snyk 1.992.0 → 1.993.0

package/dist/cli/917.index.js

@@ -2229,6 +2229,56 @@ class DefaultGitRepositoryFinder {
 }
 
 
+/***/ }),
+
+/***/ 15335:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.assertIacV2Options = void 0;
+const assert_iac_options_flag_1 = __webpack_require__(33111);
+const keys = [
+    'debug',
+    'v',
+    'version',
+    'h',
+    'help',
+    'q',
+    'quiet',
+    'org',
+    'insecure',
+    'severityThreshold',
+    'json',
+    'sarif',
+    'json-file-output',
+    'sarif-file-output',
+    'scan',
+    'experimental',
+    'var-file',
+    // PolicyOptions
+    'ignore-policy',
+    'policy-path',
+];
+const allowed = new Set(keys);
+function assertIacV2Options(options) {
+    // We process the process.argv so we don't get default values.
+    for (const key of Object.keys(options)) {
+        // The _ property is a special case that contains non
+        // flag strings passed to the command line (usually files)
+        // and `iac` is the command provided.
+        if (key !== '_' && key !== 'iac' && !allowed.has(key)) {
+            throw new assert_iac_options_flag_1.FlagError(key);
+        }
+    }
+    if (options.scan) {
+        assert_iac_options_flag_1.assertTerraformPlanModes(options.scan);
+    }
+}
+exports.assertIacV2Options = assertIacV2Options;
+
+
 /***/ }),
 
 /***/ 2460:
@@ -2250,7 +2300,9 @@ const local_execution_1 = __webpack_require__(89627);
 const scan_1 = __webpack_require__(50277);
 const index_1 = __webpack_require__(55935);
 const policy_1 = __webpack_require__(32615);
+const assert_iac_options_1 = __webpack_require__(15335);
 async function test(paths, options) {
+    assert_iac_options_1.assertIacV2Options(options);
     const testConfig = await prepareTestConfig(paths, options);
     const { orgSettings } = testConfig;
     const testSpinner = output_1.buildSpinner(options);
@@ -2271,6 +2323,7 @@ async function test(paths, options) {
 }
 exports.test = test;
 async function prepareTestConfig(paths, options) {
+    var _a;
     const iacCachePath = pathLib.join(scan_1.systemCachePath, 'iac');
     const org = options.org || config_1.default.org;
     const orgSettings = await get_iac_org_settings_1.getIacOrgSettings(org);
@@ -2279,6 +2332,7 @@ async function prepareTestConfig(paths, options) {
     const remoteRepoUrl = index_1.getFlag(options, 'remote-repo-url');
     const attributes = parseAttributes(options);
     const policy = await policy_1.findAndLoadPolicy(process.cwd(), 'iac', options);
+    const scan = (_a = options.scan) !== null && _a !== void 0 ? _a : 'resource-changes';
     return {
         paths,
         iacCachePath,
@@ -2293,6 +2347,7 @@ async function prepareTestConfig(paths, options) {
         targetName,
         remoteRepoUrl,
         policy: policy === null || policy === void 0 ? void 0 : policy.toString(),
+        scan,
     };
 }
 function parseAttributes(options) {
@@ -4276,10 +4331,10 @@ exports.SnykIacTestError = SnykIacTestError;
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.test = void 0;
-const setup_1 = __webpack_require__(88929);
 const scan_1 = __webpack_require__(50277);
+const local_cache_1 = __webpack_require__(68081);
 async function test(testConfig) {
-    const { policyEnginePath, rulesBundlePath } = await setup_1.setup(testConfig);
+    const { policyEnginePath, rulesBundlePath } = await local_cache_1.initLocalCache(testConfig);
     return scan_1.scan(testConfig, policyEnginePath, rulesBundlePath);
 }
 exports.test = test;
@@ -4471,975 +4526,961 @@ function orgSettingsToIgnoreSettings(orgSettings) {
 
 /***/ }),
 
-/***/ 99687:
+/***/ 68081:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.FoundIssuesError = exports.NoLoadableInputError = exports.NoSuccessfulScansError = exports.buildOutput = void 0;
-const os_1 = __webpack_require__(12087);
-const json_1 = __webpack_require__(71909);
-const types_1 = __webpack_require__(55246);
-const text_1 = __webpack_require__(86166);
-const json_2 = __webpack_require__(27019);
-const types_2 = __webpack_require__(94820);
-const sarif_1 = __webpack_require__(87999);
+exports.initLocalCache = void 0;
+const rules_bundle_1 = __webpack_require__(51897);
+const policy_engine_1 = __webpack_require__(90474);
+const file_utils_1 = __webpack_require__(52761);
 const errors_1 = __webpack_require__(55191);
-const strip_ansi_1 = __webpack_require__(76003);
-const path = __webpack_require__(85622);
-const error_utils_1 = __webpack_require__(36401);
-const output_1 = __webpack_require__(39313);
-function buildOutput({ scanResult, testSpinner, orgSettings, options, }) {
-    if (scanResult.results) {
-        testSpinner === null || testSpinner === void 0 ? void 0 : testSpinner.succeed(text_1.spinnerSuccessMessage);
-    }
-    else {
-        testSpinner === null || testSpinner === void 0 ? void 0 : testSpinner.stop();
+const local_cache_1 = __webpack_require__(50089);
+async function initLocalCache(testConfig) {
+    try {
+        await file_utils_1.createDirIfNotExists(testConfig.iacCachePath);
+        const policyEnginePath = await policy_engine_1.initPolicyEngine(testConfig);
+        const rulesBundlePath = await rules_bundle_1.initRulesBundle(testConfig);
+        return { policyEnginePath, rulesBundlePath };
     }
-    const { responseData, jsonData, sarifData } = buildTestCommandResultData({
-        scanResult,
-        orgSettings,
-        options,
-    });
-    if (options.json || options.sarif) {
-        return types_1.TestCommandResult.createJsonTestCommandResult(responseData, jsonData, sarifData);
+    catch (err) {
+        throw err instanceof errors_1.CustomError ? err : new local_cache_1.FailedToInitLocalCacheError();
     }
-    return types_1.TestCommandResult.createHumanReadableTestCommandResult(responseData, jsonData, sarifData);
 }
-exports.buildOutput = buildOutput;
-function buildTestCommandResultData({ scanResult, orgSettings, options, }) {
-    var _a, _b, _c, _d, _e;
-    const projectName = (_c = (_b = (_a = scanResult.results) === null || _a === void 0 ? void 0 : _a.metadata) === null || _b === void 0 ? void 0 : _b.projectName) !== null && _c !== void 0 ? _c : path.basename(process.cwd());
-    const jsonData = json_2.jsonStringifyLargeObject(json_1.convertEngineToJsonResults({
-        results: scanResult,
-        projectName,
-        orgSettings,
-    }));
-    const sarifData = json_2.jsonStringifyLargeObject(sarif_1.convertEngineToSarifResults(scanResult));
-    assertHasSuccessfulScans(scanResult, { json: jsonData, sarif: sarifData }, options);
-    let responseData;
-    if (options.json) {
-        responseData = jsonData;
-    }
-    else if (options.sarif) {
-        responseData = sarifData;
-    }
-    else {
-        responseData = buildTextOutput({
-            scanResult,
-            projectName,
-            orgSettings,
-            options,
-        });
-    }
-    const hasVulnerabilities = !!((_e = (_d = scanResult.results) === null || _d === void 0 ? void 0 : _d.vulnerabilities) === null || _e === void 0 ? void 0 : _e.length);
-    if (hasVulnerabilities) {
-        throw new FoundIssuesError({
-            response: responseData,
-            json: jsonData,
-            sarif: sarifData,
-        });
+exports.initLocalCache = initLocalCache;
+
+
+/***/ }),
+
+/***/ 64895:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.policyEngineChecksum = exports.policyEngineFileName = exports.policyEngineReleaseVersion = void 0;
+const utils_1 = __webpack_require__(1728);
+/**
+ * The Policy Engine release version associated with this Snyk CLI version.
+ */
+exports.policyEngineReleaseVersion = utils_1.policyEngineVersion;
+/**
+ * The Policy Engine executable's file name.
+ */
+exports.policyEngineFileName = utils_1.formatPolicyEngineFileName(exports.policyEngineReleaseVersion);
+exports.policyEngineChecksum = utils_1.getChecksum(exports.policyEngineFileName);
+
+
+/***/ }),
+
+/***/ 1728:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.getChecksum = exports.formatPolicyEngineFileName = exports.policyEngineVersion = void 0;
+const os = __webpack_require__(12087);
+const policyEngineChecksums = `20c1531abe769c623106d72158c7008904abbf5e9434c3e13ad1bbd0142c485b  snyk-iac-test_0.24.0_Windows_x86_64.exe
+3bc449f592a51e0cb3e1d7c8c4eeae8f65a6ffca3cbe1466ecb58e89138bf075  snyk-iac-test_0.24.0_Linux_x86_64
+9efe44502e92a7b6011ab133349a1d59575773c78c5154642cb4b687aad5fa7e  snyk-iac-test_0.24.0_Darwin_x86_64
+a0f577d1169532fa1056f5502e7481522520fc6259ce12f9d2877b87b4269bb0  snyk-iac-test_0.24.0_Windows_arm64.exe
+f519daf0bd505865a94ba37079f1109dd0177d645bf07c0bd5ceb1288da18b0c  snyk-iac-test_0.24.0_Linux_arm64
+f6039356de00a6075714f8d703b4120fb41f8f6ada836f32fdb40d22a89230f2  snyk-iac-test_0.24.0_Darwin_arm64
+`;
+exports.policyEngineVersion = getPolicyEngineVersion();
+function formatPolicyEngineFileName(releaseVersion) {
+    let platform = 'Linux';
+    switch (os.platform()) {
+        case 'darwin':
+            platform = 'Darwin';
+            break;
+        case 'win32':
+            platform = 'Windows';
+            break;
     }
-    return { responseData, jsonData, sarifData };
+    const arch = os.arch() === 'arm64' ? 'arm64' : 'x86_64';
+    const execExt = os.platform() === 'win32' ? '.exe' : '';
+    return `snyk-iac-test_${releaseVersion}_${platform}_${arch}${execExt}`;
 }
-const SEPARATOR = '\n-------------------------------------------------------\n';
-function buildTextOutput({ scanResult, projectName, orgSettings, options, }) {
-    let response = '';
-    const testData = text_1.formatSnykIacTestTestData(scanResult.results, projectName, orgSettings.meta.org);
-    response +=
-        os_1.EOL +
-            text_1.getIacDisplayedIssues(testData.resultsBySeverity, {
-                shouldShowLineNumbers: true,
-            });
-    if (scanResult.errors) {
-        const testFailures = scanResult.errors.map((error) => ({
-            filePath: error.fields.path,
-            failureReason: error.userMessage,
-        }));
-        response += os_1.EOL.repeat(2) + text_1.formatIacTestFailures(testFailures);
-    }
-    response += os_1.EOL;
-    response += SEPARATOR;
-    response += os_1.EOL;
-    response += text_1.formatIacTestSummary(testData);
-    response += os_1.EOL;
-    if (options.report) {
-        response += output_1.buildShareResultsSummary({
-            orgName: orgSettings.meta.org,
-            projectName,
-            options,
-            isIacCustomRulesEntitlementEnabled: false,
-            isIacShareCliResultsCustomRulesSupported: false,
-        });
-        response += os_1.EOL;
-    }
-    if (output_1.shouldPrintShareResultsTip(options)) {
-        response += SEPARATOR + os_1.EOL + text_1.shareResultsTip + os_1.EOL;
+exports.formatPolicyEngineFileName = formatPolicyEngineFileName;
+function getChecksum(policyEngineFileName) {
+    const lines = policyEngineChecksums.split(/\r?\n/);
+    const checksumsMap = new Map();
+    for (const line of lines) {
+        const [checksum, file] = line.split(/\s+/);
+        if (file && checksum) {
+            checksumsMap.set(file, checksum.trim());
+        }
     }
-    return response;
-}
-function assertHasSuccessfulScans(scanResult, responseData, options) {
-    var _a, _b, _c;
-    const hasResources = !!((_b = (_a = scanResult.results) === null || _a === void 0 ? void 0 : _a.resources) === null || _b === void 0 ? void 0 : _b.length);
-    const hasErrors = !!((_c = scanResult.errors) === null || _c === void 0 ? void 0 : _c.length);
-    const hasSuccessfulScans = hasResources || !hasErrors;
-    if (!hasSuccessfulScans) {
-        const hasLoadableInput = scanResult.errors.some((error) => error.code !== types_2.IaCErrorCodes.NoLoadableInput);
-        throw hasLoadableInput
-            ? new NoSuccessfulScansError(responseData, scanResult.errors, options)
-            : new NoLoadableInputError(responseData, scanResult.errors, options);
+    const policyEngineChecksum = checksumsMap.get(policyEngineFileName);
+    if (!policyEngineChecksum) {
+        // This is an internal error and technically it should never be thrown
+        throw new Error(`Could not find checksum for ${policyEngineFileName}`);
     }
+    return policyEngineChecksum;
 }
-class NoSuccessfulScansError extends errors_1.FormattedCustomError {
-    constructor(responseData, errors, options) {
-        const firstErr = errors[0];
-        const isText = !options.json && !options.sarif;
-        const message = options.json
-            ? responseData.json
-            : options.sarif
-                ? responseData.sarif
-                : firstErr.message;
-        super(message, isText
-            ? text_1.formatIacTestFailures(errors.map((scanError) => ({
-                failureReason: scanError.userMessage,
-                filePath: scanError.fields.path,
-            })))
-            : strip_ansi_1.default(message));
-        this.code = firstErr.code;
-        this.strCode = firstErr.strCode;
-        this.json = isText ? responseData.json : message;
-        this.jsonStringifiedResults = responseData.json;
-        this.sarifStringifiedResults = responseData.sarif;
-        this.fields = firstErr.fields;
-    }
-    get path() {
-        var _a;
-        return (_a = this.fields) === null || _a === void 0 ? void 0 : _a.path;
+exports.getChecksum = getChecksum;
+function getPolicyEngineVersion() {
+    const lines = policyEngineChecksums.split(/\r?\n/);
+    if (lines.length == 0) {
+        throw new Error('empty checksum');
     }
-    set path(path1) {
-        this.fields.path = path1;
+    const line = lines.find((line) => line.length > 0);
+    if (line === undefined) {
+        throw new Error('empty checksum lines');
     }
-}
-exports.NoSuccessfulScansError = NoSuccessfulScansError;
-class NoLoadableInputError extends NoSuccessfulScansError {
-    constructor(responseData, errors, options) {
-        super(responseData, errors, options);
-        (this.code = types_2.IaCErrorCodes.NoFilesToScanError),
-            (this.strCode = error_utils_1.getErrorStringCode(this.code));
+    const parts = line.split(/\s+/);
+    if (parts.length < 2) {
+        throw new Error('invalid checksum line');
     }
-}
-exports.NoLoadableInputError = NoLoadableInputError;
-class FoundIssuesError extends errors_1.CustomError {
-    constructor(responseData) {
-        super(responseData.response);
-        this.code = 'VULNS';
-        this.strCode = 'VULNS';
-        this.userMessage = responseData.response;
-        this.jsonStringifiedResults = responseData.json;
-        this.sarifStringifiedResults = responseData.sarif;
+    const components = parts[1].split('_');
+    if (components.length < 2) {
+        throw new Error('invalid checksum file name');
     }
+    return components[1];
 }
-exports.FoundIssuesError = FoundIssuesError;
 
 
 /***/ }),
 
-/***/ 87999:
+/***/ 58939:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.convertEngineToSarifResults = void 0;
-const url_1 = __webpack_require__(78835);
-const marked_1 = __webpack_require__(30970);
-const path = __webpack_require__(85622);
-const upperFirst = __webpack_require__(90039);
-const camelCase = __webpack_require__(76884);
-const version_1 = __webpack_require__(38217);
-const sarif_output_1 = __webpack_require__(5034);
-const git_1 = __webpack_require__(82421);
-// Used to reference the base path in results.
-const PROJECT_ROOT_KEY = 'PROJECTROOT';
-function convertEngineToSarifResults(scanResult) {
-    let repoRoot;
+exports.FailedToCachePolicyEngineError = exports.FailedToDownloadPolicyEngineError = exports.policyEngineUrl = exports.downloadPolicyEngine = void 0;
+const pathLib = __webpack_require__(85622);
+const crypto = __webpack_require__(76417);
+const createDebugLogger = __webpack_require__(15158);
+const error_utils_1 = __webpack_require__(36401);
+const types_1 = __webpack_require__(94820);
+const errors_1 = __webpack_require__(55191);
+const metrics_1 = __webpack_require__(32971);
+const utils_1 = __webpack_require__(2334);
+const constants_1 = __webpack_require__(64895);
+const file_utils_1 = __webpack_require__(52761);
+const debugLog = createDebugLogger('snyk-iac');
+async function downloadPolicyEngine(testConfig) {
+    let downloadDurationSeconds = 0;
+    const timer = new metrics_1.TimerMetricInstance('iac_policy_engine_download');
+    timer.start();
+    const dataBuffer = await fetch();
+    assertValidChecksum(dataBuffer);
+    const cachedPolicyEnginePath = await cache(dataBuffer, testConfig.iacCachePath);
+    timer.stop();
+    downloadDurationSeconds = Math.round(timer.getValue() / 1000);
+    debugLog(`Downloaded and cached Policy Engine successfully in ${downloadDurationSeconds} seconds`);
+    return cachedPolicyEnginePath;
+}
+exports.downloadPolicyEngine = downloadPolicyEngine;
+async function fetch() {
+    debugLog(`Fetching Policy Engine executable from ${exports.policyEngineUrl}`);
+    let policyEngineDataBuffer;
     try {
-        repoRoot = git_1.getRepositoryRoot() + '/';
+        policyEngineDataBuffer = await utils_1.fetchCacheResource(exports.policyEngineUrl);
     }
-    catch {
-        repoRoot = path.join(process.cwd(), '/'); // the slash at the end is required, otherwise the artifactLocation.uri starts with a slash
+    catch (err) {
+        throw new FailedToDownloadPolicyEngineError();
     }
-    const tool = {
-        driver: {
-            name: 'Snyk IaC',
-            fullName: 'Snyk Infrastructure as Code',
-            version: version_1.getVersion(),
-            informationUri: 'https://docs.snyk.io/products/snyk-infrastructure-as-code',
-            rules: extractReportingDescriptor(scanResult.results),
-        },
-    };
-    return {
-        $schema: 'https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json',
-        version: '2.1.0',
-        runs: [
-            {
-                // https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.html#_Toc34317498
-                originalUriBaseIds: {
-                    [PROJECT_ROOT_KEY]: {
-                        uri: url_1.pathToFileURL(repoRoot).href,
-                        description: {
-                            text: 'The root directory for all project files.',
-                        },
-                    },
-                },
-                tool,
-                automationDetails: {
-                    id: 'snyk-iac',
-                },
-                results: mapSnykIacTestResultsToSarifResults(scanResult.results),
-            },
-        ],
-    };
+    debugLog('Policy Engine executable was fetched successfully');
+    return policyEngineDataBuffer;
 }
-exports.convertEngineToSarifResults = convertEngineToSarifResults;
-function extractReportingDescriptor(results) {
-    const rules = {};
-    if (!(results === null || results === void 0 ? void 0 : results.vulnerabilities)) {
-        return Object.values(rules);
+exports.policyEngineUrl = `https://static.snyk.io/cli/iac/test/v${constants_1.policyEngineReleaseVersion}/${constants_1.policyEngineFileName}`;
+class FailedToDownloadPolicyEngineError extends errors_1.CustomError {
+    constructor() {
+        super(`Failed to download cache resource from ${exports.policyEngineUrl}`);
+        this.code = types_1.IaCErrorCodes.FailedToDownloadPolicyEngineError;
+        this.strCode = error_utils_1.getErrorStringCode(this.code);
+        this.userMessage =
+            `Could not fetch cache resource from: ${exports.policyEngineUrl}` +
+                '\nEnsure valid network connection.';
     }
-    results.vulnerabilities.forEach((vulnerability) => {
-        if (rules[vulnerability.rule.id]) {
-            return;
-        }
-        const tags = ['security']; // switch to rules.labels once `snyk-iac-test` includes this info
-        rules[vulnerability.rule.id] = {
-            id: vulnerability.rule.id,
-            name: upperFirst(camelCase(vulnerability.rule.title)).replace(/ /g, ''),
-            shortDescription: {
-                text: `${upperFirst(vulnerability.severity)} severity - ${vulnerability.rule.title}`,
-            },
-            fullDescription: {
-                text: vulnerability.rule.description,
-            },
-            help: {
-                text: renderMarkdown(vulnerability.remediation),
-                markdown: vulnerability.remediation,
-            },
-            defaultConfiguration: {
-                level: sarif_output_1.getIssueLevel(vulnerability.severity),
-            },
-            properties: {
-                tags,
-                problem: {
-                    severity: vulnerability.severity,
-                },
-            },
-            helpUri: vulnerability.rule.documentation,
-        };
-    });
-    return Object.values(rules);
 }
-function renderMarkdown(markdown) {
-    const renderer = {
-        em(text) {
-            return text;
-        },
-        strong(text) {
-            return text;
-        },
-        link(text) {
-            return text;
-        },
-        blockquote(quote) {
-            return quote;
-        },
-        list(body) {
-            return body;
-        },
-        listitem(text) {
-            return text;
-        },
-        paragraph(text) {
-            return text;
-        },
-        codespan(text) {
-            return text;
-        },
-        code(code) {
-            return code;
-        },
-        heading(text) {
-            return `${text}\n`;
-        },
-    };
-    marked_1.marked.use({ renderer });
-    return marked_1.marked.parse(markdown);
+exports.FailedToDownloadPolicyEngineError = FailedToDownloadPolicyEngineError;
+function assertValidChecksum(dataBuffer) {
+    const computedChecksum = crypto
+        .createHash('sha256')
+        .update(dataBuffer)
+        .digest('hex');
+    if (computedChecksum !== constants_1.policyEngineChecksum) {
+        throw new FailedToDownloadPolicyEngineError();
+    }
+    debugLog('Fetched Policy Engine executable has valid checksum');
 }
-function mapSnykIacTestResultsToSarifResults(results) {
-    const result = [];
-    if (!(results === null || results === void 0 ? void 0 : results.vulnerabilities)) {
-        return result;
+async function cache(dataBuffer, iacCachePath) {
+    const savePath = pathLib.join(iacCachePath, constants_1.policyEngineFileName);
+    debugLog(`Caching Policy Engine executable to ${savePath}`);
+    try {
+        await file_utils_1.saveFile(dataBuffer, savePath);
     }
-    results.vulnerabilities.forEach((vulnerability) => {
-        var _a;
-        result.push({
-            ruleId: vulnerability.rule.id,
-            message: {
-                text: `This line contains a potential ${vulnerability.severity} severity misconfiguration`,
-            },
-            locations: [
-                {
-                    physicalLocation: {
-                        artifactLocation: {
-                            uri: vulnerability.resource.file,
-                            uriBaseId: PROJECT_ROOT_KEY,
-                        },
-                        // We exclude the `region` key when the line number is missing or -1.
-                        // https://docs.oasis-open.org/sarif/sarif/v2.0/csprd02/sarif-v2.0-csprd02.html#_Toc10127873
-                        region: {
-                            startLine: (_a = vulnerability.resource.line) !== null && _a !== void 0 ? _a : 1,
-                        },
-                    },
-                },
-            ],
-        });
-    });
-    return result;
+    catch (err) {
+        throw new FailedToCachePolicyEngineError(savePath);
+    }
+    debugLog(`Policy Engine executable was successfully cached`);
+    return savePath;
 }
+class FailedToCachePolicyEngineError extends errors_1.CustomError {
+    constructor(savePath) {
+        super(`Failed to cache Policy Engine executable to ${savePath}`);
+        this.code = types_1.IaCErrorCodes.FailedToCachePolicyEngineError;
+        this.strCode = error_utils_1.getErrorStringCode(this.code);
+        this.userMessage =
+            `Could not write the downloaded cache resource to: ${savePath}` +
+                '\nEnsure the cache directory is writable.';
+    }
+}
+exports.FailedToCachePolicyEngineError = FailedToCachePolicyEngineError;
 
 
 /***/ }),
 
-/***/ 50277:
+/***/ 90474:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
-var _a;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.scan = exports.systemCachePath = void 0;
-const childProcess = __webpack_require__(63129);
-const errors_1 = __webpack_require__(55191);
-const types_1 = __webpack_require__(94820);
-const error_utils_1 = __webpack_require__(36401);
-const newDebug = __webpack_require__(15158);
-const results_1 = __webpack_require__(89752);
-const os = __webpack_require__(12087);
-const fs = __webpack_require__(35747);
-const path = __webpack_require__(85622);
-const rimraf = __webpack_require__(50984);
-const config_1 = __webpack_require__(25425);
-const api_token_1 = __webpack_require__(95181);
-const analytics_1 = __webpack_require__(82744);
-const env_paths_1 = __webpack_require__(21766);
-const debug = newDebug('snyk-iac');
-exports.systemCachePath = (_a = config_1.default.CACHE_PATH) !== null && _a !== void 0 ? _a : env_paths_1.default('snyk').cache;
-function scan(options, policyEnginePath, rulesBundlePath) {
-    const configPath = createConfig(options);
-    try {
-        return scanWithConfig(options, policyEnginePath, rulesBundlePath, configPath);
-    }
-    finally {
-        deleteConfig(configPath);
-    }
-}
-exports.scan = scan;
-function scanWithConfig(options, policyEnginePath, rulesBundlePath, configPath) {
-    const args = processFlags(options, rulesBundlePath, configPath);
-    args.push(...options.paths);
-    const process = childProcess.spawnSync(policyEnginePath, args, {
-        encoding: 'utf-8',
-        stdio: 'pipe',
-        maxBuffer: 1024 * 1024 * 10,
-    });
-    debug('policy engine standard error:\n%s', '\n' + process.stderr);
-    if (process.status && process.status !== 0) {
-        throw new ScanError(`invalid exit status: ${process.status}`);
-    }
-    if (process.error) {
-        throw new ScanError(`spawning process: ${process.error}`);
-    }
-    let snykIacTestOutput;
-    try {
-        snykIacTestOutput = JSON.parse(process.stdout);
-    }
-    catch (e) {
-        throw new ScanError(`invalid output encoding: ${e}`);
-    }
-    return results_1.mapSnykIacTestOutputToTestOutput(snykIacTestOutput);
-}
-function processFlags(options, rulesBundlePath, configPath) {
-    var _a, _b, _c;
-    const flags = [
-        '-cache-dir',
-        exports.systemCachePath,
-        '-bundle',
-        rulesBundlePath,
-        '-config',
-        configPath,
-    ];
-    if (options.severityThreshold) {
-        flags.push('-severity-threshold', options.severityThreshold);
-    }
-    if ((_a = options.attributes) === null || _a === void 0 ? void 0 : _a.criticality) {
-        flags.push('-project-business-criticality', options.attributes.criticality.join(','));
-    }
-    if ((_b = options.attributes) === null || _b === void 0 ? void 0 : _b.environment) {
-        flags.push('-project-environment', options.attributes.environment.join(','));
-    }
-    if ((_c = options.attributes) === null || _c === void 0 ? void 0 : _c.lifecycle) {
-        flags.push('-project-lifecycle', options.attributes.lifecycle.join(','));
-    }
-    if (options.projectTags) {
-        const stringifiedTags = options.projectTags
-            .map((tag) => {
-            return `${tag.key}=${tag.value}`;
-        })
-            .join(',');
-        flags.push('-project-tags', stringifiedTags);
-    }
-    if (options.report) {
-        flags.push('-report');
-    }
-    if (options.targetReference) {
-        flags.push('-target-reference', options.targetReference);
-    }
-    if (options.targetName) {
-        flags.push('-target-name', options.targetName);
-    }
-    if (options.remoteRepoUrl) {
-        flags.push('-remote-repo-url', options.remoteRepoUrl);
-    }
-    return flags;
-}
-function createConfig(options) {
-    try {
-        const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'snyk-'));
-        const tempConfig = path.join(tempDir, 'config.json');
-        const configData = JSON.stringify({
-            org: options.orgSettings.meta.org,
-            apiUrl: config_1.default.API,
-            apiAuth: api_token_1.getAuthHeader(),
-            allowAnalytics: analytics_1.allowAnalytics(),
-            policy: options.policy,
-        });
-        fs.writeFileSync(tempConfig, configData);
-        return tempConfig;
-    }
-    catch (e) {
-        throw new ScanError(`unable to create config file: ${e}`);
-    }
-}
-function deleteConfig(configPath) {
-    try {
-        rimraf.sync(path.dirname(configPath));
-    }
-    catch (e) {
-        debug('unable to delete temporary directory', e);
-    }
-}
-class ScanError extends errors_1.CustomError {
-    constructor(message) {
-        super(message);
-        this.code = types_1.IaCErrorCodes.PolicyEngineScanError;
-        this.strCode = error_utils_1.getErrorStringCode(this.code);
-        this.userMessage = 'An error occurred when running the scan';
+exports.initPolicyEngine = void 0;
+const createDebugLogger = __webpack_require__(15158);
+const lookup_local_1 = __webpack_require__(91387);
+const download_1 = __webpack_require__(58939);
+const debugLogger = createDebugLogger('snyk-iac');
+async function initPolicyEngine(testConfig) {
+    debugLogger('Looking for Policy Engine locally');
+    let policyEnginePath = await lookup_local_1.lookupLocalPolicyEngine(testConfig);
+    if (!policyEnginePath) {
+        debugLogger(`Downloading the Policy Engine and saving it at ${testConfig.iacCachePath}`);
+        policyEnginePath = await download_1.downloadPolicyEngine(testConfig);
     }
+    return policyEnginePath;
 }
+exports.initPolicyEngine = initPolicyEngine;
 
 
 /***/ }),
 
-/***/ 89752:
+/***/ 91387:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.mapSnykIacTestOutputToTestOutput = void 0;
-const errors_1 = __webpack_require__(87198);
-function mapSnykIacTestOutputToTestOutput(snykIacOutput) {
-    var _a;
-    const errors = (_a = snykIacOutput.errors) === null || _a === void 0 ? void 0 : _a.map((err) => new errors_1.SnykIacTestError(err));
-    const errWithoutPath = errors === null || errors === void 0 ? void 0 : errors.find((err) => { var _a; return !((_a = err.fields) === null || _a === void 0 ? void 0 : _a.path); });
-    if (errWithoutPath) {
-        throw errWithoutPath;
+exports.lookupLocalPolicyEngine = exports.InvalidUserPolicyEnginePathError = void 0;
+const file_utils_1 = __webpack_require__(52761);
+const errors_1 = __webpack_require__(55191);
+const types_1 = __webpack_require__(94820);
+const error_utils_1 = __webpack_require__(36401);
+const constants_1 = __webpack_require__(64895);
+const utils_1 = __webpack_require__(2334);
+class InvalidUserPolicyEnginePathError extends errors_1.CustomError {
+    constructor(path, message, userMessage) {
+        super(message ||
+            'Failed to find a valid Policy Engine executable in the configured path');
+        this.code = types_1.IaCErrorCodes.InvalidUserPolicyEnginePathError;
+        this.strCode = error_utils_1.getErrorStringCode(this.code);
+        this.userMessage =
+            userMessage ||
+                `Could not find a valid Policy Engine executable in the configured path: ${path}` +
+                    '\nEnsure the configured path points to a valid Policy Engine executable.';
     }
-    return {
-        results: snykIacOutput.results,
-        errors,
+}
+exports.InvalidUserPolicyEnginePathError = InvalidUserPolicyEnginePathError;
+async function lookupLocalPolicyEngine(testConfig) {
+    const validPolicyEngineCondition = async (path) => {
+        return await file_utils_1.isExe(path);
     };
+    try {
+        return await utils_1.lookupLocal(testConfig.iacCachePath, constants_1.policyEngineFileName, testConfig.userPolicyEnginePath, validPolicyEngineCondition);
+    }
+    catch (err) {
+        if (err instanceof utils_1.InvalidUserPathError) {
+            throw new InvalidUserPolicyEnginePathError(testConfig.userPolicyEnginePath);
+        }
+        else {
+            throw err;
+        }
+    }
 }
-exports.mapSnykIacTestOutputToTestOutput = mapSnykIacTestOutputToTestOutput;
+exports.lookupLocalPolicyEngine = lookupLocalPolicyEngine;
 
 
 /***/ }),
 
-/***/ 88929:
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+/***/ 75957:
+/***/ ((__unused_webpack_module, exports) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.setup = void 0;
-const local_cache_1 = __webpack_require__(14379);
-async function setup(testConfig) {
-    return await local_cache_1.initLocalCache(testConfig);
-}
-exports.setup = setup;
+exports.rulesBundleName = void 0;
+exports.rulesBundleName = 'bundle-experimental.tar.gz';
 
 
 /***/ }),
 
-/***/ 14379:
+/***/ 30313:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.initLocalCache = void 0;
-const rules_bundle_1 = __webpack_require__(82373);
-const policy_engine_1 = __webpack_require__(41135);
-const file_utils_1 = __webpack_require__(52761);
+exports.FailedToCacheRulesBundleError = exports.FailedToDownloadRulesBundleError = exports.rulesBundleUrl = exports.downloadRulesBundle = void 0;
+const createDebugLogger = __webpack_require__(15158);
+const path = __webpack_require__(85622);
+const error_utils_1 = __webpack_require__(36401);
+const types_1 = __webpack_require__(94820);
 const errors_1 = __webpack_require__(55191);
-const local_cache_1 = __webpack_require__(50089);
-async function initLocalCache(testConfig) {
+const metrics_1 = __webpack_require__(32971);
+const file_utils_1 = __webpack_require__(52761);
+const utils_1 = __webpack_require__(2334);
+const constants_1 = __webpack_require__(75957);
+const debugLog = createDebugLogger('snyk-iac');
+async function downloadRulesBundle(testConfig) {
+    let downloadDurationSeconds = 0;
+    const timer = new metrics_1.TimerMetricInstance('iac_rules_bundle_download');
+    timer.start();
+    const dataBuffer = await fetch();
+    const cachedRulesBundlePath = await cache(dataBuffer, testConfig.iacCachePath);
+    timer.stop();
+    downloadDurationSeconds = Math.round(timer.getValue() / 1000);
+    debugLog(`Downloaded and cached rules bundle successfully in ${downloadDurationSeconds} seconds`);
+    return cachedRulesBundlePath;
+}
+exports.downloadRulesBundle = downloadRulesBundle;
+async function fetch() {
+    debugLog(`Fetching rules bundle from ${exports.rulesBundleUrl}`);
+    let rulesBundleDataBuffer;
     try {
-        await file_utils_1.createDirIfNotExists(testConfig.iacCachePath);
-        const policyEnginePath = await policy_engine_1.initPolicyEngine(testConfig);
-        const rulesBundlePath = await rules_bundle_1.initRulesBundle(testConfig);
-        return { policyEnginePath, rulesBundlePath };
+        rulesBundleDataBuffer = await utils_1.fetchCacheResource(exports.rulesBundleUrl);
     }
     catch (err) {
-        throw err instanceof errors_1.CustomError ? err : new local_cache_1.FailedToInitLocalCacheError();
+        throw new FailedToDownloadRulesBundleError();
     }
+    debugLog('Rules bundle was fetched successfully');
+    return rulesBundleDataBuffer;
 }
-exports.initLocalCache = initLocalCache;
+exports.rulesBundleUrl = 'https://static.snyk.io/cli/wasm/bundle-experimental.tar.gz';
+class FailedToDownloadRulesBundleError extends errors_1.CustomError {
+    constructor() {
+        super(`Failed to download cache resource from ${exports.rulesBundleUrl}`);
+        this.code = types_1.IaCErrorCodes.FailedToDownloadRulesBundleError;
+        this.strCode = error_utils_1.getErrorStringCode(this.code);
+        this.userMessage =
+            `Could not fetch cache resource from: ${exports.rulesBundleUrl}` +
+                '\nEnsure valid network connection.';
+    }
+}
+exports.FailedToDownloadRulesBundleError = FailedToDownloadRulesBundleError;
+async function cache(dataBuffer, iacCachePath) {
+    const savePath = path.join(iacCachePath, constants_1.rulesBundleName);
+    debugLog(`Caching rules bundle to ${savePath}`);
+    try {
+        await file_utils_1.saveFile(dataBuffer, savePath);
+    }
+    catch (err) {
+        throw new FailedToCacheRulesBundleError(savePath);
+    }
+    debugLog(`Rules bundle was successfully cached`);
+    return savePath;
+}
+class FailedToCacheRulesBundleError extends errors_1.CustomError {
+    constructor(savePath) {
+        super(`Failed to cache rules bundle to ${savePath}`);
+        this.code = types_1.IaCErrorCodes.FailedToCacheRulesBundleError;
+        this.strCode = error_utils_1.getErrorStringCode(this.code);
+        this.userMessage =
+            `Could not write the downloaded cache resource to: ${savePath}` +
+                '\nEnsure the cache directory is writable.';
+    }
+}
+exports.FailedToCacheRulesBundleError = FailedToCacheRulesBundleError;
 
 
 /***/ }),
 
-/***/ 89574:
+/***/ 51897:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
-"use strict";
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.policyEngineChecksum = exports.policyEngineFileName = exports.policyEngineReleaseVersion = void 0;
-const utils_1 = __webpack_require__(92040);
-/**
- * The Policy Engine release version associated with this Snyk CLI version.
- */
-exports.policyEngineReleaseVersion = utils_1.policyEngineVersion;
-/**
- * The Policy Engine executable's file name.
- */
-exports.policyEngineFileName = utils_1.formatPolicyEngineFileName(exports.policyEngineReleaseVersion);
-exports.policyEngineChecksum = utils_1.getChecksum(exports.policyEngineFileName);
-
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.initRulesBundle = void 0;
+const createDebugLogger = __webpack_require__(15158);
+const download_1 = __webpack_require__(30313);
+const debugLogger = createDebugLogger('snyk-iac');
+async function initRulesBundle(testConfig) {
+    // We are currently using the legacy rules bundle and we need to re-download it each time to use the latest one available.
+    // debugLogger('Looking for rules bundle locally');
+    // let rulesBundlePath = await lookupLocalRulesBundle(testConfig);
+    debugLogger(`Downloading the rules bundle and saving it at ${testConfig.iacCachePath}`);
+    return await download_1.downloadRulesBundle(testConfig);
+}
+exports.initRulesBundle = initRulesBundle;
+
 
 /***/ }),
 
-/***/ 92040:
+/***/ 2334:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.getChecksum = exports.formatPolicyEngineFileName = exports.policyEngineVersion = void 0;
-const os = __webpack_require__(12087);
-const policyEngineChecksums = `0313de2afa00ed6301e8cadbe344e448085c6e94cb0e87a06264b908c3c5e2de  snyk-iac-test_0.22.0_Windows_x86_64.exe
-031416e2714ba2bfe85bb294f588eebc20b028dae2222b1929df2072fd01028d  snyk-iac-test_0.22.0_Windows_arm64.exe
-03dcc3b16f1d84f80346aaf05fe7f8a5f8099af765c9979e8f36ee4b9cee4fb3  snyk-iac-test_0.22.0_Darwin_x86_64
-54d0a20a209c45f948f147e4280650b366b4f8252b042fe4a30bec832fe3f915  snyk-iac-test_0.22.0_Darwin_arm64
-cb0d714746310cda42914163572e39c4e4f044342d54695ac901d80e03c9ecf8  snyk-iac-test_0.22.0_Linux_x86_64
-f95568949342bf7f33285500022a9ee0f3d64fc6dd601f16ce9b654e43cb6de6  snyk-iac-test_0.22.0_Linux_arm64
-`;
-exports.policyEngineVersion = getPolicyEngineVersion();
-function formatPolicyEngineFileName(releaseVersion) {
-    let platform = 'Linux';
-    switch (os.platform()) {
-        case 'darwin':
-            platform = 'Darwin';
-            break;
-        case 'win32':
-            platform = 'Windows';
-            break;
-    }
-    const arch = os.arch() === 'arm64' ? 'arm64' : 'x86_64';
-    const execExt = os.platform() === 'win32' ? '.exe' : '';
-    return `snyk-iac-test_${releaseVersion}_${platform}_${arch}${execExt}`;
-}
-exports.formatPolicyEngineFileName = formatPolicyEngineFileName;
-function getChecksum(policyEngineFileName) {
-    const lines = policyEngineChecksums.split(/\r?\n/);
-    const checksumsMap = new Map();
-    for (const line of lines) {
-        const [checksum, file] = line.split(/\s+/);
-        if (file && checksum) {
-            checksumsMap.set(file, checksum.trim());
+exports.fetchCacheResource = exports.InvalidUserPathError = exports.lookupLocal = void 0;
+const createDebugLogger = __webpack_require__(15158);
+const path = __webpack_require__(85622);
+const errors_1 = __webpack_require__(55191);
+const request_1 = __webpack_require__(52050);
+const debugLogger = createDebugLogger('snyk-iac');
+async function lookupLocal(iacCachePath, resourceName, userResourcePath, validResourceCondition) {
+    // Lookup in custom path.
+    if (userResourcePath) {
+        debugLogger('User configured path detected: %s', userResourcePath);
+        if (await validResourceCondition(userResourcePath)) {
+            return userResourcePath;
+        }
+        else {
+            // When using this function please catch this Error and throw a new specific Custom Error.
+            throw new InvalidUserPathError(`Failed to find a valid resource in the configured path: ${userResourcePath}`);
         }
     }
-    const policyEngineChecksum = checksumsMap.get(policyEngineFileName);
-    if (!policyEngineChecksum) {
-        // This is an internal error and technically it should never be thrown
-        throw new Error(`Could not find checksum for ${policyEngineFileName}`);
+    // Lookup in cache.
+    else {
+        const cachedResourcePath = path.join(iacCachePath, resourceName);
+        if (await validResourceCondition(cachedResourcePath)) {
+            return cachedResourcePath;
+        }
     }
-    return policyEngineChecksum;
 }
-exports.getChecksum = getChecksum;
-function getPolicyEngineVersion() {
-    const lines = policyEngineChecksums.split(/\r?\n/);
-    if (lines.length == 0) {
-        throw new Error('empty checksum');
-    }
-    const line = lines.find((line) => line.length > 0);
-    if (line === undefined) {
-        throw new Error('empty checksum lines');
-    }
-    const parts = line.split(/\s+/);
-    if (parts.length < 2) {
-        throw new Error('invalid checksum line');
+exports.lookupLocal = lookupLocal;
+class InvalidUserPathError extends errors_1.CustomError {
+    constructor(message) {
+        super(message);
     }
-    const components = parts[1].split('_');
-    if (components.length < 2) {
-        throw new Error('invalid checksum file name');
+}
+exports.InvalidUserPathError = InvalidUserPathError;
+async function fetchCacheResource(url) {
+    const { res, body: cacheResourceBuffer } = await request_1.makeRequest({
+        url,
+    });
+    if (res.statusCode !== 200) {
+        throw new errors_1.CustomError(`Failed to download cache resource from ${url}`);
     }
-    return components[1];
+    return cacheResourceBuffer;
 }
+exports.fetchCacheResource = fetchCacheResource;
 
 
 /***/ }),
 
-/***/ 18739:
+/***/ 99687:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.FailedToCachePolicyEngineError = exports.FailedToDownloadPolicyEngineError = exports.policyEngineUrl = exports.downloadPolicyEngine = void 0;
-const pathLib = __webpack_require__(85622);
-const crypto = __webpack_require__(76417);
-const createDebugLogger = __webpack_require__(15158);
-const error_utils_1 = __webpack_require__(36401);
-const types_1 = __webpack_require__(94820);
+exports.FoundIssuesError = exports.NoLoadableInputError = exports.NoSuccessfulScansError = exports.buildOutput = void 0;
+const os_1 = __webpack_require__(12087);
+const json_1 = __webpack_require__(71909);
+const types_1 = __webpack_require__(55246);
+const text_1 = __webpack_require__(86166);
+const json_2 = __webpack_require__(27019);
+const types_2 = __webpack_require__(94820);
+const sarif_1 = __webpack_require__(87999);
 const errors_1 = __webpack_require__(55191);
-const metrics_1 = __webpack_require__(32971);
-const utils_1 = __webpack_require__(42256);
-const constants_1 = __webpack_require__(89574);
-const file_utils_1 = __webpack_require__(52761);
-const debugLog = createDebugLogger('snyk-iac');
-async function downloadPolicyEngine(testConfig) {
-    let downloadDurationSeconds = 0;
-    const timer = new metrics_1.TimerMetricInstance('iac_policy_engine_download');
-    timer.start();
-    const dataBuffer = await fetch();
-    assertValidChecksum(dataBuffer);
-    const cachedPolicyEnginePath = await cache(dataBuffer, testConfig.iacCachePath);
-    timer.stop();
-    downloadDurationSeconds = Math.round(timer.getValue() / 1000);
-    debugLog(`Downloaded and cached Policy Engine successfully in ${downloadDurationSeconds} seconds`);
-    return cachedPolicyEnginePath;
+const strip_ansi_1 = __webpack_require__(76003);
+const path = __webpack_require__(85622);
+const error_utils_1 = __webpack_require__(36401);
+const output_1 = __webpack_require__(39313);
+function buildOutput({ scanResult, testSpinner, orgSettings, options, }) {
+    if (scanResult.results) {
+        testSpinner === null || testSpinner === void 0 ? void 0 : testSpinner.succeed(text_1.spinnerSuccessMessage);
+    }
+    else {
+        testSpinner === null || testSpinner === void 0 ? void 0 : testSpinner.stop();
+    }
+    const { responseData, jsonData, sarifData } = buildTestCommandResultData({
+        scanResult,
+        orgSettings,
+        options,
+    });
+    if (options.json || options.sarif) {
+        return types_1.TestCommandResult.createJsonTestCommandResult(responseData, jsonData, sarifData);
+    }
+    return types_1.TestCommandResult.createHumanReadableTestCommandResult(responseData, jsonData, sarifData);
 }
-exports.downloadPolicyEngine = downloadPolicyEngine;
-async function fetch() {
-    debugLog(`Fetching Policy Engine executable from ${exports.policyEngineUrl}`);
-    let policyEngineDataBuffer;
-    try {
-        policyEngineDataBuffer = await utils_1.fetchCacheResource(exports.policyEngineUrl);
+exports.buildOutput = buildOutput;
+function buildTestCommandResultData({ scanResult, orgSettings, options, }) {
+    var _a, _b, _c, _d, _e;
+    const projectName = (_c = (_b = (_a = scanResult.results) === null || _a === void 0 ? void 0 : _a.metadata) === null || _b === void 0 ? void 0 : _b.projectName) !== null && _c !== void 0 ? _c : path.basename(process.cwd());
+    const jsonData = json_2.jsonStringifyLargeObject(json_1.convertEngineToJsonResults({
+        results: scanResult,
+        projectName,
+        orgSettings,
+    }));
+    const sarifData = json_2.jsonStringifyLargeObject(sarif_1.convertEngineToSarifResults(scanResult));
+    assertHasSuccessfulScans(scanResult, { json: jsonData, sarif: sarifData }, options);
+    let responseData;
+    if (options.json) {
+        responseData = jsonData;
     }
-    catch (err) {
-        throw new FailedToDownloadPolicyEngineError();
+    else if (options.sarif) {
+        responseData = sarifData;
     }
-    debugLog('Policy Engine executable was fetched successfully');
-    return policyEngineDataBuffer;
+    else {
+        responseData = buildTextOutput({
+            scanResult,
+            projectName,
+            orgSettings,
+            options,
+        });
+    }
+    const hasVulnerabilities = !!((_e = (_d = scanResult.results) === null || _d === void 0 ? void 0 : _d.vulnerabilities) === null || _e === void 0 ? void 0 : _e.length);
+    if (hasVulnerabilities) {
+        throw new FoundIssuesError({
+            response: responseData,
+            json: jsonData,
+            sarif: sarifData,
+        });
+    }
+    return { responseData, jsonData, sarifData };
 }
-exports.policyEngineUrl = `https://static.snyk.io/cli/iac/test/v${constants_1.policyEngineReleaseVersion}/${constants_1.policyEngineFileName}`;
-class FailedToDownloadPolicyEngineError extends errors_1.CustomError {
-    constructor() {
-        super(`Failed to download cache resource from ${exports.policyEngineUrl}`);
-        this.code = types_1.IaCErrorCodes.FailedToDownloadPolicyEngineError;
-        this.strCode = error_utils_1.getErrorStringCode(this.code);
-        this.userMessage =
-            `Could not fetch cache resource from: ${exports.policyEngineUrl}` +
-                '\nEnsure valid network connection.';
+const SEPARATOR = '\n-------------------------------------------------------\n';
+function buildTextOutput({ scanResult, projectName, orgSettings, options, }) {
+    let response = '';
+    const testData = text_1.formatSnykIacTestTestData(scanResult.results, projectName, orgSettings.meta.org);
+    response +=
+        os_1.EOL +
+            text_1.getIacDisplayedIssues(testData.resultsBySeverity, {
+                shouldShowLineNumbers: true,
+            });
+    if (scanResult.errors) {
+        const testFailures = scanResult.errors.map((error) => ({
+            filePath: error.fields.path,
+            failureReason: error.userMessage,
+        }));
+        response += os_1.EOL.repeat(2) + text_1.formatIacTestFailures(testFailures);
+    }
+    response += os_1.EOL;
+    response += SEPARATOR;
+    response += os_1.EOL;
+    response += text_1.formatIacTestSummary(testData);
+    response += os_1.EOL;
+    if (options.report) {
+        response += output_1.buildShareResultsSummary({
+            orgName: orgSettings.meta.org,
+            projectName,
+            options,
+            isIacCustomRulesEntitlementEnabled: false,
+            isIacShareCliResultsCustomRulesSupported: false,
+        });
+        response += os_1.EOL;
     }
+    if (output_1.shouldPrintShareResultsTip(options)) {
+        response += SEPARATOR + os_1.EOL + text_1.shareResultsTip + os_1.EOL;
+    }
+    return response;
 }
-exports.FailedToDownloadPolicyEngineError = FailedToDownloadPolicyEngineError;
-function assertValidChecksum(dataBuffer) {
-    const computedChecksum = crypto
-        .createHash('sha256')
-        .update(dataBuffer)
-        .digest('hex');
-    if (computedChecksum !== constants_1.policyEngineChecksum) {
-        throw new FailedToDownloadPolicyEngineError();
+function assertHasSuccessfulScans(scanResult, responseData, options) {
+    var _a, _b, _c;
+    const hasResources = !!((_b = (_a = scanResult.results) === null || _a === void 0 ? void 0 : _a.resources) === null || _b === void 0 ? void 0 : _b.length);
+    const hasErrors = !!((_c = scanResult.errors) === null || _c === void 0 ? void 0 : _c.length);
+    const hasSuccessfulScans = hasResources || !hasErrors;
+    if (!hasSuccessfulScans) {
+        const hasLoadableInput = scanResult.errors.some((error) => error.code !== types_2.IaCErrorCodes.NoLoadableInput);
+        throw hasLoadableInput
+            ? new NoSuccessfulScansError(responseData, scanResult.errors, options)
+            : new NoLoadableInputError(responseData, scanResult.errors, options);
+    }
+}
+class NoSuccessfulScansError extends errors_1.FormattedCustomError {
+    constructor(responseData, errors, options) {
+        const firstErr = errors[0];
+        const isText = !options.json && !options.sarif;
+        const message = options.json
+            ? responseData.json
+            : options.sarif
+                ? responseData.sarif
+                : firstErr.message;
+        super(message, isText
+            ? text_1.formatIacTestFailures(errors.map((scanError) => ({
+                failureReason: scanError.userMessage,
+                filePath: scanError.fields.path,
+            })))
+            : strip_ansi_1.default(message));
+        this.code = firstErr.code;
+        this.strCode = firstErr.strCode;
+        this.json = isText ? responseData.json : message;
+        this.jsonStringifiedResults = responseData.json;
+        this.sarifStringifiedResults = responseData.sarif;
+        this.fields = firstErr.fields;
     }
-    debugLog('Fetched Policy Engine executable has valid checksum');
-}
-async function cache(dataBuffer, iacCachePath) {
-    const savePath = pathLib.join(iacCachePath, constants_1.policyEngineFileName);
-    debugLog(`Caching Policy Engine executable to ${savePath}`);
-    try {
-        await file_utils_1.saveFile(dataBuffer, savePath);
+    get path() {
+        var _a;
+        return (_a = this.fields) === null || _a === void 0 ? void 0 : _a.path;
     }
-    catch (err) {
-        throw new FailedToCachePolicyEngineError(savePath);
+    set path(path1) {
+        this.fields.path = path1;
     }
-    debugLog(`Policy Engine executable was successfully cached`);
-    return savePath;
 }
-class FailedToCachePolicyEngineError extends errors_1.CustomError {
-    constructor(savePath) {
-        super(`Failed to cache Policy Engine executable to ${savePath}`);
-        this.code = types_1.IaCErrorCodes.FailedToCachePolicyEngineError;
-        this.strCode = error_utils_1.getErrorStringCode(this.code);
-        this.userMessage =
-            `Could not write the downloaded cache resource to: ${savePath}` +
-                '\nEnsure the cache directory is writable.';
+exports.NoSuccessfulScansError = NoSuccessfulScansError;
+class NoLoadableInputError extends NoSuccessfulScansError {
+    constructor(responseData, errors, options) {
+        super(responseData, errors, options);
+        (this.code = types_2.IaCErrorCodes.NoFilesToScanError),
+            (this.strCode = error_utils_1.getErrorStringCode(this.code));
     }
 }
-exports.FailedToCachePolicyEngineError = FailedToCachePolicyEngineError;
-
-
-/***/ }),
-
-/***/ 41135:
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
-
-"use strict";
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.initPolicyEngine = void 0;
-const createDebugLogger = __webpack_require__(15158);
-const lookup_local_1 = __webpack_require__(73164);
-const download_1 = __webpack_require__(18739);
-const debugLogger = createDebugLogger('snyk-iac');
-async function initPolicyEngine(testConfig) {
-    debugLogger('Looking for Policy Engine locally');
-    let policyEnginePath = await lookup_local_1.lookupLocalPolicyEngine(testConfig);
-    if (!policyEnginePath) {
-        debugLogger(`Downloading the Policy Engine and saving it at ${testConfig.iacCachePath}`);
-        policyEnginePath = await download_1.downloadPolicyEngine(testConfig);
+exports.NoLoadableInputError = NoLoadableInputError;
+class FoundIssuesError extends errors_1.CustomError {
+    constructor(responseData) {
+        super(responseData.response);
+        this.code = 'VULNS';
+        this.strCode = 'VULNS';
+        this.userMessage = responseData.response;
+        this.jsonStringifiedResults = responseData.json;
+        this.sarifStringifiedResults = responseData.sarif;
     }
-    return policyEnginePath;
 }
-exports.initPolicyEngine = initPolicyEngine;
+exports.FoundIssuesError = FoundIssuesError;
 
 
 /***/ }),
 
-/***/ 73164:
+/***/ 87999:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.lookupLocalPolicyEngine = exports.InvalidUserPolicyEnginePathError = void 0;
-const file_utils_1 = __webpack_require__(52761);
-const errors_1 = __webpack_require__(55191);
-const types_1 = __webpack_require__(94820);
-const error_utils_1 = __webpack_require__(36401);
-const constants_1 = __webpack_require__(89574);
-const utils_1 = __webpack_require__(42256);
-class InvalidUserPolicyEnginePathError extends errors_1.CustomError {
-    constructor(path, message, userMessage) {
-        super(message ||
-            'Failed to find a valid Policy Engine executable in the configured path');
-        this.code = types_1.IaCErrorCodes.InvalidUserPolicyEnginePathError;
-        this.strCode = error_utils_1.getErrorStringCode(this.code);
-        this.userMessage =
-            userMessage ||
-                `Could not find a valid Policy Engine executable in the configured path: ${path}` +
-                    '\nEnsure the configured path points to a valid Policy Engine executable.';
+exports.convertEngineToSarifResults = void 0;
+const url_1 = __webpack_require__(78835);
+const marked_1 = __webpack_require__(30970);
+const path = __webpack_require__(85622);
+const upperFirst = __webpack_require__(90039);
+const camelCase = __webpack_require__(76884);
+const version_1 = __webpack_require__(38217);
+const sarif_output_1 = __webpack_require__(5034);
+const git_1 = __webpack_require__(82421);
+// Used to reference the base path in results.
+const PROJECT_ROOT_KEY = 'PROJECTROOT';
+function convertEngineToSarifResults(scanResult) {
+    let repoRoot;
+    try {
+        repoRoot = git_1.getRepositoryRoot() + '/';
     }
-}
-exports.InvalidUserPolicyEnginePathError = InvalidUserPolicyEnginePathError;
-async function lookupLocalPolicyEngine(testConfig) {
-    const validPolicyEngineCondition = async (path) => {
-        return await file_utils_1.isExe(path);
+    catch {
+        repoRoot = path.join(process.cwd(), '/'); // the slash at the end is required, otherwise the artifactLocation.uri starts with a slash
+    }
+    const tool = {
+        driver: {
+            name: 'Snyk IaC',
+            fullName: 'Snyk Infrastructure as Code',
+            version: version_1.getVersion(),
+            informationUri: 'https://docs.snyk.io/products/snyk-infrastructure-as-code',
+            rules: extractReportingDescriptor(scanResult.results),
+        },
     };
-    try {
-        return await utils_1.lookupLocal(testConfig.iacCachePath, constants_1.policyEngineFileName, testConfig.userPolicyEnginePath, validPolicyEngineCondition);
+    return {
+        $schema: 'https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json',
+        version: '2.1.0',
+        runs: [
+            {
+                // https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.html#_Toc34317498
+                originalUriBaseIds: {
+                    [PROJECT_ROOT_KEY]: {
+                        uri: url_1.pathToFileURL(repoRoot).href,
+                        description: {
+                            text: 'The root directory for all project files.',
+                        },
+                    },
+                },
+                tool,
+                automationDetails: {
+                    id: 'snyk-iac',
+                },
+                results: mapSnykIacTestResultsToSarifResults(scanResult.results),
+            },
+        ],
+    };
+}
+exports.convertEngineToSarifResults = convertEngineToSarifResults;
+function extractReportingDescriptor(results) {
+    const rules = {};
+    if (!(results === null || results === void 0 ? void 0 : results.vulnerabilities)) {
+        return Object.values(rules);
     }
-    catch (err) {
-        if (err instanceof utils_1.InvalidUserPathError) {
-            throw new InvalidUserPolicyEnginePathError(testConfig.userPolicyEnginePath);
-        }
-        else {
-            throw err;
+    results.vulnerabilities.forEach((vulnerability) => {
+        if (rules[vulnerability.rule.id]) {
+            return;
         }
+        const tags = ['security']; // switch to rules.labels once `snyk-iac-test` includes this info
+        rules[vulnerability.rule.id] = {
+            id: vulnerability.rule.id,
+            name: upperFirst(camelCase(vulnerability.rule.title)).replace(/ /g, ''),
+            shortDescription: {
+                text: `${upperFirst(vulnerability.severity)} severity - ${vulnerability.rule.title}`,
+            },
+            fullDescription: {
+                text: vulnerability.rule.description,
+            },
+            help: {
+                text: renderMarkdown(vulnerability.remediation),
+                markdown: vulnerability.remediation,
+            },
+            defaultConfiguration: {
+                level: sarif_output_1.getIssueLevel(vulnerability.severity),
+            },
+            properties: {
+                tags,
+                problem: {
+                    severity: vulnerability.severity,
+                },
+            },
+            helpUri: vulnerability.rule.documentation,
+        };
+    });
+    return Object.values(rules);
+}
+function renderMarkdown(markdown) {
+    const renderer = {
+        em(text) {
+            return text;
+        },
+        strong(text) {
+            return text;
+        },
+        link(text) {
+            return text;
+        },
+        blockquote(quote) {
+            return quote;
+        },
+        list(body) {
+            return body;
+        },
+        listitem(text) {
+            return text;
+        },
+        paragraph(text) {
+            return text;
+        },
+        codespan(text) {
+            return text;
+        },
+        code(code) {
+            return code;
+        },
+        heading(text) {
+            return `${text}\n`;
+        },
+    };
+    marked_1.marked.use({ renderer });
+    return marked_1.marked.parse(markdown);
+}
+function mapSnykIacTestResultsToSarifResults(results) {
+    const result = [];
+    if (!(results === null || results === void 0 ? void 0 : results.vulnerabilities)) {
+        return result;
     }
+    results.vulnerabilities.forEach((vulnerability) => {
+        var _a;
+        result.push({
+            ruleId: vulnerability.rule.id,
+            message: {
+                text: `This line contains a potential ${vulnerability.severity} severity misconfiguration`,
+            },
+            locations: [
+                {
+                    physicalLocation: {
+                        artifactLocation: {
+                            uri: vulnerability.resource.file,
+                            uriBaseId: PROJECT_ROOT_KEY,
+                        },
+                        // We exclude the `region` key when the line number is missing or -1.
+                        // https://docs.oasis-open.org/sarif/sarif/v2.0/csprd02/sarif-v2.0-csprd02.html#_Toc10127873
+                        region: {
+                            startLine: (_a = vulnerability.resource.line) !== null && _a !== void 0 ? _a : 1,
+                        },
+                    },
+                },
+            ],
+        });
+    });
+    return result;
 }
-exports.lookupLocalPolicyEngine = lookupLocalPolicyEngine;
-
-
-/***/ }),
-
-/***/ 22964:
-/***/ ((__unused_webpack_module, exports) => {
-
-"use strict";
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.rulesBundleName = void 0;
-exports.rulesBundleName = 'bundle-experimental.tar.gz';
 
 
 /***/ }),
 
-/***/ 30753:
+/***/ 50277:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
+var _a;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.FailedToCacheRulesBundleError = exports.FailedToDownloadRulesBundleError = exports.rulesBundleUrl = exports.downloadRulesBundle = void 0;
-const createDebugLogger = __webpack_require__(15158);
-const path = __webpack_require__(85622);
-const error_utils_1 = __webpack_require__(36401);
-const types_1 = __webpack_require__(94820);
+exports.scan = exports.systemCachePath = void 0;
+const childProcess = __webpack_require__(63129);
 const errors_1 = __webpack_require__(55191);
-const metrics_1 = __webpack_require__(32971);
-const file_utils_1 = __webpack_require__(52761);
-const utils_1 = __webpack_require__(42256);
-const constants_1 = __webpack_require__(22964);
-const debugLog = createDebugLogger('snyk-iac');
-async function downloadRulesBundle(testConfig) {
-    let downloadDurationSeconds = 0;
-    const timer = new metrics_1.TimerMetricInstance('iac_rules_bundle_download');
-    timer.start();
-    const dataBuffer = await fetch();
-    const cachedRulesBundlePath = await cache(dataBuffer, testConfig.iacCachePath);
-    timer.stop();
-    downloadDurationSeconds = Math.round(timer.getValue() / 1000);
-    debugLog(`Downloaded and cached rules bundle successfully in ${downloadDurationSeconds} seconds`);
-    return cachedRulesBundlePath;
+const types_1 = __webpack_require__(94820);
+const error_utils_1 = __webpack_require__(36401);
+const newDebug = __webpack_require__(15158);
+const results_1 = __webpack_require__(89752);
+const os = __webpack_require__(12087);
+const fs = __webpack_require__(35747);
+const path = __webpack_require__(85622);
+const rimraf = __webpack_require__(50984);
+const config_1 = __webpack_require__(25425);
+const api_token_1 = __webpack_require__(95181);
+const analytics_1 = __webpack_require__(82744);
+const env_paths_1 = __webpack_require__(21766);
+const debug = newDebug('snyk-iac');
+exports.systemCachePath = (_a = config_1.default.CACHE_PATH) !== null && _a !== void 0 ? _a : env_paths_1.default('snyk').cache;
+function scan(options, policyEnginePath, rulesBundlePath) {
+    const configPath = createConfig(options);
+    try {
+        return scanWithConfig(options, policyEnginePath, rulesBundlePath, configPath);
+    }
+    finally {
+        deleteConfig(configPath);
+    }
 }
-exports.downloadRulesBundle = downloadRulesBundle;
-async function fetch() {
-    debugLog(`Fetching rules bundle from ${exports.rulesBundleUrl}`);
-    let rulesBundleDataBuffer;
+exports.scan = scan;
+function scanWithConfig(options, policyEnginePath, rulesBundlePath, configPath) {
+    const args = processFlags(options, rulesBundlePath, configPath);
+    args.push(...options.paths);
+    const process = childProcess.spawnSync(policyEnginePath, args, {
+        encoding: 'utf-8',
+        stdio: 'pipe',
+        maxBuffer: 1024 * 1024 * 10,
+    });
+    debug('policy engine standard error:\n%s', '\n' + process.stderr);
+    if (process.status && process.status !== 0) {
+        throw new ScanError(`invalid exit status: ${process.status}`);
+    }
+    if (process.error) {
+        throw new ScanError(`spawning process: ${process.error}`);
+    }
+    let snykIacTestOutput;
     try {
-        rulesBundleDataBuffer = await utils_1.fetchCacheResource(exports.rulesBundleUrl);
+        snykIacTestOutput = JSON.parse(process.stdout);
     }
-    catch (err) {
-        throw new FailedToDownloadRulesBundleError();
+    catch (e) {
+        throw new ScanError(`invalid output encoding: ${e}`);
     }
-    debugLog('Rules bundle was fetched successfully');
-    return rulesBundleDataBuffer;
+    return results_1.mapSnykIacTestOutputToTestOutput(snykIacTestOutput);
 }
-exports.rulesBundleUrl = 'https://static.snyk.io/cli/wasm/bundle-experimental.tar.gz';
-class FailedToDownloadRulesBundleError extends errors_1.CustomError {
-    constructor() {
-        super(`Failed to download cache resource from ${exports.rulesBundleUrl}`);
-        this.code = types_1.IaCErrorCodes.FailedToDownloadRulesBundleError;
-        this.strCode = error_utils_1.getErrorStringCode(this.code);
-        this.userMessage =
-            `Could not fetch cache resource from: ${exports.rulesBundleUrl}` +
-                '\nEnsure valid network connection.';
+function processFlags(options, rulesBundlePath, configPath) {
+    var _a, _b, _c;
+    const flags = [
+        '-cache-dir',
+        exports.systemCachePath,
+        '-bundle',
+        rulesBundlePath,
+        '-config',
+        configPath,
+    ];
+    if (options.severityThreshold) {
+        flags.push('-severity-threshold', options.severityThreshold);
+    }
+    if ((_a = options.attributes) === null || _a === void 0 ? void 0 : _a.criticality) {
+        flags.push('-project-business-criticality', options.attributes.criticality.join(','));
+    }
+    if ((_b = options.attributes) === null || _b === void 0 ? void 0 : _b.environment) {
+        flags.push('-project-environment', options.attributes.environment.join(','));
+    }
+    if ((_c = options.attributes) === null || _c === void 0 ? void 0 : _c.lifecycle) {
+        flags.push('-project-lifecycle', options.attributes.lifecycle.join(','));
+    }
+    if (options.projectTags) {
+        const stringifiedTags = options.projectTags
+            .map((tag) => {
+            return `${tag.key}=${tag.value}`;
+        })
+            .join(',');
+        flags.push('-project-tags', stringifiedTags);
+    }
+    if (options.report) {
+        flags.push('-report');
     }
+    if (options.targetReference) {
+        flags.push('-target-reference', options.targetReference);
+    }
+    if (options.targetName) {
+        flags.push('-target-name', options.targetName);
+    }
+    if (options.scan) {
+        flags.push('-scan', options.scan);
+    }
+    if (options.remoteRepoUrl) {
+        flags.push('-remote-repo-url', options.remoteRepoUrl);
+    }
+    return flags;
 }
-exports.FailedToDownloadRulesBundleError = FailedToDownloadRulesBundleError;
-async function cache(dataBuffer, iacCachePath) {
-    const savePath = path.join(iacCachePath, constants_1.rulesBundleName);
-    debugLog(`Caching rules bundle to ${savePath}`);
+function createConfig(options) {
     try {
-        await file_utils_1.saveFile(dataBuffer, savePath);
+        const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'snyk-'));
+        const tempConfig = path.join(tempDir, 'config.json');
+        const configData = JSON.stringify({
+            org: options.orgSettings.meta.org,
+            apiUrl: config_1.default.API,
+            apiAuth: api_token_1.getAuthHeader(),
+            allowAnalytics: analytics_1.allowAnalytics(),
+            policy: options.policy,
+        });
+        fs.writeFileSync(tempConfig, configData);
+        return tempConfig;
     }
-    catch (err) {
-        throw new FailedToCacheRulesBundleError(savePath);
+    catch (e) {
+        throw new ScanError(`unable to create config file: ${e}`);
     }
-    debugLog(`Rules bundle was successfully cached`);
-    return savePath;
 }
-class FailedToCacheRulesBundleError extends errors_1.CustomError {
-    constructor(savePath) {
-        super(`Failed to cache rules bundle to ${savePath}`);
-        this.code = types_1.IaCErrorCodes.FailedToCacheRulesBundleError;
-        this.strCode = error_utils_1.getErrorStringCode(this.code);
-        this.userMessage =
-            `Could not write the downloaded cache resource to: ${savePath}` +
-                '\nEnsure the cache directory is writable.';
+function deleteConfig(configPath) {
+    try {
+        rimraf.sync(path.dirname(configPath));
+    }
+    catch (e) {
+        debug('unable to delete temporary directory', e);
     }
 }
-exports.FailedToCacheRulesBundleError = FailedToCacheRulesBundleError;
-
-
-/***/ }),
-
-/***/ 82373:
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
-
-"use strict";
-
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.initRulesBundle = void 0;
-const createDebugLogger = __webpack_require__(15158);
-const download_1 = __webpack_require__(30753);
-const debugLogger = createDebugLogger('snyk-iac');
-async function initRulesBundle(testConfig) {
-    // We are currently using the legacy rules bundle and we need to redownload it each time to use the latest one available.
-    // debugLogger('Looking for rules bundle locally');
-    // let rulesBundlePath = await lookupLocalRulesBundle(testConfig);
-    debugLogger(`Downloading the rules bundle and saving it at ${testConfig.iacCachePath}`);
-    const rulesBundlePath = await download_1.downloadRulesBundle(testConfig);
-    return rulesBundlePath;
+class ScanError extends errors_1.CustomError {
+    constructor(message) {
+        super(message);
+        this.code = types_1.IaCErrorCodes.PolicyEngineScanError;
+        this.strCode = error_utils_1.getErrorStringCode(this.code);
+        this.userMessage = 'An error occurred when running the scan';
+    }
 }
-exports.initRulesBundle = initRulesBundle;
 
 
 /***/ }),
 
-/***/ 42256:
+/***/ 89752:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.fetchCacheResource = exports.InvalidUserPathError = exports.lookupLocal = void 0;
-const createDebugLogger = __webpack_require__(15158);
-const path = __webpack_require__(85622);
-const errors_1 = __webpack_require__(55191);
-const request_1 = __webpack_require__(52050);
-const debugLogger = createDebugLogger('snyk-iac');
-async function lookupLocal(iacCachePath, resourceName, userResourcePath, validResourceCondition) {
-    // Lookup in custom path.
-    if (userResourcePath) {
-        debugLogger('User configured path detected: %s', userResourcePath);
-        if (await validResourceCondition(userResourcePath)) {
-            return userResourcePath;
-        }
-        else {
-            // When using this function please catch this Error and throw a new specific Custom Error.
-            throw new InvalidUserPathError(`Failed to find a valid resource in the configured path: ${userResourcePath}`);
-        }
-    }
-    // Lookup in cache.
-    else {
-        const cachedResourcePath = path.join(iacCachePath, resourceName);
-        if (await validResourceCondition(cachedResourcePath)) {
-            return cachedResourcePath;
-        }
-    }
-}
-exports.lookupLocal = lookupLocal;
-class InvalidUserPathError extends errors_1.CustomError {
-    constructor(message) {
-        super(message);
-    }
-}
-exports.InvalidUserPathError = InvalidUserPathError;
-async function fetchCacheResource(url) {
-    const { res, body: cacheResourceBuffer } = await request_1.makeRequest({
-        url,
-    });
-    if (res.statusCode !== 200) {
-        throw new errors_1.CustomError(`Failed to download cache resource from ${url}`);
+exports.mapSnykIacTestOutputToTestOutput = void 0;
+const errors_1 = __webpack_require__(87198);
+function mapSnykIacTestOutputToTestOutput(snykIacOutput) {
+    var _a;
+    const errors = (_a = snykIacOutput.errors) === null || _a === void 0 ? void 0 : _a.map((err) => new errors_1.SnykIacTestError(err));
+    const errWithoutPath = errors === null || errors === void 0 ? void 0 : errors.find((err) => { var _a; return !((_a = err.fields) === null || _a === void 0 ? void 0 : _a.path); });
+    if (errWithoutPath) {
+        throw errWithoutPath;
     }
-    return cacheResourceBuffer;
+    return {
+        results: snykIacOutput.results,
+        errors,
+    };
 }
-exports.fetchCacheResource = fetchCacheResource;
+exports.mapSnykIacTestOutputToTestOutput = mapSnykIacTestOutputToTestOutput;
 
 
 /***/ }),