snyk 1.972.0 → 1.975.0

package/dist/cli/477.index.js

@@ -43,7 +43,7 @@ const chalk_1 = __webpack_require__(32589);
 const snyk_policy_1 = __webpack_require__(70535);
 const config_1 = __webpack_require__(25425);
 async function display(policy) {
-    const p = snyk_policy_1.demunge(policy, config_1.default.ROOT);
+    const p = snyk_policy_1.demunge(policy, config_1.default.PUBLIC_VULN_DB_URL);
     const delimiter = '\n\n------------------------\n';
     let res = chalk_1.default.bold('Current Snyk policy, read from ' + policy.__filename + ' file') + '\n';
     res += 'Modified: ' + policy.__modified + '\n';

package/dist/cli/477.index.js.map

@@ -1 +1 @@
-{"version":3,"file":"477.index.js","mappings":";;;;;;;;;;AAAA,0CAAsC;AACtC,oDAAmD;AACnD,4CAI0B;AAEX,KAAK,UAAU,aAAa,CAAC,IAAa;IACvD,IAAI;QACF,MAAM,YAAY,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAE7D,CAAC;QACF,OAAO,MAAM,wBAAO,CAAC,YAAY,CAAC,CAAC;KACpC;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,YAAyB,CAAC;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE;YAC3B,YAAY,GAAG,IAAI,4BAAmB,EAAE,CAAC;SAC1C;aAAM;YACL,YAAY,GAAG,IAAI,gCAAuB,EAAE,CAAC;YAC7C,YAAY,CAAC,UAAU,GAAG,KAAK,CAAC;SACjC;QACD,MAAM,YAAY,CAAC;KACpB;AACH,CAAC;AAhBD,gCAgBC;;;;;;;;;;;ACxBD,2CAA0B;AAC1B,iDAAsC;AACtC,4CAA8B;AAEvB,KAAK,UAAU,OAAO,CAAC,MAAM;IAClC,MAAM,CAAC,GAAG,qBAAO,CAAC,MAAM,EAAE,gBAAM,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,gCAAgC,CAAC;IAEnD,IAAI,GAAG,GACL,eAAK,CAAC,IAAI,CACR,iCAAiC,GAAG,MAAM,CAAC,UAAU,GAAG,OAAO,CAChE,GAAG,IAAI,CAAC;IACX,GAAG,IAAI,YAAY,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IAC/C,GAAG,IAAI,YAAY,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAE9C,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;QACrC,GAAG,IAAI,SAAS,CAAC;KAClB;IAED,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE;QACvC,GAAG,IAAI,SAAS,CAAC;KAClB;IAED,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExD,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAxBD,0BAwBC;AAED,SAAS,WAAW,CAAC,KAAK;IACxB,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACjB,CAAC,IAAI,CAAC,CAAC;QAEP,MAAM,cAAc,GAClB,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBAC9B,kBAAkB,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB;YACxD,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1C,4BAA4B,CAAC;QAEnC,OAAO,CACL,cAAc;YACd,IAAI,CAAC,KAAK;iBACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,OAAO,CACL,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,CAAC,MAAM;wBACP,CAAC,CAAC,YAAY;4BACZ,CAAC,CAAC,MAAM;4BACR,aAAa;4BACb,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;4BACvB,IAAI;wBACN,CAAC,CAAC,EAAE,CAAC;oBACP,IAAI,CACL,CAAC;YACJ,CAAC,CAAC;iBACD,IAAI,CAAC,EAAE,CAAC;iBACR,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CACvB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC","sources":["webpack://snyk/./src/cli/commands/policy.ts","webpack://snyk/./src/lib/display-policy.ts"],"sourcesContent":["import * as policy from 'snyk-policy';\nimport { display } from '../../lib/display-policy';\nimport {\n  FailedToLoadPolicyError,\n  PolicyNotFoundError,\n  CustomError,\n} from '../../lib/errors';\n\nexport default async function displayPolicy(path?: string): Promise<string> {\n  try {\n    const loadedPolicy = (await policy.load(path || process.cwd())) as Promise<\n      string\n    >;\n    return await display(loadedPolicy);\n  } catch (error) {\n    let adaptedError: CustomError;\n    if (error.code === 'ENOENT') {\n      adaptedError = new PolicyNotFoundError();\n    } else {\n      adaptedError = new FailedToLoadPolicyError();\n      adaptedError.innerError = error;\n    }\n    throw adaptedError;\n  }\n}\n","import chalk from 'chalk';\nimport { demunge } from 'snyk-policy';\nimport config from './config';\n\nexport async function display(policy) {\n  const p = demunge(policy, config.ROOT);\n  const delimiter = '\\n\\n------------------------\\n';\n\n  let res =\n    chalk.bold(\n      'Current Snyk policy, read from ' + policy.__filename + ' file',\n    ) + '\\n';\n  res += 'Modified: ' + policy.__modified + '\\n';\n  res += 'Created:  ' + policy.__created + '\\n';\n\n  res += p.patch.map(displayRule('Patch vulnerability')).join('\\n');\n  if (p.patch.length && p.ignore.length) {\n    res += delimiter;\n  }\n\n  res += p.ignore.map(displayRule('Ignore')).join('\\n');\n  if (p.ignore.length && p.exclude.length) {\n    res += delimiter;\n  }\n\n  res += p.exclude.map(displayRule('Exclude')).join('\\n');\n\n  return Promise.resolve(res);\n}\n\nfunction displayRule(title) {\n  return (rule, i) => {\n    i += 1;\n\n    const formattedTitle =\n      title === 'Exclude'\n        ? chalk.bold(`\\n#${i} ${title}`) +\n          ` the following ${chalk.bold(rule.id)} items/paths:\\n`\n        : chalk.bold(`\\n#${i} ${title} ${rule.url}`) +\n          ' in the following paths:\\n';\n\n    return (\n      formattedTitle +\n      rule.paths\n        .map((p) => {\n          return (\n            p.path +\n            (p.reason\n              ? '\\nReason: ' +\n                p.reason +\n                '\\nExpires: ' +\n                p.expires.toUTCString() +\n                '\\n'\n              : '') +\n            '\\n'\n          );\n        })\n        .join('')\n        .replace(/\\s*$/, '')\n    );\n  };\n}\n"],"names":[],"sourceRoot":""}
+{"version":3,"file":"477.index.js","mappings":";;;;;;;;;;AAAA,0CAAsC;AACtC,oDAAmD;AACnD,4CAI0B;AAEX,KAAK,UAAU,aAAa,CAAC,IAAa;IACvD,IAAI;QACF,MAAM,YAAY,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAE7D,CAAC;QACF,OAAO,MAAM,wBAAO,CAAC,YAAY,CAAC,CAAC;KACpC;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,YAAyB,CAAC;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE;YAC3B,YAAY,GAAG,IAAI,4BAAmB,EAAE,CAAC;SAC1C;aAAM;YACL,YAAY,GAAG,IAAI,gCAAuB,EAAE,CAAC;YAC7C,YAAY,CAAC,UAAU,GAAG,KAAK,CAAC;SACjC;QACD,MAAM,YAAY,CAAC;KACpB;AACH,CAAC;AAhBD,gCAgBC;;;;;;;;;;;ACxBD,2CAA0B;AAC1B,iDAAsC;AACtC,4CAA8B;AAEvB,KAAK,UAAU,OAAO,CAAC,MAAM;IAClC,MAAM,CAAC,GAAG,qBAAO,CAAC,MAAM,EAAE,gBAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,gCAAgC,CAAC;IAEnD,IAAI,GAAG,GACL,eAAK,CAAC,IAAI,CACR,iCAAiC,GAAG,MAAM,CAAC,UAAU,GAAG,OAAO,CAChE,GAAG,IAAI,CAAC;IACX,GAAG,IAAI,YAAY,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IAC/C,GAAG,IAAI,YAAY,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAE9C,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;QACrC,GAAG,IAAI,SAAS,CAAC;KAClB;IAED,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE;QACvC,GAAG,IAAI,SAAS,CAAC;KAClB;IAED,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExD,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAxBD,0BAwBC;AAED,SAAS,WAAW,CAAC,KAAK;IACxB,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACjB,CAAC,IAAI,CAAC,CAAC;QAEP,MAAM,cAAc,GAClB,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBAC9B,kBAAkB,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB;YACxD,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1C,4BAA4B,CAAC;QAEnC,OAAO,CACL,cAAc;YACd,IAAI,CAAC,KAAK;iBACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,OAAO,CACL,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,CAAC,MAAM;wBACP,CAAC,CAAC,YAAY;4BACZ,CAAC,CAAC,MAAM;4BACR,aAAa;4BACb,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;4BACvB,IAAI;wBACN,CAAC,CAAC,EAAE,CAAC;oBACP,IAAI,CACL,CAAC;YACJ,CAAC,CAAC;iBACD,IAAI,CAAC,EAAE,CAAC;iBACR,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CACvB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC","sources":["webpack://snyk/./src/cli/commands/policy.ts","webpack://snyk/./src/lib/display-policy.ts"],"sourcesContent":["import * as policy from 'snyk-policy';\nimport { display } from '../../lib/display-policy';\nimport {\n  FailedToLoadPolicyError,\n  PolicyNotFoundError,\n  CustomError,\n} from '../../lib/errors';\n\nexport default async function displayPolicy(path?: string): Promise<string> {\n  try {\n    const loadedPolicy = (await policy.load(path || process.cwd())) as Promise<\n      string\n    >;\n    return await display(loadedPolicy);\n  } catch (error) {\n    let adaptedError: CustomError;\n    if (error.code === 'ENOENT') {\n      adaptedError = new PolicyNotFoundError();\n    } else {\n      adaptedError = new FailedToLoadPolicyError();\n      adaptedError.innerError = error;\n    }\n    throw adaptedError;\n  }\n}\n","import chalk from 'chalk';\nimport { demunge } from 'snyk-policy';\nimport config from './config';\n\nexport async function display(policy) {\n  const p = demunge(policy, config.PUBLIC_VULN_DB_URL);\n  const delimiter = '\\n\\n------------------------\\n';\n\n  let res =\n    chalk.bold(\n      'Current Snyk policy, read from ' + policy.__filename + ' file',\n    ) + '\\n';\n  res += 'Modified: ' + policy.__modified + '\\n';\n  res += 'Created:  ' + policy.__created + '\\n';\n\n  res += p.patch.map(displayRule('Patch vulnerability')).join('\\n');\n  if (p.patch.length && p.ignore.length) {\n    res += delimiter;\n  }\n\n  res += p.ignore.map(displayRule('Ignore')).join('\\n');\n  if (p.ignore.length && p.exclude.length) {\n    res += delimiter;\n  }\n\n  res += p.exclude.map(displayRule('Exclude')).join('\\n');\n\n  return Promise.resolve(res);\n}\n\nfunction displayRule(title) {\n  return (rule, i) => {\n    i += 1;\n\n    const formattedTitle =\n      title === 'Exclude'\n        ? chalk.bold(`\\n#${i} ${title}`) +\n          ` the following ${chalk.bold(rule.id)} items/paths:\\n`\n        : chalk.bold(`\\n#${i} ${title} ${rule.url}`) +\n          ' in the following paths:\\n';\n\n    return (\n      formattedTitle +\n      rule.paths\n        .map((p) => {\n          return (\n            p.path +\n            (p.reason\n              ? '\\nReason: ' +\n                p.reason +\n                '\\nExpires: ' +\n                p.expires.toUTCString() +\n                '\\n'\n              : '') +\n            '\\n'\n          );\n        })\n        .join('')\n        .replace(/\\s*$/, '')\n    );\n  };\n}\n"],"names":[],"sourceRoot":""}

package/dist/cli/784.index.js

@@ -2318,7 +2318,7 @@ function formatScanResultsNewOutput(oldFormattedResults) {
     });
     return newFormattedResults;
 }
-function formatSnykIacTestTestData(snykIacTestScanResult) {
+function formatSnykIacTestTestData(snykIacTestScanResult, projectName, orgName) {
     const resultsBySeverity = formatSnykIacTestScanResultNewOutput(snykIacTestScanResult);
     let totalIssues = 0;
     const issuesCountBySeverity = {};
@@ -2327,21 +2327,46 @@ function formatSnykIacTestTestData(snykIacTestScanResult) {
         issuesCountBySeverity[severity] = ((_a = resultsBySeverity[severity]) === null || _a === void 0 ? void 0 : _a.length) || 0;
         totalIssues += issuesCountBySeverity[severity];
     });
+    const allFilesCount = countFiles(snykIacTestScanResult);
+    const filesWithIssuesCount = countFilesWithIssues(snykIacTestScanResult);
+    const filesWithoutIssuesCount = allFilesCount - filesWithIssuesCount;
     return {
         resultsBySeverity,
-        // TODO: Add metadata when working on the Share Results feat
-        metadata: { projectName: 'TBD', orgName: 'TBD' },
-        // TODO: Add missing preoprties when adding support for the test summary
+        metadata: { projectName, orgName },
         counts: {
             ignores: 0,
-            filesWithIssues: 0,
-            filesWithoutIssues: 0,
+            filesWithIssues: filesWithIssuesCount,
+            filesWithoutIssues: filesWithoutIssuesCount,
             issues: totalIssues,
             issuesBySeverity: issuesCountBySeverity,
         },
     };
 }
 exports.formatSnykIacTestTestData = formatSnykIacTestTestData;
+function countFilesWithIssues(results) {
+    if (results && results.vulnerabilities) {
+        const files = new Set();
+        for (const vulnerability of results.vulnerabilities) {
+            if (vulnerability.resource.file) {
+                files.add(vulnerability.resource.file);
+            }
+        }
+        return files.size;
+    }
+    return 0;
+}
+function countFiles(results) {
+    if (results && (results === null || results === void 0 ? void 0 : results.resources)) {
+        const files = new Set();
+        for (const resource of results.resources) {
+            if (resource.file) {
+                files.add(resource.file);
+            }
+        }
+        return files.size;
+    }
+    return 0;
+}
 function formatSnykIacTestScanResultNewOutput(snykIacTestScanResult) {
     const resultsBySeverity = {};
     if (snykIacTestScanResult === null || snykIacTestScanResult === void 0 ? void 0 : snykIacTestScanResult.vulnerabilities) {
@@ -2541,11 +2566,6 @@ const config_1 = __webpack_require__(25425);
 const os_1 = __webpack_require__(12087);
 const utils_1 = __webpack_require__(67533);
 function formatShareResultsOutput(iacOutputMeta) {
-    let projectName = iacOutputMeta.projectName;
-    if (iacOutputMeta.gitRemoteUrl) {
-        // from "http://github.com/snyk/cli.git" to "snyk/cli"
-        projectName = iacOutputMeta.gitRemoteUrl.replace(/^https?:\/\/github.com\/(.*)\.git$/, '$1');
-    }
     return (utils_1.colors.title('Report Complete') +
         os_1.EOL +
         os_1.EOL +
@@ -2555,7 +2575,7 @@ function formatShareResultsOutput(iacOutputMeta) {
         os_1.EOL +
         utils_1.contentPadding +
         'under the name: ' +
-        utils_1.colors.title(projectName));
+        utils_1.colors.title(iacOutputMeta.projectName));
 }
 exports.formatShareResultsOutput = formatShareResultsOutput;
 exports.shareResultsTip = utils_1.colors.title('Tip') +
@@ -2761,7 +2781,8 @@ function formatIssues(vuln, options) {
         }),
         introducedThrough: '  Introduced through: ' + uniquePackages,
         description: '  Description: ' + vuln.title,
-        info: '  Info: ' + chalk_1.default.underline(config_1.default.ROOT + '/vuln/' + vulnID),
+        info: '  Info: ' +
+            chalk_1.default.underline(config_1.default.PUBLIC_VULN_DB_URL + '/vuln/' + vulnID),
         fromPaths: createTruncatedVulnsPathsText(vuln.list, options.showVulnPaths),
         extraInfo: vuln.note ? chalk_1.default.bold('\n  Note: ' + vuln.note) : '',
         remediationInfo: vuln.metadata.type !== 'license' && localPackageTest
@@ -3194,7 +3215,7 @@ function formatIssue(id, title, severity, isNew, vulnerableModule, paths, testOp
     }
     return (common_1.colorTextBySeverity(severity, `  ${theme_1.icon.ISSUE} ${chalk_1.default.bold(title)}${newBadge} [${titleCaseText(severity)} Severity${originalSeverityStr}]`) +
         reachabilityText +
-        `[${config_1.default.ROOT}/vuln/${id}]` +
+        `[${config_1.default.PUBLIC_VULN_DB_URL}/vuln/${id}]` +
         name +
         reachableVia +
         introducedBy +