error in getProtectUpgradeWarningForPaths()', e);
+        return '';
+    }
+}
+exports.getProtectUpgradeWarningForPaths = getProtectUpgradeWarningForPaths;
+function packageJsonFileExistsInDirectory(directoryPath) {
+    try {
+        const packageJsonPath = path.resolve(directoryPath, 'package.json');
+        const fileExists = fs.existsSync(packageJsonPath);
+        return fileExists;
+    }
+    catch (e) {
+        debug('Error in packageJsonFileExistsInDirectory()', e);
+        return false;
+    }
+}
+exports.packageJsonFileExistsInDirectory = packageJsonFileExistsInDirectory;
+function checkPackageJsonForSnykDependency(packageJsonPath) {
+    try {
+        const fileExists = fs.existsSync(packageJsonPath);
+        if (fileExists) {
+            const packageJson = fs.readFileSync(packageJsonPath, 'utf8');
+            const packageJsonObject = JSON.parse(packageJson);
+            const snykDependency = packageJsonObject.dependencies['snyk'];
+            if (snykDependency) {
+                return true;
+            }
+        }
+    }
+    catch (e) {
+        debug('Error in checkPackageJsonForSnykDependency()', e);
+    }
+    return false;
+}
+exports.checkPackageJsonForSnykDependency = checkPackageJsonForSnykDependency;
+function getPackageJsonPathsContainingSnykDependency(fileOption, paths) {
+    const packageJsonPathsWithSnykDepForProtect = [];
+    try {
+        if (fileOption) {
+            if (fileOption.endsWith('package.json') ||
+                fileOption.endsWith('package-lock.json')) {
+                const directoryWithPackageJson = path.dirname(fileOption);
+                if (packageJsonFileExistsInDirectory(directoryWithPackageJson)) {
+                    const packageJsonPath = path.resolve(directoryWithPackageJson, 'package.json');
+                    const packageJsonContainsSnykDep = checkPackageJsonForSnykDependency(packageJsonPath);
+                    if (packageJsonContainsSnykDep) {
+                        packageJsonPathsWithSnykDepForProtect.push(packageJsonPath);
+                    }
+                }
+            }
+        }
+        else {
+            paths.forEach((testPath) => {
+                if (packageJsonFileExistsInDirectory(testPath)) {
+                    const packageJsonPath = path.resolve(testPath, 'package.json');
+                    const packageJsonContainsSnykDep = checkPackageJsonForSnykDependency(packageJsonPath);
+                    if (packageJsonContainsSnykDep) {
+                        packageJsonPathsWithSnykDepForProtect.push(packageJsonPath);
+                    }
+                }
+            });
+        }
+    }
+    catch (e) {
+        debug('Error in getPackageJsonPathsContainingSnykDependency()', e);
+    }
+    return packageJsonPathsWithSnykDepForProtect;
+}
+exports.getPackageJsonPathsContainingSnykDependency = getPackageJsonPathsContainingSnykDependency;
+
+
+/***/ }),
+
+/***/ 24083:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.notificationForSpotlightVulns = exports.containsSpotlightVulnIds = void 0;
+const theme = __webpack_require__(86988);
+const createDebug = __webpack_require__(15158);
+const os_1 = __webpack_require__(12087);
+const debug = createDebug('snyk-spotlight-vuln-notification');
+const spotlightVulnIds = ['SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720'];
+function containsSpotlightVulnIds(results) {
+    try {
+        const spotlightVulnsFound = new Set();
+        for (const r of results) {
+            if (r.vulnerabilities) {
+                for (const v of r.vulnerabilities) {
+                    if (spotlightVulnIds.includes(v.id)) {
+                        spotlightVulnsFound.add(v.id);
+                    }
+                }
+            }
+        }
+        return [...spotlightVulnsFound];
+    }
+    catch (err) {
+        debug('Error in containsSpotlightVulnIds()', err);
+        return [];
+    }
+}
+exports.containsSpotlightVulnIds = containsSpotlightVulnIds;
+function notificationForSpotlightVulns(foundSpotlightVulnsIds) {
+    try {
+        if (foundSpotlightVulnsIds.length > 0) {
+            let message = '';
+            for (const vulnId of spotlightVulnIds) {
+                if (vulnId === 'SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720') {
+                    message += theme.color.severity.critical(`${theme.icon.WARNING} WARNING: Critical severity vulnerabilities were found with Log4j!` +
+                        os_1.EOL);
+                    for (const vulnId of foundSpotlightVulnsIds) {
+                        message += `  - ${vulnId} (See https://snyk.io/vuln/${vulnId})`;
+                    }
+                    message += os_1.EOL + os_1.EOL;
+                    message +=
+                        theme.color.severity.critical(`We highly recommend fixing this vulnerability. If it cannot be fixed by upgrading, see mitigation information here:`) +
+                            os_1.EOL +
+                            '  - https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720' +
+                            os_1.EOL +
+                            '  - https://snyk.io/blog/log4shell-remediation-cheat-sheet/' +
+                            os_1.EOL;
+                }
+            }
+            return message;
+        }
+        return '';
+    }
+    catch (err) {
+        debug('Error in notificationForSpotlightVulns()', err);
+        return '';
+    }
+}
+exports.notificationForSpotlightVulns = notificationForSpotlightVulns;
+
+
 /***/ })
 
 };

package/dist/cli/917.index.js.map

@@ -1 +1 @@
-{"version":3,"file":"917.index.js","mappings":";;;;;;;;;;AAAA,yCAA+B;AAC/B,wCAAyB;AACzB,MAAM,SAAS,GAAG,mBAAO,CAAC,KAAkB,CAAC,CAAC;AAC9C,MAAM,MAAM,GAAG,mBAAO,CAAC,KAAe,CAAC,CAAC;AACxC,2CAA0B;AAC1B,4CAAsD;AAEtD,uCAAqC;AAGrC,2CAAyD;AAGzD,gDAGiC;AACjC,yCAAiC;AACjC,+CAA6E;AAC7E,kDAA8E;AAE9E,yDAG0D;AAE1D,yDAA6D;AAC7D,2DAA8D;AAC9D,8DAAmE;AACnE,0DAA6D;AAC7D,uDAAsD;AACtD,oDAA4E;AAC5E,6CAAoD;AAEpD,iEAGkD;AAClD,iEAGkD;AAClD,yCAAmC;AAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;AACjC,MAAM,SAAS,GAAG,6DAA6D,CAAC;AAEhF,oDAAoD;AAErC,KAAK,UAAU,IAAI,CAChC,GAAG,IAAgB;IAEnB,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,yCAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;IAExE,IAAI,eAAe,CAAC,GAAG,EAAE;QACvB,OAAO,MAAM,aAAc,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;KAC7C;IAED,MAAM,OAAO,GAAG,gDAAqB,CAAC,eAAe,CAAC,CAAC;IACvD,2CAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,0CAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,qCAAqC,GAAa,yEAA2C,CACjG,OAAO,CAAC,IAAI,EACZ,KAAK,CACN,CAAC;IAEF,SAAS,CAAC,GAAG,CACX,+BAA+B,EAC/B,qCAAqC,CAAC,MAAM,CAC7C,CAAC;IAEF,+DAA+D;IAC/D,8DAA8D;IAC9D,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;QACxC,MAAM,IAAI,wBAAe,EAAE,CAAC;KAC7B;IAED,MAAM,SAAS,GAAG,gCAAmB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,SAAS,EAAE;QACb,IAAI;YACF,MAAM,aAAa,GAAG,MAAM,0BAAa,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACrE,OAAO,aAAa,CAAC;SACtB;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,KAAK,EAAE;gBAC1B,MAAM,KAAK,CAAC;aACb;iBAAM;gBACL,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;aACxB;SACF;KACF;IAED,MAAM,aAAa,GAAiC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,EAAW,CAAC;IAE5B,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;QACxB,sDAAsD;QACtD,sDAAsD;QACtD,uBAAuB;QACvB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;QAEhD,IAAI,GAAwC,CAAC;QAC7C,IAAI;YACF,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SACvC;QAAC,OAAO,KAAK,EAAE;YACd,yDAAyD;YACzD,2BAA2B;YAC3B,GAAG,GAAG,mCAAe,CAAC,KAAK,CAAC,CAAC;SAC9B;QAED,sEAAsE;QACtE,iFAAiF;QACjF,qDAAqD;QACrD,MAAM,QAAQ,GAAU,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAEzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACxC,MAAM,2BAA2B,GAAG,KAAK,CAAC,8BAA8B,CACtE,IAAI,EACJ,QAAQ,CAAC,CAAC,CAAC,CACZ,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;YACzE,qGAAqG;YACrG,4FAA4F;YAC5F,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;gBAC1B,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aAC9B;iBAAM;gBACL,aAAa,CAAC,IAAI,CAChB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBAC1B,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;iBACtC,CAAC,CACH,CAAC;aACH;SACF;KACF;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC;QACnD,CAAC,GAAG,CAAC,MAAM;YACT,GAAG,CAAC,MAAM,CAAC,kBAAkB;YAC7B,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAC1C,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3C,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1D,8DAA8D;IAC9D,8DAA8D;IAC9D,2DAA2D;IAC3D,MAAM,aAAa,GAAG,2DAAqC,CAAC,OAAO,CAAC,CAAC;IAErE,MAAM,EACJ,MAAM,EAAE,UAAU,EAClB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,GAAG,kDAA4B,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAElE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE;QACjC,sCAAsC;QACtC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACxC,OAAO,yBAAiB,CAAC,2BAA2B,CAClD,eAAe,EACf,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;SACH;QAED,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,eAAe,CAAQ,CAAC;QAE9C,IAAI,oBAAoB,EAAE;YACxB,IAAI,OAAO,CAAC,MAAM,EAAE;gBAClB,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,CAAC,IAAI,EAAE;oBACT,iCAAiC;oBACjC,OAAO,yBAAiB,CAAC,2BAA2B,CAClD,eAAe,EACf,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;iBACH;aACF;YACD,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;YACnB,MAAM,iBAAiB,GAAG,UAAU,CAAC;YACrC,OAAO,iBAAiB,CAAC,eAAe,CAAC;YACzC,GAAG,CAAC,WAAW,GAAG,iBAAiB,CAAC;SACrC;QAED,IAAI,UAAU,EAAE;YACd,yDAAyD;YACzD,eAAe;YACf,mDAAmD;YACnD,wDAAwD;YACxD,mBAAmB;YACnB,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;SACjC;QACD,GAAG,CAAC,IAAI,GAAG,eAAe,CAAC;QAC3B,GAAG,CAAC,sBAAsB,GAAG,mBAAmB,CAAC;QACjD,GAAG,CAAC,uBAAuB,GAAG,oBAAoB,CAAC;QACnD,MAAM,GAAG,CAAC;KACX;IAED,IAAI,QAAQ,GAAG,OAAO;SACnB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjB,OAAO,8BAAa,CAClB,OAAO,CAAC,CAAC,CAAwB,EACjC,aAAa,CAAC,CAAC,CAAC,EAChB,MAAM,CAAC,iBAAiB,CACzB,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;IAE1B,IAAI,UAAU,EAAE;QACd,KAAK,CAAC,kBAAkB,YAAY,CAAC,MAAM,oBAAoB,CAAC,CAAC;QACjE,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACpE,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;KACJ;IAED,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC;IAE/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/D,cAAc;YACZ,gBAAgB,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE;gBAC5C,uCAA0B,CAAC,iBAAiB,EAAE,OAAO,CAAC;gBACtD,kCAAqB,CAAC,kBAAkB,CAAC;gBACzC,IAAI,CAAC;KACR;IAED,IAAI,UAAU,EAAE;QACd,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAQ,CAAC;QACzC,yDAAyD;QACzD,cAAc;QACd,8DAA8D;QAC9D,YAAY;QACZ,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClC,KAAK,CAAC,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAChD,KAAK,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACxC,MAAM,KAAK,CAAC;KACb;IAED,IAAI,oBAAoB,EAAE;QACxB,IAAI,OAAO,CAAC,MAAM,EAAE;YAClB,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,EAAE;gBACT,0CAA0C;gBAC1C,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC7C,QAAQ,IAAI,QAAG,GAAG,QAAG,CAAC;gBACtB,QAAQ,IAAI,8DAAgC,CAC1C,qCAAqC,CACtC,CAAC;gBAEF,OAAO,yBAAiB,CAAC,oCAAoC,CAC3D,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;aACH;SACF;QAED,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE3C,QAAQ,IAAI,QAAG,GAAG,QAAG,CAAC;QACtB,MAAM,qBAAqB,GAAG,sDAAwB,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,iBAAiB,GAAG,2DAA6B,CACrD,qBAAqB,CACtB,CAAC;QACF,QAAQ,IAAI,iBAAiB,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAQ,CAAC;QACzC,yDAAyD;QACzD,cAAc;QACd,8DAA8D;QAC9D,YAAY;QACZ,KAAK,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;QAClD,KAAK,CAAC,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACrD,KAAK,CAAC,sBAAsB,GAAG,mBAAmB,CAAC;QACnD,KAAK,CAAC,uBAAuB,GAAG,oBAAoB,CAAC;QACrD,MAAM,KAAK,CAAC;KACb;IAED,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,QAAQ,IAAI,QAAG,GAAG,QAAG,CAAC;IACtB,QAAQ,IAAI,8DAAgC,CAC1C,qCAAqC,CACtC,CAAC;IAEF,OAAO,yBAAiB,CAAC,oCAAoC,CAC3D,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;AACJ,CAAC;AA1PD,uBA0PC;AAED,SAAS,UAAU,CAAC,iBAAwB,EAAE,MAAc;IAC1D,2BAA2B;IAC3B,IAAI,MAAM,KAAK,KAAK,EAAE;QACpB,OAAO,uBAAQ,CAAC,iBAAiB,CAAC,CAAC;KACpC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE;QAC3B,OAAO,0BAAW,CAAC,iBAAiB,CAAC,CAAC;KACvC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE;QAC1B,OAAO,yBAAU,CAAC,iBAAiB,CAAC,CAAC;KACtC;IACD,2DAA2D;IAC3D,OAAO,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;AACtC,CAAC","sources":["webpack://snyk/./src/cli/commands/test/index.ts"],"sourcesContent":["import * as Debug from 'debug';\nimport { EOL } from 'os';\nconst cloneDeep = require('lodash.clonedeep');\nconst assign = require('lodash.assign');\nimport chalk from 'chalk';\nimport { MissingArgError } from '../../../lib/errors';\n\nimport * as snyk from '../../../lib';\nimport { Options, TestOptions } from '../../../lib/types';\nimport { MethodArgs } from '../../args';\nimport { TestCommandResult } from '../../commands/types';\nimport { LegacyVulnApiResult, TestResult } from '../../../lib/snyk-test/legacy';\n\nimport {\n  summariseErrorResults,\n  summariseVulnerableResults,\n} from '../../../lib/formatters';\nimport * as utils from './utils';\nimport { getEcosystemForTest, testEcosystem } from '../../../lib/ecosystems';\nimport { hasFixes, hasPatches, hasUpgrades } from '../../../lib/vuln-helpers';\nimport { FailOn } from '../../../lib/snyk-test/common';\nimport {\n  createErrorMappedResultsForJsonOutput,\n  extractDataToSendFromResults,\n} from '../../../lib/formatters/test/format-test-results';\n\nimport { validateCredentials } from './validate-credentials';\nimport { validateTestOptions } from './validate-test-options';\nimport { setDefaultTestOptions } from './set-default-test-options';\nimport { processCommandArgs } from '../process-command-args';\nimport { formatTestError } from './format-test-error';\nimport { displayResult } from '../../../lib/formatters/test/display-result';\nimport * as analytics from '../../../lib/analytics';\n\nimport {\n  getPackageJsonPathsContainingSnykDependency,\n  getProtectUpgradeWarningForPaths,\n} from '../../../lib/protect-update-notification';\nimport {\n  containsSpotlightVulnIds,\n  notificationForSpotlightVulns,\n} from '../../../lib/spotlight-vuln-notification';\nimport iacTestCommand from './iac';\n\nconst debug = Debug('snyk-test');\nconst SEPARATOR = '\\n-------------------------------------------------------\\n';\n\n// TODO: avoid using `as any` whenever it's possible\n\nexport default async function test(\n  ...args: MethodArgs\n): Promise<TestCommandResult> {\n  const { options: originalOptions, paths } = processCommandArgs(...args);\n\n  if (originalOptions.iac) {\n    return await iacTestCommand(false, ...args);\n  }\n\n  const options = setDefaultTestOptions(originalOptions);\n  validateTestOptions(options);\n  validateCredentials(options);\n\n  const packageJsonPathsWithSnykDepForProtect: string[] = getPackageJsonPathsContainingSnykDependency(\n    options.file,\n    paths,\n  );\n\n  analytics.add(\n    'upgradable-snyk-protect-paths',\n    packageJsonPathsWithSnykDepForProtect.length,\n  );\n\n  // Handles no image arg provided to the container command until\n  // a validation interface is implemented in the docker plugin.\n  if (options.docker && paths.length === 0) {\n    throw new MissingArgError();\n  }\n\n  const ecosystem = getEcosystemForTest(options);\n  if (ecosystem) {\n    try {\n      const commandResult = await testEcosystem(ecosystem, paths, options);\n      return commandResult;\n    } catch (error) {\n      if (error instanceof Error) {\n        throw error;\n      } else {\n        throw new Error(error);\n      }\n    }\n  }\n\n  const resultOptions: Array<Options & TestOptions> = [];\n  const results = [] as any[];\n\n  // Promise waterfall to test all other paths sequentially\n  for (const path of paths) {\n    // Create a copy of the options so a specific test can\n    // modify them i.e. add `options.file` etc. We'll need\n    // these options later.\n    const testOpts = cloneDeep(options);\n    testOpts.path = path;\n    testOpts.projectName = testOpts['project-name'];\n\n    let res: (TestResult | TestResult[]) | Error;\n    try {\n      res = await snyk.test(path, testOpts);\n    } catch (error) {\n      // not throwing here but instead returning error response\n      // for legacy flow reasons.\n      res = formatTestError(error);\n    }\n\n    // Not all test results are arrays in order to be backwards compatible\n    // with scripts that use a callback with test. Coerce results/errors to be arrays\n    // and add the result options to each to be displayed\n    const resArray: any[] = Array.isArray(res) ? res : [res];\n\n    for (let i = 0; i < resArray.length; i++) {\n      const pathWithOptionalProjectName = utils.getPathWithOptionalProjectName(\n        path,\n        resArray[i],\n      );\n      results.push(assign(resArray[i], { path: pathWithOptionalProjectName }));\n      // currently testOpts are identical for each test result returned even if it's for multiple projects.\n      // we want to return the project names, so will need to be crafty in a way that makes sense.\n      if (!testOpts.projectNames) {\n        resultOptions.push(testOpts);\n      } else {\n        resultOptions.push(\n          assign(cloneDeep(testOpts), {\n            projectName: testOpts.projectNames[i],\n          }),\n        );\n      }\n    }\n  }\n\n  const vulnerableResults = results.filter(\n    (res) =>\n      (res.vulnerabilities && res.vulnerabilities.length) ||\n      (res.result &&\n        res.result.cloudConfigResults &&\n        res.result.cloudConfigResults.length),\n  );\n  const errorResults = results.filter((res) => res instanceof Error);\n  const notSuccess = errorResults.length > 0;\n  const foundVulnerabilities = vulnerableResults.length > 0;\n\n  // resultOptions is now an array of 1 or more options used for\n  // the tests results is now an array of 1 or more test results\n  // values depend on `options.json` value - string or object\n  const mappedResults = createErrorMappedResultsForJsonOutput(results);\n\n  const {\n    stdout: dataToSend,\n    stringifiedData,\n    stringifiedJsonData,\n    stringifiedSarifData,\n  } = extractDataToSendFromResults(results, mappedResults, options);\n\n  if (options.json || options.sarif) {\n    // if all results are ok (.ok == true)\n    if (mappedResults.every((res) => res.ok)) {\n      return TestCommandResult.createJsonTestCommandResult(\n        stringifiedData,\n        stringifiedJsonData,\n        stringifiedSarifData,\n      );\n    }\n\n    const err = new Error(stringifiedData) as any;\n\n    if (foundVulnerabilities) {\n      if (options.failOn) {\n        const fail = shouldFail(vulnerableResults, options.failOn);\n        if (!fail) {\n          // return here to prevent failure\n          return TestCommandResult.createJsonTestCommandResult(\n            stringifiedData,\n            stringifiedJsonData,\n            stringifiedSarifData,\n          );\n        }\n      }\n      err.code = 'VULNS';\n      const dataToSendNoVulns = dataToSend;\n      delete dataToSendNoVulns.vulnerabilities;\n      err.jsonNoVulns = dataToSendNoVulns;\n    }\n\n    if (notSuccess) {\n      // Take the code of the first problem to go through error\n      // translation.\n      // Note: this is done based on the logic done below\n      // for non-json/sarif outputs, where we take the code of\n      // the first error.\n      err.code = errorResults[0].code;\n    }\n    err.json = stringifiedData;\n    err.jsonStringifiedResults = stringifiedJsonData;\n    err.sarifStringifiedResults = stringifiedSarifData;\n    throw err;\n  }\n\n  let response = results\n    .map((result, i) => {\n      return displayResult(\n        results[i] as LegacyVulnApiResult,\n        resultOptions[i],\n        result.foundProjectCount,\n      );\n    })\n    .join(`\\n${SEPARATOR}`);\n\n  if (notSuccess) {\n    debug(`Failed to test ${errorResults.length} projects, errors:`);\n    errorResults.forEach((err) => {\n      const errString = err.stack ? err.stack.toString() : err.toString();\n      debug('error: %s', errString);\n    });\n  }\n\n  let summaryMessage = '';\n  const errorResultsLength = errorResults.length;\n\n  if (results.length > 1) {\n    const projects = results.length === 1 ? 'project' : 'projects';\n    summaryMessage =\n      `\\n\\n\\nTested ${results.length} ${projects}` +\n      summariseVulnerableResults(vulnerableResults, options) +\n      summariseErrorResults(errorResultsLength) +\n      '\\n';\n  }\n\n  if (notSuccess) {\n    response += chalk.bold.red(summaryMessage);\n    const error = new Error(response) as any;\n    // take the code of the first problem to go through error\n    // translation\n    // HACK as there can be different errors, and we pass only the\n    // first one\n    error.code = errorResults[0].code;\n    error.userMessage = errorResults[0].userMessage;\n    error.strCode = errorResults[0].strCode;\n    throw error;\n  }\n\n  if (foundVulnerabilities) {\n    if (options.failOn) {\n      const fail = shouldFail(vulnerableResults, options.failOn);\n      if (!fail) {\n        // return here to prevent throwing failure\n        response += chalk.bold.green(summaryMessage);\n        response += EOL + EOL;\n        response += getProtectUpgradeWarningForPaths(\n          packageJsonPathsWithSnykDepForProtect,\n        );\n\n        return TestCommandResult.createHumanReadableTestCommandResult(\n          response,\n          stringifiedJsonData,\n          stringifiedSarifData,\n        );\n      }\n    }\n\n    response += chalk.bold.red(summaryMessage);\n\n    response += EOL + EOL;\n    const foundSpotlightVulnIds = containsSpotlightVulnIds(results);\n    const spotlightVulnsMsg = notificationForSpotlightVulns(\n      foundSpotlightVulnIds,\n    );\n    response += spotlightVulnsMsg;\n\n    const error = new Error(response) as any;\n    // take the code of the first problem to go through error\n    // translation\n    // HACK as there can be different errors, and we pass only the\n    // first one\n    error.code = vulnerableResults[0].code || 'VULNS';\n    error.userMessage = vulnerableResults[0].userMessage;\n    error.jsonStringifiedResults = stringifiedJsonData;\n    error.sarifStringifiedResults = stringifiedSarifData;\n    throw error;\n  }\n\n  response += chalk.bold.green(summaryMessage);\n  response += EOL + EOL;\n  response += getProtectUpgradeWarningForPaths(\n    packageJsonPathsWithSnykDepForProtect,\n  );\n\n  return TestCommandResult.createHumanReadableTestCommandResult(\n    response,\n    stringifiedJsonData,\n    stringifiedSarifData,\n  );\n}\n\nfunction shouldFail(vulnerableResults: any[], failOn: FailOn) {\n  // find reasons not to fail\n  if (failOn === 'all') {\n    return hasFixes(vulnerableResults);\n  }\n  if (failOn === 'upgradable') {\n    return hasUpgrades(vulnerableResults);\n  }\n  if (failOn === 'patchable') {\n    return hasPatches(vulnerableResults);\n  }\n  // should fail by default when there are vulnerable results\n  return vulnerableResults.length > 0;\n}\n"],"names":[],"sourceRoot":""}
+{"version":3,"file":"917.index.js","mappings":";;;;;;;;;;AAAA,yCAA+B;AAC/B,wCAAyB;AACzB,MAAM,SAAS,GAAG,mBAAO,CAAC,KAAkB,CAAC,CAAC;AAC9C,MAAM,MAAM,GAAG,mBAAO,CAAC,KAAe,CAAC,CAAC;AACxC,2CAA0B;AAC1B,4CAAsD;AAEtD,uCAAqC;AAGrC,2CAAyD;AAGzD,gDAGiC;AACjC,yCAAiC;AACjC,+CAA6E;AAC7E,kDAA8E;AAE9E,yDAG0D;AAE1D,yDAA6D;AAC7D,2DAA8D;AAC9D,8DAAmE;AACnE,0DAA6D;AAC7D,uDAAsD;AACtD,oDAA4E;AAC5E,6CAAoD;AAEpD,iEAGkD;AAClD,iEAGkD;AAClD,yCAAmC;AAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;AACjC,MAAM,SAAS,GAAG,6DAA6D,CAAC;AAEhF,oDAAoD;AAErC,KAAK,UAAU,IAAI,CAChC,GAAG,IAAgB;IAEnB,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,yCAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;IAExE,IAAI,eAAe,CAAC,GAAG,EAAE;QACvB,OAAO,MAAM,aAAc,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;KAC7C;IAED,MAAM,OAAO,GAAG,gDAAqB,CAAC,eAAe,CAAC,CAAC;IACvD,2CAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,0CAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,qCAAqC,GAAa,yEAA2C,CACjG,OAAO,CAAC,IAAI,EACZ,KAAK,CACN,CAAC;IAEF,SAAS,CAAC,GAAG,CACX,+BAA+B,EAC/B,qCAAqC,CAAC,MAAM,CAC7C,CAAC;IAEF,+DAA+D;IAC/D,8DAA8D;IAC9D,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;QACxC,MAAM,IAAI,wBAAe,EAAE,CAAC;KAC7B;IAED,MAAM,SAAS,GAAG,gCAAmB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,SAAS,EAAE;QACb,IAAI;YACF,MAAM,aAAa,GAAG,MAAM,0BAAa,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACrE,OAAO,aAAa,CAAC;SACtB;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,KAAK,EAAE;gBAC1B,MAAM,KAAK,CAAC;aACb;iBAAM;gBACL,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;aACxB;SACF;KACF;IAED,MAAM,aAAa,GAAiC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,EAAW,CAAC;IAE5B,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;QACxB,sDAAsD;QACtD,sDAAsD;QACtD,uBAAuB;QACvB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;QAEhD,IAAI,GAAwC,CAAC;QAC7C,IAAI;YACF,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SACvC;QAAC,OAAO,KAAK,EAAE;YACd,yDAAyD;YACzD,2BAA2B;YAC3B,GAAG,GAAG,mCAAe,CAAC,KAAK,CAAC,CAAC;SAC9B;QAED,sEAAsE;QACtE,iFAAiF;QACjF,qDAAqD;QACrD,MAAM,QAAQ,GAAU,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAEzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACxC,MAAM,2BAA2B,GAAG,KAAK,CAAC,8BAA8B,CACtE,IAAI,EACJ,QAAQ,CAAC,CAAC,CAAC,CACZ,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;YACzE,qGAAqG;YACrG,4FAA4F;YAC5F,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;gBAC1B,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aAC9B;iBAAM;gBACL,aAAa,CAAC,IAAI,CAChB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBAC1B,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;iBACtC,CAAC,CACH,CAAC;aACH;SACF;KACF;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC;QACnD,CAAC,GAAG,CAAC,MAAM;YACT,GAAG,CAAC,MAAM,CAAC,kBAAkB;YAC7B,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAC1C,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3C,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1D,8DAA8D;IAC9D,8DAA8D;IAC9D,2DAA2D;IAC3D,MAAM,aAAa,GAAG,2DAAqC,CAAC,OAAO,CAAC,CAAC;IAErE,MAAM,EACJ,MAAM,EAAE,UAAU,EAClB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,GAAG,kDAA4B,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAElE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE;QACjC,sCAAsC;QACtC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACxC,OAAO,yBAAiB,CAAC,2BAA2B,CAClD,eAAe,EACf,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;SACH;QAED,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,eAAe,CAAQ,CAAC;QAE9C,IAAI,oBAAoB,EAAE;YACxB,IAAI,OAAO,CAAC,MAAM,EAAE;gBAClB,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,CAAC,IAAI,EAAE;oBACT,iCAAiC;oBACjC,OAAO,yBAAiB,CAAC,2BAA2B,CAClD,eAAe,EACf,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;iBACH;aACF;YACD,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;YACnB,MAAM,iBAAiB,GAAG,UAAU,CAAC;YACrC,OAAO,iBAAiB,CAAC,eAAe,CAAC;YACzC,GAAG,CAAC,WAAW,GAAG,iBAAiB,CAAC;SACrC;QAED,IAAI,UAAU,EAAE;YACd,yDAAyD;YACzD,eAAe;YACf,mDAAmD;YACnD,wDAAwD;YACxD,mBAAmB;YACnB,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;SACjC;QACD,GAAG,CAAC,IAAI,GAAG,eAAe,CAAC;QAC3B,GAAG,CAAC,sBAAsB,GAAG,mBAAmB,CAAC;QACjD,GAAG,CAAC,uBAAuB,GAAG,oBAAoB,CAAC;QACnD,MAAM,GAAG,CAAC;KACX;IAED,IAAI,QAAQ,GAAG,OAAO;SACnB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjB,OAAO,8BAAa,CAClB,OAAO,CAAC,CAAC,CAAwB,EACjC,aAAa,CAAC,CAAC,CAAC,EAChB,MAAM,CAAC,iBAAiB,CACzB,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;IAE1B,IAAI,UAAU,EAAE;QACd,KAAK,CAAC,kBAAkB,YAAY,CAAC,MAAM,oBAAoB,CAAC,CAAC;QACjE,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACpE,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;KACJ;IAED,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC;IAE/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/D,cAAc;YACZ,gBAAgB,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE;gBAC5C,uCAA0B,CAAC,iBAAiB,EAAE,OAAO,CAAC;gBACtD,kCAAqB,CAAC,kBAAkB,CAAC;gBACzC,IAAI,CAAC;KACR;IAED,IAAI,UAAU,EAAE;QACd,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAQ,CAAC;QACzC,yDAAyD;QACzD,cAAc;QACd,8DAA8D;QAC9D,YAAY;QACZ,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClC,KAAK,CAAC,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAChD,KAAK,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACxC,MAAM,KAAK,CAAC;KACb;IAED,IAAI,oBAAoB,EAAE;QACxB,IAAI,OAAO,CAAC,MAAM,EAAE;YAClB,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,EAAE;gBACT,0CAA0C;gBAC1C,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC7C,QAAQ,IAAI,QAAG,GAAG,QAAG,CAAC;gBACtB,QAAQ,IAAI,8DAAgC,CAC1C,qCAAqC,CACtC,CAAC;gBAEF,OAAO,yBAAiB,CAAC,oCAAoC,CAC3D,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;aACH;SACF;QAED,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE3C,QAAQ,IAAI,QAAG,GAAG,QAAG,CAAC;QACtB,MAAM,qBAAqB,GAAG,sDAAwB,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,iBAAiB,GAAG,2DAA6B,CACrD,qBAAqB,CACtB,CAAC;QACF,QAAQ,IAAI,iBAAiB,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAQ,CAAC;QACzC,yDAAyD;QACzD,cAAc;QACd,8DAA8D;QAC9D,YAAY;QACZ,KAAK,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;QAClD,KAAK,CAAC,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACrD,KAAK,CAAC,sBAAsB,GAAG,mBAAmB,CAAC;QACnD,KAAK,CAAC,uBAAuB,GAAG,oBAAoB,CAAC;QACrD,MAAM,KAAK,CAAC;KACb;IAED,QAAQ,IAAI,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,QAAQ,IAAI,QAAG,GAAG,QAAG,CAAC;IACtB,QAAQ,IAAI,8DAAgC,CAC1C,qCAAqC,CACtC,CAAC;IAEF,OAAO,yBAAiB,CAAC,oCAAoC,CAC3D,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;AACJ,CAAC;AA1PD,uBA0PC;AAED,SAAS,UAAU,CAAC,iBAAwB,EAAE,MAAc;IAC1D,2BAA2B;IAC3B,IAAI,MAAM,KAAK,KAAK,EAAE;QACpB,OAAO,uBAAQ,CAAC,iBAAiB,CAAC,CAAC;KACpC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE;QAC3B,OAAO,0BAAW,CAAC,iBAAiB,CAAC,CAAC;KACvC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE;QAC1B,OAAO,yBAAU,CAAC,iBAAiB,CAAC,CAAC;KACtC;IACD,2DAA2D;IAC3D,OAAO,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;AACtC,CAAC;;;;;;;;;;;AC1TD,wCAAyB;AACzB,yCAAiC;AACjC,sCAAyB;AACzB,wCAA6B;AAC7B,+CAAqC;AAErC,MAAM,KAAK,GAAG,WAAW,CAAC,kCAAkC,CAAC,CAAC;AAE9D,SAAgB,gCAAgC,CAC9C,gBAA0B;IAE1B,IAAI;QACF,IAAI,iBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,MAAM,IAAG,CAAC,EAAE;YAChC,IAAI,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CACnC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,oHAAoH;gBACvI,QAAG,CACN,CAAC;YAEF,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7B,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,QAAG,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,CAAC,4GAA4G;YAElK,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAChC,wDAAwD,oBAAoB,EAAE;gBAC5E,QAAG,CACN,CAAC;YAEF,OAAO,OAAO,CAAC;SAChB;aAAM;YACL,OAAO,EAAE,CAAC;SACX;KACF;IAAC,OAAO,CAAC,EAAE;QACV,KAAK,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AA7BD,4EA6BC;AAED,SAAgB,gCAAgC,CAC9C,aAAqB;IAErB,IAAI;QACF,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC;KACnB;IAAC,OAAO,CAAC,EAAE;QACV,KAAK,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAXD,4EAWC;AAED,SAAgB,iCAAiC,CAC/C,eAAuB;IAEvB,IAAI;QACF,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,UAAU,EAAE;YACd,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAClD,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC9D,IAAI,cAAc,EAAE;gBAClB,OAAO,IAAI,CAAC;aACb;SACF;KACF;IAAC,OAAO,CAAC,EAAE;QACV,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;KAC1D;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAjBD,8EAiBC;AAED,SAAgB,2CAA2C,CACzD,UAA8B,EAC9B,KAAe;IAEf,MAAM,qCAAqC,GAAa,EAAE,CAAC;IAE3D,IAAI;QACF,IAAI,UAAU,EAAE;YACd,IACE,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACnC,UAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACxC;gBACA,MAAM,wBAAwB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC1D,IAAI,gCAAgC,CAAC,wBAAwB,CAAC,EAAE;oBAC9D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAClC,wBAAwB,EACxB,cAAc,CACf,CAAC;oBACF,MAAM,0BAA0B,GAAG,iCAAiC,CAClE,eAAe,CAChB,CAAC;oBACF,IAAI,0BAA0B,EAAE;wBAC9B,qCAAqC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;qBAC7D;iBACF;aACF;SACF;aAAM;YACL,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACzB,IAAI,gCAAgC,CAAC,QAAQ,CAAC,EAAE;oBAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;oBAC/D,MAAM,0BAA0B,GAAG,iCAAiC,CAClE,eAAe,CAChB,CAAC;oBACF,IAAI,0BAA0B,EAAE;wBAC9B,qCAAqC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;qBAC7D;iBACF;YACH,CAAC,CAAC,CAAC;SACJ;KACF;IAAC,OAAO,CAAC,EAAE;QACV,KAAK,CAAC,wDAAwD,EAAE,CAAC,CAAC,CAAC;KACpE;IAED,OAAO,qCAAqC,CAAC;AAC/C,CAAC;AA5CD,kGA4CC;;;;;;;;;;;ACnHD,yCAAiC;AACjC,+CAAqC;AACrC,wCAAyB;AAEzB,MAAM,KAAK,GAAG,WAAW,CAAC,kCAAkC,CAAC,CAAC;AAE9D,MAAM,gBAAgB,GAAG,CAAC,yCAAyC,CAAC,CAAC;AAErE,SAAgB,wBAAwB,CAAC,OAAc;IACrD,IAAI;QACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE;YACvB,IAAI,CAAC,CAAC,eAAe,EAAE;gBACrB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE;oBACjC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;wBACnC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC/B;iBACF;aACF;SACF;QACD,OAAO,CAAC,GAAG,mBAAmB,CAAC,CAAC;KACjC;IAAC,OAAO,GAAG,EAAE;QACZ,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AAjBD,4DAiBC;AAID,SAAgB,6BAA6B,CAC3C,sBAAyC;IAEzC,IAAI;QACF,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE;YACrC,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE;gBACrC,IAAI,MAAM,KAAK,yCAAyC,EAAE;oBACxD,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CACtC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,oEAAoE;wBACvF,QAAG,CACN,CAAC;oBAEF,KAAK,MAAM,MAAM,IAAI,sBAAsB,EAAE;wBAC3C,OAAO,IAAI,OAAO,MAAM,8BAA8B,MAAM,GAAG,CAAC;qBACjE;oBAED,OAAO,IAAI,QAAG,GAAG,QAAG,CAAC;oBACrB,OAAO;wBACL,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAC3B,qHAAqH,CACtH;4BACD,QAAG;4BACH,2EAA2E;4BAC3E,QAAG;4BACH,6DAA6D;4BAC7D,QAAG,CAAC;iBACP;aACF;YACD,OAAO,OAAO,CAAC;SAChB;QACD,OAAO,EAAE,CAAC;KACX;IAAC,OAAO,GAAG,EAAE;QACZ,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AApCD,sEAoCC","sources":["webpack://snyk/./src/cli/commands/test/index.ts","webpack://snyk/./src/lib/protect-update-notification.ts","webpack://snyk/./src/lib/spotlight-vuln-notification.ts"],"sourcesContent":["import * as Debug from 'debug';\nimport { EOL } from 'os';\nconst cloneDeep = require('lodash.clonedeep');\nconst assign = require('lodash.assign');\nimport chalk from 'chalk';\nimport { MissingArgError } from '../../../lib/errors';\n\nimport * as snyk from '../../../lib';\nimport { Options, TestOptions } from '../../../lib/types';\nimport { MethodArgs } from '../../args';\nimport { TestCommandResult } from '../../commands/types';\nimport { LegacyVulnApiResult, TestResult } from '../../../lib/snyk-test/legacy';\n\nimport {\n  summariseErrorResults,\n  summariseVulnerableResults,\n} from '../../../lib/formatters';\nimport * as utils from './utils';\nimport { getEcosystemForTest, testEcosystem } from '../../../lib/ecosystems';\nimport { hasFixes, hasPatches, hasUpgrades } from '../../../lib/vuln-helpers';\nimport { FailOn } from '../../../lib/snyk-test/common';\nimport {\n  createErrorMappedResultsForJsonOutput,\n  extractDataToSendFromResults,\n} from '../../../lib/formatters/test/format-test-results';\n\nimport { validateCredentials } from './validate-credentials';\nimport { validateTestOptions } from './validate-test-options';\nimport { setDefaultTestOptions } from './set-default-test-options';\nimport { processCommandArgs } from '../process-command-args';\nimport { formatTestError } from './format-test-error';\nimport { displayResult } from '../../../lib/formatters/test/display-result';\nimport * as analytics from '../../../lib/analytics';\n\nimport {\n  getPackageJsonPathsContainingSnykDependency,\n  getProtectUpgradeWarningForPaths,\n} from '../../../lib/protect-update-notification';\nimport {\n  containsSpotlightVulnIds,\n  notificationForSpotlightVulns,\n} from '../../../lib/spotlight-vuln-notification';\nimport iacTestCommand from './iac';\n\nconst debug = Debug('snyk-test');\nconst SEPARATOR = '\\n-------------------------------------------------------\\n';\n\n// TODO: avoid using `as any` whenever it's possible\n\nexport default async function test(\n  ...args: MethodArgs\n): Promise<TestCommandResult> {\n  const { options: originalOptions, paths } = processCommandArgs(...args);\n\n  if (originalOptions.iac) {\n    return await iacTestCommand(false, ...args);\n  }\n\n  const options = setDefaultTestOptions(originalOptions);\n  validateTestOptions(options);\n  validateCredentials(options);\n\n  const packageJsonPathsWithSnykDepForProtect: string[] = getPackageJsonPathsContainingSnykDependency(\n    options.file,\n    paths,\n  );\n\n  analytics.add(\n    'upgradable-snyk-protect-paths',\n    packageJsonPathsWithSnykDepForProtect.length,\n  );\n\n  // Handles no image arg provided to the container command until\n  // a validation interface is implemented in the docker plugin.\n  if (options.docker && paths.length === 0) {\n    throw new MissingArgError();\n  }\n\n  const ecosystem = getEcosystemForTest(options);\n  if (ecosystem) {\n    try {\n      const commandResult = await testEcosystem(ecosystem, paths, options);\n      return commandResult;\n    } catch (error) {\n      if (error instanceof Error) {\n        throw error;\n      } else {\n        throw new Error(error);\n      }\n    }\n  }\n\n  const resultOptions: Array<Options & TestOptions> = [];\n  const results = [] as any[];\n\n  // Promise waterfall to test all other paths sequentially\n  for (const path of paths) {\n    // Create a copy of the options so a specific test can\n    // modify them i.e. add `options.file` etc. We'll need\n    // these options later.\n    const testOpts = cloneDeep(options);\n    testOpts.path = path;\n    testOpts.projectName = testOpts['project-name'];\n\n    let res: (TestResult | TestResult[]) | Error;\n    try {\n      res = await snyk.test(path, testOpts);\n    } catch (error) {\n      // not throwing here but instead returning error response\n      // for legacy flow reasons.\n      res = formatTestError(error);\n    }\n\n    // Not all test results are arrays in order to be backwards compatible\n    // with scripts that use a callback with test. Coerce results/errors to be arrays\n    // and add the result options to each to be displayed\n    const resArray: any[] = Array.isArray(res) ? res : [res];\n\n    for (let i = 0; i < resArray.length; i++) {\n      const pathWithOptionalProjectName = utils.getPathWithOptionalProjectName(\n        path,\n        resArray[i],\n      );\n      results.push(assign(resArray[i], { path: pathWithOptionalProjectName }));\n      // currently testOpts are identical for each test result returned even if it's for multiple projects.\n      // we want to return the project names, so will need to be crafty in a way that makes sense.\n      if (!testOpts.projectNames) {\n        resultOptions.push(testOpts);\n      } else {\n        resultOptions.push(\n          assign(cloneDeep(testOpts), {\n            projectName: testOpts.projectNames[i],\n          }),\n        );\n      }\n    }\n  }\n\n  const vulnerableResults = results.filter(\n    (res) =>\n      (res.vulnerabilities && res.vulnerabilities.length) ||\n      (res.result &&\n        res.result.cloudConfigResults &&\n        res.result.cloudConfigResults.length),\n  );\n  const errorResults = results.filter((res) => res instanceof Error);\n  const notSuccess = errorResults.length > 0;\n  const foundVulnerabilities = vulnerableResults.length > 0;\n\n  // resultOptions is now an array of 1 or more options used for\n  // the tests results is now an array of 1 or more test results\n  // values depend on `options.json` value - string or object\n  const mappedResults = createErrorMappedResultsForJsonOutput(results);\n\n  const {\n    stdout: dataToSend,\n    stringifiedData,\n    stringifiedJsonData,\n    stringifiedSarifData,\n  } = extractDataToSendFromResults(results, mappedResults, options);\n\n  if (options.json || options.sarif) {\n    // if all results are ok (.ok == true)\n    if (mappedResults.every((res) => res.ok)) {\n      return TestCommandResult.createJsonTestCommandResult(\n        stringifiedData,\n        stringifiedJsonData,\n        stringifiedSarifData,\n      );\n    }\n\n    const err = new Error(stringifiedData) as any;\n\n    if (foundVulnerabilities) {\n      if (options.failOn) {\n        const fail = shouldFail(vulnerableResults, options.failOn);\n        if (!fail) {\n          // return here to prevent failure\n          return TestCommandResult.createJsonTestCommandResult(\n            stringifiedData,\n            stringifiedJsonData,\n            stringifiedSarifData,\n          );\n        }\n      }\n      err.code = 'VULNS';\n      const dataToSendNoVulns = dataToSend;\n      delete dataToSendNoVulns.vulnerabilities;\n      err.jsonNoVulns = dataToSendNoVulns;\n    }\n\n    if (notSuccess) {\n      // Take the code of the first problem to go through error\n      // translation.\n      // Note: this is done based on the logic done below\n      // for non-json/sarif outputs, where we take the code of\n      // the first error.\n      err.code = errorResults[0].code;\n    }\n    err.json = stringifiedData;\n    err.jsonStringifiedResults = stringifiedJsonData;\n    err.sarifStringifiedResults = stringifiedSarifData;\n    throw err;\n  }\n\n  let response = results\n    .map((result, i) => {\n      return displayResult(\n        results[i] as LegacyVulnApiResult,\n        resultOptions[i],\n        result.foundProjectCount,\n      );\n    })\n    .join(`\\n${SEPARATOR}`);\n\n  if (notSuccess) {\n    debug(`Failed to test ${errorResults.length} projects, errors:`);\n    errorResults.forEach((err) => {\n      const errString = err.stack ? err.stack.toString() : err.toString();\n      debug('error: %s', errString);\n    });\n  }\n\n  let summaryMessage = '';\n  const errorResultsLength = errorResults.length;\n\n  if (results.length > 1) {\n    const projects = results.length === 1 ? 'project' : 'projects';\n    summaryMessage =\n      `\\n\\n\\nTested ${results.length} ${projects}` +\n      summariseVulnerableResults(vulnerableResults, options) +\n      summariseErrorResults(errorResultsLength) +\n      '\\n';\n  }\n\n  if (notSuccess) {\n    response += chalk.bold.red(summaryMessage);\n    const error = new Error(response) as any;\n    // take the code of the first problem to go through error\n    // translation\n    // HACK as there can be different errors, and we pass only the\n    // first one\n    error.code = errorResults[0].code;\n    error.userMessage = errorResults[0].userMessage;\n    error.strCode = errorResults[0].strCode;\n    throw error;\n  }\n\n  if (foundVulnerabilities) {\n    if (options.failOn) {\n      const fail = shouldFail(vulnerableResults, options.failOn);\n      if (!fail) {\n        // return here to prevent throwing failure\n        response += chalk.bold.green(summaryMessage);\n        response += EOL + EOL;\n        response += getProtectUpgradeWarningForPaths(\n          packageJsonPathsWithSnykDepForProtect,\n        );\n\n        return TestCommandResult.createHumanReadableTestCommandResult(\n          response,\n          stringifiedJsonData,\n          stringifiedSarifData,\n        );\n      }\n    }\n\n    response += chalk.bold.red(summaryMessage);\n\n    response += EOL + EOL;\n    const foundSpotlightVulnIds = containsSpotlightVulnIds(results);\n    const spotlightVulnsMsg = notificationForSpotlightVulns(\n      foundSpotlightVulnIds,\n    );\n    response += spotlightVulnsMsg;\n\n    const error = new Error(response) as any;\n    // take the code of the first problem to go through error\n    // translation\n    // HACK as there can be different errors, and we pass only the\n    // first one\n    error.code = vulnerableResults[0].code || 'VULNS';\n    error.userMessage = vulnerableResults[0].userMessage;\n    error.jsonStringifiedResults = stringifiedJsonData;\n    error.sarifStringifiedResults = stringifiedSarifData;\n    throw error;\n  }\n\n  response += chalk.bold.green(summaryMessage);\n  response += EOL + EOL;\n  response += getProtectUpgradeWarningForPaths(\n    packageJsonPathsWithSnykDepForProtect,\n  );\n\n  return TestCommandResult.createHumanReadableTestCommandResult(\n    response,\n    stringifiedJsonData,\n    stringifiedSarifData,\n  );\n}\n\nfunction shouldFail(vulnerableResults: any[], failOn: FailOn) {\n  // find reasons not to fail\n  if (failOn === 'all') {\n    return hasFixes(vulnerableResults);\n  }\n  if (failOn === 'upgradable') {\n    return hasUpgrades(vulnerableResults);\n  }\n  if (failOn === 'patchable') {\n    return hasPatches(vulnerableResults);\n  }\n  // should fail by default when there are vulnerable results\n  return vulnerableResults.length > 0;\n}\n","import { EOL } from 'os';\nimport * as theme from './theme';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as createDebug from 'debug';\n\nconst debug = createDebug('snyk-protect-update-notification');\n\nexport function getProtectUpgradeWarningForPaths(\n  packageJsonPaths: string[],\n): string {\n  try {\n    if (packageJsonPaths?.length > 0) {\n      let message = theme.color.status.warn(\n        `${theme.icon.WARNING} WARNING: It looks like you have the \\`snyk\\` dependency in the \\`package.json\\` file(s) at the following path(s):` +\n          EOL,\n      );\n\n      packageJsonPaths.forEach((p) => {\n        message += theme.color.status.warn(`  - ${p}` + EOL);\n      });\n\n      const githubReadmeUrlShort = 'https://snyk.co/ud1cR'; // https://github.com/snyk/snyk/tree/master/packages/snyk-protect#migrating-from-snyk-protect-to-snykprotect\n\n      message += theme.color.status.warn(\n        `For more information and migration instructions, see ${githubReadmeUrlShort}` +\n          EOL,\n      );\n\n      return message;\n    } else {\n      return '';\n    }\n  } catch (e) {\n    debug('Error in getProtectUpgradeWarningForPaths()', e);\n    return '';\n  }\n}\n\nexport function packageJsonFileExistsInDirectory(\n  directoryPath: string,\n): boolean {\n  try {\n    const packageJsonPath = path.resolve(directoryPath, 'package.json');\n    const fileExists = fs.existsSync(packageJsonPath);\n    return fileExists;\n  } catch (e) {\n    debug('Error in packageJsonFileExistsInDirectory()', e);\n    return false;\n  }\n}\n\nexport function checkPackageJsonForSnykDependency(\n  packageJsonPath: string,\n): boolean {\n  try {\n    const fileExists = fs.existsSync(packageJsonPath);\n    if (fileExists) {\n      const packageJson = fs.readFileSync(packageJsonPath, 'utf8');\n      const packageJsonObject = JSON.parse(packageJson);\n      const snykDependency = packageJsonObject.dependencies['snyk'];\n      if (snykDependency) {\n        return true;\n      }\n    }\n  } catch (e) {\n    debug('Error in checkPackageJsonForSnykDependency()', e);\n  }\n  return false;\n}\n\nexport function getPackageJsonPathsContainingSnykDependency(\n  fileOption: string | undefined,\n  paths: string[],\n): string[] {\n  const packageJsonPathsWithSnykDepForProtect: string[] = [];\n\n  try {\n    if (fileOption) {\n      if (\n        fileOption.endsWith('package.json') ||\n        fileOption.endsWith('package-lock.json')\n      ) {\n        const directoryWithPackageJson = path.dirname(fileOption);\n        if (packageJsonFileExistsInDirectory(directoryWithPackageJson)) {\n          const packageJsonPath = path.resolve(\n            directoryWithPackageJson,\n            'package.json',\n          );\n          const packageJsonContainsSnykDep = checkPackageJsonForSnykDependency(\n            packageJsonPath,\n          );\n          if (packageJsonContainsSnykDep) {\n            packageJsonPathsWithSnykDepForProtect.push(packageJsonPath);\n          }\n        }\n      }\n    } else {\n      paths.forEach((testPath) => {\n        if (packageJsonFileExistsInDirectory(testPath)) {\n          const packageJsonPath = path.resolve(testPath, 'package.json');\n          const packageJsonContainsSnykDep = checkPackageJsonForSnykDependency(\n            packageJsonPath,\n          );\n          if (packageJsonContainsSnykDep) {\n            packageJsonPathsWithSnykDepForProtect.push(packageJsonPath);\n          }\n        }\n      });\n    }\n  } catch (e) {\n    debug('Error in getPackageJsonPathsContainingSnykDependency()', e);\n  }\n\n  return packageJsonPathsWithSnykDepForProtect;\n}\n","import * as theme from './theme';\nimport * as createDebug from 'debug';\nimport { EOL } from 'os';\n\nconst debug = createDebug('snyk-spotlight-vuln-notification');\n\nconst spotlightVulnIds = ['SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720'];\n\nexport function containsSpotlightVulnIds(results: any[]): string[] {\n  try {\n    const spotlightVulnsFound = new Set<string>();\n    for (const r of results) {\n      if (r.vulnerabilities) {\n        for (const v of r.vulnerabilities) {\n          if (spotlightVulnIds.includes(v.id)) {\n            spotlightVulnsFound.add(v.id);\n          }\n        }\n      }\n    }\n    return [...spotlightVulnsFound];\n  } catch (err) {\n    debug('Error in containsSpotlightVulnIds()', err);\n    return [];\n  }\n}\n\ntype VulnerabilityId = string;\n\nexport function notificationForSpotlightVulns(\n  foundSpotlightVulnsIds: VulnerabilityId[],\n) {\n  try {\n    if (foundSpotlightVulnsIds.length > 0) {\n      let message = '';\n      for (const vulnId of spotlightVulnIds) {\n        if (vulnId === 'SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720') {\n          message += theme.color.severity.critical(\n            `${theme.icon.WARNING} WARNING: Critical severity vulnerabilities were found with Log4j!` +\n              EOL,\n          );\n\n          for (const vulnId of foundSpotlightVulnsIds) {\n            message += `  - ${vulnId} (See https://snyk.io/vuln/${vulnId})`;\n          }\n\n          message += EOL + EOL;\n          message +=\n            theme.color.severity.critical(\n              `We highly recommend fixing this vulnerability. If it cannot be fixed by upgrading, see mitigation information here:`,\n            ) +\n            EOL +\n            '  - https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720' +\n            EOL +\n            '  - https://snyk.io/blog/log4shell-remediation-cheat-sheet/' +\n            EOL;\n        }\n      }\n      return message;\n    }\n    return '';\n  } catch (err) {\n    debug('Error in notificationForSpotlightVulns()', err);\n    return '';\n  }\n}\n"],"names":[],"sourceRoot":""}

package/dist/cli/935.index.js

@@ -53,13 +53,11 @@ const os_1 = __webpack_require__(12087);
 const cloneDeep = __webpack_require__(83465);
 const assign = __webpack_require__(31730);
 const chalk_1 = __webpack_require__(32589);
-const errors_1 = __webpack_require__(55191);
 const types_1 = __webpack_require__(55246);
 const iac_test_result_1 = __webpack_require__(46816);
 const formatters_1 = __webpack_require__(81329);
 const utils = __webpack_require__(77978);
 const iac_output_1 = __webpack_require__(68145);
-const ecosystems_1 = __webpack_require__(5168);
 const format_test_results_1 = __webpack_require__(59744);
 const local_execution_1 = __webpack_require__(89627);
 const validate_credentials_1 = __webpack_require__(4593);
@@ -68,9 +66,6 @@ const set_default_test_options_1 = __webpack_require__(13285);
 const process_command_args_1 = __webpack_require__(52369);
 const format_test_error_1 = __webpack_require__(68214);
 const display_result_1 = __webpack_require__(89667);
-const analytics = __webpack_require__(82744);
-const protect_update_notification_1 = __webpack_require__(79304);
-const spotlight_vuln_notification_1 = __webpack_require__(24083);
 const assert_iac_options_flag_1 = __webpack_require__(33111);
 const assert_iac_options_flag_2 = __webpack_require__(33111);
 const feature_flags_1 = __webpack_require__(63011);
@@ -91,28 +86,6 @@ async function default_1(isReportCommand, ...args) {
     const options = set_default_test_options_1.setDefaultTestOptions(originalOptions);
     validate_test_options_1.validateTestOptions(options);
     validate_credentials_1.validateCredentials(options);
-    const packageJsonPathsWithSnykDepForProtect = protect_update_notification_1.getPackageJsonPathsContainingSnykDependency(options.file, paths);
-    analytics.add('upgradable-snyk-protect-paths', packageJsonPathsWithSnykDepForProtect.length);
-    // Handles no image arg provided to the container command until
-    // a validation interface is implemented in the docker plugin.
-    if (options.docker && paths.length === 0) {
-        throw new errors_1.MissingArgError();
-    }
-    const ecosystem = ecosystems_1.getEcosystemForTest(options);
-    if (ecosystem) {
-        try {
-            const commandResult = await ecosystems_1.testEcosystem(ecosystem, paths, options);
-            return commandResult;
-        }
-        catch (error) {
-            if (error instanceof Error) {
-                throw error;
-            }
-            else {
-                throw new Error(String(error));
-            }
-        }
-    }
     let testSpinner;
     const resultOptions = [];
     const results = [];
@@ -291,9 +264,6 @@ async function default_1(isReportCommand, ...args) {
     if (foundVulnerabilities) {
         response += chalk_1.default.bold.red(summaryMessage);
         response += os_1.EOL + os_1.EOL;
-        const foundSpotlightVulnIds = spotlight_vuln_notification_1.containsSpotlightVulnIds(results);
-        const spotlightVulnsMsg = spotlight_vuln_notification_1.notificationForSpotlightVulns(foundSpotlightVulnIds);
-        response += spotlightVulnsMsg;
         if (assert_iac_options_flag_1.isIacShareResultsOptions(options)) {
             response += iac_output_2.formatShareResultsOutput(iacOutputMeta) + os_1.EOL.repeat(2);
             if (isReportCommand) {
@@ -314,8 +284,6 @@ async function default_1(isReportCommand, ...args) {
         throw error;
     }
     response += chalk_1.default.bold.green(summaryMessage);
-    response += os_1.EOL + os_1.EOL;
-    response += protect_update_notification_1.getProtectUpgradeWarningForPaths(packageJsonPathsWithSnykDepForProtect);
     if (assert_iac_options_flag_1.isIacShareResultsOptions(options)) {
         response += iac_output_2.formatShareResultsOutput(iacOutputMeta) + os_1.EOL.repeat(2);
         if (isReportCommand) {
@@ -2750,110 +2718,6 @@ function convertIacResultToScanResult(iacResult, policy, gitTarget, options) {
 exports.convertIacResultToScanResult = convertIacResultToScanResult;
 
 
-/***/ }),
-
-/***/ 79304:
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
-
-"use strict";
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.getPackageJsonPathsContainingSnykDependency = exports.checkPackageJsonForSnykDependency = exports.packageJsonFileExistsInDirectory = exports.getProtectUpgradeWarningForPaths = void 0;
-const os_1 = __webpack_require__(12087);
-const theme = __webpack_require__(86988);
-const fs = __webpack_require__(35747);
-const path = __webpack_require__(85622);
-const createDebug = __webpack_require__(15158);
-const debug = createDebug('snyk-protect-update-notification');
-function getProtectUpgradeWarningForPaths(packageJsonPaths) {
-    try {
-        if ((packageJsonPaths === null || packageJsonPaths === void 0 ? void 0 : packageJsonPaths.length) > 0) {
-            let message = theme.color.status.warn(`${theme.icon.WARNING} WARNING: It looks like you have the \`snyk\` dependency in the \`package.json\` file(s) at the following path(s):` +
-                os_1.EOL);
-            packageJsonPaths.forEach((p) => {
-                message += theme.color.status.warn(`  - ${p}` + os_1.EOL);
-            });
-            const githubReadmeUrlShort = 'https://snyk.co/ud1cR'; // https://github.com/snyk/snyk/tree/master/packages/snyk-protect#migrating-from-snyk-protect-to-snykprotect
-            message += theme.color.status.warn(`For more information and migration instructions, see ${githubReadmeUrlShort}` +
-                os_1.EOL);
-            return message;
-        }
-        else {
-            return '';
-        }
-    }
-    catch (e) {
-        debug('Error in getProtectUpgradeWarningForPaths()', e);
-        return '';
-    }
-}
-exports.getProtectUpgradeWarningForPaths = getProtectUpgradeWarningForPaths;
-function packageJsonFileExistsInDirectory(directoryPath) {
-    try {
-        const packageJsonPath = path.resolve(directoryPath, 'package.json');
-        const fileExists = fs.existsSync(packageJsonPath);
-        return fileExists;
-    }
-    catch (e) {
-        debug('Error in packageJsonFileExistsInDirectory()', e);
-        return false;
-    }
-}
-exports.packageJsonFileExistsInDirectory = packageJsonFileExistsInDirectory;
-function checkPackageJsonForSnykDependency(packageJsonPath) {
-    try {
-        const fileExists = fs.existsSync(packageJsonPath);
-        if (fileExists) {
-            const packageJson = fs.readFileSync(packageJsonPath, 'utf8');
-            const packageJsonObject = JSON.parse(packageJson);
-            const snykDependency = packageJsonObject.dependencies['snyk'];
-            if (snykDependency) {
-                return true;
-            }
-        }
-    }
-    catch (e) {
-        debug('Error in checkPackageJsonForSnykDependency()', e);
-    }
-    return false;
-}
-exports.checkPackageJsonForSnykDependency = checkPackageJsonForSnykDependency;
-function getPackageJsonPathsContainingSnykDependency(fileOption, paths) {
-    const packageJsonPathsWithSnykDepForProtect = [];
-    try {
-        if (fileOption) {
-            if (fileOption.endsWith('package.json') ||
-                fileOption.endsWith('package-lock.json')) {
-                const directoryWithPackageJson = path.dirname(fileOption);
-                if (packageJsonFileExistsInDirectory(directoryWithPackageJson)) {
-                    const packageJsonPath = path.resolve(directoryWithPackageJson, 'package.json');
-                    const packageJsonContainsSnykDep = checkPackageJsonForSnykDependency(packageJsonPath);
-                    if (packageJsonContainsSnykDep) {
-                        packageJsonPathsWithSnykDepForProtect.push(packageJsonPath);
-                    }
-                }
-            }
-        }
-        else {
-            paths.forEach((testPath) => {
-                if (packageJsonFileExistsInDirectory(testPath)) {
-                    const packageJsonPath = path.resolve(testPath, 'package.json');
-                    const packageJsonContainsSnykDep = checkPackageJsonForSnykDependency(packageJsonPath);
-                    if (packageJsonContainsSnykDep) {
-                        packageJsonPathsWithSnykDepForProtect.push(packageJsonPath);
-                    }
-                }
-            });
-        }
-    }
-    catch (e) {
-        debug('Error in getPackageJsonPathsContainingSnykDependency()', e);
-    }
-    return packageJsonPathsWithSnykDepForProtect;
-}
-exports.getPackageJsonPathsContainingSnykDependency = getPackageJsonPathsContainingSnykDependency;
-
-
 /***/ }),
 
 /***/ 46816:
@@ -2892,73 +2756,6 @@ function mapIacIssue(iacIssue) {
 exports.mapIacIssue = mapIacIssue;
 
 
-/***/ }),
-
-/***/ 24083:
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
-
-"use strict";
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.notificationForSpotlightVulns = exports.containsSpotlightVulnIds = void 0;
-const theme = __webpack_require__(86988);
-const createDebug = __webpack_require__(15158);
-const os_1 = __webpack_require__(12087);
-const debug = createDebug('snyk-spotlight-vuln-notification');
-const spotlightVulnIds = ['SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720'];
-function containsSpotlightVulnIds(results) {
-    try {
-        const spotlightVulnsFound = new Set();
-        for (const r of results) {
-            if (r.vulnerabilities) {
-                for (const v of r.vulnerabilities) {
-                    if (spotlightVulnIds.includes(v.id)) {
-                        spotlightVulnsFound.add(v.id);
-                    }
-                }
-            }
-        }
-        return [...spotlightVulnsFound];
-    }
-    catch (err) {
-        debug('Error in containsSpotlightVulnIds()', err);
-        return [];
-    }
-}
-exports.containsSpotlightVulnIds = containsSpotlightVulnIds;
-function notificationForSpotlightVulns(foundSpotlightVulnsIds) {
-    try {
-        if (foundSpotlightVulnsIds.length > 0) {
-            let message = '';
-            for (const vulnId of spotlightVulnIds) {
-                if (vulnId === 'SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720') {
-                    message += theme.color.severity.critical(`${theme.icon.WARNING} WARNING: Critical severity vulnerabilities were found with Log4j!` +
-                        os_1.EOL);
-                    for (const vulnId of foundSpotlightVulnsIds) {
-                        message += `  - ${vulnId} (See https://snyk.io/vuln/${vulnId})`;
-                    }
-                    message += os_1.EOL + os_1.EOL;
-                    message +=
-                        theme.color.severity.critical(`We highly recommend fixing this vulnerability. If it cannot be fixed by upgrading, see mitigation information here:`) +
-                            os_1.EOL +
-                            '  - https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720' +
-                            os_1.EOL +
-                            '  - https://snyk.io/blog/log4shell-remediation-cheat-sheet/' +
-                            os_1.EOL;
-                }
-            }
-            return message;
-        }
-        return '';
-    }
-    catch (err) {
-        debug('Error in notificationForSpotlightVulns()', err);
-        return '';
-    }
-}
-exports.notificationForSpotlightVulns = notificationForSpotlightVulns;
-
-
 /***/ }),
 
 /***/ 14784: