Fix RetireJS

It was scanning from pwd, not the source dir
simpsonjulian · Dec 4, 2024 · 3080768 · 3080768
1 parent 85aa649
commit 3080768
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tools.d/retirejs b/tools.d/retirejs
@@ -7,7 +7,7 @@ source=$1
 
 tmpdir=$(mktemp -d)
 
-retire --exitwith 0 --outputformat json --outputpath "${tmpdir}/report.json" "${source}" 1>&2
+retire --exitwith 0 --outputformat json --outputpath "${tmpdir}/report.json" --path "${source}" 1>&2
 
 # Iterate over files and their vulnerabilities to produce a CSV
 jq --raw-output '.data[] | .file as $file | .results[] | .vulnerabilities[] | ["vulnerable-js-file", .severity, .identifiers.CVE[0] + " -" + .identifiers.summary, $file, 0, 0] | @csv' < "${tmpdir}/report.json" > "${tmpdir}/findings.csv"
@@ -16,4 +16,4 @@ brew_prefix=$(brew --prefix)
 PATH="${brew_prefix}/opt/statica/libexec:.:$PATH" csv2sarif "retirejs" "$(retire --version)" "${tmpdir}/findings.csv"
 
 # Clean up
-rm -rf "${tmpdir}"
+rm -rf "${tmpdir}"