Class: Dependabot::NpmAndYarn::UpdateChecker::VulnerabilityAuditor

Inherits:
Object
  • Object
show all
Extended by:
T::Sig
Defined in:
lib/dependabot/npm_and_yarn/update_checker/vulnerability_auditor.rb

Constant Summary collapse

Audit = 
Dependabot::UpdateCheckers::VulnerabilityAudit
FixUpdate = 
Dependabot::UpdateCheckers::VulnerabilityAudit::FixUpdate
BlockingDependency = 
Dependabot::UpdateCheckers::VulnerabilityAudit::BlockingDependency

Instance Method Summary collapse

Constructor Details

#initialize(dependency_files:, credentials:) ⇒ VulnerabilityAuditor

Returns a new instance of VulnerabilityAuditor.



35
36
37
38
 
# File 'lib/dependabot/npm_and_yarn/update_checker/vulnerability_auditor.rb', line 35

def initialize(dependency_files:, credentials:)
  @dependency_files = dependency_files
  @credentials = credentials
end

Instance Method Details

#audit(dependency:, security_advisories:) ⇒ Object 



55
56
57
58
59
60
61
62
63
64
65
66
67
 
# File 'lib/dependabot/npm_and_yarn/update_checker/vulnerability_auditor.rb', line 55

def audit(dependency:, security_advisories:)
  Dependabot.logger.info("VulnerabilityAuditor: starting audit")
  fix_unavailable = fix_unavailable_response(dependency)

  run_audit(
    dependency: dependency,
    security_advisories: security_advisories,
    fix_unavailable: fix_unavailable
  )
rescue SharedHelpers::HelperSubprocessFailed => e
  log_helper_subprocess_failure(dependency, e)
  T.must(fix_unavailable)
end