inteligr8/alfresco-ng2-components
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-ng2-components.git synced 2025-07-24 17:32:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

audit command for adf cli (#5699)

Browse Source
This commit is contained in:
Denys Vuika
2020-05-13 22:13:16 +01:00
committed by GitHub
parent a8c252db8b
commit 5621dbbb05
6 changed files with 98 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
lib/cli/bin/doc/audit.js
View File

@@ -1,32 +0,0 @@
#!/usr/bin/env node
var shell = require('shelljs');
var cmd = "npm audit --json";
var ejs = require('ejs');
var path = require('path');
var fs = require('fs');
var templatePath = path.resolve(__dirname, 'templates', 'auditPage.ejs');
try {
var jsonAudit = shell.exec(cmd, {silent:true});
} catch(err) {
console.error('error'+ err);
}
var packageJson = JSON.parse(fs.readFileSync(path.resolve('./','package.json')));
ejs.renderFile(templatePath, {
jsonAudit: JSON.parse(jsonAudit),
projVersion: packageJson.version,
projName: packageJson.description
}, {}, (err, mdText) => {
if (err) {
console.log(err);
} else {
fs.writeFileSync(`audit-info-${packageJson.version}.md`, mdText);
console.log(`Wrote Audit`);
}
});

31
lib/cli/bin/doc/templates/auditPage.ejs vendored
View File

@@ -1,31 +0,0 @@
---
Title: Audit info, <%= projName %> <%= projVersion %>
---
# Audit information for <%= projName %> <%= projVersion %>
This page lists the npm audit of the project in the version <%= projVersion %>
## Risks
- Critical risk dependencies <%= jsonAudit.metadata.vulnerabilities.critical %>
- High risk dependencies <%= jsonAudit.metadata.vulnerabilities.high %>
- Moderate risk dependencies <%= jsonAudit.metadata.vulnerabilities.moderate %>
- Low risk dependencies <%= jsonAudit.metadata.vulnerabilities.low %>
Dependencies analyzed <%= jsonAudit.metadata.totalDependencies %>
## Libraries
| Severity | Vulnerable versions | Module |
| --- | --- | --- |
<%
for(var currentAdvisories in jsonAudit.advisories) {
severity = jsonAudit.advisories[currentAdvisories].severity;
vulnerable_versions = JSON.stringify(jsonAudit.advisories[currentAdvisories].vulnerable_versions);
module = jsonAudit.advisories[currentAdvisories].module_name;
-%>
|<%= severity %> | <%= vulnerable_versions %> | <%= module %> |
<% } %>