mirror of
https://github.com/pnpm/pnpm.git
synced 2026-07-25 15:07:06 -04:00
315cae83f8
* fix(audit): fallback to quick audit endpoint Fallback to /audits/quick when /audits fails with non-200, avoiding 5xx hard failures. Close #10649 * refactor(audit): reuse request options for fallback Share request options between primary and quick audit endpoints. Use POST for consistency. * fix(audit): use quick audit endpoint as primary, full as fallback --------- Co-authored-by: Zoltan Kochan <z@kochan.io>
47 lines
1.4 KiB
TypeScript
47 lines
1.4 KiB
TypeScript
import path from 'path'
|
|
import { audit } from '@pnpm/plugin-commands-audit'
|
|
import { fixtures } from '@pnpm/test-fixtures'
|
|
import { readProjectManifest } from '@pnpm/read-project-manifest'
|
|
import { sync as readYamlFile } from 'read-yaml-file'
|
|
import nock from 'nock'
|
|
import * as responses from './utils/responses/index.js'
|
|
|
|
const f = fixtures(import.meta.dirname)
|
|
const registries = {
|
|
default: 'https://registry.npmjs.org/',
|
|
}
|
|
const rawConfig = {
|
|
registry: registries.default,
|
|
}
|
|
|
|
test('overrides with references (via $) are preserved during audit --fix', async () => {
|
|
const tmp = f.prepare('preserve-reference-overrides')
|
|
|
|
nock(registries.default)
|
|
.post('/-/npm/v1/security/audits/quick')
|
|
.reply(200, responses.ALL_VULN_RESP)
|
|
|
|
const { manifest: initialManifest } = await readProjectManifest(tmp)
|
|
|
|
const { exitCode, output } = await audit.handler({
|
|
auditLevel: 'moderate',
|
|
dir: tmp,
|
|
rootProjectManifestDir: tmp,
|
|
rootProjectManifest: initialManifest,
|
|
fix: true,
|
|
userConfig: {},
|
|
rawConfig,
|
|
registries,
|
|
virtualStoreDirMaxLength: process.platform === 'win32' ? 60 : 120,
|
|
overrides: {
|
|
'is-positive': '1.0.0',
|
|
},
|
|
})
|
|
|
|
expect(exitCode).toBe(0)
|
|
expect(output).toMatch(/overrides were added/)
|
|
|
|
const manifest = readYamlFile<any>(path.join(tmp, 'pnpm-workspace.yaml')) // eslint-disable-line
|
|
expect(manifest.overrides?.['is-positive']).toBe('$is-positive')
|
|
})
|