socket 1.0.100 → 1.0.102

package/dist/cli.js

@@ -3379,47 +3379,37 @@ async function fetchGhsaDetails(ids) {
   const octokitGraphql = getOctokitGraphql();
   try {
     const gqlCacheKey = `${ids.join('-')}-graphql-snapshot`;
-    const gqlResp = await cacheFetch(gqlCacheKey, () => octokitGraphql(`
-        query($identifiers: [SecurityAdvisoryIdentifierFilter!]!) {
-          securityAdvisories(first: ${ids.length}, identifiers: $identifiers) {
-            nodes {
-              ghsaId
-              cveId
-              summary
-              severity
-              publishedAt
-              withdrawnAt
-              references {
-                url
-              }
-              vulnerabilities(first: 10) {
-                nodes {
-                  package {
-                    ecosystem
-                    name
-                  }
-                  vulnerableVersionRange
-                }
-              }
+    const aliases = ids.map((id, index) => `advisory${index}: securityAdvisory(ghsaId: "${id}") {
+        ghsaId
+        summary
+        severity
+        publishedAt
+        withdrawnAt
+        vulnerabilities(first: 10) {
+          nodes {
+            package {
+              ecosystem
+              name
             }
+            vulnerableVersionRange
           }
-        }`, {
-      identifiers: ids.map(id => ({
-        type: 'GHSA',
-        value: id
-      }))
-    }));
-    const advisories = gqlResp?.securityAdvisories?.nodes || [];
-    for (const advisory of advisories) {
-      if (advisory.ghsaId) {
-        results.set(advisory.ghsaId, advisory);
-      }
-    }
-
-    // Log any missing advisories
-    for (const id of ids) {
-      if (!results.has(id)) {
-        require$$8.debugFn('notice', `No advisory found for ${id}`);
+        }
+      }`).join('\n');
+    const gqlResp = await cacheFetch(gqlCacheKey, () => octokitGraphql(`
+        query {
+          ${aliases}
+        }
+      `));
+    for (let i = 0, {
+        length
+      } = ids; i < length; i += 1) {
+      const id = ids[i];
+      const advisoryKey = `advisory${i}`;
+      const advisory = gqlResp?.[advisoryKey];
+      if (advisory && advisory.ghsaId) {
+        results.set(id, advisory);
+      } else {
+        require$$8.debugFn('notice', `miss: no advisory found for ${id}`);
       }
     }
   } catch (e) {
@@ -3940,8 +3930,8 @@ async function coanaFix(fixConfig) {
   }
   require$$8.debugFn('notice', `fetch: ${ids.length} GHSA details for ${arrays.joinAnd(ids)}`);
   const ghsaDetails = await fetchGhsaDetails(ids);
-  require$$8.debugFn('notice', `found: ${ghsaDetails.size} GHSA details`);
   const scanBaseNames = new Set(scanFilepaths.map(p => path.basename(p)));
+  require$$8.debugFn('notice', `found: ${ghsaDetails.size} GHSA details`);
   let count = 0;
   let overallFixed = false;
 
@@ -15533,5 +15523,5 @@ void (async () => {
     await utils.captureException(e);
   }
 })();
-//# debugId=ae8893ee-c6c6-456e-8176-51ca01466ef5
+//# debugId=3c044a06-e0dd-4f21-8310-181cc22dc4c0
 //# sourceMappingURL=cli.js.map