socket 1.1.176 → 1.1.179
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +17 -0
- package/README.md +5 -5
- package/dist/cli.js +105 -112
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +4 -4
- package/dist/constants.js.map +1 -1
- package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
- package/dist/manifest-scripts/socket-facts.init.gradle +5 -5
- package/dist/manifest-scripts/socket-facts.plugin.scala +4 -4
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/manifest/run-manifest-facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/assemble.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/build-tool.d.mts +4 -0
- package/dist/types/commands/manifest/scripts/build-tool.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/facts.d.mts +6 -1
- package/dist/types/commands/manifest/scripts/facts.d.mts.map +1 -1
- package/dist/types/commands/manifest/scripts/sidecar.d.mts +3 -0
- package/dist/types/commands/manifest/scripts/sidecar.d.mts.map +1 -1
- package/package.json +6 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"run-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/run-manifest-facts.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAI/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC,CAAA;AAYD,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;AAE/E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA6E;AAC7E,+BAA6B;AAC7B,wBAAsB,gBAAgB,CAAC,EACrC,GAAG,EACH,SAAS,EACT,GAAG,EACH,SAAS,EACT,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,MAAM,EACN,OAAO,EACP,SAAS,EACV,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACnC,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC3C,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6KnC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"assemble.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/assemble.mts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EAMrB,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,aAAa,EAAwB,MAAM,eAAe,CAAA;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAI/D,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,eAAe,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,qBAAqB,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAClC,6EAA6E;IAC7E,qCAAqC;IACrC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;CACrD,CAAA;AAmBD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,eAAoB,GACzB,cAAc,CAiChB"}
|
|
@@ -1,3 +1,7 @@
|
|
|
1
1
|
export type BuildTool = 'gradle' | 'maven' | 'sbt';
|
|
2
|
+
// sbt happily runs in any directory, synthesizing a default project from its
|
|
3
|
+
// name, so an sbt run outside a build yields a plausible but bogus SBOM. Maven
|
|
4
|
+
// and Gradle refuse such a directory themselves.
|
|
5
|
+
export declare function looksLikeSbtBuild(projectDir: string): boolean;
|
|
2
6
|
export declare function resolveBuildToolBin(tool: BuildTool, projectDir: string, bin?: string | undefined): string;
|
|
3
7
|
//# sourceMappingURL=build-tool.d.mts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AAkBlD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CASR"}
|
|
1
|
+
{"version":3,"file":"build-tool.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/build-tool.mts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;AAkBlD,6EAA6E;AAC7E,+EAA+E;AAC/E,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,CASR"}
|
|
@@ -17,6 +17,8 @@ export type SocketFactsSbomMetadata = {
|
|
|
17
17
|
tool: 'gradle' | 'maven' | 'sbt';
|
|
18
18
|
toolVersion: string;
|
|
19
19
|
javaVersion?: string | undefined;
|
|
20
|
+
// Lets a facts file be traced back to the generator release that produced it.
|
|
21
|
+
socketCliVersion?: string | undefined;
|
|
20
22
|
};
|
|
21
23
|
export type SocketFactsSbomComponent = AnyPURL & {
|
|
22
24
|
id: string;
|
|
@@ -27,7 +29,6 @@ export type SocketFactsSbomComponent = AnyPURL & {
|
|
|
27
29
|
export type SocketFactsSbomProject = AnyPURL & {
|
|
28
30
|
subprojectDir: string;
|
|
29
31
|
dependencies: string[];
|
|
30
|
-
resolvedAs: string[];
|
|
31
32
|
};
|
|
32
33
|
// Resolved on-disk paths for a --with-files run, keyed by coordinate. `targets`
|
|
33
34
|
// = classpath entries (jars / module output dirs); `sources` = module source
|
|
@@ -39,7 +40,11 @@ export type ResolvedArtifactPaths = {
|
|
|
39
40
|
targetsByGav: Map<string, string[]>;
|
|
40
41
|
sourcesByCoord: Map<string, string[]>;
|
|
41
42
|
coords: Set<string>;
|
|
43
|
+
// Component ids on each project's resolved classpath (union over its
|
|
44
|
+
// configurations), keyed by projectClasspathKey.
|
|
45
|
+
classpathByProject: Map<string, string[]>;
|
|
42
46
|
};
|
|
47
|
+
export declare function projectClasspathKey(project: Pick<SocketFactsSbomProject, 'name' | 'namespace' | 'subprojectDir'>): string;
|
|
43
48
|
// Coordinate-based (not `id`-based) so it also matches foreign SBOMs like
|
|
44
49
|
// CycloneDX. Empty segments dropped.
|
|
45
50
|
export declare function mavenCoordinateKey(groupId: string | undefined, artifactId: string | undefined, type: string | undefined, classifier: string | undefined, version: string | undefined): string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;
|
|
1
|
+
{"version":3,"file":"facts.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/facts.mts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAChD,CAAA;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;IAC9C,QAAQ,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAA;IAC/C,UAAU,EAAE,wBAAwB,EAAE,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,mBAAmB,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG;IAC/C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG;IAC7C,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB,CAAA;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,SAAS;AACT,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,0EAA0E;IAC1E,sEAAsE;IACtE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACnB,qEAAqE;IACrE,iDAAiD;IACjD,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAC1C,CAAA;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,CAAC,GAC5E,MAAM,CAER;AAED,0EAA0E;AAC1E,qCAAqC;AACrC,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,CAIR"}
|
|
@@ -12,6 +12,9 @@ export type SidecarComponentEntry = SocketFactsSbomComponent & {
|
|
|
12
12
|
export type SidecarProjectEntry = SocketFactsSbomProject & {
|
|
13
13
|
targets?: string[] | undefined;
|
|
14
14
|
sources?: string[] | undefined;
|
|
15
|
+
// Ids of this facts file's components[] forming the project's full
|
|
16
|
+
// transitive classpath across all its configurations.
|
|
17
|
+
classpath: string[];
|
|
15
18
|
};
|
|
16
19
|
// Frozen contract with `coana run --compute-artifacts-sidecar`; change only
|
|
17
20
|
// in sync with the coana consumer. Keyed by the absolute path of the
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;
|
|
1
|
+
{"version":3,"file":"sidecar.d.mts","sourceRoot":"","sources":["../../../../../src/commands/manifest/scripts/sidecar.mts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG;IAC7D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,4EAA4E;IAC5E,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC9B,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG,MAAM,CACvC,MAAM,EACN;IACE,6CAA6C;IAC7C,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iEAAiE;IACjE,wEAAwE;IACxE,uEAAuE;IACvE,kBAAkB;IAClB,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC,CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,GAAG,CAClC,MAAM,EACN;IAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,qBAAqB,EAAE,CAAA;CAAE,CACzE,CAAA;AA0CD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,sDAAsD;AACtD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,qBAAqB,EACpC,SAAS,EAAE,MAAM,GAChB,IAAI,CAWN;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAET;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAElE;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,oBAAoB,EACvB,CAAC,EAAE,oBAAoB,GACtB,oBAAoB,CAEtB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,kBAAkB,GACtB,oBAAoB,CAUtB"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "socket",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.179",
|
|
4
4
|
"description": "CLI for Socket.dev",
|
|
5
5
|
"contentPolicy": {
|
|
6
6
|
"class": "dual-use"
|
|
@@ -46,7 +46,7 @@
|
|
|
46
46
|
"@babel/preset-typescript": "7.27.1",
|
|
47
47
|
"@babel/runtime": "7.28.4",
|
|
48
48
|
"@biomejs/biome": "2.2.4",
|
|
49
|
-
"@coana-tech/cli": "15.10.
|
|
49
|
+
"@coana-tech/cli": "15.10.55",
|
|
50
50
|
"@cyclonedx/cdxgen": "12.1.2",
|
|
51
51
|
"@dotenvx/dotenvx": "1.49.0",
|
|
52
52
|
"@eslint/compat": "1.3.2",
|
|
@@ -189,6 +189,7 @@
|
|
|
189
189
|
"check:tsc:src": "tsgo",
|
|
190
190
|
"check:tsc:scripts": "tsgo --project tsconfig.scripts.json",
|
|
191
191
|
"check-ci": "pnpm check:lint",
|
|
192
|
+
"ci:setup-uv": "node scripts/ci/setup-uv.mts",
|
|
192
193
|
"coverage": "run-s coverage:*",
|
|
193
194
|
"coverage:test": "run-s test:prepare test:unit:coverage",
|
|
194
195
|
"coverage:type": "dotenvx -q run -f .env.local -- type-coverage --detail",
|
|
@@ -228,6 +229,8 @@
|
|
|
228
229
|
"test-ci": "run-s test:*",
|
|
229
230
|
"testu": "dotenvx -q run -f .env.testu -- run-s test:prepare; pnpm test:unit:update --",
|
|
230
231
|
"testuf": "dotenvx -q run -f .env.testu -- pnpm test:unit:update --",
|
|
231
|
-
"update": "node scripts/update.mts"
|
|
232
|
+
"update": "node scripts/update.mts",
|
|
233
|
+
"release:preflight": "node scripts/release/preflight.mts",
|
|
234
|
+
"check:actions": "node scripts/ci/check-actions.mts"
|
|
232
235
|
}
|
|
233
236
|
}
|