atreyabain/safeImport
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[add] getting sliced available repos

Browse Source
This commit is contained in:
Atreya Bain
2025-08-19 21:33:37 +01:00
parent ea0f59b395
commit 0e5906bafc
1 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
src_vuln/index.mjs
View File

@@ -1,8 +1,9 @@
import { readFile } from "fs/promises";
import { cacheFunctionOutput } from "../src_dataset/cache.mjs"; import { cacheFunctionOutput } from "../src_dataset/cache.mjs";
import { bifurcateArray, getGithubTokenFromEnvironment } from "./lib.mjs"; import { bifurcateArray, getGithubTokenFromEnvironment } from "./lib.mjs";
import { checkForParentDep, findSlicedDeps } from "./slicedeps.mjs"; import { checkForParentDep, findSlicedDeps } from "./slicedeps.mjs";
import { basename } from "path"; import { basename } from "path";
import int from 'set.prototype.intersection'
const githubToken = getGithubTokenFromEnvironment(); const githubToken = getGithubTokenFromEnvironment();
const vulnTargets = await findSlicedDeps(); const vulnTargets = await findSlicedDeps();
@@ -46,21 +47,26 @@ for(const depo of fullMaps){
depMap.get(depo.repo_name).push(depo); depMap.get(depo.repo_name).push(depo);
} }
const depKeys = ([...depMap.keys()]) const depKeys = ([...depMap.keys()])
console.log(depKeys) // console.log(depKeys)
const repoKeys = await checkForParentDep(depKeys); const repoKeys = await checkForParentDep(depKeys);
console.log(repoKeys); console.log(repoKeys, 'repos found with CVE-ridden direct dependencies');
// for(const repo of slicedReposSoFar) { // for(const repo of slicedReposSoFar) {
// const deps = await getDepsOfRepo(repo); // const deps = await getDepsOfRepo(repo);
// console.log(repo,deps); // console.log(repo,deps);
// const depCVEs = fullMaps.filter(e=>(deps).includes(e.repo_name)); // const depCVEs = fullMaps.filter(e=>(deps).includes(e.repo_name));
// depMap.set(repo, depCVEs); // depMap.set(repo, depCVEs);
// } // }
console.log(cveMap.length, "advisories found"); // console.log(cveMap.length, "advisories found");
console.log(fullMaps.length, "advisories found"); // console.log(fullMaps.length, " actionable advisories found");
console.log(emptyMap.length, "advisories found"); // console.log(emptyMap.length, "advisories found");
// what is pending // what is pending
// see what's been sliced so far. Find their dependencies, link back to // see what's been sliced so far. Find their dependencies, link back to
const successRepos = new Set((await readFile('success.txt')).toString().trim().split('\n'));
// console.log("success with ",successRepos.size)
const intSet = int (successRepos,repoKeys)
console.log("Anything right now? ",intSet)