snyk 1.995.0 → 1.996.0

package/dist/cli/545.index.js

@@ -146019,6 +146019,156 @@ var upperFirst = createCaseFirst('toUpperCase');
 module.exports = upperFirst;
 
 
+/***/ }),
+
+/***/ 77103:
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+"use strict";
+
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.lookpath = void 0;
+var fs = __importStar(__webpack_require__(35747));
+var path = __importStar(__webpack_require__(85622));
+var isWindows = /^win/i.test(process.platform);
+/**
+ * Sometimes, people want to look for local executable files
+ * which are specified with either relative or absolute file path.
+ * @private
+ * @param cmd
+ * @return {string} An absolute path of given command, or undefined.
+ */
+var isFilepath = function (cmd) {
+    return cmd.includes(path.sep) ? path.resolve(cmd) : undefined;
+};
+/**
+ * Just promisifies "fs.access"
+ * @private
+ * @param {string} fpath An absolute file path with an applicable extension appended.
+ * @return {Promise<string>} Resolves absolute path or empty string.
+ */
+var access = function (fpath) {
+    return new Promise(function (resolve) { return fs.access(fpath, fs.constants.X_OK, function (err) { return resolve(err ? undefined : fpath); }); });
+};
+/**
+ * Resolves if the given file is executable or not, regarding "PATHEXT" to be applied.
+ * @private
+ * @param {string} abspath A file path to be checked.
+ * @return {Promise<string>} Resolves the absolute file path just checked, or undefined.
+ */
+var isExecutable = function (abspath, opt) {
+    if (opt === void 0) { opt = {}; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var envvars, exts, bins;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    envvars = opt.env || process.env;
+                    exts = (envvars.PATHEXT || '').split(path.delimiter).concat('');
+                    return [4 /*yield*/, Promise.all(exts.map(function (ext) { return access(abspath + ext); }))];
+                case 1:
+                    bins = _a.sent();
+                    return [2 /*return*/, bins.find(function (bin) { return !!bin; })];
+            }
+        });
+    });
+};
+/**
+ * Returns a list of directories on which the target command should be looked for.
+ * @private
+ * @param {string[]} opt.include Will be added to "PATH" env.
+ * @param {string[]} opt.exclude Will be filtered from "PATH" env.
+ * @return {string[]} Directories to dig into.
+ */
+var getDirsToWalkThrough = function (opt) {
+    var envvars = opt.env || process.env;
+    var envname = isWindows ? 'Path' : 'PATH';
+    return (envvars[envname] || '').split(path.delimiter).concat(opt.include || []).filter(function (p) { return !(opt.exclude || []).includes(p); });
+};
+/**
+ * Returns async promise with absolute file path of given command,
+ * and resolves with undefined if the command not found.
+ * @param {string} command Command name to look for.
+ * @param {LookPathOption} opt Options for lookpath.
+ * @return {Promise<string|undefined>} Resolves absolute file path, or undefined if not found.
+ */
+function lookpath(command, opt) {
+    if (opt === void 0) { opt = {}; }
+    return __awaiter(this, void 0, void 0, function () {
+        var directpath, dirs, bins;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    directpath = isFilepath(command);
+                    if (directpath)
+                        return [2 /*return*/, isExecutable(directpath, opt)];
+                    dirs = getDirsToWalkThrough(opt);
+                    return [4 /*yield*/, Promise.all(dirs.map(function (dir) { return isExecutable(path.join(dir, command), opt); }))];
+                case 1:
+                    bins = _a.sent();
+                    return [2 /*return*/, bins.find(function (bin) { return !!bin; })];
+            }
+        });
+    });
+}
+exports.lookpath = lookpath;
+
+
 /***/ }),
 
 /***/ 25989:
@@ -174629,6 +174779,7 @@ exports.jsonParse = exports.buildDepGraphFromImportsAndModules = exports.inspect
 const fs = __webpack_require__(35747);
 const path = __webpack_require__(85622);
 const tmp = __webpack_require__(91406);
+const lookpath_1 = __webpack_require__(77103);
 const debugLib = __webpack_require__(15158);
 const graphlib = __webpack_require__(39322);
 const dep_graph_1 = __webpack_require__(71479);
@@ -174639,6 +174790,10 @@ const debug = debugLib('snyk-go-plugin');
 const VIRTUAL_ROOT_NODE_ID = '.';
 async function inspect(root, targetFile, options = {}) {
     options.debug ? debugLib.enable('snyk-go-plugin') : debugLib.disable();
+    const goPath = await lookpath_1.lookpath('go');
+    if (!goPath) {
+        throw new Error('The "go" command is not available on your system. To scan your dependencies in the CLI, you must ensure you have first installed the relevant package manager.');
+    }
     const result = await Promise.all([
         getMetaData(root, targetFile),
         getDependencies(root, targetFile, options.args),
@@ -175055,8 +175210,8 @@ function isBuiltinPackage(pkgName) {
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.execute = void 0;
 const childProcess = __webpack_require__(63129);
-function execute(command, args, options) {
-    const spawnOptions = { shell: true };
+function execute(command, args, options, shell = false) {
+    const spawnOptions = { shell };
     if (options === null || options === void 0 ? void 0 : options.cwd) {
         spawnOptions.cwd = options.cwd;
     }