Merge branch 'main' into other/checkIntegrationTests

Author: cx-sarah-chen

.github/workflows/ast-scan.yml

@@ -0,0 +1,25 @@
+name: Checkmarx One Scan
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+      - main
+  schedule:
+    - cron: '00 7 * * *' # Every day at 07:00
+
+jobs:
+  cx-scan:
+    name: Checkmarx One Scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - name: Checkmarx One CLI Action
+        uses: checkmarx/ast-github-action@03a90e7253dadd7e2fff55f5dfbce647b39040a1 # v.2.0.37
+        with:
+          base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }}
+          cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }}
+          cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
+          cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
+          additional_params: --tags phoenix --threshold "sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1"

.github/workflows/ci.yml

@@ -15,10 +15,10 @@ jobs:
           sudo apt-get install git-lfs
           git lfs install
 
-      - name: Use Node.js 14
+      - name: Use Node.js 22.11.0
         uses: actions/[email protected]
         with:
-          node-version: 14
+          node-version: 22.11.0
           registry-url: https://npm.pkg.github.com/
       - run: npm ci
       - name: Code Linting

.github/workflows/release.yml

@@ -68,7 +68,7 @@ jobs:
       # SETUP NODE
       - uses: actions/[email protected]
         with:
-          node-version: 14
+          node-version: 22.11.0
           registry-url: https://npm.pkg.github.com/
 
       # GET TAG NAME

CODEOWNERS

@@ -2,4 +2,4 @@
 # Each line is a file pattern followed by one or more owners
 
 # Specify the default owners for the entire repository
-*       @OrShamirCM @AlvoBen @pedrompflopes
+*       @AlvoBen @greensd4 @miryamfoiferCX

checkmarx-ast-cli.version

@@ -1 +1 @@
-2.3.3
+2.3.6

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@CheckmarxDev/ast-cli-javascript-wrapper",
-  "version": "0.0.117",
+  "version": "0.0.120",
   "description": "AST CLI Javascript wrapper",
   "main": "dist/main/wrapper/CxWrapper.js",
   "typings": "dist/main/wrapper/CxWrapper.d.ts",
@@ -27,7 +27,7 @@
   "homepage": "https://github.com/CheckmarxDev/ast-cli-javascript-wrapper#readme",
   "devDependencies": {
     "@types/jest": "^27.5.0",
-    "@types/node": "^20.14.11",
+    "@types/node": "^22.9.0",
     "@typescript-eslint/eslint-plugin": "^5.29.0",
     "@typescript-eslint/parser": "^5.29.0",
     "copyfiles": "^2.4.1",
@@ -36,7 +36,7 @@
     "jest-cli": "29.7.0",
     "ts-jest": "^29.2.2",
     "ts-mockito": "^2.6.1",
-    "typescript": "^5.5.3"
+    "typescript": "^5.6.3"
   },
   "overrides": {
     "bluebird": "3.7.2"

package.json

@@ -153,6 +153,7 @@ export class ExecutionService {
                 logger.info("Exit code received from AST-CLI: " + code);
                 if(code==1){
                     stderr = stdout
+                    reject(stderr)
                 }
                 resolve(ExecutionService.onCloseMapTenantOutputCommand(code, stderr, stdout));
             });

src/main/wrapper/ExecutionService.ts

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:64cea076d62a35ce180217982561212d75d3b1478b4a37991d1b76c0508455f4
-size 66183320
+oid sha256:47bb748fc38efb83feb386cf8227f44aed159d8b5c3f99fe9b9255b3467c046b
+size 66420888