fix: container support hashing .jar files of size up to buffer.consta…

…nts.MAX_LENGTH The bumped version of snyk-docker-plugin fixes the exception thrown by the crypto module `The RangeError: data is too long` by reading and computing the sha1 of .jar files in chunks. This allows snyk container to scan embedded .jar files of up to buffer.constants.MAX_LENGTH. On 32-bit architectures, this value currently is 230 - 1 (about 1 GiB). On 64-bit architectures, this value currently is 232 (about 4 GiB).
snyk · Aug 12, 2024 · 8708202 · 8708202
1 parent ad585be
commit 8708202
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -116,7 +116,7 @@
     "semver": "^6.0.0",
     "snyk-config": "^5.0.0",
     "snyk-cpp-plugin": "2.24.0",
-    "snyk-docker-plugin": "6.13.1",
+    "snyk-docker-plugin": "6.13.2",
     "snyk-go-plugin": "1.23.0",
     "snyk-gradle-plugin": "4.1.0",
     "snyk-module": "3.1.0",