diff --git a/CHANGELOG.md b/CHANGELOG.md index a744ff9..b00b46a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,11 @@ # Changelog +## 1.4.1 + +### Bugfix + +* Fix bug related to deepscans in retire.js + ## 1.4.0 * Add purl to SBOM output diff --git a/package-lock.json b/package-lock.json index ed0b268..b545fff 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,17 +1,17 @@ { "name": "retire-site-scanner", - "version": "1.4.0", + "version": "1.4.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "retire-site-scanner", - "version": "1.4.0", + "version": "1.4.1", "license": "Apache-2.0", "dependencies": { "cacheable-lookup": "^7.0.0", "puppeteer": "^22.4.0", - "retire": "^5.0.1", + "retire": "^5.1.4", "source-map": "^0.7.4" }, "bin": { @@ -2777,9 +2777,9 @@ } }, "node_modules/retire": { - "version": "5.1.2", - "resolved": "https://registry.npmjs.org/retire/-/retire-5.1.2.tgz", - "integrity": "sha512-k7SShq+8qykSVfbPNluz2Z9BdSX+xcUIPUUMdPYUcQFHEmGhrFrBL3Cos7Ww1myUquMzSVvAipgEzGWT0bfUcg==", + "version": "5.1.4", + "resolved": "https://registry.npmjs.org/retire/-/retire-5.1.4.tgz", + "integrity": "sha512-PQJ8B6LN7MZgN2CpW+JuiCrdL+O7EyZCNuQCvgw6X8aMfmmeLlMie+jH/0oTHyOC3Ll5fEiRcq1hn2Walw8u2Q==", "dependencies": { "ansi-colors": "^4.1.1", "astronomical": "^1.0.0", diff --git a/package.json b/package.json index 515d3dd..eb5d314 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "author": "Erlend Oftedal ", "name": "retire-site-scanner", - "version": "1.4.0", + "version": "1.4.1", "license": "Apache-2.0", "description": "A scanner for checking a web site using retire.js", "main": "dist/index.js", @@ -24,7 +24,7 @@ "dependencies": { "cacheable-lookup": "^7.0.0", "puppeteer": "^22.4.0", - "retire": "^5.0.1", + "retire": "^5.1.4", "source-map": "^0.7.4" }, "devDependencies": { diff --git a/src/retireWrapper.ts b/src/retireWrapper.ts index 65fda32..9c95bb8 100644 --- a/src/retireWrapper.ts +++ b/src/retireWrapper.ts @@ -83,7 +83,7 @@ function scanUrlBackdoored( function scanUri(repo: CombinedRepository, uri: string): Array { const uriResults = retire.scanUri(uri, repo.advisories); const fileName = uri.split("/").slice(-1)[0].split("?")[0]; - const fileNameResults = retire.scanFileName(fileName, repo.advisories); + const fileNameResults = retire.scanFileName(fileName, repo.advisories, false); return convertResults(uriResults.concat(fileNameResults), "scanning the URL"); }