Comparing version
var async = require('async'); | ||
var program = require('commander'); | ||
var request = require('request'); | ||
var git = require('git-rev-sync'); | ||
@@ -25,3 +26,3 @@ function parse (url) { | ||
if (process.env.TRAVIS) { | ||
branch = process.env.TRAVIS_BRANCH; | ||
branch = (process.env.TRAVIS_PULL_REQUEST === 'false' ? process.env.TRAVIS_BRANCH : git.branch(process.env.TRAVIS_BUILD_DIR)); | ||
sha = process.env.TRAVIS_COMMIT; | ||
@@ -28,0 +29,0 @@ } else if (process.env.JENKINS_URL) { |
{ | ||
"name": "bithound", | ||
"version": "1.4.0", | ||
"version": "1.5.0", | ||
"description": "Commands for interacting with bitHound: https://bithound.io", | ||
@@ -19,5 +19,6 @@ "repository": { | ||
"dependencies": { | ||
"async": "^1.5.2", | ||
"async": "^2.0.0", | ||
"commander": "^2.8.1", | ||
"git-origin-url": "^0.3.0", | ||
"git-rev-sync": "^1.6.0", | ||
"open": "0.0.5", | ||
@@ -28,4 +29,4 @@ "request": "^2.67.0" | ||
"express": "^4.13.3", | ||
"semistandard": "^7.0.5", | ||
"tap": "^5.2.0" | ||
"semistandard": "^8.0.0", | ||
"tap": "^6.1.1" | ||
}, | ||
@@ -32,0 +33,0 @@ "preferGlobal": false, |
@@ -12,2 +12,9 @@ var tap = require('tap'); | ||
function notFoundCommitOrRepo (err, t, server, stderr) { | ||
tap.equal(stderr, 'Repo or commit not found.'); | ||
tap.equal(err.code, 1); | ||
server.close(); | ||
t.end(); | ||
} | ||
tap.test('A repo must exists', function (t) { | ||
@@ -18,6 +25,3 @@ server.listen(port, function () { | ||
exec('node bithound check git@github.com/provider/owner/repo.git --sha sha', { env: env }, function (err, stdout, stderr) { | ||
tap.equal(stderr, 'Branch could not be determined.'); | ||
tap.equal(err.code, 1); | ||
server.close(); | ||
t.end(); | ||
notFoundCommitOrRepo(err, t, server, stderr); | ||
}); | ||
@@ -32,6 +36,3 @@ }); | ||
exec('node bithound check git@github.com/provider/owner/repo.git --sha sha --branch branch', { env: env }, function (err, stdout, stderr) { | ||
tap.equal(stderr, 'Repo or commit not found.'); | ||
tap.equal(err.code, 1); | ||
server.close(); | ||
t.end(); | ||
notFoundCommitOrRepo(err, t, server, stderr); | ||
}); | ||
@@ -38,0 +39,0 @@ }); |
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
18481
0.97%325
0.31%6
20%29
7.41%+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
- Removed
Updated