Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: detect *.jar files as maven #861

Merged
merged 3 commits into from
Nov 13, 2019
Merged

Conversation

lili2311
Copy link
Contributor

@lili2311 lili2311 commented Nov 11, 2019

  • Ready for review
  • Follows CONTRIBUTING rules
  • Reviewed by Snyk internal team

What does this PR do?

  • allow detecting *.jar files to be processed by the mvn plugin
  • split out test, monitor and protect tests into separate files

What are the relevant tickets?

BST-1044

@lili2311 lili2311 requested a review from a team as a code owner November 11, 2019 18:57
@lili2311 lili2311 self-assigned this Nov 11, 2019
@ghost ghost requested review from miiila and orsagie November 11, 2019 18:57
@lili2311 lili2311 force-pushed the feat/introduce-jar-files branch 2 times, most recently from f1ee1be to f12c39a Compare November 11, 2019 20:10
@lili2311 lili2311 force-pushed the feat/introduce-jar-files branch 3 times, most recently from 48d9865 to 345909d Compare November 12, 2019 08:48
@@ -26,3 +80,92 @@ test('`protect` should not fail for unauthorized users', (t) => {
userConfig.set('api', apiUserConfig);
});
});

test('`protect` for unsupported package managers', async (t) => {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

copied these over from main acceptance test

@@ -40,6 +40,7 @@ const DETECTABLE_PACKAGE_MANAGERS: {
'.gemspec': 'rubygems',
'package-lock.json': 'npm',
'pom.xml': 'maven',
'.jar': 'maven',
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we also want to detect .war

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and zip, and perhaps ear?

Copy link
Contributor Author

@lili2311 lili2311 Nov 12, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

let's add the rest as the user requests for this, added jar and war. Each one will need tests etc, so let's get 1/2 working end to end

@@ -0,0 +1,1584 @@
import * as tap from 'tap';
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This makes me so happy 😄

@lili2311 lili2311 merged commit e69ef82 into master Nov 13, 2019
@lili2311 lili2311 deleted the feat/introduce-jar-files branch November 13, 2019 14:45
@snyksec
Copy link

snyksec commented Nov 13, 2019

🎉 This PR is included in version 1.247.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants