snyk 1.982.0 → 1.983.0

package/dist/cli/917.index.js

@@ -2297,6 +2297,7 @@ const output_1 = __webpack_require__(39313);
 const iac_output_1 = __webpack_require__(68145);
 const output_2 = __webpack_require__(99687);
 const get_iac_org_settings_1 = __webpack_require__(11693);
+const monitor_1 = __webpack_require__(3708);
 async function test(paths, options) {
     const testConfig = await prepareTestConfig(paths, options);
     const { projectName, orgSettings } = testConfig;
@@ -2326,6 +2327,7 @@ async function prepareTestConfig(paths, options) {
     const projectName = pathLib.basename(process.cwd());
     const org = options.org || config_1.default.org;
     const orgSettings = await get_iac_org_settings_1.getIacOrgSettings(org);
+    const attributes = parseAttributes(options);
     return {
         paths,
         iacCachePath,
@@ -2334,8 +2336,14 @@ async function prepareTestConfig(paths, options) {
         userRulesBundlePath: config_1.default.IAC_BUNDLE_PATH,
         userPolicyEnginePath: config_1.default.IAC_POLICY_ENGINE_PATH,
         severityThreshold: options.severityThreshold,
+        attributes,
     };
 }
+function parseAttributes(options) {
+    if (options.report) {
+        return monitor_1.generateProjectAttributes(options);
+    }
+}
 
 
 /***/ }),
@@ -3536,12 +3544,11 @@ function vulnerabilitiesToResult(orgSettings, projectName, file, vulnerabilities
 }
 function vulnerabilitiesToIacIssues(vulnerabilities) {
     return vulnerabilities.map((v) => {
-        const msg = formattedPath(v.resource.id, v.resource.path);
         return {
             severity: v.severity,
             resolve: v.remediation,
             impact: v.rule.description,
-            msg,
+            msg: v.resource.formattedPath,
             remediation: {
                 terraform: v.remediation,
             },
@@ -3598,30 +3605,6 @@ function orgSettingsToIgnoreSettings(orgSettings) {
         disregardFilesystemIgnores: (ignoreSettings === null || ignoreSettings === void 0 ? void 0 : ignoreSettings.disregardFilesystemIgnores) || false,
     };
 }
-function formattedPath(id, path) {
-    const parts = [id];
-    if (path) {
-        for (let i = 0; i < path.length; i++) {
-            if (i == 0) {
-                if (typeof path[i] === 'number') {
-                    parts.push(`[${path[i]}]`);
-                }
-                else {
-                    parts.push(`${path[i]}`);
-                }
-            }
-            else {
-                if (typeof path[i] === 'number') {
-                    parts.push(`[${path[i]}]`);
-                }
-                else {
-                    parts.push(`.${path[i]}`);
-                }
-            }
-        }
-    }
-    return parts.join('');
-}
 
 
 /***/ }),
@@ -3927,10 +3910,7 @@ function scan(options, policyEnginePath, rulesBundlePath) {
 }
 exports.scan = scan;
 function scanWithConfig(options, policyEnginePath, rulesBundlePath, configPath) {
-    const args = ['-bundle', rulesBundlePath, '-config', configPath];
-    if (options.severityThreshold) {
-        args.push('-severity-threshold', options.severityThreshold);
-    }
+    const args = processFlags(options, rulesBundlePath, configPath);
     args.push(...options.paths);
     const process = childProcess.spawnSync(policyEnginePath, args, {
         encoding: 'utf-8',
@@ -3952,6 +3932,23 @@ function scanWithConfig(options, policyEnginePath, rulesBundlePath, configPath)
     }
     return output;
 }
+function processFlags(options, rulesBundlePath, configPath) {
+    var _a, _b, _c;
+    const flags = ['-bundle', rulesBundlePath, '-config', configPath];
+    if (options.severityThreshold) {
+        flags.push('-severity-threshold', options.severityThreshold);
+    }
+    if ((_a = options.attributes) === null || _a === void 0 ? void 0 : _a.criticality) {
+        flags.push('-project-business-criticality', options.attributes.criticality.join(','));
+    }
+    if ((_b = options.attributes) === null || _b === void 0 ? void 0 : _b.environment) {
+        flags.push('-project-environment', options.attributes.environment.join(','));
+    }
+    if ((_c = options.attributes) === null || _c === void 0 ? void 0 : _c.lifecycle) {
+        flags.push('-project-lifecycle', options.attributes.lifecycle.join(','));
+    }
+    return flags;
+}
 function createConfig(options) {
     try {
         const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'snyk-'));
@@ -4044,7 +4041,7 @@ const utils_1 = __webpack_require__(92040);
 /**
  * The Policy Engine release version associated with this Snyk CLI version.
  */
-exports.policyEngineReleaseVersion = '0.13.1';
+exports.policyEngineReleaseVersion = '0.14.0';
 /**
  * The Policy Engine executable's file name.
  */
@@ -4078,12 +4075,12 @@ function formatPolicyEngineFileName(releaseVersion) {
 }
 exports.formatPolicyEngineFileName = formatPolicyEngineFileName;
 // this const is not placed in `index.ts` to avoid circular dependencies
-const policyEngineChecksums = `4d238d35a90aba8049e4bf569cdd6c0f563984460353148f8f8a230827845de2  snyk-iac-test_0.13.1_Windows_x86_64.exe
-6a19e64f5a685df8fc4ab388d52d0d493d6229a2e80e6429f23a614dfac9e9d3  snyk-iac-test_0.13.1_Darwin_arm64
-6f1a66a1fb4e075887b9d495694f2062ae53936b4a0fa1c8a7bd9287669ea96c  snyk-iac-test_0.13.1_Darwin_x86_64
-98f476ae50a1fb80cdd666a55dec14a1f2be9ceca9960335a8d122a1004d9fa5  snyk-iac-test_0.13.1_Linux_x86_64
-b4b4023088a4184aa88674ee579e6ce96a9b9674fb9bac7173ff49419109de22  snyk-iac-test_0.13.1_Windows_arm64.exe
-cf5d4d743614473535ff5479fc20fcbec89a614121ddad2c9bad853471ae803c  snyk-iac-test_0.13.1_Linux_arm64
+const policyEngineChecksums = `09503affce0653bd3e1d7f0be729f4e72afef48cda5e7cfb0659ccf4e12f6145  snyk-iac-test_0.14.0_Darwin_arm64
+2d415c7718280180db83786f120c666e82ae686df7f2c3df6410a39216245106  snyk-iac-test_0.14.0_Windows_x86_64.exe
+43286fb25c8f99842c89e906a3791f3668f04d336dad762a349398a8a7e8431b  snyk-iac-test_0.14.0_Linux_x86_64
+7ae1033a948f8868d6643759a3ee46bf076fbd2cf0bd28f6c687a9099dbcde04  snyk-iac-test_0.14.0_Darwin_x86_64
+92913a9d3a48c196f29d361d7f3bb79759f558793c37292fe5dfa671f2f18e39  snyk-iac-test_0.14.0_Linux_arm64
+a228cde202ac394e7b5180a1dcd33bc5d8c7053e4c8bf3584dd0a414ff7acc74  snyk-iac-test_0.14.0_Windows_arm64.exe
 `;
 function getChecksum(policyEngineFileName) {
     const lines = policyEngineChecksums.split(/\r?\n/);