Snyk test composer and npm

This commit is contained in:
Jannis Portmann 2022-01-24 10:31:21 +01:00
parent 1f140475b9
commit af12833642
5 changed files with 41 additions and 33 deletions

11
Jenkinsfile vendored
View file

@ -12,10 +12,17 @@ node {
sh 'yarn install' sh 'yarn install'
} }
stage('Vulnr test') { stage('Composer Vulnr test') {
snykSecurity( snykSecurity(
snykInstallation: 'snyk-local', snykInstallation: 'snyk-local',
targetFile: 'composer.json', targetFile: 'composer.lock',
)
}
stage('npm vulnr test') {
snykSecurity(
snykInstallation: 'snyk-local',
targetFile: 'package.json',
) )
} }

12
composer.lock generated
View file

@ -2036,16 +2036,16 @@
}, },
{ {
"name": "presta/sitemap-bundle", "name": "presta/sitemap-bundle",
"version": "v3.2.1", "version": "v3.3.0",
"source": { "source": {
"type": "git", "type": "git",
"url": "https://github.com/prestaconcept/PrestaSitemapBundle.git", "url": "https://github.com/prestaconcept/PrestaSitemapBundle.git",
"reference": "341ad68ef7d1b0dad183fa68ecb8275d89fa1e9b" "reference": "ad23fe594ff0fedb4e7be638873a19c39eb6ed7b"
}, },
"dist": { "dist": {
"type": "zip", "type": "zip",
"url": "https://api.github.com/repos/prestaconcept/PrestaSitemapBundle/zipball/341ad68ef7d1b0dad183fa68ecb8275d89fa1e9b", "url": "https://api.github.com/repos/prestaconcept/PrestaSitemapBundle/zipball/ad23fe594ff0fedb4e7be638873a19c39eb6ed7b",
"reference": "341ad68ef7d1b0dad183fa68ecb8275d89fa1e9b", "reference": "ad23fe594ff0fedb4e7be638873a19c39eb6ed7b",
"shasum": "" "shasum": ""
}, },
"require": { "require": {
@ -2098,9 +2098,9 @@
], ],
"support": { "support": {
"issues": "https://github.com/prestaconcept/PrestaSitemapBundle/issues", "issues": "https://github.com/prestaconcept/PrestaSitemapBundle/issues",
"source": "https://github.com/prestaconcept/PrestaSitemapBundle/tree/v3.2.1" "source": "https://github.com/prestaconcept/PrestaSitemapBundle/tree/v3.3.0"
}, },
"time": "2021-12-16T08:09:53+00:00" "time": "2022-01-24T07:37:28+00:00"
}, },
{ {
"name": "psr/cache", "name": "psr/cache",

36
package-lock.json generated
View file

@ -6,9 +6,9 @@
"": { "": {
"license": "UNLICENSED", "license": "UNLICENSED",
"dependencies": { "dependencies": {
"@snyk/protect": "^1.834.0",
"cookie-notice": "^1.3.6", "cookie-notice": "^1.3.6",
"friendly-challenge": "^0.8.5", "friendly-challenge": "^0.8.5"
"snyk": "^1.806.0"
}, },
"devDependencies": { "devDependencies": {
"@fortawesome/fontawesome-free": "^5.15.3", "@fortawesome/fontawesome-free": "^5.15.3",
@ -1843,6 +1843,17 @@
"node": ">=4" "node": ">=4"
} }
}, },
"node_modules/@snyk/protect": {
"version": "1.834.0",
"resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.834.0.tgz",
"integrity": "sha512-I/zzykVqRI4ZeIGwhwnQ/li01W0fJC6uMGdM6oGWOIOex3L6BBz2LTZeHr4PMoZDNha2TM10hgcYf9JvGvjNKQ==",
"bin": {
"snyk-protect": "bin/snyk-protect"
},
"engines": {
"node": ">=10"
}
},
"node_modules/@stimulus/core": { "node_modules/@stimulus/core": {
"version": "2.0.0", "version": "2.0.0",
"resolved": "https://registry.npmjs.org/@stimulus/core/-/core-2.0.0.tgz", "resolved": "https://registry.npmjs.org/@stimulus/core/-/core-2.0.0.tgz",
@ -7219,17 +7230,6 @@
"node": ">=8" "node": ">=8"
} }
}, },
"node_modules/snyk": {
"version": "1.806.0",
"resolved": "https://registry.npmjs.org/snyk/-/snyk-1.806.0.tgz",
"integrity": "sha512-X0Aso0+zA9YXrrIgW1G3GXRqsvW4j7gXS9QyxFUwPp9qp5dAX1sjNUuLrK/z0CpuIpT7MVOBrYHF/RkMJ2C+FA==",
"bin": {
"snyk": "bin/snyk"
},
"engines": {
"node": ">=10"
}
},
"node_modules/sockjs": { "node_modules/sockjs": {
"version": "0.3.24", "version": "0.3.24",
"resolved": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz", "resolved": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz",
@ -9747,6 +9747,11 @@
} }
} }
}, },
"@snyk/protect": {
"version": "1.834.0",
"resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.834.0.tgz",
"integrity": "sha512-I/zzykVqRI4ZeIGwhwnQ/li01W0fJC6uMGdM6oGWOIOex3L6BBz2LTZeHr4PMoZDNha2TM10hgcYf9JvGvjNKQ=="
},
"@stimulus/core": { "@stimulus/core": {
"version": "2.0.0", "version": "2.0.0",
"resolved": "https://registry.npmjs.org/@stimulus/core/-/core-2.0.0.tgz", "resolved": "https://registry.npmjs.org/@stimulus/core/-/core-2.0.0.tgz",
@ -13844,11 +13849,6 @@
"integrity": "sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==", "integrity": "sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==",
"dev": true "dev": true
}, },
"snyk": {
"version": "1.806.0",
"resolved": "https://registry.npmjs.org/snyk/-/snyk-1.806.0.tgz",
"integrity": "sha512-X0Aso0+zA9YXrrIgW1G3GXRqsvW4j7gXS9QyxFUwPp9qp5dAX1sjNUuLrK/z0CpuIpT7MVOBrYHF/RkMJ2C+FA=="
},
"sockjs": { "sockjs": {
"version": "0.3.24", "version": "0.3.24",
"resolved": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz", "resolved": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz",

View file

@ -19,11 +19,12 @@
"dev-server": "encore dev-server", "dev-server": "encore dev-server",
"dev": "encore dev", "dev": "encore dev",
"watch": "encore dev --watch", "watch": "encore dev --watch",
"build": "encore production --progress" "build": "encore production --progress",
"test": "snyk test"
}, },
"dependencies": { "dependencies": {
"cookie-notice": "^1.3.6", "cookie-notice": "^1.3.6",
"friendly-challenge": "^0.8.5", "friendly-challenge": "^0.8.5",
"snyk": "^1.806.0" "@snyk/protect": "^1.834.0"
} }
} }

View file

@ -936,6 +936,11 @@
error-stack-parser "^2.0.0" error-stack-parser "^2.0.0"
string-width "^4.2.3" string-width "^4.2.3"
"@snyk/protect@^1.834.0":
version "1.834.0"
resolved "https://registry.npmjs.org/@snyk/protect/-/protect-1.834.0.tgz"
integrity sha512-I/zzykVqRI4ZeIGwhwnQ/li01W0fJC6uMGdM6oGWOIOex3L6BBz2LTZeHr4PMoZDNha2TM10hgcYf9JvGvjNKQ==
"@stimulus/core@^2.0.0": "@stimulus/core@^2.0.0":
version "2.0.0" version "2.0.0"
resolved "https://registry.npmjs.org/@stimulus/core/-/core-2.0.0.tgz" resolved "https://registry.npmjs.org/@stimulus/core/-/core-2.0.0.tgz"
@ -4197,11 +4202,6 @@ slash@^3.0.0:
resolved "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz" resolved "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz"
integrity sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q== integrity sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==
snyk@^1.806.0:
version "1.806.0"
resolved "https://registry.npmjs.org/snyk/-/snyk-1.806.0.tgz"
integrity sha512-X0Aso0+zA9YXrrIgW1G3GXRqsvW4j7gXS9QyxFUwPp9qp5dAX1sjNUuLrK/z0CpuIpT7MVOBrYHF/RkMJ2C+FA==
sockjs@^0.3.21: sockjs@^0.3.21:
version "0.3.24" version "0.3.24"
resolved "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz" resolved "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz"