Remove tap, replace with vitest #681
test.yml
on: pull_request
Tests
/
Resolving inputs
0s
Matrix: Tests / Test
Annotations
16 errors and 1 warning
|
test/socket-cdxgen.test.ts > Socket cdxgen command > should forwards known commands to cdxgen:
test/socket-cdxgen.test.ts#L29
Error: command failed
❯ promiseSpawn node_modules/@npmcli/promise-spawn/lib/index.js:22:22
❯ test/socket-cdxgen.test.ts:29:25
⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯
Serialized Error: { cmd: '/opt/hostedtoolcache/node/22.13.1/x64/bin/node', args: [ '/home/runner/work/socket-cli/socket-cli/bin/cli.js', 'cdxgen', '-h' ], code: 1, signal: null, stdout: 'cdxgen [command]\n\nCommands:\n cdxgen completion Generate bash/zsh completion\n\nOptions:\n -o, --output Output file. Default bom.json [default: "bom.json"]\n -t, --type Project type. Please refer to https://cyclonedx.github.io/cdxgen/#/PROJECT_TYPES for supported languages/platforms. [array]\n --exclude-type Project types to exclude. Please refer to https://cyclonedx.github.io/cdxgen/#/PROJECT_TYPES for supported languages/platforms.\n -r, --recurse Recurse mode suitable for mono-repos. Defaults to true. Pass --no-recurse to disable. [boolean] [default: true]\n -p, --print Print the SBOM as a table with tree. [boolean]\n -c, --resolve-class Resolve class names for packages. jars only for now. [boolean]\n --deep Perform deep searches for components. Useful while scanning C/C++ apps, live OS and oci images. [boolean]\n --server-url Dependency track url. Eg: https://deptrack.cyclonedx.io\n --skip-dt-tls-check Skip TLS certificate check when calling Dependency-Track. [boolean] [default: false]\n --api-key Dependency track api key\n --project-group Dependency track project group\n --project-name Dependency track project name. Default use the directory name\n --project-version Dependency track project version [string] [default: ""]\n --project-id Dependency track project id. Either provide the id or the project name and version together [string]\n --parent-project-id Dependency track parent project id [string]\n --required-only Include only the packages with required scope on the SBOM. Would set compositions.aggregate to incomplete unless --no-auto-compositions is passed. [boolean]\n --fail-on-error Fail if any dependency extractor fails. [boolean]\n --no-babel Do not use babel to perform usage analysis for JavaScript/TypeScript projects. [boolean]\n --generate-key-and-sign Generate an RSA public/private key pair and then sign the generated SBOM using JSON Web Signatures. [boolean]\n --server Run cdxgen as a server [boolean]\n --server-host Listen address [default: "127.0.0.1"]\n --server-port Listen port [default: "9090"]\n --install-deps Install dependencies automatically for some projects. Defaults to true but disabled for containers and oci scans. Use --no-install-deps to disable this feature. [boolean] [default: true]\n --validate Validate the generated SBOM using json schema. Defaults to true. Pass --no-validate to disable. [boolean] [default: true]\n --evidence Generate SBOM with evidence for supported languages. [boolean] [default: false]\n --spec-version CycloneDX Specification version to use. Defaults to 1.6 [number] [default: 1.6]\n --filter Filter components containing this word in purl or component.properties.value. Multiple values allowed. [array]\n --only Include components only containing this word in purl. Useful to generate BOM with first party components alone. Multiple values allowed. [array]\n --author The person(s) who created the BOM. Set this value if you\'re intending the modify the BOM and claim authorship. [array] [default: "OWASP Foundation"]\n --profile BOM profile to use for generation. Default generic. [choices: "appsec", "research", "operational", "threat-modeling", "license-compliance", "generic", "machine-learning", "ml", "deep-learning", "ml
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm8 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm10 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
Tests / Test (22, ubuntu-latest)
Process completed with exit code 1.
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm8 > should bail on new typosquat:
test/socket-npm.test.ts#L58
Error: It seems npm ran anyways so the test failed to invoke socket
❯ Socket.<anonymous> test/socket-npm.test.ts:58:15
|
|
Tests / Test (18, ubuntu-latest)
Process completed with exit code 1.
|
|
test/socket-cdxgen.test.ts > Socket cdxgen command > should forwards known commands to cdxgen:
test/socket-cdxgen.test.ts#L29
Error: command failed
❯ promiseSpawn node_modules/@npmcli/promise-spawn/lib/index.js:22:22
❯ test/socket-cdxgen.test.ts:29:25
⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯
Serialized Error: { cmd: 'C:\hostedtoolcache\windows\node\22.13.1\x64\node.exe', args: [ 'D:\a\socket-cli\socket-cli\bin\cli.js', 'cdxgen', '-h' ], code: 1, signal: null, stdout: 'cdxgen [command]\n\nCommands:\n cdxgen completion Generate bash/zsh completion\n\nOptions:\n -o, --output Output file. Default bom.json [default: "bom.json"]\n -t, --type Project type. Please refer to https://cyclonedx.github.io/cdxgen/#/PROJECT_TYPES for supported languages/platforms. [array]\n --exclude-type Project types to exclude. Please refer to https://cyclonedx.github.io/cdxgen/#/PROJECT_TYPES for supported languages/platforms.\n -r, --recurse Recurse mode suitable for mono-repos. Defaults to true. Pass --no-recurse to disable. [boolean] [default: true]\n -p, --print Print the SBOM as a table with tree. [boolean]\n -c, --resolve-class Resolve class names for packages. jars only for now. [boolean]\n --deep Perform deep searches for components. Useful while scanning C/C++ apps, live OS and oci images. [boolean]\n --server-url Dependency track url. Eg: https://deptrack.cyclonedx.io\n --skip-dt-tls-check Skip TLS certificate check when calling Dependency-Track. [boolean] [default: false]\n --api-key Dependency track api key\n --project-group Dependency track project group\n --project-name Dependency track project name. Default use the directory name\n --project-version Dependency track project version [string] [default: ""]\n --project-id Dependency track project id. Either provide the id or the project name and version together [string]\n --parent-project-id Dependency track parent project id [string]\n --required-only Include only the packages with required scope on the SBOM. Would set compositions.aggregate to incomplete unless --no-auto-compositions is passed. [boolean]\n --fail-on-error Fail if any dependency extractor fails. [boolean]\n --no-babel Do not use babel to perform usage analysis for JavaScript/TypeScript projects. [boolean]\n --generate-key-and-sign Generate an RSA public/private key pair and then sign the generated SBOM using JSON Web Signatures. [boolean]\n --server Run cdxgen as a server [boolean]\n --server-host Listen address [default: "127.0.0.1"]\n --server-port Listen port [default: "9090"]\n --install-deps Install dependencies automatically for some projects. Defaults to true but disabled for containers and oci scans. Use --no-install-deps to disable this feature. [boolean] [default: true]\n --validate Validate the generated SBOM using json schema. Defaults to true. Pass --no-validate to disable. [boolean] [default: true]\n --evidence Generate SBOM with evidence for supported languages. [boolean] [default: false]\n --spec-version CycloneDX Specification version to use. Defaults to 1.6 [number] [default: 1.6]\n --filter Filter components containing this word in purl or component.properties.value. Multiple values allowed. [array]\n --only Include components only containing this word in purl. Useful to generate BOM with first party components alone. Multiple values allowed. [array]\n --author The person(s) who created the BOM. Set this value if you\'re intending the modify the BOM and claim authorship. [array] [default: "OWASP Foundation"]\n --profile BOM profile to use for generation. Default generic. [choices: "appsec", "research", "operational", "threat-modeling", "license-compliance", "generic", "machine-learning", "ml", "deep-learning", "ml-deep",
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm8 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm10 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
Tests / Test (22, windows-latest)
Process completed with exit code 1.
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm8 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm10 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
Tests / Test (18, windows-latest)
Process completed with exit code 1.
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm8 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
test/socket-npm.test.ts > Socket npm wrapper for npm10 > should bail on new typosquat:
test/socket-npm.test.ts#L75
Error: Received a SIGINT
❯ test/socket-npm.test.ts:75:18
|
|
Tests / Test (20, windows-latest)
Process completed with exit code 1.
|
|
Tests / Test (20, ubuntu-latest)
Failed to save: Failed to CreateCacheEntry: Received non-retryable error: Failed request: (409) Conflict: cache entry with the same key, version, and scope already exists
|