snyk 1.942.0 → 1.943.0

package/dist/cli/756.index.js

@@ -157532,10 +157532,15 @@ function unpackJars(jarBuffers, desiredLevelsOfUnpacking, unpackedLevels = 0) {
             desiredLevelsOfUnpacking,
             requiredLevelsOfUnpacking,
         });
-        // if any of the coords are null for this JAR we didn't manage to get
-        // anything from the JAR's pom.properties manifest, so calculate the
-        // sha so maven-deps can fallback to searching maven central
-        fingerprints.push(Object.assign({ location: jarInfo.location, digest: jarInfo.coords ? null : (0, buffer_utils_1.bufferToSha1)(jarInfo.buffer), dependencies: jarInfo.dependencies }, jarInfo.coords));
+        // we only care about JAR fingerprints. Other Java archive files are not
+        // interesting enough on their own but are merely containers for JARs,
+        // so no point in fingerprinting them
+        if (jarBuffer.location.endsWith(".jar")) {
+            // if any of the coords are null for this JAR we didn't manage to get
+            // anything from the JAR's pom.properties manifest, so calculate the
+            // sha so maven-deps can fallback to searching maven central
+            fingerprints.push(Object.assign({ location: jarInfo.location, digest: jarInfo.coords ? null : (0, buffer_utils_1.bufferToSha1)(jarInfo.buffer), dependencies: jarInfo.dependencies }, jarInfo.coords));
+        }
         if (jarInfo.nestedJars.length > 0) {
             // this is an uber/fat JAR so we need to unpack the nested JARs to
             // analyse them for coords and further nested JARs (depth flag allowing)
@@ -160729,9 +160734,11 @@ exports.getJarFileContentAction = void 0;
 const path = __webpack_require__(85622);
 const stream_utils_1 = __webpack_require__(54540);
 const ignoredPaths = ["/usr/lib", "gradle/cache"];
+const javaArchiveFileFormats = [".jar", ".war"];
 function filePathMatches(filePath) {
     const dirName = path.dirname(filePath);
-    return (filePath.endsWith(".jar") &&
+    const fileExtension = filePath.slice(-4);
+    return (javaArchiveFileFormats.includes(fileExtension) &&
         !ignoredPaths.some((ignorePath) => dirName.includes(path.normalize(ignorePath))));
 }
 exports.getJarFileContentAction = {