snyk 1.979.0 → 1.982.0

package/dist/cli/184.index.js

@@ -161501,11 +161501,11 @@ async function streamToString(stream, streamSize, encoding = "utf8") {
     const chunks = [];
     return new Promise((resolve, reject) => {
         stream.on("end", () => {
-            resolve(chunks.join(""));
+            resolve(Buffer.concat(chunks).toString(encoding));
         });
         stream.on("error", (error) => reject(error));
         stream.on("data", (chunk) => {
-            chunks.push(chunk.toString(encoding));
+            chunks.push(chunk);
         });
     });
 }
@@ -181326,7 +181326,7 @@ module.exports.setGracefulCleanup = setGracefulCleanup;
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.findArchives = exports.isArchive = exports.createDepGraphFromArchives = exports.createDepGraphFromArchive = void 0;
-const tslib_1 = __webpack_require__(70655);
+const tslib_1 = __webpack_require__(90999);
 const dep_graph_1 = __webpack_require__(71479);
 const path = __webpack_require__(85622);
 const crypto = __webpack_require__(76417);
@@ -181367,7 +181367,9 @@ function getDependencies(paths) {
             }
             catch (err) {
                 // log error and continue with other paths
-                console.error(`Failed to get maven dependency for '${p}'.`, err.message);
+                if (err instanceof Error) {
+                    console.error(`Failed to get maven dependency for '${p}'.`, err.message);
+                }
             }
         }
         return dependencies;
@@ -181381,7 +181383,10 @@ function createDepGraphFromArchive(root, targetPath) {
         catch (err) {
             const msg = `There was a problem generating a dep-graph for '${targetPath}'.`;
             debug(msg, err);
-            throw new Error(msg + ' ' + err.message);
+            if (err instanceof Error) {
+                throw new Error(msg + ' ' + err.message);
+            }
+            throw new Error(msg);
         }
     });
 }
@@ -181415,7 +181420,10 @@ function createDepGraphFromArchives(root, archivePaths) {
         catch (err) {
             const msg = `Detected supported file(s) in '${root}', but there was a problem generating a dep-graph.`;
             debug(msg, err);
-            throw new Error(msg + ' ' + err.message);
+            if (err instanceof Error) {
+                throw new Error(msg + ' ' + err.message);
+            }
+            throw new Error(msg);
         }
     });
 }
@@ -181499,6 +181507,7 @@ function formatGenericPluginError(error, mavenCommand, mvnArgs) {
         'on this project.\n\n' +
         (mavenCommand.indexOf('mvnw') >= 0 ? mvnwCommandTipMessage : '') +
         'If the problem persists, collect the output of `' +
+        'DEBUG=* ' +
         fullCommand +
         '` and contact support@snyk.io\n');
 }
@@ -181514,7 +181523,7 @@ exports.formatGenericPluginError = formatGenericPluginError;
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.buildArgs = exports.inspect = exports.getCommand = exports.debug = void 0;
-const tslib_1 = __webpack_require__(70655);
+const tslib_1 = __webpack_require__(90999);
 const javaCallGraphBuilder = __webpack_require__(16623);
 const os = __webpack_require__(12087);
 const fs = __webpack_require__(35747);
@@ -181527,7 +181536,7 @@ const debugModule = __webpack_require__(15158);
 const WRAPPERS = ['mvnw', 'mvnw.cmd'];
 // To enable debugging output, use `snyk -d`
 let logger = null;
-function debug(s) {
+function debug(...messages) {
     if (logger === null) {
         // Lazy init: Snyk CLI needs to process the CLI argument "-d" first.
         // TODO(BST-648): more robust handling of the debug settings
@@ -181536,7 +181545,7 @@ function debug(s) {
         }
         logger = debugModule('snyk-mvn-plugin');
     }
-    logger(s);
+    messages.forEach((m) => logger(m));
 }
 exports.debug = debug;
 function getCommand(root, targetFile) {
@@ -181599,9 +181608,9 @@ function inspect(root, targetFile, options) {
         if (!options) {
             options = { dev: false, scanAllUnmanaged: false };
         }
-        if (targetPath && archive_1.isArchive(targetPath)) {
+        if (targetPath && (0, archive_1.isArchive)(targetPath)) {
             debug(`Creating dep-graph from ${targetPath}`);
-            const depGraph = yield archive_1.createDepGraphFromArchive(root, targetPath);
+            const depGraph = yield (0, archive_1.createDepGraphFromArchive)(root, targetPath);
             return {
                 plugin: {
                     name: 'bundled:maven',
@@ -181614,10 +181623,10 @@ function inspect(root, targetFile, options) {
         }
         if (options.scanAllUnmanaged) {
             const recursive = !!options.allProjects;
-            const archives = archive_1.findArchives(root, recursive);
+            const archives = (0, archive_1.findArchives)(root, recursive);
             if (archives.length > 0) {
                 debug(`Creating dep-graph from archives in ${root}`);
-                const depGraph = yield archive_1.createDepGraphFromArchives(root, archives);
+                const depGraph = yield (0, archive_1.createDepGraphFromArchives)(root, archives);
                 return {
                     plugin: {
                         name: 'bundled:maven',
@@ -181645,14 +181654,15 @@ function inspect(root, targetFile, options) {
             const versionResult = yield subProcess.execute(`${mavenCommand} --version`, [], {
                 cwd: mvnWorkingDirectory,
             });
-            const parseResult = parse_mvn_1.parseTree(result, options.dev);
-            const { javaVersion, mavenVersion } = parse_mvn_1.parseVersions(versionResult);
+            const parseResult = (0, parse_mvn_1.parseTree)(result, options.dev);
+            const { javaVersion, mavenVersion } = (0, parse_mvn_1.parseVersions)(versionResult);
             let callGraph;
             let maybeCallGraphMetrics = {};
             if (options.reachableVulns) {
                 // NOTE[muscar] We get the timeout in seconds, and the call graph builder
                 // wants it in milliseconds
-                const timeout = (options === null || options === void 0 ? void 0 : options.callGraphBuilderTimeout) ? (options === null || options === void 0 ? void 0 : options.callGraphBuilderTimeout) * 1000
+                const timeout = (options === null || options === void 0 ? void 0 : options.callGraphBuilderTimeout)
+                    ? (options === null || options === void 0 ? void 0 : options.callGraphBuilderTimeout) * 1000
                     : undefined;
                 callGraph = yield getCallGraph(targetPath, timeout, // expects ms
                 options.args);
@@ -181676,11 +181686,14 @@ function inspect(root, targetFile, options) {
                 callGraph,
             };
         }
-        catch (error) {
+        catch (err) {
             if (result)
                 debug(`>>> Output from mvn: ${result}`);
-            error.message = error_format_1.formatGenericPluginError(error, mavenCommand, mvnArgs);
-            throw error;
+            if (err instanceof Error) {
+                const msg = (0, error_format_1.formatGenericPluginError)(err, mavenCommand, mvnArgs);
+                throw new Error(msg);
+            }
+            throw err;
         }
     });
 }
@@ -181691,7 +181704,7 @@ function buildArgs(rootPath, executionPath, targetFile, mavenArgs) {
         'dependency:tree',
         '-DoutputType=dot',
         '--batch-mode',
-        '--non-recursive',
+        '--non-recursive', // do not include sub modules these are handled by separate scans using --all-projects
     ];
     if (targetFile) {
         // if we are where we can execute - we preserve the original path;
@@ -181717,8 +181730,9 @@ function getCallGraph(targetPath, timeout, customMavenArgs) {
             debug('got call graph successfully');
             return callGraph;
         }
-        catch (e) {
-            debug('call graph error: ' + e);
+        catch (err) {
+            debug('call graph error: ' + err);
+            const e = err;
             return {
                 message: e.message,
                 innerError: e.innerError || e,
@@ -181903,14 +181917,22 @@ function execute(command, args, options) {
             stderr = stderr + data;
         });
         proc.on('error', (err) => {
-            index_1.debug(`Child process errored with: ${err.message}`);
+            (0, index_1.debug)(`Child process errored with: ${err.message}`);
         });
         proc.on('exit', (code) => {
-            index_1.debug(`Child process exited with code: ${code}`);
+            (0, index_1.debug)(`Child process exited with code: ${code}`);
         });
         proc.on('close', (code) => {
             if (code !== 0) {
-                return reject(new Error(stderr || stdout));
+                (0, index_1.debug)(`Child process failed with exit code: ${code}`, '----------------', 'STDERR:', stderr, '----------------', 'STDOUT:', stdout, '----------------');
+                const stdErrMessage = stderr ? `\nSTDERR:\n${stderr}` : '';
+                const stdOutMessage = stdout ? `\nSTDOUT:\n${stdout}` : '';
+                const debugSuggestion = process.env.DEBUG
+                    ? ''
+                    : `\nRun in debug mode (-d) to see STDERR and STDOUT.`;
+                return reject(new Error(`Child process failed with exit code: ${code}.` +
+                    debugSuggestion +
+                    (stdErrMessage || stdOutMessage)));
             }
             resolve(stdout || stderr);
         });
@@ -181919,6 +181941,290 @@ function execute(command, args, options) {
 exports.execute = execute;
 //# sourceMappingURL=sub-process.js.map
 
+/***/ }),
+
+/***/ 90999:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+"use strict";
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   "__extends": () => (/* binding */ __extends),
+/* harmony export */   "__assign": () => (/* binding */ __assign),
+/* harmony export */   "__rest": () => (/* binding */ __rest),
+/* harmony export */   "__decorate": () => (/* binding */ __decorate),
+/* harmony export */   "__param": () => (/* binding */ __param),
+/* harmony export */   "__metadata": () => (/* binding */ __metadata),
+/* harmony export */   "__awaiter": () => (/* binding */ __awaiter),
+/* harmony export */   "__generator": () => (/* binding */ __generator),
+/* harmony export */   "__createBinding": () => (/* binding */ __createBinding),
+/* harmony export */   "__exportStar": () => (/* binding */ __exportStar),
+/* harmony export */   "__values": () => (/* binding */ __values),
+/* harmony export */   "__read": () => (/* binding */ __read),
+/* harmony export */   "__spread": () => (/* binding */ __spread),
+/* harmony export */   "__spreadArrays": () => (/* binding */ __spreadArrays),
+/* harmony export */   "__spreadArray": () => (/* binding */ __spreadArray),
+/* harmony export */   "__await": () => (/* binding */ __await),
+/* harmony export */   "__asyncGenerator": () => (/* binding */ __asyncGenerator),
+/* harmony export */   "__asyncDelegator": () => (/* binding */ __asyncDelegator),
+/* harmony export */   "__asyncValues": () => (/* binding */ __asyncValues),
+/* harmony export */   "__makeTemplateObject": () => (/* binding */ __makeTemplateObject),
+/* harmony export */   "__importStar": () => (/* binding */ __importStar),
+/* harmony export */   "__importDefault": () => (/* binding */ __importDefault),
+/* harmony export */   "__classPrivateFieldGet": () => (/* binding */ __classPrivateFieldGet),
+/* harmony export */   "__classPrivateFieldSet": () => (/* binding */ __classPrivateFieldSet),
+/* harmony export */   "__classPrivateFieldIn": () => (/* binding */ __classPrivateFieldIn)
+/* harmony export */ });
+/******************************************************************************
+Copyright (c) Microsoft Corporation.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+***************************************************************************** */
+/* global Reflect, Promise */
+
+var extendStatics = function(d, b) {
+    extendStatics = Object.setPrototypeOf ||
+        ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+        function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+    return extendStatics(d, b);
+};
+
+function __extends(d, b) {
+    if (typeof b !== "function" && b !== null)
+        throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+    extendStatics(d, b);
+    function __() { this.constructor = d; }
+    d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+}
+
+var __assign = function() {
+    __assign = Object.assign || function __assign(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+        }
+        return t;
+    }
+    return __assign.apply(this, arguments);
+}
+
+function __rest(s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+}
+
+function __decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+
+function __param(paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+}
+
+function __metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
+}
+
+function __awaiter(thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+}
+
+function __generator(thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+}
+
+var __createBinding = Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+});
+
+function __exportStar(m, o) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(o, p)) __createBinding(o, m, p);
+}
+
+function __values(o) {
+    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+    if (m) return m.call(o);
+    if (o && typeof o.length === "number") return {
+        next: function () {
+            if (o && i >= o.length) o = void 0;
+            return { value: o && o[i++], done: !o };
+        }
+    };
+    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+}
+
+function __read(o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+}
+
+/** @deprecated */
+function __spread() {
+    for (var ar = [], i = 0; i < arguments.length; i++)
+        ar = ar.concat(__read(arguments[i]));
+    return ar;
+}
+
+/** @deprecated */
+function __spreadArrays() {
+    for (var s = 0, i = 0, il = arguments.length; i < il; i++) s += arguments[i].length;
+    for (var r = Array(s), k = 0, i = 0; i < il; i++)
+        for (var a = arguments[i], j = 0, jl = a.length; j < jl; j++, k++)
+            r[k] = a[j];
+    return r;
+}
+
+function __spreadArray(to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+}
+
+function __await(v) {
+    return this instanceof __await ? (this.v = v, this) : new __await(v);
+}
+
+function __asyncGenerator(thisArg, _arguments, generator) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var g = generator.apply(thisArg, _arguments || []), i, q = [];
+    return i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i;
+    function verb(n) { if (g[n]) i[n] = function (v) { return new Promise(function (a, b) { q.push([n, v, a, b]) > 1 || resume(n, v); }); }; }
+    function resume(n, v) { try { step(g[n](v)); } catch (e) { settle(q[0][3], e); } }
+    function step(r) { r.value instanceof __await ? Promise.resolve(r.value.v).then(fulfill, reject) : settle(q[0][2], r); }
+    function fulfill(value) { resume("next", value); }
+    function reject(value) { resume("throw", value); }
+    function settle(f, v) { if (f(v), q.shift(), q.length) resume(q[0][0], q[0][1]); }
+}
+
+function __asyncDelegator(o) {
+    var i, p;
+    return i = {}, verb("next"), verb("throw", function (e) { throw e; }), verb("return"), i[Symbol.iterator] = function () { return this; }, i;
+    function verb(n, f) { i[n] = o[n] ? function (v) { return (p = !p) ? { value: __await(o[n](v)), done: n === "return" } : f ? f(v) : v; } : f; }
+}
+
+function __asyncValues(o) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var m = o[Symbol.asyncIterator], i;
+    return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
+    function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
+    function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
+}
+
+function __makeTemplateObject(cooked, raw) {
+    if (Object.defineProperty) { Object.defineProperty(cooked, "raw", { value: raw }); } else { cooked.raw = raw; }
+    return cooked;
+};
+
+var __setModuleDefault = Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+};
+
+function __importStar(mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+}
+
+function __importDefault(mod) {
+    return (mod && mod.__esModule) ? mod : { default: mod };
+}
+
+function __classPrivateFieldGet(receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+}
+
+function __classPrivateFieldSet(receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+}
+
+function __classPrivateFieldIn(state, receiver) {
+    if (receiver === null || (typeof receiver !== "object" && typeof receiver !== "function")) throw new TypeError("Cannot use 'in' operator on non-object");
+    return typeof state === "function" ? receiver === state : state.has(receiver);
+}
+
+
 /***/ }),
 
 /***/ 80333: