diff --git a/.changeset/hip-deserts-pick.md b/.changeset/hip-deserts-pick.md new file mode 100644 index 00000000..2311a05f --- /dev/null +++ b/.changeset/hip-deserts-pick.md @@ -0,0 +1,5 @@ +--- +"@nodesecure/scanner": patch +--- + +Remove snyk from hydratable strategy as it's no more available diff --git a/.npmrc b/.npmrc index 61cbf3fc..167116cf 100644 --- a/.npmrc +++ b/.npmrc @@ -1,3 +1,4 @@ package-lock=false save-exact=true ignore-scripts=true +allow-git=none diff --git a/workspaces/conformance/package.json b/workspaces/conformance/package.json index 05e27aa0..3364f38a 100644 --- a/workspaces/conformance/package.json +++ b/workspaces/conformance/package.json @@ -41,7 +41,7 @@ }, "homepage": "https://github.com/NodeSecure/tree/master/workspaces/conformance#readme", "devDependencies": { - "@openally/httpie": "^1.0.0", + "@openally/httpie": "1.1.2", "@types/spdx-expression-parse": "^3.0.5", "node-estree": "^4.0.0" }, diff --git a/workspaces/github/package.json b/workspaces/github/package.json index a36afc24..85e41914 100644 --- a/workspaces/github/package.json +++ b/workspaces/github/package.json @@ -38,7 +38,7 @@ }, "homepage": "https://github.com/NodeSecure/scanner/tree/master/workspaces/github#readme", "dependencies": { - "@openally/httpie": "^1.0.0", + "@openally/httpie": "1.1.2", "tar-fs": "^3.0.5" }, "devDependencies": { diff --git a/workspaces/gitlab/package.json b/workspaces/gitlab/package.json index ed2c243d..57114a37 100644 --- a/workspaces/gitlab/package.json +++ b/workspaces/gitlab/package.json @@ -36,7 +36,7 @@ }, "homepage": "https://github.com/NodeSecure/scanner/tree/master/workspaces/gitlab#readme", "dependencies": { - "@openally/httpie": "^1.0.0", + "@openally/httpie": "1.1.2", "tar-fs": "^3.0.6" }, "devDependencies": { diff --git a/workspaces/rc/package.json b/workspaces/rc/package.json index 879e20c2..1b61554e 100644 --- a/workspaces/rc/package.json +++ b/workspaces/rc/package.json @@ -45,9 +45,9 @@ "ajv": "8.18.0" }, "dependencies": { - "@nodesecure/js-x-ray": "14.2.0", + "@nodesecure/js-x-ray": "14.3.0", "@nodesecure/npm-types": "^1.2.0", - "@nodesecure/vulnera": "3.0.0", + "@nodesecure/vulnera": "3.1.0", "@openally/config": "^1.0.1", "@openally/result": "2.0.0", "lodash.merge": "^4.6.2", diff --git a/workspaces/scanner/package.json b/workspaces/scanner/package.json index d5436c7d..7b5344c1 100644 --- a/workspaces/scanner/package.json +++ b/workspaces/scanner/package.json @@ -68,15 +68,15 @@ "@nodesecure/contact": "^3.0.0", "@nodesecure/flags": "^3.0.3", "@nodesecure/i18n": "^4.1.0", - "@nodesecure/js-x-ray": "14.2.0", + "@nodesecure/js-x-ray": "14.3.0", "@nodesecure/mama": "^2.2.0", - "@nodesecure/npm-registry-sdk": "^4.4.0", + "@nodesecure/npm-registry-sdk": "4.5.2", "@nodesecure/npm-types": "^1.3.0", "@nodesecure/rc": "^5.5.0", "@nodesecure/tarball": "^3.7.0", "@nodesecure/tree-walker": "^2.7.0", "@nodesecure/utils": "^2.3.0", - "@nodesecure/vulnera": "3.0.0", + "@nodesecure/vulnera": "3.1.0", "@openally/mutex": "^2.0.0", "fastest-levenshtein": "^1.0.16", "frequency-set": "^2.1.0", diff --git a/workspaces/scanner/src/depWalker.ts b/workspaces/scanner/src/depWalker.ts index e4a479a2..a407eb92 100644 --- a/workspaces/scanner/src/depWalker.ts +++ b/workspaces/scanner/src/depWalker.ts @@ -328,8 +328,7 @@ export async function depWalker( vulnerabilityStrategy ); - const isVulnHydratable = (strategy === "github-advisory" || strategy === "snyk") - && isRemoteScanning; + const isVulnHydratable = strategy === "github-advisory" && isRemoteScanning; if (!isVulnHydratable) { await hydratePayloadDependencies(dependencies, { useFormat: "Standard", diff --git a/workspaces/tarball/package.json b/workspaces/tarball/package.json index fc2efd6a..1d4f6805 100644 --- a/workspaces/tarball/package.json +++ b/workspaces/tarball/package.json @@ -47,7 +47,7 @@ "dependencies": { "@nodesecure/conformance": "^1.2.1", "@nodesecure/fs-walk": "^2.0.0", - "@nodesecure/js-x-ray": "14.2.0", + "@nodesecure/js-x-ray": "14.3.0", "@nodesecure/mama": "^2.2.0", "@nodesecure/npm-types": "^1.2.0", "@nodesecure/utils": "^2.3.0", diff --git a/workspaces/tree-walker/package.json b/workspaces/tree-walker/package.json index 9022d7da..b3b2c34d 100644 --- a/workspaces/tree-walker/package.json +++ b/workspaces/tree-walker/package.json @@ -37,9 +37,9 @@ }, "homepage": "https://github.com/NodeSecure/tree/master/workspaces/tree-walker#readme", "dependencies": { - "@nodesecure/js-x-ray": "14.2.0", + "@nodesecure/js-x-ray": "14.3.0", "@nodesecure/mama": "2.2.0", - "@nodesecure/npm-registry-sdk": "^4.0.0", + "@nodesecure/npm-registry-sdk": "4.5.2", "@nodesecure/npm-types": "^1.1.0", "@npmcli/arborist": "9.4.1", "combine-async-iterators": "^3.0.0",