Skip to content

Commit 0506d33

Browse files
attiasasattiasas
committed
Merge remote-tracking branch 'upstream/dev' into one_home_to_rule_all_tests
2 parents f0d8fb4 + eb980ad commit 0506d33

File tree

14 files changed

+133
-78
lines changed

14 files changed

+133
-78
lines changed

‎cli/docs/flags.go‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,7 @@ const (
109109
MinSeverity = "min-severity"
110110
FixableOnly = "fixable-only"
111111
Rescan = "rescan"
112+
TriggerScanRetries = "trigger-scan-retries"
112113
Vuln = "vuln"
113114
buildPrefix = "build-"
114115
BuildVuln = buildPrefix + Vuln
@@ -160,7 +161,7 @@ var commandFlags = map[string][]string{
160161
url, user, password, accessToken, ServerId, Threads, InsecureTls,
161162
},
162163
BuildScan: {
163-
url, user, password, accessToken, ServerId, scanProjectKey, BuildVuln, OutputFormat, Fail, ExtendedTable, Rescan, InsecureTls,
164+
url, user, password, accessToken, ServerId, scanProjectKey, BuildVuln, OutputFormat, Fail, ExtendedTable, Rescan, InsecureTls, TriggerScanRetries,
164165
},
165166
DockerScan: {
166167
url, xrayUrl, user, password, accessToken, ServerId, scanProjectKey, Watches, RepoPath, Licenses, Sbom, OutputFormat, Fail, ExtendedTable, BypassArchiveLimits, MinSeverity, FixableOnly, ScanVuln, SecretValidation, InsecureTls,
@@ -255,6 +256,7 @@ var flagsMap = map[string]components.Flag{
255256
MinSeverity: components.NewStringFlag(MinSeverity, "Set the minimum severity of issues to display. Acceptable values: Low, Medium, High, or Critical."),
256257
FixableOnly: components.NewBoolFlag(FixableOnly, "Set to true if you wish to display issues that have a fix version only."),
257258
Rescan: components.NewBoolFlag(Rescan, "Set to true when scanning an already successfully scanned build, for example after adding an ignore rule."),
259+
TriggerScanRetries: components.NewStringFlag(TriggerScanRetries, "Number of retries for triggering the build scan in Xray in case of failure.", components.WithIntDefaultValue(12)), // 5 seconds * 12 = 1 minute
258260
BuildVuln: components.NewBoolFlag(Vuln, "Set to true if you'd like to receive all vulnerabilities, regardless of the policy configured in Xray. Ignored if provided 'format' is 'sarif'."),
259261
ScanVuln: components.NewBoolFlag(Vuln, "Set to true if you'd like to receive all vulnerabilities, regardless of the policy configured in Xray."),
260262
InsecureTls: components.NewBoolFlag(InsecureTls, "Set to true to skip TLS certificates verification."),

‎cli/scancommands.go‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -356,11 +356,16 @@ func BuildScan(c *components.Context) error {
356356
if err != nil {
357357
return err
358358
}
359+
fetchRetries, err := c.GetIntFlagValue(flags.TriggerScanRetries)
360+
if err != nil {
361+
return err
362+
}
359363
buildScanCmd := scan.NewBuildScanCommand().
360364
SetServerDetails(serverDetails).
361365
// Sarif shouldn't include the additional all-vulnerabilities info that received by adding the vuln flag
362366
SetIncludeVulnerabilities(getProject(c) == "" || (format != outputFormat.Sarif && c.GetBoolFlagValue(flags.Vuln))).
363367
SetFailBuild(c.GetBoolFlagValue(flags.Fail)).
368+
SetTriggerScanRetries(fetchRetries).
364369
SetBuildConfiguration(buildConfiguration).
365370
SetOutputFormat(format).
366371
SetPrintExtendedTable(c.GetBoolFlagValue(flags.ExtendedTable)).

‎commands/scan/buildscan.go‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@ type BuildScanCommand struct {
3232
failBuild bool
3333
printExtendedTable bool
3434
rescan bool
35+
triggerRetries int
3536
}
3637

3738
func NewBuildScanCommand() *BuildScanCommand {
@@ -77,6 +78,11 @@ func (bsc *BuildScanCommand) SetRescan(rescan bool) *BuildScanCommand {
7778
return bsc
7879
}
7980

81+
func (bsc *BuildScanCommand) SetTriggerScanRetries(triggerRetries int) *BuildScanCommand {
82+
bsc.triggerRetries = triggerRetries
83+
return bsc
84+
}
85+
8086
// Scan published builds with Xray
8187
func (bsc *BuildScanCommand) Run() (err error) {
8288
xrayManager, xrayVersion, err := xrayutils.CreateXrayServiceManagerAndGetVersion(bsc.serverDetails, xrayutils.WithScopedProjectKey(bsc.buildConfiguration.GetProject()))
@@ -120,7 +126,7 @@ func (bsc *BuildScanCommand) Run() (err error) {
120126
}
121127

122128
func (bsc *BuildScanCommand) runBuildScanAndPrintResults(xrayManager *xray.XrayServicesManager, xrayVersion string, params services.XrayBuildParams) (isFailBuildResponse bool, err error) {
123-
buildScanResults, noFailBuildPolicy, err := xrayManager.BuildScan(params, bsc.includeVulnerabilities)
129+
buildScanResults, noFailBuildPolicy, err := xrayManager.BuildScan(params, bsc.includeVulnerabilities, bsc.triggerRetries)
124130
if err != nil {
125131
return false, err
126132
}

‎go.mod‎

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,13 @@ require (
1111
github.com/gookit/color v1.6.0
1212
github.com/hashicorp/go-hclog v1.6.3
1313
github.com/hashicorp/go-plugin v1.6.3
14-
github.com/jfrog/build-info-go v1.12.0
14+
github.com/jfrog/build-info-go v1.12.1
1515
github.com/jfrog/froggit-go v1.20.4
1616
github.com/jfrog/gofrog v1.7.6
1717
github.com/jfrog/jfrog-apps-config v1.0.1
1818
github.com/jfrog/jfrog-cli-artifactory v0.7.3-0.20251021143342-49bab7f38cec
1919
github.com/jfrog/jfrog-cli-core/v2 v2.60.1-0.20251023084247-a56afca52451
20-
github.com/jfrog/jfrog-client-go v1.55.1-0.20251023073119-78f187c9afbf
20+
github.com/jfrog/jfrog-client-go v1.55.1-0.20251030113529-d87ecf28ffb6
2121
github.com/magiconair/properties v1.8.10
2222
github.com/owenrumney/go-sarif/v3 v3.2.3
2323
github.com/package-url/packageurl-go v0.1.3
@@ -48,7 +48,7 @@ require (
4848
github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5 // indirect
4949
github.com/emirpasic/gods v1.18.1 // indirect
5050
github.com/fatih/color v1.16.0 // indirect
51-
github.com/forPelevin/gomoji v1.4.0 // indirect
51+
github.com/forPelevin/gomoji v1.4.1 // indirect
5252
github.com/fsnotify/fsnotify v1.9.0 // indirect
5353
github.com/gfleury/go-bitbucket-v1 v0.0.0-20230825095122-9bc1711434ab // indirect
5454
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
@@ -124,7 +124,8 @@ require (
124124
gopkg.in/warnings.v0 v0.1.2 // indirect
125125
)
126126

127-
// replace github.com/jfrog/jfrog-client-go => github.com/attiasas/jfrog-client-go master
127+
// attiasas:retry_build_scan
128+
replace github.com/jfrog/jfrog-client-go => github.com/attiasas/jfrog-client-go v0.0.0-20251030094108-376296f968cc
128129

129130
// replace github.com/jfrog/jfrog-cli-core/v2 => github.com/jfrog/jfrog-cli-core/v2 master
130131

‎go.sum‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,8 @@ github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFI
2121
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
2222
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio=
2323
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs=
24+
github.com/attiasas/jfrog-client-go v0.0.0-20251030094108-376296f968cc h1:AJQueJft8TFJ7s46cr8saEFGfcJEDAxUJ/rhkCnWsP0=
25+
github.com/attiasas/jfrog-client-go v0.0.0-20251030094108-376296f968cc/go.mod h1:wsMEtoyAu/1bARUHxFdmgz83g96ml7ZWcFioIPiuz/U=
2426
github.com/beevik/etree v1.4.0 h1:oz1UedHRepuY3p4N5OjE0nK1WLCqtzHf25bxplKOHLs=
2527
github.com/beevik/etree v1.4.0/go.mod h1:cyWiXwGoasx60gHvtnEh5x8+uIjUVnjWqBvEnhnqKDA=
2628
github.com/bradleyjkemp/cupaloy/v2 v2.8.0 h1:any4BmKE+jGIaMpnU8YgH/I2LPiLBufr6oMMlVBbn9M=
@@ -61,8 +63,8 @@ github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FM
6163
github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk=
6264
github.com/fatih/color v1.16.0 h1:zmkK9Ngbjj+K0yRhTVONQh1p/HknKYSlNT+vZCzyokM=
6365
github.com/fatih/color v1.16.0/go.mod h1:fL2Sau1YI5c0pdGEVCbKQbLXB6edEj1ZgiY4NijnWvE=
64-
github.com/forPelevin/gomoji v1.4.0 h1:RwrT+GimxEtFnGqq4ep1upwR54J5FP84aVAYJA+p8BQ=
65-
github.com/forPelevin/gomoji v1.4.0/go.mod h1:mM6GtmCgpoQP2usDArc6GjbXrti5+FffolyQfGgPboQ=
66+
github.com/forPelevin/gomoji v1.4.1 h1:7U+Bl8o6RV/dOQz7coQFWj/jX6Ram6/cWFOuFDEPEUo=
67+
github.com/forPelevin/gomoji v1.4.1/go.mod h1:mM6GtmCgpoQP2usDArc6GjbXrti5+FffolyQfGgPboQ=
6668
github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
6769
github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
6870
github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k=
@@ -128,8 +130,8 @@ github.com/jedib0t/go-pretty/v6 v6.6.8 h1:JnnzQeRz2bACBobIaa/r+nqjvws4yEhcmaZ4n1
128130
github.com/jedib0t/go-pretty/v6 v6.6.8/go.mod h1:YwC5CE4fJ1HFUDeivSV1r//AmANFHyqczZk+U6BDALU=
129131
github.com/jfrog/archiver/v3 v3.6.1 h1:LOxnkw9pOn45DzCbZNFV6K0+6dCsQ0L8mR3ZcujO5eI=
130132
github.com/jfrog/archiver/v3 v3.6.1/go.mod h1:VgR+3WZS4N+i9FaDwLZbq+jeU4B4zctXL+gL4EMzfLw=
131-
github.com/jfrog/build-info-go v1.12.0 h1:/abBQdIxrkYjOwO79sIL0p+XPnMCCtKhiWToHKXXqHg=
132-
github.com/jfrog/build-info-go v1.12.0/go.mod h1:szdz9+WzB7+7PGnILLUgyY+OF5qD5geBT7UGNIxibyw=
133+
github.com/jfrog/build-info-go v1.12.1 h1:pXyx2F3MzrdbLPhYU8om+RHl87yEDYW+UwAUw3f40fQ=
134+
github.com/jfrog/build-info-go v1.12.1/go.mod h1:szdz9+WzB7+7PGnILLUgyY+OF5qD5geBT7UGNIxibyw=
133135
github.com/jfrog/froggit-go v1.20.4 h1:N9XkNV00HNjpI8p6xXlF9DrWmvE9hz3z2XRDAYJDweQ=
134136
github.com/jfrog/froggit-go v1.20.4/go.mod h1:obSG1SlsWjktkuqmKtpq7MNTTL63e0ot+ucTnlOMV88=
135137
github.com/jfrog/gofrog v1.7.6 h1:QmfAiRzVyaI7JYGsB7cxfAJePAZTzFz0gRWZSE27c6s=
@@ -140,8 +142,6 @@ github.com/jfrog/jfrog-cli-artifactory v0.7.3-0.20251021143342-49bab7f38cec h1:i
140142
github.com/jfrog/jfrog-cli-artifactory v0.7.3-0.20251021143342-49bab7f38cec/go.mod h1:JE/35+kU8cBET4I4iuNcVBvhm8SF64DAmGgtHRzf5Do=
141143
github.com/jfrog/jfrog-cli-core/v2 v2.60.1-0.20251023084247-a56afca52451 h1:Q0PY8VSOVsfvXzKiUnn+Rv7Ynf901QW6Wn1CbWpHBD0=
142144
github.com/jfrog/jfrog-cli-core/v2 v2.60.1-0.20251023084247-a56afca52451/go.mod h1:UOeOwEEmRIi57cRwghN5OBVoqkJieYQQfLpeqw8Yv38=
143-
github.com/jfrog/jfrog-client-go v1.55.1-0.20251023073119-78f187c9afbf h1:Ld+lGdCauixqWbkwK+wJn3QbPPBRgY35KgY+MxgrgCg=
144-
github.com/jfrog/jfrog-client-go v1.55.1-0.20251023073119-78f187c9afbf/go.mod h1:jrODQbAbCt97F24d/0bYpqpdc0PFMuBxNJOTfTdW+Fk=
145145
github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c=
146146
github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo=
147147
github.com/k0kubun/colorstring v0.0.0-20150214042306-9440f1994b88/go.mod h1:3w7q1U84EfirKl04SVQ/s7nPm1ZPhiXd34z40TNz36k=

‎jas/common.go‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -236,6 +236,7 @@ func processSarifRuns(sarifRuns []*sarif.Run, wd string, informationUrlSuffix st
236236
sarifRun.Results = excludeSuppressResults(sarifRun.Results)
237237
sarifRun.Results = excludeMinSeverityResults(sarifRun.Results, minSeverity)
238238
}
239+
sarifutils.ConvertRunsPathsToRelative(sarifRuns...)
239240
}
240241

241242
func fillMissingRequiredDriverInformation(defaultJasInformationUri, defaultVersion string, run *sarif.Run) {

‎jas/common_test.go‎

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ import (
88

99
"github.com/owenrumney/go-sarif/v3/pkg/report/v210/sarif"
1010
"github.com/stretchr/testify/assert"
11+
"github.com/stretchr/testify/require"
1112
"golang.org/x/exp/slices"
1213

1314
jfrogAppsConfig "github.com/jfrog/jfrog-apps-config/go"
@@ -19,6 +20,7 @@ import (
1920
"github.com/jfrog/jfrog-cli-security/utils/formats/sarifutils"
2021
"github.com/jfrog/jfrog-cli-security/utils/jasutils"
2122
"github.com/jfrog/jfrog-cli-security/utils/results"
23+
"github.com/jfrog/jfrog-cli-security/utils/severityutils"
2224
"github.com/jfrog/jfrog-cli-security/utils/techutils"
2325
)
2426

@@ -593,3 +595,48 @@ func TestGetResultsToCompare(t *testing.T) {
593595
})
594596
}
595597
}
598+
599+
func TestProcessSarifRuns(t *testing.T) {
600+
wd, err := os.Getwd()
601+
assert.NoError(t, err)
602+
603+
// Create dummy SARIF report.
604+
dummyReport := sarif.NewReport()
605+
dummyReport.AddRun(sarifutils.CreateRunWithDummyResults(
606+
// Result below the minimum severity.
607+
sarifutils.CreateResultWithOneLocation(fmt.Sprintf("file://%s", filepath.Join(wd, "file1")), 0, 1, 2, 3, "snippet", "rule1", "note"),
608+
// Suppressed result.
609+
sarifutils.CreateResultWithOneLocation(fmt.Sprintf("file://%s", filepath.Join(wd, "file3")), 0, 0, 0, 0, "snippet", "rule1", "warning").WithSuppressions([]*sarif.Suppression{sarif.NewSuppression()}),
610+
// Valid result.
611+
sarifutils.CreateResultWithOneLocation(fmt.Sprintf("file://%s", filepath.Join(wd, "dir", "file2")), 0, 0, 0, 0, "snippet", "rule1", "error"),
612+
))
613+
614+
processSarifRuns(dummyReport.Runs, wd, "docs URL", severityutils.High)
615+
run := dummyReport.Runs[0]
616+
617+
// Check Invocation added.
618+
require.NotNil(t, run.Invocations)
619+
require.Len(t, run.Invocations, 1)
620+
require.NotNil(t, run.Invocations[0].WorkingDirectory)
621+
require.NotNil(t, run.Invocations[0].WorkingDirectory.URI)
622+
require.Equal(t, *run.Invocations[0].WorkingDirectory.URI, utils.ToURI(wd))
623+
624+
// Check driver info.
625+
driver := run.Tool.Driver
626+
require.NotNil(t, driver)
627+
require.NotNil(t, driver.Version)
628+
require.NotEmpty(t, *driver.Version)
629+
require.NotNil(t, driver.InformationURI)
630+
require.NotEmpty(t, *driver.InformationURI)
631+
632+
// Check severity level mapping.
633+
require.Len(t, driver.Rules, 1)
634+
rule := driver.Rules[0]
635+
require.Equal(t, "8.9", sarifutils.GetRuleProperty(severityutils.SarifSeverityRuleProperty, rule))
636+
637+
// Check minimum severity and suppression filtering.
638+
require.Len(t, run.Results, 1)
639+
// Check file paths are relative and with / separators.
640+
result := run.Results[0]
641+
require.Equal(t, "dir/file2", sarifutils.GetLocationFileName(result.Locations[0]))
642+
}

‎sca/bom/buildinfo/technologies/gem/gem_test.go‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ import (
1212
"github.com/jfrog/jfrog-cli-security/utils"
1313
)
1414

15-
var expectedUniqueDeps = []string{"rubygems://puma:5.6.9", "rubygems://nio4r:2.7.4"}
15+
var expectedUniqueDeps = []string{"rubygems://puma:5.6.9", "rubygems://nio4r:2.7.5"}
1616

1717
var expectedResult = &xrayUtils.GraphNode{
1818
Id: "root",
@@ -21,7 +21,7 @@ var expectedResult = &xrayUtils.GraphNode{
2121
Id: "rubygems://puma:5.6.9",
2222
Nodes: []*xrayUtils.GraphNode{
2323
{
24-
Id: "rubygems://nio4r:2.7.4",
24+
Id: "rubygems://nio4r:2.7.5",
2525
Nodes: []*xrayUtils.GraphNode{},
2626
},
2727
},
@@ -52,15 +52,15 @@ func TestBuildDependencyTree(t *testing.T) {
5252
}
5353

5454
// expectedUniqueDeps should be defined
55-
// expectedUniqueDeps := []string{"rubygems://puma:5.6.9", "rubygems://nio4r:2.7.4"}
55+
// expectedUniqueDeps := []string{"rubygems://puma:5.6.9", "rubygems://nio4r:2.7.5"}
5656
func TestCalculateUniqueDeps(t *testing.T) {
5757
var input = &xrayUtils.GraphNode{
5858
Nodes: []*xrayUtils.GraphNode{
5959
{
6060
Id: "rubygems://puma:5.6.9",
6161
Nodes: []*xrayUtils.GraphNode{
6262
{
63-
Id: "rubygems://nio4r:2.7.4",
63+
Id: "rubygems://nio4r:2.7.5",
6464
Nodes: []*xrayUtils.GraphNode{},
6565
},
6666
},

‎sca/bom/buildinfo/technologies/pnpm/pnpm_test.go‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ func TestBuildDependencyTreeLimitedDepth(t *testing.T) {
4343
name: "With transitive dependencies",
4444
treeDepth: "1",
4545
expectedUniqueDeps: []string{
46-
"npm://axios:1.12.2",
46+
"npm://axios:1.13.1",
4747
"npm://balaganjs:1.0.0",
4848
"npm://yargs:13.3.0",
4949
"npm://zen-website:1.0.0",
@@ -53,7 +53,7 @@ func TestBuildDependencyTreeLimitedDepth(t *testing.T) {
5353
Nodes: []*xrayUtils.GraphNode{
5454
{
5555
Id: "npm://balaganjs:1.0.0",
56-
Nodes: []*xrayUtils.GraphNode{{Id: "npm://axios:1.12.2"}, {Id: "npm://yargs:13.3.0"}},
56+
Nodes: []*xrayUtils.GraphNode{{Id: "npm://axios:1.13.1"}, {Id: "npm://yargs:13.3.0"}},
5757
},
5858
},
5959
},

‎tests/testdata/output/audit/audit_simple_json.json‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
"name": "lodash",
1111
"version": "4.17.0",
1212
"location": {
13-
"file": "Users/user/project-with-issues/package.json"
13+
"file": "package.json"
1414
}
1515
}
1616
],
@@ -58,7 +58,7 @@
5858
"name": "lodash",
5959
"version": "4.17.0",
6060
"location": {
61-
"file": "Users/user/project-with-issues/package.json"
61+
"file": "package.json"
6262
}
6363
}
6464
],
@@ -110,7 +110,7 @@
110110
"name": "lodash",
111111
"version": "4.17.0",
112112
"location": {
113-
"file": "Users/user/project-with-issues/package.json"
113+
"file": "package.json"
114114
}
115115
}
116116
],
@@ -170,7 +170,7 @@
170170
"name": "lodash",
171171
"version": "4.17.0",
172172
"location": {
173-
"file": "Users/user/project-with-issues/package.json"
173+
"file": "package.json"
174174
}
175175
}
176176
],
@@ -216,7 +216,7 @@
216216
"name": "jake",
217217
"version": "10.8.7",
218218
"location": {
219-
"file": "Users/user/project-with-issues/package.json"
219+
"file": "package.json"
220220
}
221221
}
222222
],
@@ -299,7 +299,7 @@
299299
"name": "lodash",
300300
"version": "4.17.0",
301301
"location": {
302-
"file": "Users/user/project-with-issues/package.json"
302+
"file": "package.json"
303303
}
304304
}
305305
],
@@ -349,7 +349,7 @@
349349
"name": "jake",
350350
"version": "10.8.7",
351351
"location": {
352-
"file": "Users/user/project-with-issues/package.json"
352+
"file": "package.json"
353353
}
354354
}
355355
],
@@ -425,7 +425,7 @@
425425
"name": "lodash",
426426
"version": "4.17.0",
427427
"location": {
428-
"file": "Users/user/project-with-issues/package.json"
428+
"file": "package.json"
429429
}
430430
}
431431
],
@@ -449,7 +449,7 @@
449449
"name": "lodash",
450450
"version": "4.17.0",
451451
"location": {
452-
"file": "Users/user/project-with-issues/package.json"
452+
"file": "package.json"
453453
}
454454
}
455455
],

0 commit comments

Comments
 (0)