From 06dbf17e1bf6cf5a6182dda7371e5e61dc434681 Mon Sep 17 00:00:00 2001 From: Steve Date: Tue, 5 Mar 2024 11:05:50 +0200 Subject: [PATCH] fix: remove dependencies when parent folder is deleted When a file or folder is deleted, an entry that starts with .wh is created. Up until now, Snyk detected files that were deleted, but not folders. This change adds support for deleted folders by checking whether a file path starts with the path of the deleted folder. Meaning if we know that "/app/dependencies" was deleted, then a file path like "/app/dependencies/jar/library.jar" will be marked as deleted as well. --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9da39f75da..4b3a90476e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -68,7 +68,7 @@ "semver": "^6.0.0", "snyk-config": "^5.0.0", "snyk-cpp-plugin": "2.24.0", - "snyk-docker-plugin": "6.10.3", + "snyk-docker-plugin": "6.10.4", "snyk-go-plugin": "1.23.0", "snyk-gradle-plugin": "4.1.0", "snyk-module": "3.1.0", @@ -20802,9 +20802,9 @@ "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==" }, "node_modules/snyk-docker-plugin": { - "version": "6.10.3", - "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.10.3.tgz", - "integrity": "sha512-q5urrXWck+tNkmzWhLY0mvHam6sIDEOZPTv+Om4MgYziR/4kuxgZfV9lgQMjblk0sAzRjC0MmpE1iOzU6vWNkw==", + "version": "6.10.4", + "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.10.4.tgz", + "integrity": "sha512-KYQKKa2dh2owS//PkQ7phLRNMOha2S1k4tO1hs918kBgASYFl+Wy/OuBMmq84rddB6abIv+KsH8MEndcoaFRJg==", "dependencies": { "@snyk/composer-lockfile-parser": "^1.4.1", "@snyk/dep-graph": "^2.8.1", @@ -40566,9 +40566,9 @@ } }, "snyk-docker-plugin": { - "version": "6.10.3", - "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.10.3.tgz", - "integrity": "sha512-q5urrXWck+tNkmzWhLY0mvHam6sIDEOZPTv+Om4MgYziR/4kuxgZfV9lgQMjblk0sAzRjC0MmpE1iOzU6vWNkw==", + "version": "6.10.4", + "resolved": "https://registry.npmjs.org/snyk-docker-plugin/-/snyk-docker-plugin-6.10.4.tgz", + "integrity": "sha512-KYQKKa2dh2owS//PkQ7phLRNMOha2S1k4tO1hs918kBgASYFl+Wy/OuBMmq84rddB6abIv+KsH8MEndcoaFRJg==", "requires": { "@snyk/composer-lockfile-parser": "^1.4.1", "@snyk/dep-graph": "^2.8.1", diff --git a/package.json b/package.json index 72b7022456..16e8e51f47 100644 --- a/package.json +++ b/package.json @@ -116,7 +116,7 @@ "semver": "^6.0.0", "snyk-config": "^5.0.0", "snyk-cpp-plugin": "2.24.0", - "snyk-docker-plugin": "6.10.3", + "snyk-docker-plugin": "6.10.4", "snyk-go-plugin": "1.23.0", "snyk-gradle-plugin": "4.1.0", "snyk-module": "3.1.0",