Lines 1-73javascript
2"use strict";var VD=Object.create;var Nc=Object.defineProperty;var WD=Object.getOwnPropertyDescriptor;var GD=Object.getOwnPropertyNames;var jD=Object.getPrototypeOf,qD=Object.prototype.hasOwnProperty;var f=(t,e,r)=>()=>{if(r)throw r[0];try{return t&&(e=t(t=0)),e}catch(n){throw r=[n],n}};var we=(t,e)=>()=>{try{return e||t((e={exports:{}}).exports,e),e.exports}catch(r){throw e=0,r}},fe=(t,e)=>{for(var r in e)Nc(t,r,{get:e[r],enumerable:!0})},zw=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of GD(e))!qD.call(t,o)&&o!==r&&Nc(t,o,{get:()=>e[o],enumerable:!(n=WD(e,o))||n.enume ...
4`,e);return[r,n===-1?t.length:n]}function a1(t,e,r){let n=(o,s)=>{o.fingerprint=Fc({filePath:r,ruleId:o.ruleId,strategy:o.fingerprintStrategy??"value",value:o.value,context:s})};for(let o of t){if((o.fingerprintStrategy??"value")!=="context"){n(o);continue}let s=o.matchStart??o.startIndex,i=o.matchEnd??o.endIndex;n(o,Lc(e,s,i,t))}fx(t,e,r,o=>{let[s,i]=lx(e,o.startIndex);return Lc(e,s,i,t)}),fx(t,e,r,(o,s)=>{let[i,a]=lx(e,o.startIndex);return`${Lc(e,i,a,t)}#${s}`})}function fx(t,e,r,n){let o=new Map;for(let s of t){if((s.fingerprintStrategy??"value")!=="context"||!s.fingerprint)continue;let i=o ...
5`);for(let n=0;n<r.length;n++)m1.test(r[n])&&(e.add(n+1),e.add(n+2));return e}function y1(t){let e=
6versions published after the first week of January 2027
7will require node >=${r}. You are running node ${t}.
9To continue receiving updates to AWS services, bug fixes,
10and security updates please upgrade to node >=${r}.
12More information can be found at: https://a.co/c895JFp`))}}});var w1,x1,wx,xx=f(()=>{w1=()=>(t,e)=>async r=>(e.__retryLongPoll=!0,t(r)),x1={name:"longPollMiddleware",tags:["RETRY"],step:"initialize",override:!0},wx=t=>({applyToStack:e=>{e.add(w1(),x1)}})});function hn(t,e,r){return t.$source||(t.$source={}),t.$source[e]=r,t}var Ex=f(()=>{});var bx,_p,Ax=f(()=>{bx=require("node:stream"),_p=t=>t?.body instanceof bx.Readable||typeof ReadableStream<"u"&&t?.body instanceof ReadableStream});var co,gn,yn,_x,Tx,Uc=f(()=>{co=(t,e)=>{let r=[];if(t&&r.push(t),e)for(let n of e)r.push(n);return r},gn=(t,e) ...
13 `+p}catch{!r.logger||r.logger?.constructor?.name==="NoOpLogger"?console.warn(p):r.logger?.warn?.(p)}typeof l.$responseBodyText<"u"&&l.$response&&(l.$response.body=l.$responseBodyText);try{if(xe.isInstance(o)){let{headers:m={},statusCode:h}=o,g=Object.entries(m);l.$metadata={httpStatusCode:h,requestId:$p(/^x-[\w-]+-request-?id$/,g),extendedRequestId:$p(/^x-[\w-]+-id-2$/,g),cfId:$p(/^x-[\w-]+-cf-id$/,g)}}}catch{}}throw l}},$p=(t,e)=>(e.find(([r])=>r.match(t))||[void 0,void 0])[1]});var Jx,Xx=f(()=>{M();Hc();Jx=t=>(e,r)=>async n=>{let{operationSchema:o}=J(r),[,s,i,a,c,u]=o??[],d=r.endpointV2?as ...
14`).slice(0,5).filter(e=>!e.includes("stackTraceWarning")).join(`
15`),es={warn:console.warn}});function ut(t){let e=t.getUTCFullYear(),r=t.getUTCMonth(),n=t.getUTCDay(),o=t.getUTCDate(),s=t.getUTCHours(),i=t.getUTCMinutes(),a=t.getUTCSeconds(),c=o<10?`0${o}`:`${o}`,u=s<10?`0${s}`:`${s}`,d=i<10?`0${i}`:`${i}`,l=a<10?`0${a}`:`${a}`;return`${B1[n]}, ${c} ${im[r]} ${e} ${u}:${d}:${l} GMT`}var B1,im,z1,ub,H1,ns,V1,W1,G1,bn,os,Li,j1,q1,K1,sm,Z1,J1,X1,br,Y1,Q1,rs,db=f(()=>{om();B1=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],im=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];z1=new RegExp(/^(\d{4})-(
16 `+a}catch{!n.logger||n.logger?.constructor?.name==="NoOpLogger"?console.warn(a):n.logger?.warn?.(a)}typeof i.$responseBodyText<"u"&&i.$response&&(i.$response.body=i.$responseBodyText);try{if
17`),a){let m=r(await c);d.enqueue(`${s}:${m}\r
19`)}d.close()}else d.enqueue(`${(n(l)||0).toString(16)}\r
21`)}})}});function p0(t,e){let r=t,n=t;if(Se(n))return d0(n,e);let{base64Encoder:o,bodyLengthChecker:s,checksumAlgorithmFn:i,checksumLocationName:a,streamHasher:c}=e,u=o!==void 0&&i!==void 0&&a!==void 0&&c!==void 0,d=u?c(i,r):void 0,l=new f0.Readable({read:()=>{}});return r.on("data",p=>{let m=s(p)||0;m!==0&&(l.push(`${m.toString(16)}\r
22`),l.push(p),l.push(`\r
23`))}),r.on("end",async()=>{if(l.push(`0\r
24`),u){let p=o(await d);l.push(`${a}:${p}\r
26`)}l.push(null)}),l}var f0,m0=f(()=>{f0=require("node:stream");l0();jt()});async function h0(t,e){let r=0,n=[],o=t.getReader(),s=!1;for(;!s;){let{done:c,value:u}=await o.read();if(u&&(n.push(u),r+=u?.byteLength??0),r>=e)break;s=c}o.releaseLock();let i=new Uint8Array(Math.min(e,r)),a=0;for(let c of n){if(c.byteLength>i.byteLength-a){i.set(c.subarray(0,i.byteLength-a),a);break}else i.set(c,a);a+=c.length}return i}var g0=f(()=>{});var y0,S0,Sh,w0=f(()=>{y0=require("node:stream");Ui();g0();jt();S0=(t,e)=>Se(t)?h0(t,e):new Promise((r,n)=>{let o=new Sh;o.limit=e,t.pipe(o),t.on("error",s=>{o.end(),n( ...
27If you are using React Native, this API is not yet supported, see: https://react-native.canny.io/feature-requests/p/fetch-streaming-body`);return o.stream()};return Object.assign(t,{transformToByteArray:r,transformToString:async o=>{let s=await r();if(o==="base64")return Ku(s);if(o
28`));return r(o)}});var Md,Xt,cR=f(()=>{Nd();Md={step:"serialize",tags:["HTTP_AUTH_SCHEME"],name:"httpAuthSchemeMiddleware",override:!0,relation:"before",toMiddleware:"endpointV2Middleware"},Xt=(t,{httpAuthSchemeParametersProvider:e,identityProviderConfigProvider:r})=>({applyToStack:n=>{n.addRelativeTo(Ao(t,{httpAuthSchemeParametersProvider:e,identityProviderConfigProvider:r}),Md)}})});var Dd,Tg,uR=f(()=>{Nd();Dd={step:"serialize",tags:["HTTP_AUTH_SCHEME"],name:"httpAuthSchemeMiddleware",override:!0,relation:"before",toMiddleware:"serializerMiddleware"},Tg=(t,{httpAuthSchemeParametersProvider:e ...
29${this.getCanonicalPath(e)}
31${o.map(s=>`${s}:${r[s]}`).join(`
35${n}`}async createStringToSign(e,r,n,o){let s=new this.sha256;s.update(Sa(n));let i=await s.digest();return`${o}
38${_o(i)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let r=[];for(let s of e.split("/"))s?.length!==0&&s!=="."&&(s===".."
39`);return this.signString(g,{signingDate:n,signingRegion:c,signingService:i,eventStreamCredentials:a})}async signMessage(e,{signingDate:r=new Date,signingRegion:n,signingService:o,eventStreamCredentials:s}){return this.signEvent({headers:this.headerFormatter.format(e.message.headers),payload:e.message.body},{signingDate:r,signingRegion:n,signingService:o,priorSignature:e.priorSignature,eventStreamCredentials:s}).then(a=>({message:e.message,signature:a}))}async signString(e,{signingDate:r=new Date,signingRegion:n,signingService:o,eventStreamCredentials:s}={}){let i=s??await this.credentialProvi ...
40For more information, please visit: `+oL);let o=t.originalExpiration??t.expiration;return{...t,...o?{originalExpiration:o}:{},expiration:n}},sL=(t,e={})=>{let r=e?.logger||console,n;return async()
41See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html
42or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler config.`),Date.now()}return r}constructor(e){this.configProvider=new Promise((r,n)=>{typeof e=="function"?e().then(o=>{r(this.resolveDefaultConfig(o))}).catch(n):r(this.resolveDefaultConfig(e))})}destroy(){this.config?.httpAgent?.destroy(),this.config?.httpsAgent?.destroy()}async handle(e,{abortSignal:r,requestTimeout:n}={}){this.config||(this.config=await this.configProvider);let o=this.config,s=o.logger,i=e.protocol==="https:";return!i&&!this.config.httpAgent&&(this.config.httpAgent=await this.config.httpAgentProvide ...
43 - loopback CIDR 127.0.0.0/8 or [::1/128]
44 - ECS container host 169.254.170.2
45 - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:e})}};function NL(t){return new RL({protocol:t.protocol,hostname:t.hostname,port:Number(t.port),path:t.pathname,query:Array.from(t.searchParams.entries()).reduce((e,[r,n])=>(e[r]=n,e),{}),fragment:t.hash})}
46Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:t.logger});let a=new URL(e);OL(a,t.logger);let c=_L.create({connectionTimeout:t.timeout??1e3}),u=t.timeout??1e3,d=DL(async()=>{let l=NL(a);s?l.headers.Authorization=xC((await TL.readFile(s)).toString()):o&&(l.headers.Authorization=xC(o));try{let p=await c.handle(l,{requestTimeout:u});return ML(p.response).then(m=>AL(m,"CREDENTIALS_HTTP","z"))}catch(p){throw new Ro(String(p),{logger:t.logger})}},t.maxRetries??3,t.timeout??1e3);return async()=>{try{return await d()}finally{c.destroy?.()}}},xC=t=>{if(t.incl ...
47`))throw new Ro("Authorization token contains invalid \\r\\n sequence.");return t};EC.fromHttp=zL});function HL(t){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:t.region},propertiesExtractor:(e
48`),this.z=this.x.length}parse(){let e=this,{z:r}=e;for(;e.i<r&&(e.trim(),!(e.i>=r));)if(e.isNext("<?"))e.readTo("?>"),e.trim();else if(e.isNext("<!--"))e.readTo("-->"),e.trim();else if(e.isNext("<!DOCTYPE",!1))e.skipDoctype(),e.trim();else if(e.x[e.i]==="<"){let n=e.parseTag();return{[n.tag]:n.value}}else throw new Error("@aws-sdk XML parse error: unexpected content.");throw new Error("@aws-sdk XML parse error: no root element.")}isNext(e,r=!0){let n=this;return r?n.x.startsWith(e,n.i):n.x.toLowerCase().startsWith(e.toLowerCase(),n.i)}readTo(e){let r=this,n=r.x.indexOf(e,r.i);if(n===-1)throw n ...
49`.includes(e.x[e.i]);)++e.i}readAttrValue(){let e=this,r=e.x[e.i];++e.i;let n="";for(;e.i<e.z&&e.x[e.i]!==r;)n+=e.x[e.i++];return++e.i,e.decodeEntities(n)}parseTag(){let e=
50>/`.includes(e.x[e.i]);)r+=e.x[e.i++];let n=!1,o={};for(;e.i<e.z&&(e.trim(),!">/".includes(e.x[e.i]));){let d="";for(;e.i<e.z&&!`= \r
51>/?`.includes(e.x[e.i]);)d+=e.x[e.i++];if(e.trim(),e.x[e.i]!=="=")break;++e.i,e.trim(),d==="__proto__"&&sS(o),o[d]=e.readAttrValue(),n=!0}if(e.i>=e.z)throw new Error("@aws-sdk XML parse error: unexpected end of input.");if(e.x[e.i]==="/"){if(++e.i,e.i>=e.z||e.x[e.i]
52`)?{tag:r,value:""}:{tag:r,value:d}}let u={};for(let d of s)d.trim()===""&&d.includes(`
53`)||(u["#text"]="#text"in u?u["#text"]+d:d);for(let d of i)d.tag==="__proto__"&&sS(u),d.tag in u?Array.isArray(u[d.tag])?u[d.tag].push(d.value):u[d.tag]=[u[d.tag],d.value]:u[d.tag]=d.
54Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:e});return t},gB=(t={})=>async({callerClientConfig:e}={})=>{t.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:r,ssoAccountId:n,ssoRegion:o,ssoRoleName:s,ssoSession:i}=t,{ssoClient:a}=t,c=fB({profile:t.profile??e?.profile});if(!r&&!n&&!o&&!s&&!i){let d=(await pB(t))[c];if(!d)throw new cr(`Profile ${c} was not found.`,{logger:t.logger});if(!aP(d))throw new cr(`Profile ${c} is not configured with SSO credentials
55 Multiple credential sources detected:
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
out/cli.jsView on unpkg · L38 HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
out/cli.jsView on unpkg · L38 HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
out/cli.jsView on unpkg · L38 56 Both AWS_PROFILE and the pair AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY static credentials are set.
57 This SDK will proceed with the AWS_PROFILE value.
59 However, a future version may change this behavior to prefer the ENV static credentials.
60 Please ensure that your environment only sets either the AWS_PROFILE or the
61 AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
62`),UN=!0)),new Df("AWS_PROFILE is set, skipping fromEnv provider.",{logger:t.logger,tryNextLink:!0});return t.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv"),Hz(t)()},async e=>{t.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");let{ssoStartUrl:r,ssoAccountId:n,ssoRegion:o,ssoRoleName:s,ssoSession:i}=t;if(!r&&!n&&!o&&!s&&!i)throw new Df("Skipping SSO provider in default chain (inputs do not include SSO fields).",{logger:t.logger});let{fromSSO:a}=MS();return a(t)(e)},async e=>{t.logger?.debug("@aws-sdk/credential-provider-node - defaultP ...
63`),process.exit(2));var Oc=require("fs"),hp=Z(require("path"));ao();var wt=require("fs"),et=Z(require("path")),$c=require("child_process");ao();function xp(t,e){let r;try{r=(0,wt.realpathSync)(et.resolve(t))}catch{return!1}let n;try{n=(0,wt.realpathSync)(et.join(r,e))}catch{return!1}let o=et.relative(r,n);return o===""||!o.startsWith("..")&&!et.isAbsolute(o)}function Ep(t,e){let r=(0,$c.spawnSync)("git",["ls-files","--cached","--others","--exclude-standard"],{cwd:t,encoding:"utf8",maxBuffer:67108864}),n=r.status===0
64`).filter(a=>a.trim().length>0):ox(t,t),o=[],s=0,i=0;for(let a of n)switch(io(a,e)){case"none":xp(t,a)?o.push(a):i++;break;case"generated":s++;break;default:break}return{files:o,generatedExcluded:s,outsideExcluded:i}}function nx(t,e,r){let n=[],o=0,s=0;for(let i of e)io(i,r)==="generated"?o++:xp(t,i)?n.push(i):s++;return{files:n,generatedExcluded:o,outsideExcluded:s}}function ox(t,e,r=[]){let n;try{n=(0,wt.
65`).filter(r=>r.trim().length>0)}}function XD(t,e,r){let n=r.trim();return n?`git could not list staged files: ${n}`:e?`git was killed by ${e} before it could list staged files.`:`git exited with status ${t} and wrote no error output while listing staged files. Check that this is a git repository and that the index is not locked.`}function ax(t){let e=(0,$c.spawnSync)("git",["rev-parse","--show-toplevel"],{cwd:t,encoding:"utf8"});return e.
66`);d=y.pop()??"";for(let S of y)i.push(S)}catch(y){h(y)}}),a.stderr.setEncoding("utf8"),a.stderr.on("data",g=>{l+=g}),a.on("error",g=>{m(),s(new Error(`could not run git: ${g.message}`))}),a.on("close",(g,y)=>{if(!u){m();try{if(c){let w=i.finish();return t.onGeneratedExcluded?.(i.generatedExcludedCount()),t
67`+r:this.buffer={text:r,firstLine:this.addedLine},this.addedLine++;return}this.flush()}finish(){return this.flush(),this.findings}generatedExcludedCount(){return this.generatedSkipped.size}suppressedCount(){return this.suppressed}fixtureSuppressedCount(){return this.fixtureSuppressed}};bi();ao();var CD="Remove it from source and load it from an environment variable instead; in VS Code, the lightbulb will do it for you.";function ID(t){return t.file?!yi(t.
68`)}function MW(t){let e=new Map;for(let r of t){let n=r.verifyReason??"no-verifier",o=e.get(n);o?o.push(r):e.set(n,[r])}return Object.keys(gi).filter(r=>e.has(r)).map(r=>[r,e.get(r)])}function mp(t){return t.commit?`${t.file}:${t
69and rotate or remediate them. A GPY Analytics product.
72 secretloop <command> [options]
Long lines were clipped for display.