socket 1.1.77 → 1.1.79

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.1.79](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.79) - 2026-04-08
+
+### Changed
+- Updated the Coana CLI to v `14.12.205`.
+
+## [1.1.78](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.78) - 2026-04-01
+
+### Fixed
+- `socket scan create`, `socket scan reach`, and `socket fix` now respect `projectIgnorePaths` from `socket.yml` when collecting files
+
 ## [1.1.77](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.77) - 2026-04-01
 
 ### Fixed

package/dist/cli.js

@@ -2285,7 +2285,12 @@ async function handleCreateNewScan({
   require$$9.debugFn('notice', `Fetched ${supportedFilesCResult.data['size']} supported file types`);
   spinner.start('Searching for local files to include in scan...');
   const supportedFiles = supportedFilesCResult.data;
+
+  // Load socket.yml to respect projectIgnorePaths when collecting files.
+  const socketYmlResult = utils.findSocketYmlSync(cwd);
+  const socketConfig = socketYmlResult.ok ? socketYmlResult.data?.parsed : undefined;
   const packagePaths = await utils.getPackageFilesForScan(targets, supportedFiles, {
+    config: socketConfig,
     cwd
   });
   spinner.successAndStop(`Found ${packagePaths.length} ${words.pluralize('file', packagePaths.length)} to include in scan.`);
@@ -3827,7 +3832,12 @@ async function coanaFix(fixConfig) {
     return supportedFilesCResult;
   }
   const supportedFiles = supportedFilesCResult.data;
+
+  // Load socket.yml to respect projectIgnorePaths when collecting files.
+  const socketYmlResult = utils.findSocketYmlSync(cwd);
+  const socketConfig = socketYmlResult.ok ? socketYmlResult.data?.parsed : undefined;
   const scanFilepaths = await utils.getPackageFilesForScan(['.'], supportedFiles, {
+    config: socketConfig,
     cwd
   });
   // Exclude any .socket.facts.json files that happen to be in the scan
@@ -11218,7 +11228,6 @@ async function run$d(argv, importMeta, {
       ...generalFlags$1,
       ...reachabilityFlags
     },
-    // TODO: Your project's "socket.yml" file's "projectIgnorePaths".
     help: command => `
     Usage
       $ ${command} [options] [TARGET...]
@@ -13333,6 +13342,16 @@ async function outputScanReach(result, {
   logger.logger.log('');
   logger.logger.success('Reachability analysis completed successfully!');
   logger.logger.info(`Reachability report has been written to: ${actualOutputPath}`);
+
+  // Warn about individual vulnerabilities where reachability analysis errored.
+  const errors = utils.extractReachabilityErrors(result.data.reachabilityReport);
+  if (errors.length) {
+    logger.logger.log('');
+    logger.logger.warn(`Reachability analysis returned ${errors.length} ${words.pluralize('error', errors.length)} for individual ${words.pluralize('vulnerability', errors.length)}:`);
+    for (const err of errors) {
+      logger.logger.warn(`  - ${err.ghsaId} in ${err.componentName}@${err.componentVersion} (${err.subprojectPath})`);
+    }
+  }
 }
 
 async function handleScanReach({
@@ -13361,7 +13380,12 @@ async function handleScanReach({
   }
   spinner.start('Searching for local manifest files to include in reachability analysis...');
   const supportedFiles = supportedFilesCResult.data;
+
+  // Load socket.yml to respect projectIgnorePaths when collecting files.
+  const socketYmlResult = utils.findSocketYmlSync(cwd);
+  const socketConfig = socketYmlResult.ok ? socketYmlResult.data?.parsed : undefined;
   const packagePaths = await utils.getPackageFilesForScan(targets, supportedFiles, {
+    config: socketConfig,
     cwd
   });
   spinner.successAndStop(`Found ${packagePaths.length} ${words.pluralize('manifest file', packagePaths.length)} for reachability analysis.`);
@@ -15515,5 +15539,5 @@ process.on('unhandledRejection', async (reason, promise) => {
   // eslint-disable-next-line n/no-process-exit
   process.exit(1);
 });
-//# debugId=2e8b0e58-10dd-4133-8246-12b5cdb37c09
+//# debugId=f5bad35b-2e1d-49ea-bc1c-dbacdf631051
 //# sourceMappingURL=cli.js.map