snyk-to-html - npm Package Compare versions

Comparing version 2.2.2 to 2.3.0

dist/lib/snyk-to-html.js

@@ -14,2 +14,3 @@ #!/usr/bin/env node
 const vuln_1 = require("./vuln");
+const codeutil_1 = require("./codeutil");
 const debug = debugModule('snyk-to-html');
@@ -69,2 +70,9 @@ const defaultRemediationText = '## Remediation\nThere is no remediation at the moment';
             }
+            else if ((data === null || data === void 0 ? void 0 : data.runs) && (data === null || data === void 0 ? void 0 : data.runs[0].tool.driver.name) === 'SnykCode') {
+                template =
+                    template === path.join(__dirname, '../../template/test-report.hbs')
+                        ? path.join(__dirname, '../../template/code/test-report.hbs')
+                        : template;
+                return processCodeData(data, template, summary);
+            }
             else {
@@ -185,2 +193,12 @@ return processData(data, remediation, template, summary);
 }
+async function generateCodeTemplate(data, template) {
+    await registerPeerPartial(template, 'inline-css');
+    await registerPeerPartial(template, 'inline-js');
+    await registerPeerPartial(template, 'header');
+    await registerPeerPartial(template, 'metatable-css');
+    await registerPeerPartial(template, 'metatable');
+    await registerPeerPartial(template, 'code-snip');
+    const htmlTemplate = await compileTemplate(template);
+    return htmlTemplate(data);
+}
 function mergeData(dataArray) {
@@ -230,2 +248,16 @@ const vulnsArrays = dataArray.map(project => project.vulnerabilities || []);
 }
+async function processCodeData(data, template, summary) {
+    if (data.error) {
+        return generateCodeTemplate(data, template);
+    }
+    const dataArray = Array.isArray(data) ? data : [data];
+    const OrderedIssuesArray = await codeutil_1.processSourceCode(dataArray);
+    const totalIssues = dataArray[0].runs[0].results.length;
+    const processedData = {
+        projects: OrderedIssuesArray,
+        showSummaryOnly: summary,
+        totalIssues,
+    };
+    return generateCodeTemplate(processedData, template);
+}
 async function readInputFromStdin() {
@@ -232,0 +264,0 @@ return new Promise((resolve, reject) => {

package.json

@@ -68,3 +68,3 @@ {
   },
-  "version": "2.2.2"
+  "version": "2.3.0"
 }

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

168135

increased by35.15%

Number of package files

43

increased by30.3%

Lines of code

635

increased by32.02%

Worsened metrics

Number of low supply chain risk alerts

4

increased by33.33%

No dependency changes