Lines 1-73javascript
2"use strict";var BD=Object.create;var Ic=Object.defineProperty;var zD=Object.getOwnPropertyDescriptor;var HD=Object.getOwnPropertyNames;var VD=Object.getPrototypeOf,WD=Object.prototype.hasOwnProperty;var f=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var we=(t,e)=>()=>{try{return e||t((e={exports:{}}).exports,e),e.exports}catch(r){throw e=0,r}},fe=(t,e)=>{for(var r in e)Ic(t,r,{get:e[r],enumerable:!0})},Bw=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of HD(e))!WD.call(t,o)&&o!==r&&Ic(t,o,{get:()=>e[o],enumerable:!(n=zD(e,o))||n.enume ...
4`,e);return[r,n===-1?t.length:n]}function e1(t,e,r){let n=(o,s)=>{o.fingerprint=Oc({filePath:r,ruleId:o.ruleId,strategy:o.fingerprintStrategy??"value",value:o.value,context:s})};for(let o of t){if((o.fingerprintStrategy??"value")!=="context"){n(o);continue}let s=o.matchStart??o.startIndex,i=o.matchEnd??o.endIndex;n(o,Mc(e,s,i,t))}lE(t,e,r,o=>{let[s,i]=dE(e,o.startIndex);return Mc(e,s,i,t)}),lE(t,e,r,(o,s)=>{let[i,a]=dE(e,o.startIndex);return`${Mc(e,i,a,t)}#${s}`})}function lE(t,e,r,n){let o=new Map;for(let s of t){if((s.fingerprintStrategy??"value")!=="context"||!s.fingerprint)continue;let i=o ...
5`);for(let n=0;n<r.length;n++)i1.test(r[n])&&(e.add(n+1),e.add(n+2));return e}function u1(t){let e=
6versions published after the first week of January 2027
7will require node >=${r}. You are running node ${t}.
9To continue receiving updates to AWS services, bug fixes,
10and security updates please upgrade to node >=${r}.
12More information can be found at: https://a.co/c895JFp`))}}});var l1,f1,SE,wE=f(()=>{l1=()=>(t,e)=>async r=>(e.__retryLongPoll=!0,t(r)),f1={name:"longPollMiddleware",tags:["RETRY"],step:"initialize",override:!0},SE=t=>({applyToStack:e=>{e.add(l1(),f1)}})});function mn(t,e,r){return t.$source||(t.$source={}),t.$source[e]=r,t}var EE=f(()=>{});var xE,Ap,bE=f(()=>{xE=require("node:stream"),Ap=t=>t?.body instanceof xE.Readable||typeof ReadableStream<"u"&&t?.body instanceof ReadableStream});var io,hn,gn,AE,_E,Fc=f(()=>{io=(t,e)=>{let r=[];if(t&&r.push(t),e)for(let n of e)r.push(n);return r},hn=(t,e) ...
13 `+p}catch{!r.logger||r.logger?.constructor?.name==="NoOpLogger"?console.warn(p):r.logger?.warn?.(p)}typeof l.$responseBodyText<"u"&&l.$response&&(l.$response.body=l.$responseBodyText);try{if(Ee.isInstance(o)){let{headers:m={},statusCode:h}=o,g=Object.entries(m);l.$metadata={httpStatusCode:h,requestId:Fp(/^x-[\w-]+-request-?id$/,g),extendedRequestId:Fp(/^x-[\w-]+-id-2$/,g),cfId:Fp(/^x-[\w-]+-cf-id$/,g)}}}catch{}}throw l}},Fp=(t,e)=>(e.find(([r])=>r.match(t))||[void 0,void 0])[1]});var JE,XE=f(()=>{M();Uc();JE=t=>(e,r)=>async n=>{let{operationSchema:o}=X(r),[,s,i,a,c,u]=o??[],d=r.endpointV2?as ...
14`).slice(0,5).filter(e=>!e.includes("stackTraceWarning")).join(`
15`),Qo={warn:console.warn}});function ut(t){let e=t.getUTCFullYear(),r=t.getUTCMonth(),n=t.getUTCDay(),o=t.getUTCDate(),s=t.getUTCHours(),i=t.getUTCMinutes(),a=t.getUTCSeconds(),c=o<10?`0${o}`:`${o}`,u=s<10?`0${s}`:`${s}`,d=i<10?`0${i}`:`${i}`,l=a<10?`0${a}`:`${a}`;return`${O1[n]}, ${c} ${sm[r]} ${e} ${u}:${d}:${l} GMT`}var O1,sm,N1,cb,M1,rs,D1,F1,$1,xn,ns,Mi,L1,U1,B1,om,z1,H1,V1,br,W1,G1,ts,ub=f(()=>{nm();O1=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],sm=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];N1=new RegExp(/^(\d{4})-(
16 `+a}catch{!n.logger||n.logger?.constructor?.name==="NoOpLogger"?console.warn(a):n.logger?.warn?.(a)}typeof i.$responseBodyText<"u"&&i.$response&&(i.$response.body=i.$responseBodyText);try{if
17`),a){let m=r(await c);d.enqueue(`${s}:${m}\r
19`)}d.close()}else d.enqueue(`${(n(l)||0).toString(16)}\r
21`)}})}});function f0(t,e){let r=t,n=t;if(Se(n))return u0(n,e);let{base64Encoder:o,bodyLengthChecker:s,checksumAlgorithmFn:i,checksumLocationName:a,streamHasher:c}=e,u=o!==void 0&&i!==void 0&&a!==void 0&&c!==void 0,d=u?c(i,r):void 0,l=new l0.Readable({read:()=>{}});return r.on("data",p=>{let m=s(p)||0;m!==0&&(l.push(`${m.toString(16)}\r
22`),l.push(p),l.push(`\r
23`))}),r.on("end",async()=>{if(l.push(`0\r
24`),u){let p=o(await d);l.push(`${a}:${p}\r
26`)}l.push(null)}),l}var l0,p0=f(()=>{l0=require("node:stream");d0();jt()});async function m0(t,e){let r=0,n=[],o=t.getReader(),s=!1;for(;!s;){let{done:c,value:u}=await o.read();if(u&&(n.push(u),r+=u?.byteLength??0),r>=e)break;s=c}o.releaseLock();let i=new Uint8Array(Math.min(e,r)),a=0;for(let c of n){if(c.byteLength>i.byteLength-a){i.set(c.subarray(0,i.byteLength-a),a);break}else i.set(c,a);a+=c.length}return i}var h0=f(()=>{});var g0,y0,yh,S0=f(()=>{g0=require("node:stream");Di();h0();jt();y0=(t,e)=>Se(t)?m0(t,e):new Promise((r,n)=>{let o=new yh;o.limit=e,t.pipe(o),t.on("error",s=>{o.end(),n( ...
27If you are using React Native, this API is not yet supported, see: https://react-native.canny.io/feature-requests/p/fetch-streaming-body`);return o.stream()};return Object.assign(t,{transformToByteArray:r,transformToString:async o=>{let s=await r();if(o==="base64")return Gu(s);if(o
28`));return r(o)}});var Pd,Zt,av=f(()=>{kd();Pd={step:"serialize",tags:["HTTP_AUTH_SCHEME"],name:"httpAuthSchemeMiddleware",override:!0,relation:"before",toMiddleware:"endpointV2Middleware"},Zt=(t,{httpAuthSchemeParametersProvider:e,identityProviderConfigProvider:r})=>({applyToStack:n=>{n.addRelativeTo(xo(t,{httpAuthSchemeParametersProvider:e,identityProviderConfigProvider:r}),Pd)}})});var Od,_g,cv=f(()=>{kd();Od={step:"serialize",tags:["HTTP_AUTH_SCHEME"],name:"httpAuthSchemeMiddleware",override:!0,relation:"before",toMiddleware:"serializerMiddleware"},_g=(t,{httpAuthSchemeParametersProvider:e ...
29${this.getCanonicalPath(e)}
31${o.map(s=>`${s}:${r[s]}`).join(`
35${n}`}async createStringToSign(e,r,n,o){let s=new this.sha256;s.update(ma(n));let i=await s.digest();return`${o}
38${bo(i)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let r=[];for(let s of e.split("/"))s?.length!==0&&s!=="."&&(s===".."
39`);return this.signString(g,{signingDate:n,signingRegion:c,signingService:i,eventStreamCredentials:a})}async signMessage(e,{signingDate:r=new Date,signingRegion:n,signingService:o,eventStreamCredentials:s}){return this.signEvent({headers:this.headerFormatter.format(e.message.headers),payload:e.message.body},{signingDate:r,signingRegion:n,signingService:o,priorSignature:e.priorSignature,eventStreamCredentials:s}).then(a=>({message:e.message,signature:a}))}async signString(e,{signingDate:r=new Date,signingRegion:n,signingService:o,eventStreamCredentials:s}={}){let i=s??await this.credentialProvi ...
40For more information, please visit: `+X$);let o=t.originalExpiration??t.expiration;return{...t,...o?{originalExpiration:o}:{},expiration:n}},Z$=(t,e={})=>{let r=e?.logger||console,n;return async
41See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html
42or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler config.`),Date.now()}return r}constructor(e){this.configProvider=new Promise((r,n)=>{typeof e=="function"?e().then(o=>{r(this.resolveDefaultConfig(o))}).catch(n):r(this.resolveDefaultConfig(e))})}destroy(){this.config?.httpAgent?.destroy(),this.config?.httpsAgent?.destroy()}async handle(e,{abortSignal:r,requestTimeout:n}={}){this.config||(this.config=await this.configProvider);let o=this.config,s=o.logger,i=e.protocol==="https:";return!i&&!this.config.httpAgent&&(this.config.httpAgent=await this.config.httpAgentProvide ...
43 - loopback CIDR 127.0.0.0/8 or [::1/128]
44 - ECS container host 169.254.170.2
45 - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:e})}};function TL(t){return new SL({protocol:t.protocol,hostname:t.hostname,port:Number(t.port),path:t.pathname,query:Array.from(t.searchParams.entries()).reduce((e,[r,n])=>(e[r]=n,e),{}),fragment:t.hash})}
46Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:t.logger});let a=new URL(e);_L(a,t.logger);let c=gL.create({connectionTimeout:t.timeout??1e3}),u=t.timeout??1e3,d=RL(async()=>{let l=TL(a);s?l.headers.Authorization=wC((await yL.readFile(s)).toString()):o&&(l.headers.Authorization=wC(o));try{let p=await c.handle(l,{requestTimeout:u});return vL(p.response).then(m=>hL(m,"CREDENTIALS_HTTP","z"))}catch(p){throw new _o(String(p),{logger:t.logger})}},t.maxRetries??3,t.timeout??1e3);return async()=>{try{return await d()}finally{c.destroy?.()}}},wC=t=>{if(t.incl ...
47`))throw new _o("Authorization token contains invalid \\r\\n sequence.");return t};EC.fromHttp=NL});function ML(t){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:t.region},propertiesExtractor:(
48`),this.z=this.x.length}parse(){let e=this,{z:r}=e;for(;e.i<r&&(e.trim(),!(e.i>=r));)if(e.isNext("<?"))e.readTo("?>"),e.trim();else if(e.isNext("<!--"))e.readTo("-->"),e.trim();else if(e.isNext("<!DOCTYPE",!1))e.skipDoctype(),e.trim();else if(e.x[e.i]==="<"){let n=e.parseTag();return{[n.tag]:n.value}}else throw new Error("@aws-sdk XML parse error: unexpected content.");throw new Error("@aws-sdk XML parse error: no root element.")}isNext(e,r=!0){let n=this;return r?n.x.startsWith(e,n.i):n.x.toLowerCase().startsWith(e.toLowerCase(),n.i)}readTo(e){let r=this,n=r.x.indexOf(e,r.i);if(n===-1)throw n ...
49`.includes(e.x[e.i]);)++e.i}readAttrValue(){let e=this,r=e.x[e.i];++e.i;let n="";for(;e.i<e.z&&e.x[e.i]!==r;)n+=e.x[e.i++];return++e.i,e.decodeEntities(n)}parseTag(){let e=
50>/`.includes(e.x[e.i]);)r+=e.x[e.i++];let n=!1,o={};for(;e.i<e.z&&(e.trim(),!">/".includes(e.x[e.i]));){let d="";for(;e.i<e.z&&!`= \r
51>/?`.includes(e.x[e.i]);)d+=e.x[e.i++];if(e.trim(),e.x[e.i]!=="=")break;++e.i,e.trim(),d==="__proto__"&&oS(o),o[d]=e.readAttrValue(),n=!0}if(e.i>=e.z)throw new Error("@aws-sdk XML parse error: unexpected end of input.");if(e.x[e.i]==="/"){if(++e.i,e.i>=e.z||e.x[e.i]
52`)?{tag:r,value:""}:{tag:r,value:d}}let u={};for(let d of s)d.trim()===""&&d.includes(`
53`)||(u["#text"]="#text"in u?u["#text"]+d:d);for(let d of i)d.tag==="__proto__"&&oS(u),d.tag in u?Array.isArray(u[d.tag])?u[d.tag].push(d.value):u[d.tag]=[u[d.tag],d.value]:u[d.tag]=d.
54Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:e});return t},cB=(t={})=>async({callerClientConfig:e}={})=>{t.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:r,ssoAccountId:n,ssoRegion:o,ssoRoleName:s,ssoSession:i}=t,{ssoClient:a}=t,c=oB({profile:t.profile??e?.profile});if(!r&&!n&&!o&&!s&&!i){let d=(await sB(t))[c];if(!d)throw new cr(`Profile ${c} was not found.`,{logger:t.logger});if(!iP(d))throw new cr(`Profile ${c} is not configured with SSO credentials
55 Multiple credential sources detected:
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
out/cli.jsView on unpkg · L38 HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
out/cli.jsView on unpkg · L38 HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
out/cli.jsView on unpkg · L38 56 Both AWS_PROFILE and the pair AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY static credentials are set.
57 This SDK will proceed with the AWS_PROFILE value.
59 However, a future version may change this behavior to prefer the ENV static credentials.
60 Please ensure that your environment only sets either the AWS_PROFILE or the
61 AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
62`),LN=!0)),new Of("AWS_PROFILE is set, skipping fromEnv provider.",{logger:t.logger,tryNextLink:!0});return t.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv"),Mz(t)()},async e=>{t.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");let{ssoStartUrl:r,ssoAccountId:n,ssoRegion:o,ssoRoleName:s,ssoSession:i}=t;if(!r&&!n&&!o&&!s&&!i)throw new Of("Skipping SSO provider in default chain (inputs do not include SSO fields).",{logger:t.logger});let{fromSSO:a}=NS();return a(t)(e)},async e=>{t.logger?.debug("@aws-sdk/credential-provider-node - defaultP ...
63`),process.exit(2));var Cc=require("fs"),fp=J(require("path"));jo();var wt=require("fs"),et=J(require("path")),Nc=require("child_process");jo();function Sp(t,e){let r;try{r=(0,wt.realpathSync)(et.resolve(t))}catch{return!1}let n;try{n=(0,wt.realpathSync)(et.join(r,e))}catch{return!1}let o=et.relative(r,n);return o===""||!o.startsWith("..")&&!et.isAbsolute(o)}function wp(t,e){let r=(0,Nc.spawnSync)("git",["ls-files","--cached","--others","--exclude-standard"],{cwd:t,encoding:"utf8",maxBuffer:67108864}),n=r.status===0?r.stdout
64`).filter(a=>a.trim().length>0):nE(t,t),o=[],s=0,i=0;for(let a of n)switch(so(a,e)){case"none":Sp(t,a)?o.push(a):i++;break;case"generated":s++;break;default:break}return{files:o,generatedExcluded:s,outsideExcluded:i}}function rE(t,e,r){let n=[],o=0,s=0;for(let i of e)so(i,r)==="generated"?o++:Sp(t,i)?n.push(i):s++;return{files:n,generatedExcluded:o,outsideExcluded:s}}function nE(t,e,r=[]){let n;try{n=(0,wt.
65`).filter(r=>r.trim().length>0)}}function KD(t,e,r){let n=r.trim();return n?`git could not list staged files: ${n}`:e?`git was killed by ${e} before it could list staged files.`:`git exited with status ${t} and wrote no error output while listing staged files. Check that this is a git repository and that the index is not locked.`}function iE(t){let e=(0,Nc.spawnSync)("git",["rev-parse","--show-toplevel"],{cwd:t,encoding:"utf8"});return e.status===0&&e.
66`);d=y.pop()??"";for(let S of y)i.push(S)}catch(y){h(y)}}),a.stderr.setEncoding("utf8"),a.stderr.on("data",g=>{l+=g}),a.on("error",g=>{m(),s(new Error(`could not run git: ${g.message}`))}),a.on("close",(g,y)=>{if(!u){m();try{if(c){let w=i.finish();return t.onGeneratedExcluded?.(i.generatedExcludedCount()),t
67`+r:this.buffer={text:r,firstLine:this.addedLine},this.addedLine++;return}this.flush()}finish(){return this.flush(),this.findings}generatedExcludedCount(){return this.generatedSkipped.size}suppressedCount(){return this.suppressed}fixtureSuppressedCount(){return this.fixtureSuppressed}};Si();function Rc(t,e,r={}){let{generatedExcluded:n=0,suppressed:o=0,outsideExcluded:s=0,fixtureSuppressed:i=0,oversizedExcluded:a=0,unreadableExcluded:c=0}=r,d=t===0?`0 ${e}(s) \u2014 nothing was scanned, so this is not a clean result`:`
68`)}function vW(t){let e=new Map;for(let r of t){let n=r.verifyReason??"no-verifier",o=e.get(n);o?o.push(r):e.set(n,[r])}return Object.keys(hi).filter(r=>e.has(r)).map(r=>[r,e.get(r)])}function lp(t){return t.commit?`${t.file}:${t
69and rotate or remediate them. A GPY Analytics product.
72 secretloop <command> [options]
Long lines were clipped for display.