From 6df3662544fa86f80da1e1aa21ed57ecc313c710 Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Wed, 28 Oct 2026 19:47:33 +0530 Subject: [PATCH 01/10] Updae cli version 2.3.69 --- checkmarx-ast-cli.version | 2 +- package-lock.json | 4 ++-- package.json | 2 +- src/main/wrapper/resources/cx-linux | 4 ++-- src/main/wrapper/resources/cx-mac | 4 ++-- src/main/wrapper/resources/cx.exe | 4 ++-- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/checkmarx-ast-cli.version b/checkmarx-ast-cli.version index 53c4a94..175f377 100644 --- a/checkmarx-ast-cli.version +++ b/checkmarx-ast-cli.version @@ -1 +1 @@ -2.3.67 +2.3.69 diff --git a/package-lock.json b/package-lock.json index e9e5e0a..a79096c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "@Checkmarx/ast-cli-javascript-wrapper", - "version": "0.0.165", + "version": "0.0.166", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@Checkmarx/ast-cli-javascript-wrapper", - "version": "0.0.165", + "version": "0.0.166", "license": "ISC", "dependencies": { "log4js": "^6.9.1" diff --git a/package.json b/package.json index 8da0ec5..9e22360 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@Checkmarx/ast-cli-javascript-wrapper", - "version": "0.0.165", + "version": "0.0.166", "description": "AST CLI Javascript wrapper", "main": "dist/main/wrapper/CxWrapper.js", "typings": "dist/main/wrapper/CxWrapper.d.ts", diff --git a/src/main/wrapper/resources/cx-linux b/src/main/wrapper/resources/cx-linux index d35fd83..7918c1c 100755 --- a/src/main/wrapper/resources/cx-linux +++ b/src/main/wrapper/resources/cx-linux @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:058824c82df0d27b81a57f93c20662dd714fe154a1b78e5846a5249e6378b1e9 -size 84254882 +oid sha256:c6fd4c467e392b4f40fae7bf86f8c2bc57b34a42a73a8357dfa5046160bb3e12 +size 84349090 diff --git a/src/main/wrapper/resources/cx-mac b/src/main/wrapper/resources/cx-mac index 36e8f9e..ead383e 100755 --- a/src/main/wrapper/resources/cx-mac +++ b/src/main/wrapper/resources/cx-mac @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:2b1b547377e32341492d95711c03ce98af1aa45cac26b103327819f1b63148c8 -size 167105648 +oid sha256:a4ab739536ff4d68ce9fd01a12dff0e17b74fd812464c19dd6e93b0da466c2ac +size 167291936 diff --git a/src/main/wrapper/resources/cx.exe b/src/main/wrapper/resources/cx.exe index c7d902b..5b1e649 100644 --- a/src/main/wrapper/resources/cx.exe +++ b/src/main/wrapper/resources/cx.exe @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:d8a790c88c52c7d5a31f4ba8894eb54f9e3a0c0caa7b8cd601ea6ec593195874 -size 85909312 +oid sha256:a70b25f17eef87ffb5f0ffe0c1a4ac1c3f0bc873cbc9293e49ab7ce9a4d673d5 +size 86010688 From 690924939425d455ea8a8e9240a20234ce6bd5c0 Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 12:02:14 +0530 Subject: [PATCH 02/10] Update PredicateTest.test.ts --- src/tests/PredicateTest.test.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index b6e182e..214eded 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -67,7 +67,7 @@ describe("Triage cases", () => { }; it('SCA Triage Show and Update Successful case', async () => { - const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; + const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; const vulnerabilities = "packagename=Maven-org.apache.tomcat.embed:tomcat-embed-core,packageversion=9.0.14,vulnerabilityId=CVE-2024-56337,packagemanager=maven"; const scanType = "sca"; const state = "To_verify"; @@ -91,7 +91,7 @@ describe("Triage cases", () => { }); it('SCA Triage Show and Update with empty vulnerabilities', async () => { - const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; + const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; const vulnerabilities = ""; const scanType = "sca"; const state = "To_verify"; From 638d5f7631463274cbf6c3ce39dafe3172759e2c Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 12:49:33 +0530 Subject: [PATCH 03/10] Update PredicateTest.test.ts --- src/tests/PredicateTest.test.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index 214eded..b5d3f3e 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -68,7 +68,7 @@ describe("Triage cases", () => { it('SCA Triage Show and Update Successful case', async () => { const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; - const vulnerabilities = "packagename=Maven-org.apache.tomcat.embed:tomcat-embed-core,packageversion=9.0.14,vulnerabilityId=CVE-2024-56337,packagemanager=maven"; + const vulnerabilities = "packagename=Npm-tar-fs,packageversion=2.1.1,vulnerabilityId=CVE-2025-48387,packagemanager=npm"; const scanType = "sca"; const state = "To_verify"; const comment = "comment1"; From cf7d05146fc5f8951af0b354eb50b4092e6340ee Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 13:02:33 +0530 Subject: [PATCH 04/10] Revert "Update PredicateTest.test.ts" This reverts commit 638d5f7631463274cbf6c3ce39dafe3172759e2c. --- src/tests/PredicateTest.test.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index b5d3f3e..214eded 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -68,7 +68,7 @@ describe("Triage cases", () => { it('SCA Triage Show and Update Successful case', async () => { const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; - const vulnerabilities = "packagename=Npm-tar-fs,packageversion=2.1.1,vulnerabilityId=CVE-2025-48387,packagemanager=npm"; + const vulnerabilities = "packagename=Maven-org.apache.tomcat.embed:tomcat-embed-core,packageversion=9.0.14,vulnerabilityId=CVE-2024-56337,packagemanager=maven"; const scanType = "sca"; const state = "To_verify"; const comment = "comment1"; From b721fe5cab1dc54487b4a75575c462aa020d83fa Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 13:02:46 +0530 Subject: [PATCH 05/10] Revert "Update PredicateTest.test.ts" This reverts commit 690924939425d455ea8a8e9240a20234ce6bd5c0. --- src/tests/PredicateTest.test.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index 214eded..b6e182e 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -67,7 +67,7 @@ describe("Triage cases", () => { }; it('SCA Triage Show and Update Successful case', async () => { - const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; + const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; const vulnerabilities = "packagename=Maven-org.apache.tomcat.embed:tomcat-embed-core,packageversion=9.0.14,vulnerabilityId=CVE-2024-56337,packagemanager=maven"; const scanType = "sca"; const state = "To_verify"; @@ -91,7 +91,7 @@ describe("Triage cases", () => { }); it('SCA Triage Show and Update with empty vulnerabilities', async () => { - const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; + const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; const vulnerabilities = ""; const scanType = "sca"; const state = "To_verify"; From cf12f5937f09d282c0092c2d5da423b48f9a23a5 Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 13:25:18 +0530 Subject: [PATCH 06/10] Update PredicateTest.test.ts --- src/tests/PredicateTest.test.ts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index b6e182e..d0010e9 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -67,8 +67,8 @@ describe("Triage cases", () => { }; it('SCA Triage Show and Update Successful case', async () => { - const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; - const vulnerabilities = "packagename=Maven-org.apache.tomcat.embed:tomcat-embed-core,packageversion=9.0.14,vulnerabilityId=CVE-2024-56337,packagemanager=maven"; + const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; + const vulnerabilities = "packagename=Npm-tar-fs,packageversion=2.1.1,vulnerabilityId=CVE-2025-59343,packagemanager=npm"; const scanType = "sca"; const state = "To_verify"; const comment = "comment1"; @@ -91,7 +91,7 @@ describe("Triage cases", () => { }); it('SCA Triage Show and Update with empty vulnerabilities', async () => { - const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; + const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; const vulnerabilities = ""; const scanType = "sca"; const state = "To_verify"; From 390d8af0e8158a534fe3b3977f423429d28521f8 Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 13:43:33 +0530 Subject: [PATCH 07/10] Update PredicateTest.test.ts --- src/tests/PredicateTest.test.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index d0010e9..cbec26f 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -72,8 +72,9 @@ describe("Triage cases", () => { const scanType = "sca"; const state = "To_verify"; const comment = "comment1"; - await handleTriageSCAShow(projectId, vulnerabilities, scanType); + // Update first: the show endpoint returns 404 until a triage record exists for the finding await handleTriageSCAUpdate(projectId, vulnerabilities, scanType, state, comment); + await handleTriageSCAShow(projectId, vulnerabilities, scanType); }); it('SCA Triage Show and Update Failure case', async () => { From 3682ae92fa0e1d52e2216621341b4d0206fd54b2 Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 14:01:52 +0530 Subject: [PATCH 08/10] Revert "Update PredicateTest.test.ts" This reverts commit 390d8af0e8158a534fe3b3977f423429d28521f8. --- src/tests/PredicateTest.test.ts | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index cbec26f..d0010e9 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -72,9 +72,8 @@ describe("Triage cases", () => { const scanType = "sca"; const state = "To_verify"; const comment = "comment1"; - // Update first: the show endpoint returns 404 until a triage record exists for the finding - await handleTriageSCAUpdate(projectId, vulnerabilities, scanType, state, comment); await handleTriageSCAShow(projectId, vulnerabilities, scanType); + await handleTriageSCAUpdate(projectId, vulnerabilities, scanType, state, comment); }); it('SCA Triage Show and Update Failure case', async () => { From 562b5cea24c336dd22c45fe8f1cc009986603539 Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 14:02:03 +0530 Subject: [PATCH 09/10] Revert "Update PredicateTest.test.ts" This reverts commit cf12f5937f09d282c0092c2d5da423b48f9a23a5. --- src/tests/PredicateTest.test.ts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index d0010e9..b6e182e 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -67,8 +67,8 @@ describe("Triage cases", () => { }; it('SCA Triage Show and Update Successful case', async () => { - const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; - const vulnerabilities = "packagename=Npm-tar-fs,packageversion=2.1.1,vulnerabilityId=CVE-2025-59343,packagemanager=npm"; + const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; + const vulnerabilities = "packagename=Maven-org.apache.tomcat.embed:tomcat-embed-core,packageversion=9.0.14,vulnerabilityId=CVE-2024-56337,packagemanager=maven"; const scanType = "sca"; const state = "To_verify"; const comment = "comment1"; @@ -91,7 +91,7 @@ describe("Triage cases", () => { }); it('SCA Triage Show and Update with empty vulnerabilities', async () => { - const projectId = "fc8470df-a38e-4def-bebe-6839947f6f7e"; + const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; const vulnerabilities = ""; const scanType = "sca"; const state = "To_verify"; From 46703d711266489dade1f28a01479af65f95a65a Mon Sep 17 00:00:00 2001 From: Aniket Shinde Date: Thu, 29 Oct 2026 15:00:01 +0530 Subject: [PATCH 10/10] Update PredicateTest.test.ts --- src/tests/PredicateTest.test.ts | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/src/tests/PredicateTest.test.ts b/src/tests/PredicateTest.test.ts index b6e182e..5e86624 100644 --- a/src/tests/PredicateTest.test.ts +++ b/src/tests/PredicateTest.test.ts @@ -67,13 +67,14 @@ describe("Triage cases", () => { }; it('SCA Triage Show and Update Successful case', async () => { - const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; - const vulnerabilities = "packagename=Maven-org.apache.tomcat.embed:tomcat-embed-core,packageversion=9.0.14,vulnerabilityId=CVE-2024-56337,packagemanager=maven"; + const projectId = "3c6569c8-020f-43c0-b7d5-b0543cceaa25"; + const vulnerabilities = "packagename=Npm-tar-fs,packageversion=2.1.1,vulnerabilityId=CVE-2024-12905,packagemanager=npm"; const scanType = "sca"; const state = "To_verify"; const comment = "comment1"; - await handleTriageSCAShow(projectId, vulnerabilities, scanType); + // Update first: the show endpoint returns 404 until a triage record exists for the finding await handleTriageSCAUpdate(projectId, vulnerabilities, scanType, state, comment); + await handleTriageSCAShow(projectId, vulnerabilities, scanType); }); it('SCA Triage Show and Update Failure case', async () => { @@ -91,7 +92,7 @@ describe("Triage cases", () => { }); it('SCA Triage Show and Update with empty vulnerabilities', async () => { - const projectId = "d4d7f382-8dee-48c7-ac8f-67fab2c313a8"; + const projectId = "3c6569c8-020f-43c0-b7d5-b0543cceaa25"; const vulnerabilities = ""; const scanType = "sca"; const state = "To_verify";